6263c1f9a9
Fixes the following security issue: - SQUID-2020:12 Out-Of-Bounds memory access in WCCPv2 (CVE-2021-28116 aka ZDI-CAN-11610) Due to an out of bounds memory access Squid is vulnerable to an information leak vulnerability when processing WCCPv2 messages. This problem allows a WCCPv2 sender to corrupt Squids list of known WCCP routers and divert client traffic to attacker controlled routers. This attack is limited to Squid proxy with WCCPv2 enabled and IP spoofing of a router IP address configured as trusted in squid.conf. For more details, see the advisory: http://lists.squid-cache.org/pipermail/squid-announce/2021-October/000136.html Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
7 lines
386 B
Plaintext
7 lines
386 B
Plaintext
# From http://www.squid-cache.org/Versions/v4/squid-4.17.tar.xz.asc
|
|
md5 47b94b2d27516f1764c9d5dc1b9645e5 squid-4.17.tar.xz
|
|
sha1 f6bd15fabbd67b53a831fe9f67de3279868036c1 squid-4.17.tar.xz
|
|
# Locally calculated
|
|
sha256 cb928ac08c7c86b151b1c8f827abe1a84d83181a2a86e0d512286163e1e31418 squid-4.17.tar.xz
|
|
sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING
|