The following security announcement applies to squid. If you have squid installed, please see below for details on the vulnerability and instructions on patching your system:
It was discovered that Squid incorrectly handled certain auth headers. A
remote attacker could exploit this with a specially-crafted auth header
and cause Squid to go into an infinite loop, resulting in a denial of
service. This issue only affected Ubuntu 8.10, 9.04 and 9.10.
(CVE-2009-2855)It was discovered that Squid incorrectly handled certain DNS packets. A
remote attacker could exploit this with a specially-crafted DNS packet
and cause Squid to crash, resulting in a denial of service. (CVE-2010-0308)
The above security vulnerabilities apply to the following Ubuntu releases:
- Ubuntu 6.06 LTS
- Ubuntu 8.04 LTS
- Ubuntu 8.10
- Ubuntu 9.04
- Ubuntu 9.10
If you have this utility installed on your Ubuntu system you’ll need to apply the security update to be protected. Please follow the steps below to ensure your system is properly patched:
Apply Updates
To apply the updates run the following command(s) within your Terminal:
sudo aptitude update
sudo aptitude safe-upgrade
In general, a standard system upgrade is sufficient to effect the necessary changes.