[ubuntu/bionic-security] squid3 3.5.27-1ubuntu1.4 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Wed Dec 4 16:30:04 UTC 2019
squid3 (3.5.27-1ubuntu1.4) bionic-security; urgency=medium
* SECURITY UPDATE: Heap Overflow issue in URN processing
- debian/patches/CVE-2019-12526.patch: fix URN response handling in
src/urn.cc.
- CVE-2019-12526
* SECURITY UPDATE: CSRF issue in HTTP Request processing
- debian/patches/CVE-2019-18677.patch: prevent truncation for large
origin-relative domains in src/URL.h, src/internal.cc, src/url.cc.
- CVE-2019-18677
* SECURITY UPDATE: HTTP Request Splitting in HTTP message processing
- debian/patches/CVE-2019-18678.patch: server MUST reject messages with
BWS after field-name in src/HttpHeader.cc, src/HttpHeader.h.
- CVE-2019-18678
- CVE-2019-18679
Date: 2019-11-20 13:43:15.252548+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/squid3/3.5.27-1ubuntu1.4
-------------- next part --------------
Sorry, changesfile not available.
More information about the Bionic-changes
mailing list