UbuntuUpdates.org

Bugs fixes in "squid3"

Origin Bug number Title Date fixed
CVE CVE-2019-13345 The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter. 2019-07-15
CVE CVE-2018-19132 Squid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet. 2019-07-15
CVE CVE-2019-13345 The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter. 2019-07-15
CVE CVE-2018-19132 Squid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet. 2019-07-15
CVE CVE-2019-13345 The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter. 2019-07-15
CVE CVE-2018-19132 Squid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet. 2019-07-15
CVE CVE-2019-13345 The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter. 2019-07-15
CVE CVE-2018-19132 Squid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet. 2019-07-15
Launchpad 1738412 Init script fails test on reload/restart because of faulty regex 2018-11-13
Launchpad 1738412 Init script fails test on reload/restart because of faulty regex 2018-11-13
Launchpad 1738412 Init script fails test on reload/restart because of faulty regex 2018-10-31
Launchpad 1738412 Init script fails test on reload/restart because of faulty regex 2018-10-31
Launchpad 1792728 [apparmor] allow reading squid binary 2018-10-10
Launchpad 1792728 [apparmor] allow reading squid binary 2018-10-10
Launchpad 1792728 [apparmor] allow reading squid binary 2018-10-03
Launchpad 1792728 [apparmor] allow reading squid binary 2018-10-03
CVE CVE-2016-3948 Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a cra 2018-02-06
CVE CVE-2016-2571 http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remo 2018-02-06
CVE CVE-2016-2570 The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows rem 2018-02-06
CVE CVE-2016-2569 Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of servic 2018-02-06



About   -   Send Feedback to @ubuntu_updates