Ubuntu
squid package

squid 4.6-2ubuntu4 source package in Ubuntu

Changelog

squid (4.6-2ubuntu4) eoan; urgency=medium

  * Fix gcc-9 issues (LP: #1835831)
    - Remove -Wno-sizeof-pointer-memaccess -Wno-stringop-truncation
    - debian/patches/more-gcc-9-fixes.patch: switch to xstrncpy in
      lib/smblib/smblib-util.c.
  * SECURITY UPDATE: incorrect digest auth parameter parsing
    - debian/patches/CVE-2019-12525.patch: check length in
      src/auth/digest/Config.cc.
    - CVE-2019-12525
  * SECURITY UPDATE: buffer overflow in basic auth decoding
    - debian/patches/CVE-2019-12527.patch: switch to SBuf in
      src/HttpHeader.cc, src/HttpHeader.h, src/cache_manager.cc,
      src/clients/FtpGateway.cc.
    - CVE-2019-12527
  * SECURITY UPDATE: basic auth uudecode length issue
    - debian/patches/CVE-2019-12529.patch: replace uudecode with libnettle
      base64 decoder in lib/Makefile.*, src/auth/basic/Config.cc,
      include/uudecode.h, lib/uudecode.c.
    - CVE-2019-12529
  * SECURITY UPDATE: XSS issues in cachemgr.cgi
    - debian/patches/CVE-2019-13345.patch: properly escape values in
      tools/cachemgr.cc.
    - CVE-2019-13345

 -- Marc Deslauriers <email address hidden>  Fri, 19 Jul 2019 08:01:58 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Eoan
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
squid_4.6.orig.tar.gz 4.9 MiB 190f5c015624f53279e5376749b08192f4023219398db3a40892d484513701c7
squid_4.6-2ubuntu4.debian.tar.xz 50.0 KiB bef8287098b784c10620a6ce821e38c5d816404a23965e89c9e7ae2293c956f6
squid_4.6-2ubuntu4.dsc 2.7 KiB bd0745978681bc206e79fc4fc6f28217775810042dd523138f0d7eb8eb9b1fec

Available diffs

View changes file

Binary packages built by this source

squid: No summary available for squid in ubuntu eoan.

No description available for squid in ubuntu eoan.

squid-cgi: No summary available for squid-cgi in ubuntu eoan.

No description available for squid-cgi in ubuntu eoan.

squid-cgi-dbgsym: No summary available for squid-cgi-dbgsym in ubuntu eoan.

No description available for squid-cgi-dbgsym in ubuntu eoan.

squid-common: No summary available for squid-common in ubuntu eoan.

No description available for squid-common in ubuntu eoan.

squid-dbgsym: No summary available for squid-dbgsym in ubuntu eoan.

No description available for squid-dbgsym in ubuntu eoan.

squid-purge: No summary available for squid-purge in ubuntu eoan.

No description available for squid-purge in ubuntu eoan.

squid-purge-dbgsym: No summary available for squid-purge-dbgsym in ubuntu eoan.

No description available for squid-purge-dbgsym in ubuntu eoan.

squid3: No summary available for squid3 in ubuntu eoan.

No description available for squid3 in ubuntu eoan.

squidclient: No summary available for squidclient in ubuntu eoan.

No description available for squidclient in ubuntu eoan.

squidclient-dbgsym: No summary available for squidclient-dbgsym in ubuntu eoan.

No description available for squidclient-dbgsym in ubuntu eoan.