Ubuntu
squid3 package

squid3 3.5.27-1ubuntu1.9 source package in Ubuntu

Changelog

squid3 (3.5.27-1ubuntu1.9) bionic-security; urgency=medium

  * SECURITY UPDATE: Request Smuggling and Poisoning issue
    - debian/patches/CVE-2020-15049.patch: validate Content-Length value
      prefix in src/http/ContentLengthInterpreter.cc,
      src/http/ContentLengthInterpreter.h.
    - CVE-2020-15049
  * SECURITY UPDATE: HTTP Request Smuggling issue
    - debian/patches/CVE-2020-15810.patch: enforce token characters for
      field-name in src/HttpHeader.cc.
    - CVE-2020-15810
  * SECURITY UPDATE: HTTP Request Splitting issue
    - debian/patches/CVE-2020-15811-pre.patch: validate Content-Length
      header values in src/HttpHeader.cc, src/HttpHeaderTools.cc,
      src/HttpHeaderTools.h, src/http/ContentLengthInterpreter.cc,
      src/http/ContentLengthInterpreter.h, src/http/Makefile.am.
    - debian/patches/CVE-2020-15811.patch: Improve Transfer-Encoding
      handling in src/HttpHeader.cc, src/HttpHeader.h, src/client_side.cc,
      src/http.cc.
    - CVE-2020-15811
  * SECURITY UPDATE: DoS via peer crafted Cache Digest response message
    - debian/patches/CVE-2020-24606.patch:  fix livelocking in
      peerDigestHandleReply in src/peer_digest.cc.
    - CVE-2020-24606
  * Enable the test suite
    - debian/rules: enable test suite
    - debian/patches/enable-the-test-suite.patch: fix FTBFS.
    - debain/patches/fix-cppunit-detection.patch: don't use cppunit-config
      which is no longer available in bionic.

 -- Marc Deslauriers <email address hidden>  Wed, 02 Sep 2020 11:35:51 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
squid3_3.5.27.orig.tar.gz 4.6 MiB f6a5f1272000b1c6365652b35f950fd77d091c14076d61812aecac4e90c73b39
squid3_3.5.27-1ubuntu1.9.debian.tar.xz 81.5 KiB 6b898fe4a20a03cc41ea9ae3863d0780d3219fd588ee512a6dca23902a57fb43
squid3_3.5.27-1ubuntu1.9.dsc 2.7 KiB c15c7ef7dcef1cec20419a0835edd1389045e54a430f5123ecc5ff10b868e404

View changes file

Binary packages built by this source

squid: Full featured Web Proxy cache (HTTP proxy)

 Squid is a high-performance proxy caching server for web clients, supporting
 FTP, gopher, ICY and HTTP data objects.
 .
 Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
 new features including ICAP and ESI support.

squid-cgi: Full featured Web Proxy cache (HTTP proxy) - control CGI

 Squid is a high-performance proxy caching server for web clients, supporting
 FTP, gopher, ICY and HTTP data objects.
 .
 Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
 new features including ICAP and ESI support.
 .
 This package contains a CGI program that can be used to query and administrate
 a `squid' proxy cache through a web browser.

squid-common: Full featured Web Proxy cache (HTTP proxy) - common files

 Squid is a high-performance proxy caching server for web clients, supporting
 FTP, gopher, ICY and HTTP data objects.
 .
 Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
 new features including ICAP and ESI support.
 .
 This package contains common files (MIB and icons)

squid-dbg: Full featured Web Proxy cache (HTTP proxy) - Debug symbols

 Squid is a high-performance proxy caching server for web clients, supporting
 FTP, gopher, ICY and HTTP data objects.
 .
 Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
 new features including ICAP and ESI support.
 .
 This package contains debugging symbols for binaries in squid.

squid-purge: Full featured Web Proxy cache (HTTP proxy) - control utility

 Squid is a high-performance proxy caching server for web clients, supporting
 FTP, gopher, ICY and HTTP data objects.
 .
 Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
 new features including ICAP and ESI support.
 .
 This package contains a small utility that can be used to manage the disk cache
 from the command line.

squid3: Transitional package

 Squid is a high-performance proxy caching server for web clients, supporting
 FTP, gopher, ICY and HTTP data objects.
 .
 This is a transitional package used to migrate from squid3 to squid.

squidclient: Full featured Web Proxy cache (HTTP proxy) - control utility

 Squid is a high-performance proxy caching server for web clients, supporting
 FTP, gopher, ICY and HTTP data objects.
 .
 Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
 new features including ICAP and ESI support.
 .
 This package contains a small utility that can be used to get URLs from the
 command line.