[ubuntu/focal-security] squid 4.10-1ubuntu1.2 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Thu Aug 27 17:09:41 UTC 2020
squid (4.10-1ubuntu1.2) focal-security; urgency=medium
* SECURITY UPDATE: HTTP Request Smuggling issue
- debian/patches/CVE-2020-15810.patch: enforce token characters for
field-name in src/HttpHeader.cc.
- CVE-2020-15810
* SECURITY UPDATE: HTTP Request Splitting issue
- debian/patches/CVE-2020-15811.patch: improve Transfer-Encoding
handling in src/HttpHeader.cc, src/HttpHeader.h, src/client_side.cc,
src/http.cc.
- CVE-2020-15811
* SECURITY UPDATE: DoS via peer crafted Cache Digest response message
- debian/patches/CVE-2020-24606.patch: fix livelocking in
peerDigestHandleReply in src/peer_digest.cc.
- CVE-2020-24606
Date: 2020-08-27 13:18:15.711953+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/squid/4.10-1ubuntu1.2
-------------- next part --------------
Sorry, changesfile not available.
More information about the Focal-changes
mailing list