[ubuntu/bionic-security] squid3 3.5.27-1ubuntu1.7 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Mon Aug 3 13:14:14 UTC 2020
squid3 (3.5.27-1ubuntu1.7) bionic-security; urgency=medium
* SECURITY UPDATE: Multiple Issues in HTTP Request processing
- debian/patches/CVE-2019-12520.patch: properly handle userinfo in
src/url.cc.
- CVE-2019-12520
- CVE-2019-12524
* SECURITY UPDATE: Multiple issues in URI processing
- debian/patches/CVE-2019-12526.patch: replace patch with the one from
Debian to get backported functions.
- debian/patches/CVE-2019-12523.patch: update URI parser to use SBuf
parsing APIs.
- CVE-2019-12523
- CVE-2019-18676
* Thanks to Markus Koschany for the backports this update is based on.
Date: 2020-07-28 20:18:14.134757+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/squid3/3.5.27-1ubuntu1.7
-------------- next part --------------
Sorry, changesfile not available.
More information about the Bionic-changes
mailing list