squid 6.5-1ubuntu1 source package in Ubuntu
Changelog
squid (6.5-1ubuntu1) noble; urgency=medium * Merge with Debian unstable (LP: #2040426). Remaining changes: - d/usr.sbin.squid: Add sections for squid-deb-proxy and squidguard - d/p/90-cf.data.ubuntu.patch: Add refresh patterns for deb packaging - Use snakeoil certificates: + d/control: add ssl-cert to dependencies + d/p/99-ubuntu-ssl-cert-snakeoil.patch: add a note about ssl to the default config file - d/NEWS: drop the NIS basic auth helper (LP #1895694) - d/p/0009-Fix-Werror-alloc-size-larger-than-on-GCC-12.patch: Fix FTBFS due to -Werror=alloc-size-larger-than on GCC 12. - d/rules: halt build upon test failures. - d/rules: do not include additional configuration files during build time tests. This would lead to test failures due to missing paths. - d/t/upstream-test-suite: use installed squid binary for autopkgtest config file checks. - d/p/0010-Fix-Werror-sign-compare-on-GCC-13.patch: fix comparison between signed and unsigned values. - d/rules: disable LTO related compilation errors for ppc64el builds. * Dropped changes: - d/t/upstream-test-suite: make missing targets for squid 6. [ Fixed in Debian in 6.5-1 ] - d/p/0011-Fix-ftp-support.patch: Fix pure virtual call in Ftp::Client constructor leading to problems in FTP support. [ Fixed upstream in 6.2 ] - SECURITY UPDATE: DoS against certificate validation + debian/patches/CVE-2023-46724.patch: fix validation of certificates with CN=* in src/anyp/Uri.cc. + CVE-2023-46724 [ Fixed in Debian in 6.5-1 ] - SECURITY UPDATE: HTTP request smuggling, caused by chunked decoder lenience + debian/patches/CVE-2023-46846.patch: improve HTTP chunked encoding compliance in src/http/one/Parser.cc, src/http/one/Parser.h, src/http/one/TeChunkedParser.cc, src/parser/Tokenizer.cc, src/parser/Tokenizer.h. + CVE-2023-46846 [ Fixed in Debian in 6.5-1 ] - SECURITY UPDATE: DoS via HTTP Digest Authentication + debian/patches/CVE-2023-46847.patch: fix stack buffer overflow when parsing Digest Authorization in src/auth/digest/Config.cc. + CVE-2023-46847 [ Fixed in Debian in 6.5-1 ] - SECURITY UPDATE: DoS via ftp:// URLs + debian/patches/CVE-2023-46848.patch: fix userinfo percent-encoding in src/acl/external/eDirectory_userip/ext_edirectory_userip_acl.cc, src/anyp/Uri.cc. + CVE-2023-46848 [ Fixed in Debian in 6.5-1 ] -- Athos Ribeiro <email address hidden> Tue, 12 Dec 2023 12:05:40 -0300
Upload details
- Uploaded by:
- Athos Ribeiro
- Uploaded to:
- Noble
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- web
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
squid_6.5.orig.tar.xz | 2.4 MiB | 5070f8a3ae6666870c8fc716326befb0a1abe8b5ff3a6f3932cbc5543d7c8549 |
squid_6.5.orig.tar.xz.asc | 1.2 KiB | a6b2da4f95c3d968a17dc567273835b2300fff0acd71d339f6eb52e0da3d6b17 |
squid_6.5-1ubuntu1.debian.tar.xz | 50.0 KiB | e45e8535fa0ae06a19326fceaa6f47df45bf8c8ff1616923a77f58456545ab8a |
squid_6.5-1ubuntu1.dsc | 3.0 KiB | 4822f31a3cf0aa7cccc4023d60905d26ea9eba701c35db257d0e833d39276139 |
Available diffs
- diff from 6.1-2ubuntu2 to 6.5-1ubuntu1 (95.9 KiB)
Binary packages built by this source
- squid: Full featured Web Proxy cache (HTTP proxy GnuTLS flavour)
Squid is a high-performance proxy caching server for web clients, supporting
FTP, ICY and HTTP data objects.
- squid-cgi: Full featured Web Proxy cache (HTTP proxy) - control CGI
Squid is a high-performance proxy caching server for web clients, supporting
FTP, ICY and HTTP data objects.
.
This package contains a CGI program that can be used to query and administrate
a `squid' proxy cache through a web browser.
- squid-cgi-dbgsym: debug symbols for squid-cgi
- squid-common: Full featured Web Proxy cache (HTTP proxy) - common files
Squid is a high-performance proxy caching server for web clients, supporting
FTP, ICY and HTTP data objects.
.
This package contains common files (MIB and icons)
- squid-dbgsym: debug symbols for squid
- squid-openssl: Full featured Web Proxy cache (HTTP proxy OpenSSL flavour)
Squid is a high-performance proxy caching server for web clients, supporting
FTP, ICY and HTTP data objects.
- squid-openssl-dbgsym: debug symbols for squid-openssl
- squid-purge: Full featured Web Proxy cache (HTTP proxy) - cache management utility
Squid is a high-performance proxy caching server for web clients, supporting
FTP, ICY and HTTP data objects.
.
This package contains a small utility that can be used to manage the disk cache
from the command line.
- squid-purge-dbgsym: debug symbols for squid-purge
- squidclient: Full featured Web Proxy cache (HTTP proxy) - HTTP(S) message utility
Squid is a high-performance proxy caching server for web clients, supporting
FTP, ICY and HTTP data objects.
.
This package contains a small utility that can be used to get URLs from the
command line.
- squidclient-dbgsym: debug symbols for squidclient