[ubuntu/eoan-security] squid 4.8-1ubuntu2.2 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Thu Feb 20 13:40:00 UTC 2020

squid (4.8-1ubuntu2.2) eoan-security; urgency=medium

  * SECURITY UPDATE: info disclosure via FTP server
    - debian/patches/CVE-2019-12528.patch: fix FTP buffers handling in
    - CVE-2019-12528
  * SECURITY UPDATE: incorrect input validation and buffer management
    - debian/patches/CVE-2020-84xx-1.patch: ignore malformed Host header in
      intercept and reverse proxy mode in src/client_side.cc,
      src/http/one/Parser.cc, src/http/one/Parser.h.
    - debian/patches/CVE-2020-84xx-2.patch: fix request URL generation in
      reverse proxy configurations in src/client_side.cc.
    - CVE-2020-8449
    - CVE-2020-8450
  * SECURITY UPDATE: DoS in NTLM authentication
    - debian/patches/CVE-2020-8517.patch: improved username handling in
    - CVE-2020-8517

Date: 2020-02-19 19:16:14.920925+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
-------------- next part --------------
Sorry, changesfile not available.

More information about the Eoan-changes mailing list