[ubuntu/hirsute-proposed] squid 4.13-1ubuntu3 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Thu Mar 25 18:03:12 UTC 2021


squid (4.13-1ubuntu3) hirsute; urgency=medium

  * SECURITY UPDATE: HTTP Request Smuggling issue
    - debian/patches/CVE-2020-25097.patch: Add slash prefix to path-
      rootless or path-noscheme URLs in src/anyp/Uri.cc.
    - CVE-2020-25097

Date: Thu, 25 Mar 2021 12:38:06 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/squid/4.13-1ubuntu3
-------------- next part --------------
Format: 1.8
Date: Thu, 25 Mar 2021 12:38:06 -0400
Source: squid
Built-For-Profiles: noudeb
Architecture: source
Version: 4.13-1ubuntu3
Distribution: hirsute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 squid (4.13-1ubuntu3) hirsute; urgency=medium
 .
   * SECURITY UPDATE: HTTP Request Smuggling issue
     - debian/patches/CVE-2020-25097.patch: Add slash prefix to path-
       rootless or path-noscheme URLs in src/anyp/Uri.cc.
     - CVE-2020-25097
Checksums-Sha1:
 e8bc4cf0ac218efa1d01ba0cfc436db98f0323e9 2757 squid_4.13-1ubuntu3.dsc
 0860569d0046c8696f543d5aac18fe4b539335aa 45376 squid_4.13-1ubuntu3.debian.tar.xz
 d800e5f92ed9cc54e2880e5a973c0213281c6272 10086 squid_4.13-1ubuntu3_source.buildinfo
Checksums-Sha256:
 fb3ebd9fde1aa55061ce4dc23629e06de346445282162669a32302e4025c04e0 2757 squid_4.13-1ubuntu3.dsc
 a07c6a606852c8acc74729024e2d35e0bbea45a90edb1a340726bf95d3435640 45376 squid_4.13-1ubuntu3.debian.tar.xz
 62df45a732ec9ca7d649706ce3fe9978bd72f8a19ba74c1bdd509dc6d65b50b4 10086 squid_4.13-1ubuntu3_source.buildinfo
Files:
 8f9b36e67431bfa8d1eae4f34f216457 2757 web optional squid_4.13-1ubuntu3.dsc
 897c228ede16638ae8964f4ea5bf0606 45376 web optional squid_4.13-1ubuntu3.debian.tar.xz
 ab415f3551e77341536269d339ee62c7 10086 web optional squid_4.13-1ubuntu3_source.buildinfo
Original-Maintainer: Luigi Gangitano <luigi at debian.org>


More information about the Hirsute-changes mailing list