Publishing details
Changelog
squid (4.4-1ubuntu2.2) disco-security; urgency=medium
* SECURITY UPDATE: incorrect digest auth parameter parsing
- debian/patches/CVE-2019-12525.patch: check length in
src/auth/digest/Config.cc.
- CVE-2019-12525
* SECURITY UPDATE: buffer overflow in basic auth decoding
- debian/patches/CVE-2019-12527.patch: switch to SBuf in
src/HttpHeader.cc, src/HttpHeader.h, src/cache_manager.cc,
src/clients/FtpGateway.cc.
- CVE-2019-12527
* SECURITY UPDATE: basic auth uudecode length issue
- debian/patches/CVE-2019-12529.patch: replace uudecode with libnettle
base64 decoder in lib/Makefile.*, src/auth/basic/Config.cc,
include/uudecode.h, lib/uudecode.c.
- CVE-2019-12529
-- Marc Deslauriers <email address hidden> Tue, 16 Jul 2019 11:43:17 -0400
Builds
Package files