ubuntu/+source/squid:applied/ubuntu/eoan-devel

Last commit made on 2019-12-04
Get this branch:
git clone -b applied/ubuntu/eoan-devel https://git.launchpad.net/ubuntu/+source/squid
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
applied/ubuntu/eoan-devel
Repository:
lp:ubuntu/+source/squid

Recent commits

884f560... by Marc Deslauriers on 2019-11-19

Import patches-applied version 4.8-1ubuntu2.1 to applied/ubuntu/eoan-security

Imported using git-ubuntu import.

Changelog parent: a342e8b21aecb200cb8c1e6db82d7dc91820361d
Unapplied parent: 7fec0eee702879a8f2cf18eb87aa56bcfee3a813

New changelog entries:
  * SECURITY UPDATE: Multiple issues in URI processing
    - debian/patches/CVE-2019-12523.patch: Update URI parser to use SBuf
      parsing APIs in src/Downloader.cc, src/HttpRequest.cc,
      src/HttpRequest.h, src/Makefile.am, src/acl/Asn.cc,
      src/adaptation/ecap/MessageRep.cc, src/anyp/ProtocolType.h,
      src/anyp/Uri.cc, src/anyp/Uri.h, src/anyp/UriScheme.cc,
      src/anyp/UriScheme.h, src/client_side_request.cc, src/htcp.cc,
      src/icmp/net_db.cc, src/icp_v2.cc, src/mgr/Inquirer.cc,
      src/mime.cc, src/neighbors.cc, src/peer_digest.cc,
      src/servers/FtpServer.cc, src/servers/Http1Server.cc,
      src/store_digest.cc, src/tests/stub_HttpRequest.cc,
      src/tests/stub_libanyp.cc, src/tests/testHttpRequest.cc,
      src/urn.cc.
    - CVE-2019-12523
    - CVE-2019-18676
  * SECURITY UPDATE: Heap Overflow issue in URN processing
    - debian/patches/CVE-2019-12526.patch: fix URN response handling in
      src/urn.cc.
    - CVE-2019-12526
  * SECURITY UPDATE: CSRF issue in HTTP Request processing
    - debian/patches/CVE-2019-18677.patch: prevent truncation for large
      origin-relative domains in src/anyp/Uri.cc, src/anyp/Uri.h,
      src/internal.cc.
    - CVE-2019-18677
  * SECURITY UPDATE: HTTP Request Splitting in HTTP message processing
    - debian/patches/CVE-2019-18678.patch: server MUST reject messages with
      BWS after field-name in src/HttpHeader.cc, src/HttpHeader.h.
    - CVE-2019-18678
    - CVE-2019-18679

7fec0ee... by Marc Deslauriers on 2019-11-19

CVE-2019-18678.patch

No DEP3 Subject or Description header found

Gbp-Pq: CVE-2019-18678.patch.

cbf0fc7... by Marc Deslauriers on 2019-11-19

CVE-2019-18677.patch

No DEP3 Subject or Description header found

Gbp-Pq: CVE-2019-18677.patch.

3d92f33... by Marc Deslauriers on 2019-11-19

CVE-2019-12526.patch

No DEP3 Subject or Description header found

Gbp-Pq: CVE-2019-12526.patch.

d5668b5... by Marc Deslauriers on 2019-11-19

CVE-2019-12523.patch

No DEP3 Subject or Description header found

Gbp-Pq: CVE-2019-12523.patch.

b1b5dfe... by Marc Deslauriers on 2019-11-19

stop including sys/sysctl.h, deprecated in glibc 2.30

Gbp-Pq: drop-sysctl_h.patch.

c027a10... by Marc Deslauriers on 2019-11-19

[PATCH] Bug 4969: GCC-9 build failure: stringop-truncation and others

Gbp-Pq: more-gcc-9-fixes.patch.

c0dfa42... by Marc Deslauriers on 2019-11-19

99-ubuntu-ssl-cert-snakeoil.patch

No DEP3 Subject or Description header found

Gbp-Pq: 99-ubuntu-ssl-cert-snakeoil.patch.

e3ca843... by Marc Deslauriers on 2019-11-19

90-cf.data.ubuntu.patch

No DEP3 Subject or Description header found

Gbp-Pq: 90-cf.data.ubuntu.patch.

92734e2... by Marc Deslauriers on 2019-11-19

Use installed squid binary for Debian CI testing

Gbp-Pq: 0003-installed-binary-for-debian-ci.patch.