Ubuntu
squid package

~bryce/ubuntu/+source/squid:fix-lp676141-noble

  1. Git
  2. lp:~bryce/ubuntu/+source/squid
  3. fix-lp676141-noble
Last commit made on 2024-01-19
Get this branch:
git clone -b fix-lp676141-noble https://git.launchpad.net/~bryce/ubuntu/+source/squid
Only Bryce Harrington can upload to this branch. If you are Bryce Harrington please log in for upload directions.

Branch merges

Branch information

Name:
fix-lp676141-noble
Repository:
lp:~bryce/ubuntu/+source/squid

Recent commits

fecdce8... by Bryce Harrington

  * d/source_squid.py, d/squid-common.install: Add apport hook
    (LP: #676141)

9d7f83d... by Bryce Harrington

changelog

947b36b... by Athos Ribeiro

update-maintainer

cbab75e... by Athos Ribeiro

reconstruct-changelog

d721d05... by Athos Ribeiro

merge-changelogs

a7f4e58... by Athos Ribeiro

    - SECURITY UPDATE: DoS via ftp:// URLs
      + debian/patches/CVE-2023-46848.patch: fix userinfo percent-encoding in
        src/acl/external/eDirectory_userip/ext_edirectory_userip_acl.cc,
        src/anyp/Uri.cc.
      + CVE-2023-46848
      [ Fixed in Debian in 6.5-1 ]

94aba37... by Athos Ribeiro

    - SECURITY UPDATE: DoS via HTTP Digest Authentication
      + debian/patches/CVE-2023-46847.patch: fix stack buffer overflow when
        parsing Digest Authorization in src/auth/digest/Config.cc.
      + CVE-2023-46847
      [ Fixed in Debian in 6.5-1 ]

8beadde... by Athos Ribeiro

    - SECURITY UPDATE: HTTP request smuggling, caused by chunked decoder
      lenience
      + debian/patches/CVE-2023-46846.patch: improve HTTP chunked encoding
        compliance in src/http/one/Parser.cc, src/http/one/Parser.h,
        src/http/one/TeChunkedParser.cc, src/parser/Tokenizer.cc,
        src/parser/Tokenizer.h.
      + CVE-2023-46846
      [ Fixed in Debian in 6.5-1 ]

dda558b... by Athos Ribeiro

    - SECURITY UPDATE: DoS against certificate validation
      + debian/patches/CVE-2023-46724.patch: fix validation of certificates
        with CN=* in src/anyp/Uri.cc.
      + CVE-2023-46724
      [ Fixed in Debian in 6.5-1 ]

194f4e0... by Athos Ribeiro

    - d/p/0011-Fix-ftp-support.patch: Fix pure virtual call in
      Ftp::Client constructor leading to problems in FTP support.
      [ Fixed upstream in 6.2 ]