Format: 1.8 Date: Wed, 20 Nov 2019 07:11:17 -0500 Source: squid3 Binary: squid3 squid squid-dbg squid-common squidclient squid-cgi squid-purge Architecture: ppc64el Version: 3.5.12-1ubuntu7.9 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: squid - Full featured Web Proxy cache (HTTP proxy) squid-cgi - Full featured Web Proxy cache (HTTP proxy) - control CGI squid-common - Full featured Web Proxy cache (HTTP proxy) - common files squid-dbg - Full featured Web Proxy cache (HTTP proxy) - Debug symbols squid-purge - Full featured Web Proxy cache (HTTP proxy) - control utility squid3 - Dummy transitional package. squidclient - Full featured Web Proxy cache (HTTP proxy) - control utility Changes: squid3 (3.5.12-1ubuntu7.9) xenial-security; urgency=medium . * SECURITY UPDATE: Heap Overflow issue in URN processing - debian/patches/CVE-2019-12526.patch: fix URN response handling in src/urn.cc. - CVE-2019-12526 * SECURITY UPDATE: CSRF issue in HTTP Request processing - debian/patches/CVE-2019-18677.patch: prevent truncation for large origin-relative domains in src/URL.h, src/internal.cc, src/url.cc. - CVE-2019-18677 * SECURITY UPDATE: HTTP Request Splitting in HTTP message processing - debian/patches/CVE-2019-18678.patch: server MUST reject messages with BWS after field-name in src/HttpHeader.cc, src/HttpHeader.h. - CVE-2019-18678 - CVE-2019-18679 Checksums-Sha1: c5a2af324b8ac4b03793b5defce5a1a7ad1bb182 115784 squid-cgi-dbgsym_3.5.12-1ubuntu7.9_ppc64el.ddeb 86934165c8eb6c4b454ea0c0f1e7079038c9a059 61482 squid-cgi_3.5.12-1ubuntu7.9_ppc64el.deb 2104a3718a447e516c51d94bcff99cb78bd61d2c 11872074 squid-dbg_3.5.12-1ubuntu7.9_ppc64el.deb 1fd4f626fc9cb8f93b5f24ef56b5eb2a151eebc3 11584470 squid-dbgsym_3.5.12-1ubuntu7.9_ppc64el.ddeb dc528a03335503fb83b763a25034f03002b729bc 74480 squid-purge-dbgsym_3.5.12-1ubuntu7.9_ppc64el.ddeb 2fad2959a498bc7e5c7100d010e4b19deb4e3190 52382 squid-purge_3.5.12-1ubuntu7.9_ppc64el.deb 20ee5f55844e152ef0aee0b1629f8349374e4428 2168420 squid_3.5.12-1ubuntu7.9_ppc64el.deb 62abdad64183ad5d52c06ea4eae77dc2ea9334ec 145326 squidclient-dbgsym_3.5.12-1ubuntu7.9_ppc64el.ddeb 1e35d584b75f86d75605654dab1b183dfc8ee012 62438 squidclient_3.5.12-1ubuntu7.9_ppc64el.deb Checksums-Sha256: 208733cc18e13789ad35e9e970d24320ebd226baac300faad5a429699affae3e 115784 squid-cgi-dbgsym_3.5.12-1ubuntu7.9_ppc64el.ddeb e920cdbaedeb8ff8fb58ce60154d08e32b6ef6d269c5199009eba2e7ec98a219 61482 squid-cgi_3.5.12-1ubuntu7.9_ppc64el.deb 8edd4744afae0a940b94e71c9978a8b20f35f7a238230b62dc43c138dba03475 11872074 squid-dbg_3.5.12-1ubuntu7.9_ppc64el.deb 4fae2899f4db70f0fb1d1adf726f3af6808f144b888f9be42dc6ef01adb32586 11584470 squid-dbgsym_3.5.12-1ubuntu7.9_ppc64el.ddeb 0aa5bdc46a91ce998492a5d99cc3154dd47c16afb59ca7d57e7fac4cbd8c59ad 74480 squid-purge-dbgsym_3.5.12-1ubuntu7.9_ppc64el.ddeb 56dc21d1d72d021320a41677ce507d6c40ffd678e129a65e7a1b6e108640d1d4 52382 squid-purge_3.5.12-1ubuntu7.9_ppc64el.deb 19f4e994b01a8777fdc6d63dabcad575d98af3b86dce8562c7447f746c3be87c 2168420 squid_3.5.12-1ubuntu7.9_ppc64el.deb 8fdd9a1e749fad6e2a4b64049c70e9d790cf6d4bb059d415127eccd52a4aa5e1 145326 squidclient-dbgsym_3.5.12-1ubuntu7.9_ppc64el.ddeb 85fddd029346eb2ced66ccf04e3536d8dd78920491bbcc538744432798882849 62438 squidclient_3.5.12-1ubuntu7.9_ppc64el.deb Files: 58cacc36726eba0749055ad8f9e940ba 115784 web extra squid-cgi-dbgsym_3.5.12-1ubuntu7.9_ppc64el.ddeb 49adbb5721b22a26d9d77aabb75437f5 61482 web optional squid-cgi_3.5.12-1ubuntu7.9_ppc64el.deb 2f71d0e61e7655e3592507cb4549055f 11872074 debug extra squid-dbg_3.5.12-1ubuntu7.9_ppc64el.deb 53b1bf8edb2f416096ca256fc0771dc0 11584470 web extra squid-dbgsym_3.5.12-1ubuntu7.9_ppc64el.ddeb acf1f0fdc4774bfb83eb6f62824eb007 74480 web extra squid-purge-dbgsym_3.5.12-1ubuntu7.9_ppc64el.ddeb 5bd9e055facbdf28fcfc73b234e168c6 52382 web optional squid-purge_3.5.12-1ubuntu7.9_ppc64el.deb 888130795f6036cb3edcf5206bd0de06 2168420 web optional squid_3.5.12-1ubuntu7.9_ppc64el.deb 5221da2260b5edb53b66de7accf81310 145326 web extra squidclient-dbgsym_3.5.12-1ubuntu7.9_ppc64el.ddeb cf4fa41f1fa98900642027d4ab452fc4 62438 web optional squidclient_3.5.12-1ubuntu7.9_ppc64el.deb Original-Maintainer: Luigi Gangitano