Since CVE-2016-3948 was fixed, squid potentially generates many instances of "Vary loop" type message in cache log

Bug #1999346 reported by Alex Murray
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
squid3 (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

This appears to be due to the original fix from CVE-2016-3948 - a follow-up commit upstream to fix this was committed in https://github.com/squid-cache/squid/commit/c9974e82f0878c606d46ee795d2fc945ec66e8a1

The original CVE-2016-3948 fix was published in USN-3557-1

Revision history for this message
Alex Murray (alexmurray) wrote :

Fixed in squid3 3.5.12-1ubuntu7.16+esm1 published to esm-infra-security / esm.ubuntu.com.

Changed in squid3 (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.