John Doe wrote on Wed, 4 Feb 2009 04:06:28 -0800 (PST):
Talking about squid versions: Advisory SQUID-2009:1 "Due to an internal error Squid is vulnerable to a denial of service attack when processing specially crafted requests." "This bug is fixed by Squid versions 2.7.STABLE6, 3.0.STABLE13, and 3.1.0.5."
So, did you check if Red Hat or CentOS is aware of this and there's already a bug ticket? And if not did you submit one?
Kai