Format: 1.8 Date: Wed, 02 Jun 2021 13:03:13 -0400 Source: squid3 Binary: squid3 squid squid-dbg squid-common squidclient squid-cgi squid-purge Architecture: s390x Version: 3.5.27-1ubuntu1.11 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: squid - Full featured Web Proxy cache (HTTP proxy) squid-cgi - Full featured Web Proxy cache (HTTP proxy) - control CGI squid-common - Full featured Web Proxy cache (HTTP proxy) - common files squid-dbg - Full featured Web Proxy cache (HTTP proxy) - Debug symbols squid-purge - Full featured Web Proxy cache (HTTP proxy) - control utility squid3 - Transitional package squidclient - Full featured Web Proxy cache (HTTP proxy) - control utility Changes: squid3 (3.5.27-1ubuntu1.11) bionic-security; urgency=medium . * SECURITY UPDATE: DoS via buffer-management bug - debian/patches/CVE-2021-28651.patch: fix memory leak in src/urn.cc. - CVE-2021-28651 * SECURITY UPDATE: DoS via HTTP Range request - debian/patches/CVE-2021-3180x.patch: handle more Range requests in src/HttpHdrRange.cc, src/HttpHeaderRange.h, src/client_side.cc, src/client_side_request.cc, src/client_side_request.h. - CVE-2021-31806 - CVE-2021-31807 - CVE-2021-31808 * SECURITY UPDATE: DoS via HTTP response - debian/patches/CVE-2021-33620.patch: handle more partial responses in src/HttpHdrContRange.cc, src/HttpHeaderRange.h, src/clients/Client.cc, src/client_side.cc. - CVE-2021-33620 Checksums-Sha1: 96aa7b2065b8a97b6c9a2f4d6ba68afa73fbcc60 58964 squid-cgi_3.5.27-1ubuntu1.11_s390x.deb 29259f46323a7f36b74139827e7922f05fa283f4 22833892 squid-dbg_3.5.27-1ubuntu1.11_s390x.deb 842709806514c103b3836139d84a3a4516d9aba1 50680 squid-purge_3.5.27-1ubuntu1.11_s390x.deb eca901a2673fdb4ffa22ee38e02ba9387dd90b48 11277 squid3_3.5.27-1ubuntu1.11_s390x.buildinfo 084924e480fe35f502e91b08b41490e577fc52d2 1999760 squid_3.5.27-1ubuntu1.11_s390x.deb bd7722c2c15b2a172a0f2761ba8f9673efc6d323 60448 squidclient_3.5.27-1ubuntu1.11_s390x.deb Checksums-Sha256: 8264b9a2cc51b3b4df9180c4f2a2d9bb227388701e2650b5ef1780eafb955cba 58964 squid-cgi_3.5.27-1ubuntu1.11_s390x.deb b6aa9c20d1172c91aac508236756bf3e697e74a61ae495f13801d0934c9bd783 22833892 squid-dbg_3.5.27-1ubuntu1.11_s390x.deb 1d11dd333cb1071ee9c39eb1178c250418a373bb3677e0cf8e287c4a80a9531a 50680 squid-purge_3.5.27-1ubuntu1.11_s390x.deb 94c0e03769936f60ac3f1d448e827ed3d2989001389fa5497ceb36ae9eeee848 11277 squid3_3.5.27-1ubuntu1.11_s390x.buildinfo f69acf7164886299a636bbf48b6a1190525257cf8093c9c9c54fd36838bef0c0 1999760 squid_3.5.27-1ubuntu1.11_s390x.deb f74472de95a08e37a2d826829e30040230620132207b825e3e6130bcc93d60c2 60448 squidclient_3.5.27-1ubuntu1.11_s390x.deb Files: a5b17a9b325d2a1c19144f8593dbed91 58964 web optional squid-cgi_3.5.27-1ubuntu1.11_s390x.deb 20b087cf28a063724259f36ae330768b 22833892 debug optional squid-dbg_3.5.27-1ubuntu1.11_s390x.deb de614bd7c37acceb2cba1989f848f616 50680 web optional squid-purge_3.5.27-1ubuntu1.11_s390x.deb bb950b0c22f0325631fa3c979d0758a3 11277 web optional squid3_3.5.27-1ubuntu1.11_s390x.buildinfo 3816c81cd9d553d0f2b33b0ba8ea8941 1999760 web optional squid_3.5.27-1ubuntu1.11_s390x.deb da8d84a53e1bf65b904dc6390058cb53 60448 web optional squidclient_3.5.27-1ubuntu1.11_s390x.deb Original-Maintainer: Luigi Gangitano