Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1016537 > unrolled thread

Bug#964283: Promote squid 4.12 from bullseye

Started byTarotApprentice <tarotapprentice@yahoo.com>
First post2020-07-05 03:30 +0200
Last post2020-07-05 03:30 +0200
Articles 1 — 1 participant

Back to article view | Back to linux.debian.bugs.dist


Contents

  Bug#964283: Promote squid 4.12 from bullseye TarotApprentice <tarotapprentice@yahoo.com> - 2020-07-05 03:30 +0200

#1016537 — Bug#964283: Promote squid 4.12 from bullseye

FromTarotApprentice <tarotapprentice@yahoo.com>
Date2020-07-05 03:30 +0200
SubjectBug#964283: Promote squid 4.12 from bullseye
Message-ID<Ap1DI-ya-3@gated-at.bofh.it>
Package: squid
Version: 4.11-2~bpo10+1

Please promote squid 4.12 from bullseye to buster-backports. There are various security fixes in 4.12.

Bugs with CVE numbers since squid 4.11:
* SQUID-2020:7 Cache Poisoning Issue in HTTP Request processing (CVE-2020-15049)

* SQUID-2020:6 Denial of Service issue in TLS handshake (CVE-2020-14058)

* SQUID-2020:5 Denial of Service when using SMP cache (CVE-2020-14059)

Other bugs:
* Bug 5041: Missing Debug::Extra breaks build on hosts with systemd

* Bug 5030: Negative responses are never cached

* SslBump: Disable OpenSSL TLSv1.3 support for older TLS traffic

[toc] | [standalone]


Back to top | Article view | linux.debian.bugs.dist


csiph-web