[ubuntu/xenial-security] squid3 3.5.12-1ubuntu7.12 (Accepted)

[Marc Deslauriers]

squid3 (3.5.12-1ubuntu7.12) xenial-security; urgency=medium

  * SECURITY UPDATE: Multiple Issues in HTTP Request processing
    - debian/patches/CVE-2019-12520.patch: properly handle userinfo in
      src/url.cc.
    - CVE-2019-12520
    - CVE-2019-12524
  * SECURITY UPDATE: Multiple issues in URI processing
    - debian/patches/CVE-2019-12526.patch: replace patch with the one from
      Debian to get backported functions.
    - debian/patches/CVE-2019-12523.patch: update URI parser to use SBuf
      parsing APIs.
    - CVE-2019-12523
    - CVE-2019-18676
  * Thanks to Markus Koschany for the backports this update is based on.

Date: 2020-07-30 12:06:13.537825+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/squid3/3.5.12-1ubuntu7.12
-------------- next part --------------
Sorry, changesfile not available.