squid3 3.5.12-1ubuntu7.5 source package in Ubuntu
Changelog
squid3 (3.5.12-1ubuntu7.5) xenial-security; urgency=medium * SECURITY UPDATE: various denial of service issues - debian/patches/CVE-2016-25xx-1.patch: better handling of huge response headers in src/http.cc. - debian/patches/CVE-2016-25xx-2.patch: throw instead of asserting on some String overflows in src/SquidString.h, src/StrList.cc, src/String.cc, src/clients/Client.cc, src/clients/Client.h, src/clients/FtpClient.cc, src/http.cc. - debian/patches/CVE-2016-25xx-3.patch: fix assertion in custom ESI parser in src/esi/CustomParser.cc, src/esi/CustomParser.h. - debian/patches/CVE-2016-25xx-4.patch: fix assertion in src/FwdState.cc, src/FwdState.h, src/clients/Client.h, src/comm.cc, src/comm.h, src/http.cc. - CVE-2016-2569 - CVE-2016-2570 - CVE-2016-2571 * SECURITY UPDATE: denial of service via crafted HTTP response - debian/patches/CVE-2016-3948.patch: convert Vary handling to SBuf in src/HttpRequest.cc, src/HttpRequest.h, src/MemObject.cc, src/MemObject.h, src/MemStore.cc, src/StoreMetaVary.cc, src/client_side.cc, src/client_side_reply.cc, src/http.cc, src/http.h, src/store.cc, src/store_key_md5.cc, src/store_swapmeta.cc, src/tests/stub_MemObject.cc, src/tests/stub_http.cc. - CVE-2016-3948 * SECURITY UPDATE: denial of service in ESI Response processing - debian/patches/CVE-2018-1000024.patch: make sure endofName never exceeds tagEnd in src/esi/CustomParser.cc. - CVE-2018-1000024 * SECURITY UPDATE: denial of service in in HTTP Message processing - debian/patches/CVE-2018-1000027.patch: fix indirect IP logging for transactions without a client connection in src/client_side_request.cc. - CVE-2018-1000027 -- Marc Deslauriers <email address hidden> Thu, 01 Feb 2018 09:56:31 -0500
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Xenial
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- web
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
squid3_3.5.12.orig.tar.gz | 4.6 MiB | 9114a2d52905761d12550d8d6e55c855deae0dee1bcc5bf45458c4a68ff9afd5 |
squid3_3.5.12-1ubuntu7.5.debian.tar.xz | 62.3 KiB | cbd817a405484b4d5e45325496cf655161e32dfeadb6bbca8ef154c4d65e4fdb |
squid3_3.5.12-1ubuntu7.5.dsc | 2.5 KiB | 9834d9b53a53933518f702d3dc6f4a25b934fee89fa35bc0d1ef67e11091dac1 |
Available diffs
Binary packages built by this source
- squid: Full featured Web Proxy cache (HTTP proxy)
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
.
Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
new features including ICAP and ESI support.
- squid-cgi: Full featured Web Proxy cache (HTTP proxy) - control CGI
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
.
Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
new features including ICAP and ESI support.
.
This package contains a CGI program that can be used to query and administrate
a `squid' proxy cache through a web browser.
- squid-cgi-dbgsym: debug symbols for package squid-cgi
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
.
Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
new features including ICAP and ESI support.
.
This package contains a CGI program that can be used to query and administrate
a `squid' proxy cache through a web browser.
- squid-common: Full featured Web Proxy cache (HTTP proxy) - common files
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
.
Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
new features including ICAP and ESI support.
.
This package contains common files (MIB and icons)
- squid-dbg: Full featured Web Proxy cache (HTTP proxy) - Debug symbols
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
.
Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
new features including ICAP and ESI support.
.
This package contains debugging symbols for binaries in squid.
- squid-dbgsym: debug symbols for package squid
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
.
Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
new features including ICAP and ESI support.
- squid-purge: Full featured Web Proxy cache (HTTP proxy) - control utility
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
.
Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
new features including ICAP and ESI support.
.
This package contains a small utility that can be used to manage the disk cache
from the command line.
- squid-purge-dbgsym: debug symbols for package squid-purge
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
.
Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
new features including ICAP and ESI support.
.
This package contains a small utility that can be used to manage the disk cache
from the command line.
- squid3: Dummy transitional package.
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
.
Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
new features including ICAP and ESI support.
.
This is a dummy transitional package used to migrate from squid3 to squid.
- squidclient: Full featured Web Proxy cache (HTTP proxy) - control utility
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
.
Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
new features including ICAP and ESI support.
.
This package contains a small utility that can be used to get URLs from the
command line.
- squidclient-dbgsym: debug symbols for package squidclient
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
.
Squid version 3 is a major rewrite of Squid in C++ and introduces a number of
new features including ICAP and ESI support.
.
This package contains a small utility that can be used to get URLs from the
command line.