FEDORA-2019-75a6f3b711 — security update for squid

obsolete

squid-4.8-1.fc29

FEDORA-2019-75a6f3b711 created by luhliarik 3 years ago for Fedora 29

Security fix for CVE-2019-12525 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 .

update to version 4.8

Security fix for CVE-2019-13345.

This update has been submitted for testing by luhliarik.

3 years ago

This update test gating status has been changed to 'waiting'.

3 years ago

This update has obsoleted squid-4.4-2.fc29, and has inherited its bugs and notes.

3 years ago

This update test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

filiperosset provided feedback 3 years ago

karma

This update can be pushed to stable now if the maintainer wishes

3 years ago

marcosfrm provided feedback 3 years ago

karma

This update has been obsoleted by squid-4.8-2.fc29.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

squid-4.8-1.fc29

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

3 years ago

in testing

3 years ago

BZ#1727745 CVE-2019-13345 squid: XSS via user_name or auth parameter in cachemgr.cgi [fedora-all]

BZ#1730524 CVE-2019-12854 squid: denial of service in cachemgr.cgi [fedora-all]

BZ#1730529 CVE-2019-12529 squid: information disclosure in Proxy-Authorization header [fedora-all]

BZ#1730534 CVE-2019-12527 squid: heap-based buffer overflow in HttpHeader::getAuth [fedora-all]

BZ#1730536 CVE-2019-12525 squid: parsing of header Proxy-Authentication leads to memory corruption [fedora-all]

squid-4.8-1.fc29

Automated Test Results

ignored