Publishing details

• Removed from disk on 2020-12-29.
• Removal requested on 2020-12-29.
• Published on 2020-05-13
• Copied from ubuntu eoan in PPA for Ubuntu Security Proposed by Marc Deslauriers

Changelog

squid (4.8-1ubuntu2.3) eoan-security; urgency=medium

  * SECURITY UPDATE: multiple ESI issues
    - debian/patches/CVE-2019-12519_12521.patch: convert parse exceptions
      into 500 status response in src/esi/Context.h, src/esi/Esi.cc,
      src/esi/Esi.h, src/esi/Expression.cc.
    - CVE-2019-12519
    - CVE-2019-12521
  * SECURITY UPDATE: hostname parameter mishandling in cachemgr.cgi
    - debian/patches/CVE-2019-18860.patch: add validation for hostname
      parameter in src/base/CharacterSet.cc, tools/Makefile.am,
      tools/cachemgr.cc.
    - CVE-2019-18860
  * SECURITY UPDATE: Digest Authentication nonce replay issue
    - debian/patches/CVE-2020-11945.patch: fix auth digest refcount integer
      overflow in src/auth/digest/Config.cc.
    - CVE-2020-11945

 -- Marc Deslauriers <email address hidden>  Thu, 07 May 2020 09:25:08 -0400

Builds

• amd64
• arm64
• armhf
• i386
• ppc64el
• s390x

Package files

• squid-cgi-dbgsym_4.8-1ubuntu2.3_amd64.ddeb (264.1 KiB)
• squid-cgi-dbgsym_4.8-1ubuntu2.3_arm64.ddeb (262.3 KiB)
• squid-cgi-dbgsym_4.8-1ubuntu2.3_armhf.ddeb (256.9 KiB)
• squid-cgi-dbgsym_4.8-1ubuntu2.3_i386.ddeb (243.2 KiB)
• squid-cgi-dbgsym_4.8-1ubuntu2.3_ppc64el.ddeb (270.7 KiB)
• squid-cgi-dbgsym_4.8-1ubuntu2.3_s390x.ddeb (268.0 KiB)
• squid-cgi_4.8-1ubuntu2.3_amd64.deb (72.6 KiB)
• squid-cgi_4.8-1ubuntu2.3_arm64.deb (69.9 KiB)
• squid-cgi_4.8-1ubuntu2.3_armhf.deb (67.7 KiB)
• squid-cgi_4.8-1ubuntu2.3_i386.deb (74.2 KiB)
• squid-cgi_4.8-1ubuntu2.3_ppc64el.deb (75.7 KiB)
• squid-cgi_4.8-1ubuntu2.3_s390x.deb (69.6 KiB)
• squid-common_4.8-1ubuntu2.3_all.deb (189.8 KiB)
• squid-dbgsym_4.8-1ubuntu2.3_amd64.ddeb (31.2 MiB)
• squid-dbgsym_4.8-1ubuntu2.3_arm64.ddeb (30.8 MiB)
• squid-dbgsym_4.8-1ubuntu2.3_armhf.ddeb (30.5 MiB)
• squid-dbgsym_4.8-1ubuntu2.3_i386.ddeb (29.8 MiB)
• squid-dbgsym_4.8-1ubuntu2.3_ppc64el.ddeb (31.6 MiB)
• squid-dbgsym_4.8-1ubuntu2.3_s390x.ddeb (31.7 MiB)
• squid-purge-dbgsym_4.8-1ubuntu2.3_amd64.ddeb (134.1 KiB)
• squid-purge-dbgsym_4.8-1ubuntu2.3_arm64.ddeb (134.8 KiB)
• squid-purge-dbgsym_4.8-1ubuntu2.3_armhf.ddeb (133.7 KiB)
• squid-purge-dbgsym_4.8-1ubuntu2.3_i386.ddeb (125.5 KiB)
• squid-purge-dbgsym_4.8-1ubuntu2.3_ppc64el.ddeb (138.4 KiB)
• squid-purge-dbgsym_4.8-1ubuntu2.3_s390x.ddeb (137.2 KiB)
• squid-purge_4.8-1ubuntu2.3_amd64.deb (61.7 KiB)
• squid-purge_4.8-1ubuntu2.3_arm64.deb (60.3 KiB)
• squid-purge_4.8-1ubuntu2.3_armhf.deb (59.6 KiB)
• squid-purge_4.8-1ubuntu2.3_i386.deb (63.2 KiB)
• squid-purge_4.8-1ubuntu2.3_ppc64el.deb (62.6 KiB)
• squid-purge_4.8-1ubuntu2.3_s390x.deb (60.4 KiB)
• squid3_4.8-1ubuntu2.3_all.deb (42.1 KiB)
• squid_4.8-1ubuntu2.3.debian.tar.xz (61.3 KiB)
• squid_4.8-1ubuntu2.3.dsc (2.7 KiB)
• squid_4.8-1ubuntu2.3_amd64.deb (2.4 MiB)
• squid_4.8-1ubuntu2.3_arm64.deb (2.2 MiB)
• squid_4.8-1ubuntu2.3_armhf.deb (2.2 MiB)
• squid_4.8-1ubuntu2.3_i386.deb (2.5 MiB)
• squid_4.8-1ubuntu2.3_ppc64el.deb (2.4 MiB)
• squid_4.8-1ubuntu2.3_s390x.deb (2.1 MiB)
• squid_4.8.orig.tar.gz (4.9 MiB)
• squidclient-dbgsym_4.8-1ubuntu2.3_amd64.ddeb (303.1 KiB)
• squidclient-dbgsym_4.8-1ubuntu2.3_arm64.ddeb (300.7 KiB)
• squidclient-dbgsym_4.8-1ubuntu2.3_armhf.ddeb (297.1 KiB)
• squidclient-dbgsym_4.8-1ubuntu2.3_i386.ddeb (282.1 KiB)
• squidclient-dbgsym_4.8-1ubuntu2.3_ppc64el.ddeb (304.6 KiB)
• squidclient-dbgsym_4.8-1ubuntu2.3_s390x.ddeb (304.0 KiB)
• squidclient_4.8-1ubuntu2.3_amd64.deb (74.7 KiB)
• squidclient_4.8-1ubuntu2.3_arm64.deb (71.3 KiB)
• squidclient_4.8-1ubuntu2.3_armhf.deb (69.6 KiB)
• squidclient_4.8-1ubuntu2.3_i386.deb (76.4 KiB)
• squidclient_4.8-1ubuntu2.3_ppc64el.deb (74.5 KiB)
• squidclient_4.8-1ubuntu2.3_s390x.deb (72.1 KiB)