Squid Multiple Remote Denial of Service Vulnerabilities

Bugtraq ID:	35812
Class:	Unknown
CVE:	CVE-2009-2621 CVE-2009-2622
Remote:	Yes
Local:	No
Published:	Jul 27 2009 12:00AM
Updated:	Apr 13 2015 09:14PM
Credit:	Alex Montoanelli of www.unetvale.net, Rob Middleton of Centenary Institute, Tuomo Untinen, Ossi Herrala, and Jukka Taimisto from the CROSS project at Codenomicon Ltd.
Vulnerable:	Squid Web Proxy Cache 3.1 .5 Squid Web Proxy Cache 3.1 .4 Squid Web Proxy Cache 3.0 Squid Web Proxy Cache 3.1.0.11 Squid Web Proxy Cache 3.1 Squid Web Proxy Cache 3.0.STABLE7 Squid Web Proxy Cache 3.0.STABLE6 Squid Web Proxy Cache 3.0.STABLE5 Squid Web Proxy Cache 3.0.STABLE4 Squid Web Proxy Cache 3.0.STABLE3 Squid Web Proxy Cache 3.0.STABLE2 Squid Web Proxy Cache 3.0.STABLE16 Squid Web Proxy Cache 3.0.STABLE13 Squid Web Proxy Cache 3.0.STABLE12 Squid Web Proxy Cache 3.0.STABLE1 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:	Squid Web Proxy Cache 3.1.0.12 Squid Web Proxy Cache 3.0.STABLE17

Squid Multiple Remote Denial of Service Vulnerabilities

Squid is prone to multiple remote denial-of-service vulnerabilities.

Successfully exploiting these issues allow remote attackers to crash the affected application, denying further service to legitimate users.

This issue affects Squid 3.0.STABLE16, 3.1.0.11 and prior versions.

Squid Multiple Remote Denial of Service Vulnerabilities

An attacker may exploit these issues by using readily available networking tools.

Squid Multiple Remote Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Squid Web Proxy Cache 3.0.STABLE7

• Squid b9070.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9070.patch


• Squid b9074.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9074.patch


• Squid b9075.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9075.patch

Mandriva Linux Mandrake 2008.1 x86_64

• Mandriva squid-3.0-1.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-3.0-1.3mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-1.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-1.3mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.1

• Mandriva squid-3.0-1.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-3.0-1.3mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-1.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-1.3mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 ia-64

• Debian squid3-cgi_3.0.STABLE8-3+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny1_ia64.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny2_ia64.deb


• Debian squid3-common_3.0.STABLE8-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny2_all.deb


• Debian squid3_3.0.STABLE8-3+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny1_ia64.deb


• Debian squid3_3.0.STABLE8-3+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny2_ia64.deb


• Debian squidclient_3.0.STABLE8-3+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny1_ia64.deb


• Debian squidclient_3.0.STABLE8-3+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny2_ia64.deb

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva squid-3.0-14.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-3.0-14.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-14.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-14.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva squid-3.0-8.2mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-3.0-8.3mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-8.2mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-8.3mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/

Squid Web Proxy Cache 3.0.STABLE5

• Squid b9070.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9070.patch


• Squid b9074.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9074.patch


• Squid b9075.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9075.patch

Squid Web Proxy Cache 3.0.STABLE2

• Squid b9070.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9070.patch


• Squid b9074.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9074.patch


• Squid b9075.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9075.patch

Debian Linux 5.0 alpha

• Debian squid3-cgi_3.0.STABLE8-3+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny1_alpha.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny2_alpha.deb


• Debian squid3-common_3.0.STABLE8-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny2_all.deb


• Debian squid3_3.0.STABLE8-3+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny1_alpha.deb


• Debian squid3_3.0.STABLE8-3+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny2_alpha.deb


• Debian squidclient_3.0.STABLE8-3+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny1_alpha.deb


• Debian squidclient_3.0.STABLE8-3+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny2_alpha.deb

Debian Linux 5.0 ia-32

• Debian squid3-cgi_3.0.STABLE8-3+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny1_i386.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny2_i386.deb


• Debian squid3-common_3.0.STABLE8-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny2_all.deb


• Debian squid3_3.0.STABLE8-3+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny1_i386.deb


• Debian squid3_3.0.STABLE8-3+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny2_i386.deb


• Debian squidclient_3.0.STABLE8-3+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny1_i386.deb


• Debian squidclient_3.0.STABLE8-3+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny2_i386.deb

MandrakeSoft Enterprise Server 5

• Mandriva squid-3.0-8.2mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-3.0-8.3mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-8.2mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-8.3mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/

Squid Web Proxy Cache 3.0.STABLE3

• Squid b9070.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9070.patch


• Squid b9074.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9074.patch


• Squid b9075.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9075.patch

Debian Linux 5.0 s/390

• Debian squid3-cgi_3.0.STABLE8-3+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny1_s390.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny2_s390.deb


• Debian squid3-common_3.0.STABLE8-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny2_all.deb


• Debian squid3_3.0.STABLE8-3+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny1_s390.deb


• Debian squid3_3.0.STABLE8-3+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny2_s390.deb


• Debian squidclient_3.0.STABLE8-3+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny1_s390.deb


• Debian squidclient_3.0.STABLE8-3+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny2_s390.deb

Squid Web Proxy Cache 3.1

• Squid b9654.patch
  http://www.squid-cache.org/Versions/v3/3.1/changesets/b9654.patch


• Squid b9661.patch
  http://www.squid-cache.org/Versions/v3/3.1/changesets/b9661.patch

Squid Web Proxy Cache 3.0.STABLE4

• Squid b9070.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9070.patch


• Squid b9074.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9074.patch


• Squid b9075.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9075.patch

Debian Linux 5.0 mipsel

• Debian squid3-common_3.0.STABLE8-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny2_all.deb

Squid Web Proxy Cache 3.0.STABLE6

• Squid b9070.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9070.patch


• Squid b9074.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9074.patch


• Squid b9075.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9075.patch

Squid Web Proxy Cache 3.0.STABLE1

• Squid b9070.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9070.patch


• Squid b9074.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9074.patch


• Squid b9075.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9075.patch

Debian Linux 5.0 hppa

• Debian squid3-cgi_3.0.STABLE8-3+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny1_hppa.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny2_hppa.deb


• Debian squid3-common_3.0.STABLE8-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny2_all.deb


• Debian squid3_3.0.STABLE8-3+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny1_hppa.deb


• Debian squid3_3.0.STABLE8-3+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny2_hppa.deb


• Debian squidclient_3.0.STABLE8-3+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny1_hppa.deb


• Debian squidclient_3.0.STABLE8-3+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny2_hppa.deb

Squid Web Proxy Cache 3.0.STABLE12

• Squid b9070.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9070.patch


• Squid b9074.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9074.patch


• Squid b9075.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9075.patch

Debian Linux 5.0 m68k

• Debian squid3-common_3.0.STABLE8-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny2_all.deb

Debian Linux 5.0 arm

• Debian squid3-cgi_3.0.STABLE8-3+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny1_arm.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny2_arm.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny2_arm.deb


• Debian squid3-common_3.0.STABLE8-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny2_all.deb


• Debian squid3_3.0.STABLE8-3+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny1_arm.deb


• Debian squid3_3.0.STABLE8-3+lenny2_arm.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny2_arm.deb


• Debian squidclient_3.0.STABLE8-3+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny1_arm.deb


• Debian squidclient_3.0.STABLE8-3+lenny2_arm.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny2_arm.deb

Squid Web Proxy Cache 3.0.STABLE13

• Squid b9070.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9070.patch


• Squid b9074.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9074.patch


• Squid b9075.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9075.patch

Mandriva Linux Mandrake 2009.0

• Mandriva squid-3.0-8.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-3.0-8.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-8.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-8.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 armel

• Debian squid3-cgi_3.0.STABLE8-3+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny1_armel.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny2_armel.deb


• Debian squid3-common_3.0.STABLE8-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny2_all.deb


• Debian squid3_3.0.STABLE8-3+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny1_armel.deb


• Debian squid3_3.0.STABLE8-3+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny2_armel.deb


• Debian squidclient_3.0.STABLE8-3+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny1_armel.deb


• Debian squidclient_3.0.STABLE8-3+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny2_armel.deb

Squid Web Proxy Cache 3.0.STABLE16

• Squid b9070.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9070.patch


• Squid b9074.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9074.patch


• Squid b9075.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9075.patch

Debian Linux 5.0

• Debian squid3-common_3.0.STABLE8-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny2_all.deb

Debian Linux 5.0 amd64

• Debian squid3-cgi_3.0.STABLE8-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny1_amd64.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny2_amd64.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny2_amd64.deb


• Debian squid3-common_3.0.STABLE8-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny2_all.deb


• Debian squid3_3.0.STABLE8-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny1_amd64.deb


• Debian squid3_3.0.STABLE8-3+lenny2_amd64.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny2_amd64.deb


• Debian squidclient_3.0.STABLE8-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny1_amd64.deb


• Debian squidclient_3.0.STABLE8-3+lenny2_amd64.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny2_amd64.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva squid-3.0-8.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-3.0-8.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-8.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-8.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mips

• Debian squid3-cgi_3.0.STABLE8-3+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny1_mips.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny2_mips.deb


• Debian squid3-common_3.0.STABLE8-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny2_all.deb


• Debian squid3_3.0.STABLE8-3+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny1_mips.deb


• Debian squid3_3.0.STABLE8-3+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny2_mips.deb


• Debian squidclient_3.0.STABLE8-3+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny1_mips.deb


• Debian squidclient_3.0.STABLE8-3+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny2_mips.deb

Squid Web Proxy Cache 3.1.0.11

• Squid b9654.patch
  http://www.squid-cache.org/Versions/v3/3.1/changesets/b9654.patch


• Squid b9661.patch
  http://www.squid-cache.org/Versions/v3/3.1/changesets/b9661.patch

Mandriva Linux Mandrake 2009.1

• Mandriva squid-3.0-14.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-3.0-14.2mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-14.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-14.2mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 powerpc

• Debian squid3-cgi_3.0.STABLE8-3+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny1_powerpc.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny2_powerpc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny2_powerpc.deb


• Debian squid3-common_3.0.STABLE8-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny2_all.deb


• Debian squid3_3.0.STABLE8-3+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny1_powerpc.deb


• Debian squid3_3.0.STABLE8-3+lenny2_powerpc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny2_powerpc.deb


• Debian squidclient_3.0.STABLE8-3+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny1_powerpc.deb


• Debian squidclient_3.0.STABLE8-3+lenny2_powerpc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny2_powerpc.deb

Debian Linux 5.0 sparc

• Debian squid3-cgi_3.0.STABLE8-3+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny1_sparc.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny2_sparc.deb


• Debian squid3-common_3.0.STABLE8-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny2_all.deb


• Debian squid3_3.0.STABLE8-3+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny1_sparc.deb


• Debian squid3_3.0.STABLE8-3+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny2_sparc.deb


• Debian squidclient_3.0.STABLE8-3+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny1_sparc.deb


• Debian squidclient_3.0.STABLE8-3+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny2_sparc.deb

Squid Web Proxy Cache 3.0

• Squid b9070.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9070.patch


• Squid b9074.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9074.patch


• Squid b9075.patch
  http://www.squid-cache.org/Versions/v3/3.0/changesets/b9075.patch

Squid Web Proxy Cache 3.1 .5

• Squid b9654.patch
  http://www.squid-cache.org/Versions/v3/3.1/changesets/b9654.patch


• Squid b9661.patch
  http://www.squid-cache.org/Versions/v3/3.1/changesets/b9661.patch

Squid Web Proxy Cache 3.1 .4

• Squid b9654.patch
  http://www.squid-cache.org/Versions/v3/3.1/changesets/b9654.patch


• Squid b9661.patch
  http://www.squid-cache.org/Versions/v3/3.1/changesets/b9661.patch

Squid Multiple Remote Denial of Service Vulnerabilities

References:

• Squid Proxy Cache Security Update Advisory SQUID-2009:2 (Squid)
  
• Squid Web Proxy Cache Homepage (Squid)