squid 4.4-1ubuntu2.3 source package in Ubuntu
Changelog
squid (4.4-1ubuntu2.3) disco-security; urgency=medium
* SECURITY UPDATE: Multiple issues in URI processing
- debian/patches/CVE-2019-12523.patch: Update URI parser to use SBuf
parsing APIs in src/Downloader.cc, src/HttpRequest.cc,
src/HttpRequest.h, src/Makefile.am, src/acl/Asn.cc,
src/adaptation/ecap/MessageRep.cc, src/anyp/ProtocolType.h,
src/anyp/Uri.cc, src/anyp/Uri.h, src/anyp/UriScheme.cc,
src/anyp/UriScheme.h, src/client_side_request.cc, src/htcp.cc,
src/icmp/net_db.cc, src/icp_v2.cc, src/mgr/Inquirer.cc,
src/mime.cc, src/neighbors.cc, src/peer_digest.cc,
src/servers/FtpServer.cc, src/servers/Http1Server.cc,
src/store_digest.cc, src/tests/stub_HttpRequest.cc,
src/tests/stub_libanyp.cc, src/tests/testHttpRequest.cc,
src/urn.cc.
- CVE-2019-12523
- CVE-2019-18676
* SECURITY UPDATE: Heap Overflow issue in URN processing
- debian/patches/CVE-2019-12526.patch: fix URN response handling in
src/urn.cc.
- CVE-2019-12526
* SECURITY UPDATE: DoS via incorrect string termination
- debian/patches/CVE-2019-12854.patch: fix string termination in
tools/cachemgr.cc.
- CVE-2019-12854
* SECURITY UPDATE: CSRF issue in HTTP Request processing
- debian/patches/CVE-2019-18677.patch: prevent truncation for large
origin-relative domains in src/anyp/Uri.cc, src/anyp/Uri.h,
src/internal.cc.
- CVE-2019-18677
* SECURITY UPDATE: HTTP Request Splitting in HTTP message processing
- debian/patches/CVE-2019-18678.patch: server MUST reject messages with
BWS after field-name in src/HttpHeader.cc, src/HttpHeader.h.
- CVE-2019-18678
- CVE-2019-18679
-- Marc Deslauriers <email address hidden> Tue, 19 Nov 2019 13:27:56 -0500
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Disco
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- web
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| squid_4.4.orig.tar.gz | 4.9 MiB | 7054b51a4814391094426c51644eed81588611999aeec4b4a500cd4a8aae5e85 |
| squid_4.4-1ubuntu2.3.debian.tar.xz | 56.4 KiB | 214b63ddb5c9f7dbf156c898ded68d82531197265222a9989ef101b4c55d8492 |
| squid_4.4-1ubuntu2.3.dsc | 2.7 KiB | 117fe3a55bedd2a4449325fe837e046408e6ae555e76ca5386b6900f828998b2 |
Available diffs
- diff from 4.4-1ubuntu2.2 to 4.4-1ubuntu2.3 (14.5 KiB)
Binary packages built by this source
- squid: No summary available for squid in ubuntu disco.
No description available for squid in ubuntu disco.
- squid-cgi: No summary available for squid-cgi in ubuntu disco.
No description available for squid-cgi in ubuntu disco.
- squid-cgi-dbgsym: No summary available for squid-cgi-dbgsym in ubuntu disco.
No description available for squid-cgi-dbgsym in ubuntu disco.
- squid-common: No summary available for squid-common in ubuntu disco.
No description available for squid-common in ubuntu disco.
- squid-dbgsym: No summary available for squid-dbgsym in ubuntu disco.
No description available for squid-dbgsym in ubuntu disco.
- squid-purge: No summary available for squid-purge in ubuntu disco.
No description available for squid-purge in ubuntu disco.
- squid-purge-dbgsym: No summary available for squid-purge-dbgsym in ubuntu disco.
No description available for squid-purge-dbgsym in ubuntu disco.
- squid3: No summary available for squid3 in ubuntu disco.
No description available for squid3 in ubuntu disco.
- squidclient: No summary available for squidclient in ubuntu disco.
No description available for squidclient in ubuntu disco.
- squidclient-dbgsym: No summary available for squidclient-dbgsym in ubuntu disco.
No description available for squidclient-dbgsym in ubuntu disco.
