squid 5.7-0ubuntu0.22.04.2 source package in Ubuntu
Changelog
squid (5.7-0ubuntu0.22.04.2) jammy-security; urgency=medium * SECURITY UPDATE: DoS against certificate validation - debian/patches/CVE-2023-46724.patch: fix validation of certificates with CN=* in src/anyp/Uri.cc. - CVE-2023-46724 * SECURITY UPDATE: DoS via Gopher gateway - debian/patches/CVE-2023-46728.patch: disable gopher support in src/FwdState.cc, src/HttpRequest.cc, src/IoStats.h, src/Makefile.am, src/adaptation/ecap/Host.cc, src/adaptation/ecap/MessageRep.cc, src/anyp/ProtocolType.h, src/anyp/Uri.cc, src/anyp/UriScheme.cc, src/client_side_request.cc, src/error/forward.h, src/http/Message.h, src/mgr/IoAction.cc, src/mgr/IoAction.h, src/stat.cc, src/tests/Stub.am. - CVE-2023-46728 * SECURITY UPDATE: HTTP request smuggling, caused by chunked decoder lenience - debian/patches/CVE-2023-46846.patch: improve HTTP chunked encoding compliance in src/http/one/Parser.cc, src/http/one/Parser.h, src/http/one/TeChunkedParser.cc, src/parser/Tokenizer.cc, src/parser/Tokenizer.h. - CVE-2023-46846 * SECURITY UPDATE: DoS via HTTP Digest Authentication - debian/patches/CVE-2023-46847.patch: fix stack buffer overflow when parsing Digest Authorization in src/auth/digest/Config.cc. - CVE-2023-46847 * SECURITY UPDATE: DoS via ftp:// URLs - debian/patches/CVE-2023-46848.patch: fix userinfo percent-encoding in src/acl/external/eDirectory_userip/ext_edirectory_userip_acl.cc, src/anyp/Uri.cc. - CVE-2023-46848 -- Marc Deslauriers <email address hidden> Mon, 13 Nov 2023 09:20:05 -0500
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Jammy
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- web
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
squid_5.7.orig.tar.xz | 2.4 MiB | 6b0753aaba4c9c4efd333e67124caecf7ad6cc2d38581f19d2f0321f5b7ecd81 |
squid_5.7-0ubuntu0.22.04.2.debian.tar.xz | 55.7 KiB | ad7309d3fa1777d0f95e8aa094479fec926db878b0638124db3863414546f45c |
squid_5.7-0ubuntu0.22.04.2.dsc | 2.8 KiB | 6648bedd0624511be9cf5fd489474479b54de04df71b1341af78880c878f76d3 |
Available diffs
Binary packages built by this source
- squid: Full featured Web Proxy cache (HTTP proxy GnuTLS flavour)
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
- squid-cgi: Full featured Web Proxy cache (HTTP proxy) - control CGI
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
.
This package contains a CGI program that can be used to query and administrate
a `squid' proxy cache through a web browser.
- squid-cgi-dbgsym: debug symbols for squid-cgi
- squid-common: Full featured Web Proxy cache (HTTP proxy) - common files
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
.
This package contains common files (MIB and icons)
- squid-dbgsym: debug symbols for squid
- squid-openssl: Full featured Web Proxy cache (HTTP proxy OpenSSL flavour)
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
- squid-openssl-dbgsym: debug symbols for squid-openssl
- squid-purge: Full featured Web Proxy cache (HTTP proxy) - cache management utility
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
.
This package contains a small utility that can be used to manage the disk cache
from the command line.
- squid-purge-dbgsym: debug symbols for squid-purge
- squidclient: Full featured Web Proxy cache (HTTP proxy) - HTTP(S) message utility
Squid is a high-performance proxy caching server for web clients, supporting
FTP, gopher, ICY and HTTP data objects.
.
This package contains a small utility that can be used to get URLs from the
command line.
- squidclient-dbgsym: debug symbols for squidclient