Squid: Denial of service A Denial of Service vulnerability has been reported in Squid. squid 2008-01-09 2008-01-09 201209 remote 2.6.17 2.6.17

Squid is a multi-protocol proxy server.

The Wikimedia Foundation reported a memory leak vulnerability when performing cache updates.

A remote attacker could perform numerous specially crafted requests to the vulnerable server, resulting in a Denial of Service.

There is no known workaround at this time.

All Squid users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=net-proxy/squid-2.6.17"
CVE-2007-6239 p-y p-y py2