[ubuntu/oneiric-security] squid3 3.1.14-1ubuntu0.3 (Accepted)

[Seth Arnold]

squid3 (3.1.14-1ubuntu0.3) oneiric-security; urgency=low

  * SECURITY UPDATE: denial of service via cachemgr.cgi insufficient input
    validation
    - debian/patches/98-CVE-2012-5643.dpatch: modify cachemgr.cc to properly
      free memory and handle input in chunks
    - Based on
      http://www.squid-cache.org/Versions/v3/3.1/changesets/SQUID-2012_1.patch
    - CVE-2012-5643
    - CVE-2013-0189

squid3 (3.1.14-1ubuntu0.2) oneiric-proposed; urgency=low

  * Add 16-skip-read-if-closed.dpatch: Check if connection is still open
    and bail out if not before attempting to read more data.  Fixes crash
    in squid proxy with message, assertion failed: comm.cc:349:
    "!fd_table[fd].closing()".  Patch is a cherrypick of an upstream
    patch to fix Squid Bug 3131.
    (LP: #955883)

Date: 2013-01-30 23:30:43.453202+00:00
Changed-By: Seth Arnold <seth.arnold at canonical.com>
https://launchpad.net/ubuntu/oneiric/+source/squid3/3.1.14-1ubuntu0.3
-------------- next part --------------
Sorry, changesfile not available.