Format: 1.8 Date: Tue, 29 Jan 2013 18:12:23 -0800 Source: squid Binary: squid squid-common squid-cgi Architecture: all i386_translations i386 Version: 2.7.STABLE7-1ubuntu12.6 Distribution: lucid Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Seth Arnold Description: squid - Internet object cache (WWW proxy cache) squid-cgi - Squid cache manager CGI program squid-common - Internet object cache (WWW proxy cache) - common files Changes: squid (2.7.STABLE7-1ubuntu12.6) lucid-security; urgency=low . * SECURITY UPDATE: denial of service via cachemgr.cgi insufficient input validation - debian/patches/98-CVE-2012-5643.dpatch: modify cachemgr.cc to properly free memory and handle input in chunks - Based on http://www.squid-cache.org/Versions/v2/2.7/changesets/SQUID-2012_1.patch - CVE-2012-5643 - CVE-2013-0189 Checksums-Sha1: ae402351d2c282ee4f91c35019133a8ab37d7165 353658 squid-common_2.7.STABLE7-1ubuntu12.6_all.deb 4b50249f59edb9d11c7ce57f361bb560a962b65d 21306 squid_2.7.STABLE7-1ubuntu12.6_i386_translations.tar.gz 9f39a002a597f3f48a31b7668997d010f8dcff67 770598 squid_2.7.STABLE7-1ubuntu12.6_i386.deb 4e05764b512d4d5b89f15d1c3c90ceeeb053fa5d 125112 squid-cgi_2.7.STABLE7-1ubuntu12.6_i386.deb Checksums-Sha256: 693fb22d82bfdf9808da2108770c2f303c740748cd1113a1357e9cb18a7dfebd 353658 squid-common_2.7.STABLE7-1ubuntu12.6_all.deb d8839c3248002ff80dd1360b1ac166e0480b96b338abe89b49100a47b6c1f2e0 21306 squid_2.7.STABLE7-1ubuntu12.6_i386_translations.tar.gz 23bb1cc037e8f35683dd7dbf24f0c9a4214d6a1ee686252427364fb3e63da20c 770598 squid_2.7.STABLE7-1ubuntu12.6_i386.deb 2776869340dcf4f366d814880bfd98e8ad023d392957d1d3dfb6f4ca5ce9fa0d 125112 squid-cgi_2.7.STABLE7-1ubuntu12.6_i386.deb Files: 0b73425053fa8e697a18b21aff83fe79 353658 web optional squid-common_2.7.STABLE7-1ubuntu12.6_all.deb 0d3d2e5ae6b37c5060b9e2a0f433d2f5 21306 raw-translations - squid_2.7.STABLE7-1ubuntu12.6_i386_translations.tar.gz 9aae1ecab5a3f03eb8e56e15661cac62 770598 web optional squid_2.7.STABLE7-1ubuntu12.6_i386.deb 07a79270e9215244316025d2d2e47241 125112 web optional squid-cgi_2.7.STABLE7-1ubuntu12.6_i386.deb Original-Maintainer: Luigi Gangitano