Skip to contentSkip to conversation

squid: security bump to version 3.5.15

PATCH New Gustavo Zacarias 4 participants 6 messages Feb 24, 2016 – Feb 29, 2016

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 squid: security bump to version 3.5.15

Fixes:
SQUID-2016:2 - Multiple Denial of Service issues in HTTP Response processing.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/squid/squid.hash | 6 +++---
 package/squid/squid.mk   | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)
package/squid/squid.hash +3 -3
index f86c09a..106bde6 100644
@@ -1,3 +1,3 @@
-# From http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.14.tar.bz2.asc
-md5	d589a2dd8ea8867170cef582e7334442	squid-3.5.14.tar.bz2
-sha1	f6a0262b09f7f463822cbdb50bac8f5dd1213d27	squid-3.5.14.tar.bz2
+# From http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.15.tar.bz2.asc
+md5	59d6732a4ebd3f63e2164d9847dc37c0	squid-3.5.15.tar.bz2
+sha1	72279380ea94aa731f5cf82f3fb50f9250f1692a	squid-3.5.15.tar.bz2
package/squid/squid.mk +1 -1
index 2b7a9a2..b4341ba 100644
@@ -5,7 +5,7 @@
 ################################################################################
 
 SQUID_VERSION_MAJOR = 3.5
-SQUID_VERSION = $(SQUID_VERSION_MAJOR).14
+SQUID_VERSION = $(SQUID_VERSION_MAJOR).15
 SQUID_SOURCE = squid-$(SQUID_VERSION).tar.bz2
 SQUID_SITE = http://www.squid-cache.org/Versions/v3/$(SQUID_VERSION_MAJOR)
 SQUID_LICENSE = GPLv2+
Signature · 1 line
2.4.10
#1 lore raw

PATCH 1/1 squid: security bump to version 3.5.15

The announcement at
http://www.squid-cache.org/Advisories/SQUID-2016_2.txt disappeared and
http://www.squid-cache.org/Advisories/ no longer lists it (Google's cache does) so I guess another release is coming pretty soon.

Quoted 41 lines · Gustavo Zacarias

Fixes:
SQUID-2016:2 - Multiple Denial of Service issues in HTTP Response processing.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/squid/squid.hash | 6 +++---
 package/squid/squid.mk   | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)
package/squid/squid.hash +3 -3
index f86c09a..106bde6 100644
@@ -1,3 +1,3 @@
-# From http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.14.tar.bz2.asc
-md5    d589a2dd8ea8867170cef582e7334442        squid-3.5.14.tar.bz2
-sha1   f6a0262b09f7f463822cbdb50bac8f5dd1213d27        squid-3.5.14.tar.bz2
+# From http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.15.tar.bz2.asc
+md5    59d6732a4ebd3f63e2164d9847dc37c0        squid-3.5.15.tar.bz2
+sha1   72279380ea94aa731f5cf82f3fb50f9250f1692a        squid-3.5.15.tar.bz2
package/squid/squid.mk +1 -2
index 2b7a9a2..b4341ba 100644
@@ -5,7 +5,7 @@
 ################################################################################
 
 SQUID_VERSION_MAJOR = 3.5
-SQUID_VERSION = $(SQUID_VERSION_MAJOR).14
+SQUID_VERSION = $(SQUID_VERSION_MAJOR).15
 SQUID_SOURCE = squid-$(SQUID_VERSION).tar.bz2
 SQUID_SITE = http://www.squid-cache.org/Versions/v3/$(SQUID_VERSION_MAJOR)
 SQUID_LICENSE = GPLv2+
--

2.4.10

_______________________________________________
buildroot mailing list
buildroot at busybox.net
http://lists.busybox.net/mailman/listinfo/buildroot

#3 lore raw

PATCH 1/1 squid: security bump to version 3.5.15

Quoted 10 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Gustavo" == Gustavo Zacarias <[email protected]> writes:

Quoted 4 lines · Jeroen Roovers

The announcement at
http://www.squid-cache.org/Advisories/SQUID-2016_2.txt disappeared and
http://www.squid-cache.org/Advisories/ no longer lists it (Google's cache does) so I guess another release is coming pretty soon.

Guess we'll have to wait for a follow-on on
http://www.openwall.com/lists/oss-security/2016/02/24/12

Ok, I'll wait with applying this then.

Signature · 1 line
Bye, Peter Korsgaard
#4 lore raw

PATCH 1/1 squid: security bump to version 3.5.15

They seem to have settled for 3.5.15 now and the advisory no longer keeps disappearing.

Bump? :)

Quoted 15 lines · Peter Korsgaard
Quoted 10 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Gustavo" == Gustavo Zacarias <[email protected]> writes:

Quoted 4 lines · Jeroen Roovers

The announcement at
http://www.squid-cache.org/Advisories/SQUID-2016_2.txt disappeared and
http://www.squid-cache.org/Advisories/ no longer lists it (Google's cache does) so I guess another release is coming pretty soon.

Guess we'll have to wait for a follow-on on
http://www.openwall.com/lists/oss-security/2016/02/24/12

Ok, I'll wait with applying this then.

--
Bye, Peter Korsgaard

Applied
#5 lore raw

PATCH 1/1 squid: security bump to version 3.5.15

In reply to Gustavo Zacarias

Gustavo,

Quoted 9 lines · Gustavo Zacarias

Fixes:
SQUID-2016:2 - Multiple Denial of Service issues in HTTP Response processing.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/squid/squid.hash | 6 +++---
 package/squid/squid.mk   | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

Applied to master, thanks. The 3.5.15 is now visible on squid website, and indicated as fixing several CVEs.

Thanks!

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com