Ubuntu
squid package

squid 4.8-1ubuntu2.3 source package in Ubuntu

Changelog

squid (4.8-1ubuntu2.3) eoan-security; urgency=medium

  * SECURITY UPDATE: multiple ESI issues
    - debian/patches/CVE-2019-12519_12521.patch: convert parse exceptions
      into 500 status response in src/esi/Context.h, src/esi/Esi.cc,
      src/esi/Esi.h, src/esi/Expression.cc.
    - CVE-2019-12519
    - CVE-2019-12521
  * SECURITY UPDATE: hostname parameter mishandling in cachemgr.cgi
    - debian/patches/CVE-2019-18860.patch: add validation for hostname
      parameter in src/base/CharacterSet.cc, tools/Makefile.am,
      tools/cachemgr.cc.
    - CVE-2019-18860
  * SECURITY UPDATE: Digest Authentication nonce replay issue
    - debian/patches/CVE-2020-11945.patch: fix auth digest refcount integer
      overflow in src/auth/digest/Config.cc.
    - CVE-2020-11945

 -- Marc Deslauriers <email address hidden>  Thu, 07 May 2020 09:25:08 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Eoan
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
squid_4.8.orig.tar.gz 4.9 MiB f8b78efc196b84f08f1b2c21eb832dafc170e4be44d5167586a036fde5956870
squid_4.8-1ubuntu2.3.debian.tar.xz 61.3 KiB f9271c57325a5b3564872e280f0a3e651951add51bb59ae805ea7bdf563807a1
squid_4.8-1ubuntu2.3.dsc 2.7 KiB 486c3b2de1bc606f2fc68328e8057bdbc9e969abf1f7bd7c75d68ca9681708c1

Available diffs

View changes file

Binary packages built by this source

squid: No summary available for squid in ubuntu eoan.

No description available for squid in ubuntu eoan.

squid-cgi: No summary available for squid-cgi in ubuntu eoan.

No description available for squid-cgi in ubuntu eoan.

squid-cgi-dbgsym: No summary available for squid-cgi-dbgsym in ubuntu eoan.

No description available for squid-cgi-dbgsym in ubuntu eoan.

squid-common: No summary available for squid-common in ubuntu eoan.

No description available for squid-common in ubuntu eoan.

squid-dbgsym: No summary available for squid-dbgsym in ubuntu eoan.

No description available for squid-dbgsym in ubuntu eoan.

squid-purge: No summary available for squid-purge in ubuntu eoan.

No description available for squid-purge in ubuntu eoan.

squid-purge-dbgsym: No summary available for squid-purge-dbgsym in ubuntu eoan.

No description available for squid-purge-dbgsym in ubuntu eoan.

squid3: No summary available for squid3 in ubuntu eoan.

No description available for squid3 in ubuntu eoan.

squidclient: No summary available for squidclient in ubuntu eoan.

No description available for squidclient in ubuntu eoan.

squidclient-dbgsym: No summary available for squidclient-dbgsym in ubuntu eoan.

No description available for squidclient-dbgsym in ubuntu eoan.