-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 7 Mar 2024 23:18:23 CET
Source: squid
Architecture: source
Version: 4.13-10+deb11u3
Distribution: bullseye-security
Urgency: high
Maintainer: Luigi Gangitano <luigi@debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Checksums-Sha1:
a7b8922e089e7427d34abe2be0f8b99ce18dfd7f 2901 squid_4.13-10+deb11u3.dsc
485e628711477274f2810a15ec22210558896df1 63012 squid_4.13-10+deb11u3.debian.tar.xz
79b85b6186f3eb281de2cddb0b20af589d07a5b0 11589 squid_4.13-10+deb11u3_amd64.buildinfo
Checksums-Sha256:
de3f9d822c549973b94d6242a0c6b2c4b4e11c2ebd8c64e14eb9db20bedf05e0 2901 squid_4.13-10+deb11u3.dsc
c63fde90530c9d95d40758e2a5d99475243680aab84e5d54c403f40eefa97b6f 63012 squid_4.13-10+deb11u3.debian.tar.xz
5bbb00b8550cceaea4ba4f9256dce4eadb8a6c8d102268e196aa3a12df8ce7b8 11589 squid_4.13-10+deb11u3_amd64.buildinfo
Changes:
squid (4.13-10+deb11u3) bullseye-security; urgency=high
.
* Non-maintainer upload.
* Fix CVE-2023-46724, CVE-2023-46846, CVE-2023-46847 CVE-2023-49285,
CVE-2023-49286, CVE-2023-50269, CVE-2024-23638, CVE-2024-25617.
* Several security vulnerabilities have been discovered in Squid, a full
featured web proxy cache. Due to programming errors in Squid's HTTP request
parsing, remote attackers may be able to execute a denial of service attack
by sending large X-Forwarded-For header or trigger a stack buffer overflow
while performing HTTP Digest authentication. Other issues facilitate
request smuggling past a firewall or a denial of service against Squid's
Helper process management.
In regard to CVE-2023-46728: Please note that support for the Gopher
protocol has simply been removed in future Squid versions. There are no
plans by the upstream developers of Squid to fix this issue. We recommend
to reject all Gopher URL requests instead.
Files:
22909d1b7a06036b12684089ed6707a2 2901 web optional squid_4.13-10+deb11u3.dsc
b3ea7b1d80d7edde26db32dcbbd74de3 63012 web optional squid_4.13-10+deb11u3.debian.tar.xz
3733d2a71286b1eaca41690863a89b5a 11589 web optional squid_4.13-10+deb11u3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=KzRn
-----END PGP SIGNATURE-----
Attachment:
pgpVjYtLL0Pc3.pgp
Description: PGP signature