Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1016537

Bug#964283: Promote squid 4.12 from bullseye

From TarotApprentice <tarotapprentice@yahoo.com>
Newsgroups linux.debian.bugs.dist
Subject Bug#964283: Promote squid 4.12 from bullseye
Date 2020-07-05 03:30 +0200
Message-ID <Ap1DI-ya-3@gated-at.bofh.it> (permalink)
Organization linux.* mail to news gateway

Show all headers | View raw


Package: squid
Version: 4.11-2~bpo10+1

Please promote squid 4.12 from bullseye to buster-backports. There are various security fixes in 4.12.

Bugs with CVE numbers since squid 4.11:
* SQUID-2020:7 Cache Poisoning Issue in HTTP Request processing (CVE-2020-15049)

* SQUID-2020:6 Denial of Service issue in TLS handshake (CVE-2020-14058)

* SQUID-2020:5 Denial of Service when using SMP cache (CVE-2020-14059)

Other bugs:
* Bug 5041: Missing Debug::Extra breaks build on hosts with systemd

* Bug 5030: Negative responses are never cached

* SslBump: Disable OpenSSL TLSv1.3 support for older TLS traffic

Back to linux.debian.bugs.dist | Previous | Next | Find similar | Unroll thread


Thread

Bug#964283: Promote squid 4.12 from bullseye TarotApprentice <tarotapprentice@yahoo.com> - 2020-07-05 03:30 +0200

csiph-web