Package "squid"
| Name: |
squid
|
Description: |
Full featured Web Proxy cache (HTTP proxy GnuTLS flavour)
|
| Latest version: |
6.13-0ubuntu0.24.04.2 |
| Release: |
noble (24.04) |
| Level: |
updates |
| Repository: |
main |
| Homepage: |
http://www.squid-cache.org |
Links
Download "squid"
Other versions of "squid" in Noble
Packages in group
Deleted packages are displayed in grey.
Changelog
|
squid (6.13-0ubuntu0.24.04.2) noble-security; urgency=medium
* SECURITY UPDATE: ASN.1 encoding mishandling
- debian/patches/CVE-2025-59362.patch: fix ASN.1 encoding of long SNMP
OIDs in lib/snmplib/asn1.c.
- CVE-2025-59362
-- Marc Deslauriers <email address hidden> Fri, 03 Oct 2025 09:35:08 -0400
|
| Source diff to previous version |
| CVE-2025-59362 |
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c. |
|
|
squid (6.13-0ubuntu0.24.04.1) noble; urgency=medium
* New upstream version 6.13 (LP: #2085197)
- Fix getting stuck when RESPMOD is slower than read(2)
- Fix large uploads fill request buffer and die
- Fix GCC v14 build [-Wmaybe-uninitialized]
- Fix GCC v14 [-Wanalyzer-null-dereference] warnings in Kerberos
- Fix nil request dereference in ACLExtUser and SourceDomainCheck ACLs
- Fix systemd startup sequence to require active Local Filesystem
- Fix validation of Digest auth header parameters
- Improve robustness of DNS code on reconfigure
- Prevent slow memory leak in TCP DNS queries
- Improve errors emitted when invalid ACLs are parsed
- ext_time_quota_acl: remove -l option
-- Bryce Harrington <email address hidden> Tue, 29 Apr 2025 16:08:59 -0700
|
| Source diff to previous version |
| 2085197 |
Backport MRE of squid 6.13 to noble |
|
|
squid (6.10-0ubuntu0.24.04.1) noble; urgency=medium
* New upstream version 6.10 (LP: #2073322):
- Fix issue where successful tunnels were being logged as TCP_TUNNEL/500.
- Fix a logic error when starting squid with the -a option, which could
lead to a crash.
- Fix marking of problematic cached IP addresses.
- For a comprehensive list of changes, please see
https://www.squid-cache.org/Versions/v6/squid-6.10-RELEASENOTES.html.
* d/u/signing-key.asc: update keyring file. (Closes: #1084734)
* Dropped changes:
- SECURITY UPDATE: DoS via chunked decoder uncontrolled recursion bug
+ debian/patches/CVE-2024-25111.patch: fix infinite recursion in
src/http.cc, src/http.h.
+ CVE-2024-25111
[ Fixed in 6.8 ]
- SECURITY UPDATE: DoS in ESI processing using multi-byte characters
+ debian/patches/CVE-2024-37894.patch: fix variable datatype to handle
variables names outside standard ASCII characters
+ CVE-2024-37894
[ Fixed in 6.10 ]
-- Athos Ribeiro <email address hidden> Mon, 09 Sep 2024 10:32:37 -0300
|
| Source diff to previous version |
| 2073322 |
Upstream microrelease 6.10 |
| 1084734 |
squid: Pristine tarball is signed with a different key not in d/upstream/signing-key.asc |
| CVE-2024-25111 |
Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP C |
| CVE-2024-37894 |
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid i |
|
|
squid (6.6-1ubuntu5.1) noble-security; urgency=medium
* SECURITY UPDATE: DoS in ESI processing using multi-byte characters
- debian/patches/CVE-2024-37894.patch: fix variable datatype to handle
variables names outside standard ASCII characters
- CVE-2024-37894
-- Vyom Yadav <email address hidden> Sun, 07 Jul 2024 17:30:16 +0530
|
| CVE-2024-37894 |
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid i |
|
About
-
Send Feedback to @ubuntu_updates
