~sergiodj/ubuntu/+source/squid:squid-merge-4.11-4

Last commit made on 2020-05-19
Get this branch:
git clone -b squid-merge-4.11-4 https://git.launchpad.net/~sergiodj/ubuntu/+source/squid
Only Sergio Durigan Junior can upload to this branch. If you are Sergio Durigan Junior please log in for upload directions.

Branch merges

Branch information

Name:
squid-merge-4.11-4
Repository:
lp:~sergiodj/ubuntu/+source/squid

Recent commits

7da0df6... by Sergio Durigan Junior

update-maintainer

e1223f3... by Sergio Durigan Junior

reconstruct-changelog

30b07bc... by Sergio Durigan Junior

merge-changelogs

2621cf6... by Sergio Durigan Junior <email address hidden>

    - Drop conffile check for squid < 2.7
      + d/squid.postinst: squid 2.7 is long, long gone, so it should be
        safe to drop the postinst code to make sure that
        /etc/squid/squid.conf was properly upgraded.

780ff38... by Sergio Durigan Junior <email address hidden>

  * Added:
    - Don't restart squid by hand on postinst script
      + d/squid.postinst: When installing/upgrading squid, the service
        is being restarted manually in the postinst script, which can
        break installations that have the squid apparmor enabled because
        it will try to restart the service before reloading the apparmor
        profile. There is no reason to restart squid manually, since the
        restart will be automatically performed later.

25a5a61... by Sergio Durigan Junior

    - SECURITY UPDATE: Digest Authentication nonce replay issue
      + debian/patches/CVE-2020-11945.patch: fix auth digest refcount integer
        overflow in src/auth/digest/Config.cc.
      [ In 4.11-4 ]

240dfb7... by Sergio Durigan Junior

    - SECURITY UPDATE: multiple ESI issues
      + debian/patches/CVE-2019-12519_12521.patch: convert parse exceptions
        into 500 status response in src/esi/Context.h, src/esi/Esi.cc,
        src/esi/Esi.h, src/esi/Expression.cc.
      + CVE-2019-12519
      [ In 4.11-4 ]

28e3f36... by Andreas Hasenack

  * Dropped:
    - d/p/drop-sysctl_h.patch: no longer include sysctl.h as it was
      deprecated in glibc 2.30 (LP #1843325)
      [ In 4.11-4 ]

f57cb7c... by Andreas Hasenack

- d/rules: Add -Wno-format-truncation to CXXFLAGS as a workaround if building for ppc64el. On that arch, dpkg-buildflags sets -O3 instead of -O2 and that triggers a format-truncation error on pcon.cc. See See https://bugs.squid-cache.org/show_bug.cgi?id=4875

6fc9ae2... by Andreas Hasenack

- Use snakeoil certificates: + d/control: add ssl-cert to dependencies + d/p/99-ubuntu-ssl-cert-snakeoil.patch: add a note about ssl to the default config file