squid3 3.5.12-1ubuntu8 source package in Ubuntu

Changelog

squid3 (3.5.12-1ubuntu8) yakkety; urgency=medium

  * SECURITY UPDATE: denial of service via pinger and ICMPv6 packet
    - debian/patches/CVE-2016-3947.patch: fix sizes in src/icmp/Icmp6.cc.
    - CVE-2016-3947
  * SECURITY UPDATE: denial of service and possible code execution via
    seeding manager reporter with crafted data
    - debian/patches/CVE-2016-4051.patch: use dynamic MemBuf for internal
      content generation in tools/cachemgr.cc, src/tests/stub_cbdata.cc,
      src/tests/stub_mem.cc, tools/Makefile.am.
    - CVE-2016-4051
  * SECURITY UPDATE: denial of service or arbitrary code execution via
    crafted ESI responses
    - debian/patches/CVE-2016-4052.patch: perform bounds checking and
      remove asserts in src/esi/Esi.cc.
    - CVE-2016-4052
    - CVE-2016-4053
    - CVE-2016-4054
  * SECURITY UPDATE: cache-poisoning attacks via an HTTP request with an
    absolute-URI
    - debian/patches/CVE-2016-4553.patch: properly handle condition in
      src/client_side.cc
    - CVE-2016-4553
  * SECURITY UPDATE: same-origin bypass and cache-poisoning attack via
    crafted HTTP host header
    - debian/patches/CVE-2016-4554.patch: properly handle whitespace in
      src/mime_header.cc.
    - CVE-2016-4554
  * SECURITY UPDATE: denial of service via ESI responses
    - debian/patches/CVE-2016-4555.patch: fix segfaults in
      src/client_side_request.cc, src/esi/Context.h, src/esi/Esi.cc.
    - CVE-2016-4555
    - CVE-2016-4556
  * debian/rules: include autoreconf.mk.
  * debian/control: add dh-autoreconf to BuildDepends.

 -- Marc Deslauriers <email address hidden>  Wed, 08 Jun 2016 08:05:32 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Yakkety
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
squid3_3.5.12.orig.tar.gz 4.6 MiB 9114a2d52905761d12550d8d6e55c855deae0dee1bcc5bf45458c4a68ff9afd5
squid3_3.5.12-1ubuntu8.debian.tar.xz 48.5 KiB 1858d8ba9299cfc40c969b774869f9546dd4d6ab3a76a24d3c5c506a6174d582
squid3_3.5.12-1ubuntu8.dsc 2.5 KiB 8469ff4c962654f36f8ea392208d027d95bc6a15214ae09afbddb0e6b8ce7be9

View changes file

Binary packages built by this source

squid: No summary available for squid in ubuntu zesty.

No description available for squid in ubuntu zesty.

squid-cgi: No summary available for squid-cgi in ubuntu yakkety.

No description available for squid-cgi in ubuntu yakkety.

squid-cgi-dbgsym: No summary available for squid-cgi-dbgsym in ubuntu zesty.

No description available for squid-cgi-dbgsym in ubuntu zesty.

squid-common: No summary available for squid-common in ubuntu yakkety.

No description available for squid-common in ubuntu yakkety.

squid-dbg: No summary available for squid-dbg in ubuntu yakkety.

No description available for squid-dbg in ubuntu yakkety.

squid-dbgsym: No summary available for squid-dbgsym in ubuntu yakkety.

No description available for squid-dbgsym in ubuntu yakkety.

squid-purge: No summary available for squid-purge in ubuntu yakkety.

No description available for squid-purge in ubuntu yakkety.

squid-purge-dbgsym: No summary available for squid-purge-dbgsym in ubuntu yakkety.

No description available for squid-purge-dbgsym in ubuntu yakkety.

squid3: No summary available for squid3 in ubuntu yakkety.

No description available for squid3 in ubuntu yakkety.

squidclient: No summary available for squidclient in ubuntu yakkety.

No description available for squidclient in ubuntu yakkety.

squidclient-dbgsym: No summary available for squidclient-dbgsym in ubuntu yakkety.

No description available for squidclient-dbgsym in ubuntu yakkety.