[ubuntu/oneiric-security] squid3 3.1.14-1ubuntu0.3 (Accepted)

Seth Arnold seth.arnold at canonical.com
Thu Jan 31 03:14:19 UTC 2013

squid3 (3.1.14-1ubuntu0.3) oneiric-security; urgency=low

  * SECURITY UPDATE: denial of service via cachemgr.cgi insufficient input
    - debian/patches/98-CVE-2012-5643.dpatch: modify cachemgr.cc to properly
      free memory and handle input in chunks
    - Based on
    - CVE-2012-5643
    - CVE-2013-0189

squid3 (3.1.14-1ubuntu0.2) oneiric-proposed; urgency=low

  * Add 16-skip-read-if-closed.dpatch: Check if connection is still open
    and bail out if not before attempting to read more data.  Fixes crash
    in squid proxy with message, assertion failed: comm.cc:349:
    "!fd_table[fd].closing()".  Patch is a cherrypick of an upstream
    patch to fix Squid Bug 3131.
    (LP: #955883)

Date: 2013-01-30 23:30:43.453202+00:00
Changed-By: Seth Arnold <seth.arnold at canonical.com>
-------------- next part --------------
Sorry, changesfile not available.

More information about the Oneiric-changes mailing list