Thread (3 messages) 3 messages, 2 authors, 2020-03-14

[Buildroot] [PATCH 1/1] package/squid: security bump to version 4.10

flat view

From: Peter Korsgaard <peter@korsgaard.com>
Date: 2020-02-29 07:38:55

quoted
quoted
quoted
quoted
"Fabrice" == Fabrice Fontaine [off-list ref] writes:
 > Drop patch (already in version)
 > Update indentation of hash file (two spaces)

 > Fix the following issues:
 >  - CVE-2020-8517: Buffer Overflow issue in ext_lm_group_acl helper.
 >  - CVE-2019-12528: Information Disclosure issue in FTP Gateway.
 >  - CVE-2020-8449, CVE-2020-8450: Improper Input Validation issues in
 >    HTTP Request processing.
 >  - CVE-2019-18679: Information Disclosure issue in HTTP Digest
 >    Authentication.
 >  - CVE-2019-18678: HTTP Request Splitting issue in HTTP message
 >    processing.
 >  - CVE-2019-18677: Cross-Site Request Forgery issue in HTTP Request
 >    processing.
 >  - CVE-2019-12523, CVE-2019-18676: Multiple issues in URI processing.
 >  - CVE-2019-12526: Heap Overflow issue in URN processing.

 > Signed-off-by: Fabrice Fontaine [off-list ref]

Committed, thanks.

-- 
Bye, Peter Korsgaard
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help