Format: 1.8 Date: Fri, 04 Mar 2016 14:59:48 -0500 Source: squid3 Binary: squid3 squid3-dbg squid3-common squidclient squid-cgi squid-purge squid Architecture: i386 Version: 3.3.8-1ubuntu16.2 Distribution: wily Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: squid - dependency package from squid to squid3 squid-cgi - Full featured Web Proxy cache (HTTP proxy) - control CGI squid-purge - Full featured Web Proxy cache (HTTP proxy) - control utility squid3 - Full featured Web Proxy cache (HTTP proxy) squid3-common - Full featured Web Proxy cache (HTTP proxy) - common files squid3-dbg - Full featured Web Proxy cache (HTTP proxy) - Debug symbols squidclient - Full featured Web Proxy cache (HTTP proxy) - control utility Launchpad-Bugs-Fixed: 1547640 Changes: squid3 (3.3.8-1ubuntu16.2) wily-security; urgency=medium . [ Scott Moser ] * debian/patches/increase-default-forward-max-tries.patch: change the default setting of 'forward_max_tries' from 10 to 25. (LP: #1547640) . [ Marc Deslauriers ] * SECURITY UPDATE: denial of service via crafted UDP SNMP request - debian/patches/CVE-2014-6270.patch: fix off-by-one in src/snmp_core.cc. - CVE-2014-6270 * SECURITY UPDATE: error handling vulnerability - debian/patches/CVE-2016-2571.patch: better handling of huge response headers in src/http.cc. - CVE-2016-2571 * Fix security issues that only apply when package is rebuilt with the enable-ssl flag, which is not the case in the Ubuntu archive. - debian/patches/CVE-2014-0128.patch: denial of service via a crafted range request. - debian/patches/CVE-2015-3455.patch: incorrect X509 server certificate domain matching. Checksums-Sha1: ff7f8eb1c6eef8e2f8dd3ebf2ace299bc9395f8e 1014 squid-cgi-dbgsym_3.3.8-1ubuntu16.2_i386.ddeb daef7555355ccd1a595464540dab297a41789b94 47090 squid-cgi_3.3.8-1ubuntu16.2_i386.deb 02420b3bb7019d44f37a0ed6b3940da51f590ede 812 squid-dbgsym_3.3.8-1ubuntu16.2_i386.ddeb b04a7bba1114c1303118776dc6be3ce660bdae34 1002 squid-purge-dbgsym_3.3.8-1ubuntu16.2_i386.ddeb f62ec53ae81cf29c293df66a31bb69cb17a9ac88 37048 squid-purge_3.3.8-1ubuntu16.2_i386.deb 9826ffc2eb7b26e34335c2ace2f19115d8e9c94f 7205280 squid3-dbg_3.3.8-1ubuntu16.2_i386.deb ed585d0b0cf95379e6a0be9f2860abc0dab7a8d8 938 squid3-dbgsym_3.3.8-1ubuntu16.2_i386.ddeb ebe667a5a56e2ee1ee91a25157ff9d5945c5f22b 1868400 squid3_3.3.8-1ubuntu16.2_i386.deb 38f8c2e472130154f945b2e96980134454ad9673 5998 squid_3.3.8-1ubuntu16.2_i386.deb cf4d7b20077d5f29e2be9dd2ca6deda436a3f56d 1000 squidclient-dbgsym_3.3.8-1ubuntu16.2_i386.ddeb f2de71d4ab0a1b9f475de60212fb0c29dd9f5481 43534 squidclient_3.3.8-1ubuntu16.2_i386.deb Checksums-Sha256: e3f8a86194263609cbcf658273f5c5b8b91d0b5e73491ee2f1fe99894ff30518 1014 squid-cgi-dbgsym_3.3.8-1ubuntu16.2_i386.ddeb da3de4cd867d621f76fdf7f3f4f23d6446cd0dd0257fb95fb560763e044bac43 47090 squid-cgi_3.3.8-1ubuntu16.2_i386.deb 212a5df167029b3b296260e78af1977c05e8a7673741667f165a3dbbe19d1db0 812 squid-dbgsym_3.3.8-1ubuntu16.2_i386.ddeb 7c1de6c21b2ec8ee9c25fb92c3cf31eace2be185159382deb1016a01a73d4fc4 1002 squid-purge-dbgsym_3.3.8-1ubuntu16.2_i386.ddeb ce47037427580e4d06d810a70f41c462331b2aaa1a5673111f67f7a4af8c5716 37048 squid-purge_3.3.8-1ubuntu16.2_i386.deb 751382390036cf9afc951ee53e8f1ccd5939c62a68667a1a6d40f08370225e0b 7205280 squid3-dbg_3.3.8-1ubuntu16.2_i386.deb 4621886f2cd332fe3c2bd55adbf11c56a7a99ba4514bc27320daf9a36a8e809b 938 squid3-dbgsym_3.3.8-1ubuntu16.2_i386.ddeb d52e6efa2f489d6dd1cb24189b3ede05a7a896f6946a83a3eeadad8450388326 1868400 squid3_3.3.8-1ubuntu16.2_i386.deb 04d09b4a87fe7a3c380b8ca7674ee8830e1be25cae1e232e52bb834f34d8e0cd 5998 squid_3.3.8-1ubuntu16.2_i386.deb 2d7401104580ca04680ac72837cb73190ec6054683806a2195e7bad241393784 1000 squidclient-dbgsym_3.3.8-1ubuntu16.2_i386.ddeb 0249c90b3abebebbc5c302e55b32d7c0302f8fe36846357fdc8477482a3caf8e 43534 squidclient_3.3.8-1ubuntu16.2_i386.deb Files: 6d44cda27a7d218144eea7c6c8c38e4a 1014 web extra squid-cgi-dbgsym_3.3.8-1ubuntu16.2_i386.ddeb 64dd63ba46e4b835efd21fd26edeb3af 47090 web optional squid-cgi_3.3.8-1ubuntu16.2_i386.deb 13c7e38348104dbfdebf49673b80d241 812 web extra squid-dbgsym_3.3.8-1ubuntu16.2_i386.ddeb fbe932ab8c8c33816e0b602811ec2618 1002 web extra squid-purge-dbgsym_3.3.8-1ubuntu16.2_i386.ddeb 2d6166bd09ff82a464b5f83c95da57c9 37048 web optional squid-purge_3.3.8-1ubuntu16.2_i386.deb f6c1c6a8ac2287df10989e98ffabd52d 7205280 debug extra squid3-dbg_3.3.8-1ubuntu16.2_i386.deb 2be5d336d813e0502bc07fa5bfb59b92 938 web extra squid3-dbgsym_3.3.8-1ubuntu16.2_i386.ddeb 0d887e3f05609e095b01b08860135250 1868400 web optional squid3_3.3.8-1ubuntu16.2_i386.deb 8a968c570d1308d9770720ed5c410f01 5998 web optional squid_3.3.8-1ubuntu16.2_i386.deb 9b1005381feedba6be81314e4b2c2005 1000 web extra squidclient-dbgsym_3.3.8-1ubuntu16.2_i386.ddeb b7a5567a52f68c2cdfa057464857f1d3 43534 web optional squidclient_3.3.8-1ubuntu16.2_i386.deb Original-Maintainer: Luigi Gangitano