Format: 1.8 Date: Wed, 19 Feb 2020 13:06:13 -0500 Source: squid3 Binary: squid3 squid squid-dbg squid-common squidclient squid-cgi squid-purge Architecture: s390x Version: 3.5.12-1ubuntu7.10 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: squid - Full featured Web Proxy cache (HTTP proxy) squid-cgi - Full featured Web Proxy cache (HTTP proxy) - control CGI squid-common - Full featured Web Proxy cache (HTTP proxy) - common files squid-dbg - Full featured Web Proxy cache (HTTP proxy) - Debug symbols squid-purge - Full featured Web Proxy cache (HTTP proxy) - control utility squid3 - Dummy transitional package. squidclient - Full featured Web Proxy cache (HTTP proxy) - control utility Changes: squid3 (3.5.12-1ubuntu7.10) xenial-security; urgency=medium . * SECURITY UPDATE: info disclosure via FTP server - debian/patches/CVE-2019-12528.patch: fix FTP buffers handling in src/clients/FtpGateway.cc. - CVE-2019-12528 * SECURITY UPDATE: incorrect input validation and buffer management - debian/patches/CVE-2020-84xx-1.patch: ignore malformed Host header in intercept and reverse proxy mode in src/client_side.cc. - debian/patches/CVE-2020-84xx-2.patch: fix request URL generation in reverse proxy configurations in src/client_side.cc. - debian/patches/CVE-2020-84xx-3.patch: fix security patch in src/client_side.cc. - CVE-2020-8449 - CVE-2020-8450 * SECURITY UPDATE: DoS in NTLM authentication - debian/patches/CVE-2020-8517.patch: improved username handling in helpers/external_acl/LM_group/ext_lm_group_acl.cc. - CVE-2020-8517 Checksums-Sha1: d1383a1904ee098c700454d17843a727137c91df 104326 squid-cgi-dbgsym_3.5.12-1ubuntu7.10_s390x.ddeb f42b6fa1ee6a01b86ebc61f973c2727a31e3ac9e 58552 squid-cgi_3.5.12-1ubuntu7.10_s390x.deb 5a0233b99c7d883b0f1f733a37ce4c07979c0ce8 10571028 squid-dbg_3.5.12-1ubuntu7.10_s390x.deb 02d18baf634c571169cabead15c8b42b9f83c400 10345058 squid-dbgsym_3.5.12-1ubuntu7.10_s390x.ddeb 14a94e0a5824d75549fc7b23aca10697dc9693d6 68030 squid-purge-dbgsym_3.5.12-1ubuntu7.10_s390x.ddeb 822965d763fa3bbea10367f7967d64ff19095598 50822 squid-purge_3.5.12-1ubuntu7.10_s390x.deb 55d02ea2f88478e7c75dec1de777bc00e5a5c3bb 2075300 squid_3.5.12-1ubuntu7.10_s390x.deb 757936e50b5787534d23ea6d928631afc39775d4 135654 squidclient-dbgsym_3.5.12-1ubuntu7.10_s390x.ddeb 958cb494773ae08bee7e1878d5171895c0ee2bf3 61226 squidclient_3.5.12-1ubuntu7.10_s390x.deb Checksums-Sha256: fb263d9da8ddf1c6c83b27181b74001eabf645e2ebb4ade166103114f812261c 104326 squid-cgi-dbgsym_3.5.12-1ubuntu7.10_s390x.ddeb 4ecb1c4743239141baa725e977433cd1374f0ca3c40507a0b5b5a00c9033fb0d 58552 squid-cgi_3.5.12-1ubuntu7.10_s390x.deb 9d93630c7eb76b907cfeac8bda7c4986cfec69aee751162c6bd0d1a035f0486d 10571028 squid-dbg_3.5.12-1ubuntu7.10_s390x.deb 1ceb8762fbd52d483efee13d050bdb5111438e6eab1bc80b06b0e4e0f77e2fb7 10345058 squid-dbgsym_3.5.12-1ubuntu7.10_s390x.ddeb 5d0e14d583587fa46d659d78bdd8f8600692896b0ec106e39749a208cd67b526 68030 squid-purge-dbgsym_3.5.12-1ubuntu7.10_s390x.ddeb 3581fb0c5599d5d882ad9d45aa9652aa38c345624567b7875d91e8b58734b421 50822 squid-purge_3.5.12-1ubuntu7.10_s390x.deb af47e483ec273988d7a897e91f3e1a4401a1592d542f64542bdbc14b2c6c9588 2075300 squid_3.5.12-1ubuntu7.10_s390x.deb 0028dd9e653578e90730fa3fda24fd8fc03b5a08ad7b6219f10158f490991331 135654 squidclient-dbgsym_3.5.12-1ubuntu7.10_s390x.ddeb 164dc2799f361bdc6e0b2031d7884e82130e576e12afafc23ec92fd89133e8b4 61226 squidclient_3.5.12-1ubuntu7.10_s390x.deb Files: 378b924eecad9cc27c5c411955f804df 104326 web extra squid-cgi-dbgsym_3.5.12-1ubuntu7.10_s390x.ddeb 9573c84dac0589a5ae8b7a605da25998 58552 web optional squid-cgi_3.5.12-1ubuntu7.10_s390x.deb 4e81d002e5ccbc8068f4291af706a77a 10571028 debug extra squid-dbg_3.5.12-1ubuntu7.10_s390x.deb 6b3be9919fef67376c0addcf9fc62d5f 10345058 web extra squid-dbgsym_3.5.12-1ubuntu7.10_s390x.ddeb 8cbdcb066774602fcaacfb793c838cd1 68030 web extra squid-purge-dbgsym_3.5.12-1ubuntu7.10_s390x.ddeb a0967e730793a3af34e398672f2c9538 50822 web optional squid-purge_3.5.12-1ubuntu7.10_s390x.deb 54e3c7edf73a57460ffc1681fb908079 2075300 web optional squid_3.5.12-1ubuntu7.10_s390x.deb 82fc45d8d02dda07982de033a3b47263 135654 web extra squidclient-dbgsym_3.5.12-1ubuntu7.10_s390x.ddeb 225cf4c32d2a332873a7b682cb26be27 61226 web optional squidclient_3.5.12-1ubuntu7.10_s390x.deb Original-Maintainer: Luigi Gangitano