Advisories » MGAA-2016-0048

Updated squid/ecap/ufdbguard packages fix crashes

Publication date: 19 Mar 2016
Modification date: 19 Mar 2016
Type: bugfix
Affected Mageia releases : 5

Description

The last security update for Squid, MGASA-2016-0095, introduced bugs that
cause crashes under high load due to assertion failures.

Due to the fact that it has become exceedingly difficult to backport
security patches, as well as the upstream bug fixes for these assertion
failures, the squid package has been updated to the 3.5.x branch, which is
the current stable branch upstream.

As a result, the ecap library had to be updated to version 1.0.1,
resulting in ecap-samples being updated to 1.0.0 and ecap-clamav being
updated to 2.0.0.

Also, the default squid-version parameter in ufdbguard's
/etc/ufdb/ufdbguard.conf has been changed to 3.5.  If you are using
ufdbguard, make sure you update this parameter accordingly.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=18004
• http://bugs.squid-cache.org/show_bug.cgi?id=4447
• http://bugs.squid-cache.org/show_bug.cgi?id=4432
• http://wiki.squid-cache.org/Squid-3.5
• http://www.measurement-factory.com/tmp/ecap/libecap_change.log
• http://www.measurement-factory.com/tmp/ecap/ecap_adapter_sample_change.log
• http://www.measurement-factory.com/tmp/ecap/ecap_clamav_adapter_change.log
• http://advisories.mageia.org/MGASA-2016-0095.html

SRPMS

5/core

• squid-3.5.15-1.1.mga5
• ecap-1.0.1-1.mga5
• ecap-samples-1.0.0-1.mga5
• ecap-clamav-2.0.0-1.mga5
• ufdbguard-1.31-5.3.mga5