squid affected by CVE-2009-0478

[geeknik]

Binary package hint: squid

Squid 3.0 Stable 13 was just released and I'd like to see this added to Ubuntu. Why should we have to install an outdated version via apt-get install? Thanks.

[Pierre Emeriaud (petrus-lt-deactivatedaccount)]

Hi all,

I also agree on the need of a recent version of squid, see CVE entry and :

http://www.squid-cache.org/Advisories/SQUID-2009_1.txt

This vulerability has been fixed in the latest versions of squid 2.7, 3.0 and 3.1.

Thanks

[Jamie Strandboge (jdstrand)]

squid3 in Jaunty was fixed in 3.0.STABLE8-3. squid for Dapper- Hardy is not affected. Currently we are past FeatureFreeze, so updating to STABLE13 for Jaunty cannot be done without a FeatureFreezeException. Please see https://wiki.ubuntu.com/FreezeExceptionProcess for details.

[Jamie Strandboge (jdstrand)]

squid 2.7.STABLE3-4.1ubuntu1 in Jaunty is not affected by this issue (patched in 2.7.STABLE3-4.1).

[Jamie Strandboge (jdstrand)]

http://www.ubuntu.com/usn/usn-724-1

[Sergio Zanchetta (primes2h)]

The 18 month support period for Gutsy Gibbon 7.10 has reached its end of life -
http://www.ubuntu.com/news/ubuntu-7.10-eol . As a result, we are closing the
Gutsy task.

[Alex Valavanis (valavanisalex)]

Intrepid Ibex reached end-of-life on 30 April 2010 so I am closing the
report. The bug has been fixed in newer releases of Ubuntu.

[Rolf Leggewie (r0lf)]

Hardy has seen the end of its life and is no longer receiving any updates. Marking the Hardy task for this ticket as "Won't Fix".