A squid security update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-276
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : squid
Version : 2.5.STABLE9
Release : 1.FC3.4
Summary : The Squid proxy caching server.
Description :
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools.
Note that squid-2.5.STABLE7 and later do not use /etc/squid/errors for error messages. If you do not want to use the default English error messages, you must set the error_directory in your /etc/squid/squid.conf to the appropriate subdirectory of /usr/share/squid/errors
---------------------------------------------------------------------
* Wed Mar 23 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-1.FC3.4
- Add more upstream patches.
- add the -libbind patch, to avoid picking up a new dependency on libbind.
- Remove references to /etc/squid/errors from this spec, since squid
now uses {_datadir}/squid/errors/English/ by default (overridable in
/etc/squid/squid.conf, as always)
- mark {_datadir}/squid/errors as config(noreplace) so custom error messages
won't get stomped on.
* Wed Mar 16 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-1.FC3.3
- Actually apply the -date patch.
* Wed Mar 16 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-1.FC3.2
- New upstream version, with 14 patches. Includes fix for
bz#150234 cookie leak in squid
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
402440397d0a352c5539cf99a1277ab7 SRPMS/squid-2.5.STABLE9-1.FC3.4.src.rpm
f41d841e3c2ad7cde69896f0efb9b243 x86_64/squid-2.5.STABLE9-1.FC3.4.x86_64.rpm
ceeb68cf5c12194835240059d08215db x86_64/debug/squid-debuginfo-2.5.STABLE9-1.FC3.4.x86_64.rpm
8857ae1347c3592347fc7caef24baf56 i386/squid-2.5.STABLE9-1.FC3.4.i386.rpm
a08fb359713307d62edc738317dcd85c i386/debug/squid-debuginfo-2.5.STABLE9-1.FC3.4.i386.rpm
This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-276
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : squid
Version : 2.5.STABLE9
Release : 1.FC3.4
Summary : The Squid proxy caching server.
Description :
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools.
Note that squid-2.5.STABLE7 and later do not use /etc/squid/errors for error messages. If you do not want to use the default English error messages, you must set the error_directory in your /etc/squid/squid.conf to the appropriate subdirectory of /usr/share/squid/errors
---------------------------------------------------------------------
* Wed Mar 23 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-1.FC3.4
- Add more upstream patches.
- add the -libbind patch, to avoid picking up a new dependency on libbind.
- Remove references to /etc/squid/errors from this spec, since squid
now uses {_datadir}/squid/errors/English/ by default (overridable in
/etc/squid/squid.conf, as always)
- mark {_datadir}/squid/errors as config(noreplace) so custom error messages
won't get stomped on.
* Wed Mar 16 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-1.FC3.3
- Actually apply the -date patch.
* Wed Mar 16 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-1.FC3.2
- New upstream version, with 14 patches. Includes fix for
bz#150234 cookie leak in squid
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
402440397d0a352c5539cf99a1277ab7 SRPMS/squid-2.5.STABLE9-1.FC3.4.src.rpm
f41d841e3c2ad7cde69896f0efb9b243 x86_64/squid-2.5.STABLE9-1.FC3.4.x86_64.rpm
ceeb68cf5c12194835240059d08215db x86_64/debug/squid-debuginfo-2.5.STABLE9-1.FC3.4.x86_64.rpm
8857ae1347c3592347fc7caef24baf56 i386/squid-2.5.STABLE9-1.FC3.4.i386.rpm
a08fb359713307d62edc738317dcd85c i386/debug/squid-debuginfo-2.5.STABLE9-1.FC3.4.i386.rpm
This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.
