From vendor-sec: Opened by (Robert Scheck) on 2004-09-03 13:23 Description of problem: Certain malformed NTLMSSP packets could crash the NTLM helpers provided by Squid. Version-Release number of selected component (if applicable): squid-2.5.STABLE5-5 Actual results / Expected results: Patch applying, I'll attached a patch merged from upstream.
cyfred please apply the patch.
if I'm not mistaken this applies to version 2.5.5, but the current stable version is 2.5.6-r2 already fixed with GLSA 200409-04 ?
squid-2.5.STABLE6-ntlm_fetch_string.patch applied in squid-2.5.6-r2 already... covered by GLSA 200409-04 *** This bug has been marked as a duplicate of 61280 ***