[ubuntu/quantal-security] squid3 3.1.20-1ubuntu1.1 (Accepted)
Seth Arnold
seth.arnold at canonical.com
Thu Jan 31 03:14:25 UTC 2013
squid3 (3.1.20-1ubuntu1.1) quantal-security; urgency=low
* SECURITY UPDATE: denial of service via cachemgr.cgi insufficient input
validation
- debian/patches/98-CVE-2012-5643.patch: modify cachemgr.cc to properly
free memory and handle input in chunks
- Based on
http://www.squid-cache.org/Versions/v3/3.1/changesets/SQUID-2012_1.patch
- CVE-2012-5643
- CVE-2013-0189
Date: 2013-01-31 00:00:50.296652+00:00
Changed-By: Seth Arnold <seth.arnold at canonical.com>
https://launchpad.net/ubuntu/quantal/+source/squid3/3.1.20-1ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Quantal-changes
mailing list