Accepted squid3 3.1.20-2.2+deb7u7 (source all amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 25 Dec 2016 20:08:15 +0100
Source: squid3
Binary: squid3 squid3-dbg squid3-common squidclient squid-cgi
Architecture: source all amd64
Version: 3.1.20-2.2+deb7u7
Distribution: wheezy-security
Urgency: high
Maintainer: Luigi Gangitano <luigi@debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
squid-cgi - Full featured Web Proxy cache (HTTP proxy) - control CGI
squid3 - Full featured Web Proxy cache (HTTP proxy)
squid3-common - Full featured Web Proxy cache (HTTP proxy) - common files
squid3-dbg - Full featured Web Proxy cache (HTTP proxy) - Debug symbols
squidclient - Full featured Web Proxy cache (HTTP proxy) - control utility
Changes:
squid3 (3.1.20-2.2+deb7u7) wheezy-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2016-10002:
Saulius Lapinskas from Lithuanian State Social Insurance Fund Board
discovered that Squid3, a fully featured web proxy cache, does not properly
process responses to If-None-Modified HTTP conditional requests, leading to
client-specific Cookie data being leaked to other clients. A remote
attacker can take advantage of this flaw to discover private and sensitive
information about another clients browsing session.
Checksums-Sha1:
f310aae96547284ded37351e34bc6c09dabbcf6a 2252 squid3_3.1.20-2.2+deb7u7.dsc
43ae6f3f61e95ad66b42bb2000857e518b395b3f 39058 squid3_3.1.20-2.2+deb7u7.debian.tar.gz
587933c23283db51ad3b4a109c9d819ebb96586c 203682 squid3-common_3.1.20-2.2+deb7u7_all.deb
81cd64461a506d9377a399f5d5a24d55bb49824e 1646572 squid3_3.1.20-2.2+deb7u7_amd64.deb
40d68ec766dd9434d343604c97170e461362d9e0 7000296 squid3-dbg_3.1.20-2.2+deb7u7_amd64.deb
08881740ac82e4f35fce3ed232e1bc04a5dd301b 113556 squidclient_3.1.20-2.2+deb7u7_amd64.deb
06e90dfe1f3e9f18b3db114c96bd054742731573 119906 squid-cgi_3.1.20-2.2+deb7u7_amd64.deb
Checksums-Sha256:
73dca5465791d3ee4e6eb006bf436533adf21707541cbe30e04d116018dff40b 2252 squid3_3.1.20-2.2+deb7u7.dsc
84c0e59507146a05d97d042d57c90bb9d4f1d56b2bbaaec2fa944c5101340cd0 39058 squid3_3.1.20-2.2+deb7u7.debian.tar.gz
56df50728c711187d3fb478bcda68c4e5fb1ed61e722f1b1c20e021b45ad7b35 203682 squid3-common_3.1.20-2.2+deb7u7_all.deb
c5b1f08c811d85d5ecf7409bff7ae1908b66a2343687504a1fbfd151ddfebc66 1646572 squid3_3.1.20-2.2+deb7u7_amd64.deb
154b8f6b76eb33cfb8b736296e67804d4ea6884459a44306b41091a111a946c5 7000296 squid3-dbg_3.1.20-2.2+deb7u7_amd64.deb
8dee00dedd28728a92255bad365c99f8af7fd33a9bd2939837581a19d908888a 113556 squidclient_3.1.20-2.2+deb7u7_amd64.deb
8852c786f7e3101bafc4c81eb3463741f6e4edc14875fb5c999330e4c653de7a 119906 squid-cgi_3.1.20-2.2+deb7u7_amd64.deb
Files:
0482508f6aca73586a6661a7f5b6af3d 2252 web optional squid3_3.1.20-2.2+deb7u7.dsc
848e58049323e416eea1507f00dc802d 39058 web optional squid3_3.1.20-2.2+deb7u7.debian.tar.gz
3f06c8a831605853f1d05dc10e054555 203682 web optional squid3-common_3.1.20-2.2+deb7u7_all.deb
d04dbc724b8be60a7b01688199310206 1646572 web optional squid3_3.1.20-2.2+deb7u7_amd64.deb
417c2949a30588100119338a1334ef7d 7000296 debug extra squid3-dbg_3.1.20-2.2+deb7u7_amd64.deb
180d095eea1e5ef2f9f46a04efe4815d 113556 web optional squidclient_3.1.20-2.2+deb7u7_amd64.deb
4871be831e6eba18104a1fd28396c6bd 119906 web optional squid-cgi_3.1.20-2.2+deb7u7_amd64.deb
-----BEGIN PGP SIGNATURE-----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=msRP
-----END PGP SIGNATURE-----