Debian DSA-2381-1 : squid3 - invalid memory deallocation
Medium Nessus Plugin ID 57521
SynopsisThe remote Debian host is missing a security-related update.
DescriptionIt was discovered that the IPv6 support code in Squid does not properly handle certain DNS responses, resulting in deallocation of an invalid pointer and a daemon crash.
The squid package and the version of Squid 3 shipped in lenny lack IPv6 support and are not affected by this issue.
SolutionUpgrade the squid3 packages.
For the stable distribution (squeeze), this problem has been fixed in version 3.1.6-1.2+squeeze2.