squid security update
This update fixes the following security issues:
- 587375: NULL deref via HTCP request (CVE-2010-0639)
-
Submitted by
Adrian Schröter (adrianSuSE)
- Version 5580
Fixed bugs
bnc#587375
VUL-1: squid NULL deref via HTCP request
CVE#CVE-2010-0639
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted p
