Publishing details

• Removed from disk on 2020-09-29.
• Removal requested on 2020-09-28.
• Deleted on 2020-09-28 by Marc Deslauriers
• Published on 2020-09-03

Changelog

squid3 (3.5.27-1ubuntu1.9) bionic-security; urgency=medium

  * SECURITY UPDATE: Request Smuggling and Poisoning issue
    - debian/patches/CVE-2020-15049.patch: validate Content-Length value
      prefix in src/http/ContentLengthInterpreter.cc,
      src/http/ContentLengthInterpreter.h.
    - CVE-2020-15049
  * SECURITY UPDATE: HTTP Request Smuggling issue
    - debian/patches/CVE-2020-15810.patch: enforce token characters for
      field-name in src/HttpHeader.cc.
    - CVE-2020-15810
  * SECURITY UPDATE: HTTP Request Splitting issue
    - debian/patches/CVE-2020-15811-pre.patch: validate Content-Length
      header values in src/HttpHeader.cc, src/HttpHeaderTools.cc,
      src/HttpHeaderTools.h, src/http/ContentLengthInterpreter.cc,
      src/http/ContentLengthInterpreter.h, src/http/Makefile.am.
    - debian/patches/CVE-2020-15811.patch: Improve Transfer-Encoding
      handling in src/HttpHeader.cc, src/HttpHeader.h, src/client_side.cc,
      src/http.cc.
    - CVE-2020-15811
  * SECURITY UPDATE: DoS via peer crafted Cache Digest response message
    - debian/patches/CVE-2020-24606.patch:  fix livelocking in
      peerDigestHandleReply in src/peer_digest.cc.
    - CVE-2020-24606
  * Enable the test suite
    - debian/rules: enable test suite
    - debian/patches/enable-the-test-suite.patch: fix FTBFS.
    - debain/patches/fix-cppunit-detection.patch: don't use cppunit-config
      which is no longer available in bionic.

 -- Marc Deslauriers <email address hidden>  Wed, 02 Sep 2020 11:35:51 -0400

Builds

• amd64
• arm64
• armhf
• i386
• ppc64el
• s390x

Package files

• squid-cgi_3.5.27-1ubuntu1.9_amd64.deb (60.6 KiB)
• squid-cgi_3.5.27-1ubuntu1.9_arm64.deb (58.9 KiB)
• squid-cgi_3.5.27-1ubuntu1.9_armhf.deb (56.2 KiB)
• squid-cgi_3.5.27-1ubuntu1.9_i386.deb (62.6 KiB)
• squid-cgi_3.5.27-1ubuntu1.9_ppc64el.deb (64.6 KiB)
• squid-cgi_3.5.27-1ubuntu1.9_s390x.deb (58.4 KiB)
• squid-common_3.5.27-1ubuntu1.9_all.deb (173.0 KiB)
• squid-dbg_3.5.27-1ubuntu1.9_amd64.deb (20.8 MiB)
• squid-dbg_3.5.27-1ubuntu1.9_arm64.deb (20.7 MiB)
• squid-dbg_3.5.27-1ubuntu1.9_armhf.deb (20.4 MiB)
• squid-dbg_3.5.27-1ubuntu1.9_i386.deb (19.7 MiB)
• squid-dbg_3.5.27-1ubuntu1.9_ppc64el.deb (21.3 MiB)
• squid-dbg_3.5.27-1ubuntu1.9_s390x.deb (21.8 MiB)
• squid-purge_3.5.27-1ubuntu1.9_amd64.deb (51.1 KiB)
• squid-purge_3.5.27-1ubuntu1.9_arm64.deb (50.5 KiB)
• squid-purge_3.5.27-1ubuntu1.9_armhf.deb (49.2 KiB)
• squid-purge_3.5.27-1ubuntu1.9_i386.deb (52.8 KiB)
• squid-purge_3.5.27-1ubuntu1.9_ppc64el.deb (52.9 KiB)
• squid-purge_3.5.27-1ubuntu1.9_s390x.deb (50.3 KiB)
• squid3_3.5.27-1ubuntu1.9.debian.tar.xz (81.5 KiB)
• squid3_3.5.27-1ubuntu1.9.dsc (2.7 KiB)
• squid3_3.5.27-1ubuntu1.9_all.deb (32.4 KiB)
• squid3_3.5.27.orig.tar.gz (4.6 MiB)
• squid_3.5.27-1ubuntu1.9_amd64.deb (2.1 MiB)
• squid_3.5.27-1ubuntu1.9_arm64.deb (2.0 MiB)
• squid_3.5.27-1ubuntu1.9_armhf.deb (2.0 MiB)
• squid_3.5.27-1ubuntu1.9_i386.deb (2.2 MiB)
• squid_3.5.27-1ubuntu1.9_ppc64el.deb (2.2 MiB)
• squid_3.5.27-1ubuntu1.9_s390x.deb (1.9 MiB)
• squidclient_3.5.27-1ubuntu1.9_amd64.deb (62.0 KiB)
• squidclient_3.5.27-1ubuntu1.9_arm64.deb (59.8 KiB)
• squidclient_3.5.27-1ubuntu1.9_armhf.deb (57.4 KiB)
• squidclient_3.5.27-1ubuntu1.9_i386.deb (63.3 KiB)
• squidclient_3.5.27-1ubuntu1.9_ppc64el.deb (62.6 KiB)
• squidclient_3.5.27-1ubuntu1.9_s390x.deb (60.0 KiB)