Ubuntu
squid3 package

~nacc/ubuntu/+source/squid3:merge

  1. Git
  2. lp:~nacc/ubuntu/+source/squid3
  3. merge
Last commit made on 2016-08-27
Get this branch:
git clone -b merge https://git.launchpad.net/~nacc/ubuntu/+source/squid3
Only Nish Aravamudan can upload to this branch. If you are Nish Aravamudan please log in for upload directions.

Branch merges

Branch information

Name:
merge
Repository:
lp:~nacc/ubuntu/+source/squid3

Recent commits

301503d... by Nish Aravamudan

changelog

76cb130... by Nish Aravamudan

merge-changelogs

5d61a24... by Nish Aravamudan

  * debian/control: add dh-autoreconf to BuildDepends.

592a4fc... by Nish Aravamudan

  * debian/rules: include autoreconf.mk.

331fff5... by Nish Aravamudan

  * SECURITY UPDATE: denial of service via ESI responses
    - debian/patches/CVE-2016-4555.patch: fix segfaults in
      src/client_side_request.cc, src/esi/Context.h, src/esi/Esi.cc.
    - CVE-2016-4555
    - CVE-2016-4556

788eb29... by Nish Aravamudan

  * SECURITY UPDATE: same-origin bypass and cache-poisoning attack via
    crafted HTTP host header
    - debian/patches/CVE-2016-4554.patch: properly handle whitespace in
      src/mime_header.cc.
    - CVE-2016-4554

0c798e1... by Nish Aravamudan

  * SECURITY UPDATE: cache-poisoning attacks via an HTTP request with an
    absolute-URI
    - debian/patches/CVE-2016-4553.patch: properly handle condition in
      src/client_side.cc
    - CVE-2016-4553

7d067a0... by Nish Aravamudan

  * SECURITY UPDATE: denial of service or arbitrary code execution via
    crafted ESI responses
    - debian/patches/CVE-2016-4052.patch: perform bounds checking and
      remove asserts in src/esi/Esi.cc.
    - CVE-2016-4052
    - CVE-2016-4053
    - CVE-2016-4054

292a658... by Nish Aravamudan

  * SECURITY UPDATE: denial of service and possible code execution via
    seeding manager reporter with crafted data
    - debian/patches/CVE-2016-4051.patch: use dynamic MemBuf for internal
      content generation in tools/cachemgr.cc, src/tests/stub_cbdata.cc,
      src/tests/stub_mem.cc, tools/Makefile.am.
    - CVE-2016-4051

1a6622a... by Nish Aravamudan

  * SECURITY UPDATE: denial of service via pinger and ICMPv6 packet
    - debian/patches/CVE-2016-3947.patch: fix sizes in src/icmp/Icmp6.cc.
    - CVE-2016-3947