Activity log for bug #174352

Date Who What changed Old value New value Message
2007-12-06 08:53:11 Stephan RĂ¼gamer bug added bug
2007-12-06 08:54:46 Stephan RĂ¼gamer description Binary package hint: squid Dear colleagues, squid-2.X and squid-3.x are vulnerable. Message from NVD: The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers. This applies to all squid packages in our supported releases. Binary package hint: squid Dear colleagues, squid-2.X and squid-3.x are vulnerable. Message from NVD: The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers. This applies to all squid packages in our supported releases. Severity: (from upstream: http://www.squid-cache.org/Advisories/SQUID-2007_2.txt) This problem allows any client trusted to use the service to perform a denial of service attack on the Squid service.
2008-01-03 16:59:26 Mathias Gug bug assigned to squid (Debian)
2008-01-04 09:42:01 Bug Watch Updater squid: status Unknown Fix Committed
2008-01-31 20:52:27 Chuck Short bug assigned to squid3 (Ubuntu)
2008-01-31 20:53:20 Chuck Short squid3: status New Invalid
2008-01-31 20:53:59 Chuck Short squid: status New Fix Released
2008-01-31 20:54:19 Chuck Short squid: status New Invalid
2008-02-01 14:02:24 Chuck Short bug added attachment 'feisty-security-debdiff.patch' (feisty-security-debdiff.patch)
2008-02-01 14:03:16 Chuck Short bug added attachment 'gutsy-security-squid3.debdiff' (gutsy-security-squid3.debdiff)
2008-02-01 17:47:02 Jamie Strandboge squid3: status New Fix Committed
2008-02-01 17:47:17 Jamie Strandboge squid3: status New Fix Committed
2008-02-01 17:48:01 Jamie Strandboge squid: status New Fix Released
2008-02-01 17:48:19 Jamie Strandboge squid: status New Fix Released
2008-02-01 17:50:40 Jamie Strandboge squid3: status New Invalid
2008-03-06 01:26:35 Jamie Strandboge squid3: status Fix Committed Fix Released
2008-03-06 01:27:15 Jamie Strandboge squid3: status Fix Committed Fix Released
2008-04-28 22:50:19 Bug Watch Updater squid: status Fix Committed Fix Released