Re: [squid-users] Vulnerabilities with squid 4.15

2022-02-12 Thread Matus UHLAR - fantomas
On 10.02.22 19:28, robert k Wild wrote: I have squid running on centos 7.9, I will move to ubuntu 20 04 03 as centos is officially dead to me both centos and ubuntu provide security updates for packages in system, while it's supported. I have compiled from source ie make make install as

Re: [squid-users] Vulnerabilities with squid 4.15

2022-02-12 Thread robert k Wild
nice, i dont have any, thanks Amos i normally dont use parse, i normally use reconfigure and rotate On Sat, 12 Feb 2022 at 13:43, Amos Jeffries wrote: > On 11/02/22 23:04, robert k Wild wrote: > > thanks Amos and Eliezer! > > > > tbh i dont know if im using WCCP with my squid version, sorry,

Re: [squid-users] Vulnerabilities with squid 4.15

2022-02-12 Thread Amos Jeffries
On 11/02/22 23:04, robert k Wild wrote: thanks Amos and Eliezer! tbh i dont know if im using WCCP with my squid version, sorry, how do i find that out? If this produces any config lines: squid -k parse 2>&1 | grep wccp Cheers Amos ___

Re: [squid-users] Vulnerabilities with squid 4.15

2022-02-12 Thread robert k Wild
OK I'm fine All Squid-4.x up to and including 4.16 built without --disable-wccpv2 and configured with wccp2_router in squid.conf are vulnerable. Thanks Amos for this link On Fri, 11 Feb 2022, 10:09 robert k Wild, wrote: > ok so build my squid 4.17 with this option > > --disable-wccpv2 > >

Re: [squid-users] Vulnerabilities with squid 4.15

2022-02-11 Thread robert k Wild
ok so build my squid 4.17 with this option --disable-wccpv2 as i have no lines in my squid.conf referencing wccp is that what i should do, tbh i dont even know if i do or dont need wccp On Fri, 11 Feb 2022 at 02:27, Amos Jeffries wrote: > On 11/02/22 07:55, robert k Wild wrote: > > Hi all, >

Re: [squid-users] Vulnerabilities with squid 4.15

2022-02-11 Thread robert k Wild
gt; > > Eliezer Croitoru > > NgTech, Tech Support > > Mobile: +972-5-28704261 > > Email: ngtech1...@gmail.com > > > > *From:* robert k Wild > *Sent:* Thursday, February 10, 2022 21:28 > *To:* NgTech LTD > *Cc:* Squid Users > *Subject:* Re: [squi

Re: [squid-users] Vulnerabilities with squid 4.15

2022-02-10 Thread Eliezer Croitoru
21:28 To: NgTech LTD Cc: Squid Users Subject: Re: [squid-users] Vulnerabilities with squid 4.15 I have squid running on centos 7.9, I will move to ubuntu 20 04 03 as centos is officially dead to me I have compiled from source ie make make install as I'm running squid with squidclamav cicap

Re: [squid-users] Vulnerabilities with squid 4.15

2022-02-10 Thread Amos Jeffries
On 11/02/22 07:55, robert k Wild wrote: Hi all, Is there any security vulnerabilities with squid 4.15, should I update to 4.17 or is it OK to still use as my squid proxy server Sorry for silly question Not silly. There is this one for WCCP:

Re: [squid-users] Vulnerabilities with squid 4.15

2022-02-10 Thread robert k Wild
I have squid running on centos 7.9, I will move to ubuntu 20 04 03 as centos is officially dead to me I have compiled from source ie make make install as I'm running squid with squidclamav cicap cicap modules All instances I have compiled from source ie make make install I did a yum install

Re: [squid-users] Vulnerabilities with squid 4.15

2022-02-10 Thread NgTech LTD
Hey Robert, First: your question is not silly. The answer will defer based on the complexity of the upgrade process. What Os are you using and also, did you compiled squid from sources or installed from a specific package? Also, what is your squid setup purpose? Eliezer בתאריך יום ה׳, 10 בפבר׳

[squid-users] Vulnerabilities with squid 4.15

2022-02-10 Thread robert k Wild
Hi all, Is there any security vulnerabilities with squid 4.15, should I update to 4.17 or is it OK to still use as my squid proxy server Sorry for silly question Thanks, Rob ___ squid-users mailing list squid-users@lists.squid-cache.org