Re: [squid-users] [squid-announce] [ADVISORY] SQUID-2019:4 Multiple Issues in HTTP Request processing

2020-04-19 Thread Dmitry Melekhov
19.04.2020 13:53, Antony Stone пишет: What's misleading? Sorry, I read it wrong. Thank you! ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] [squid-announce] [ADVISORY] SQUID-2019:4 Multiple Issues in HTTP Request processing

2020-04-19 Thread Antony Stone
On Sunday 19 April 2020 at 11:47:41, Dmitry Melekhov wrote: > 19.04.2020 12:37, Amos Jeffries пишет: > > On 19/04/20 8:22 pm, Dmitry Melekhov wrote: > > > > > 4.10 does not contain fix :-) > > > > Which fix are you talking about? > > > > The bug this advisory is talking about definitely is

Re: [squid-users] [squid-announce] [ADVISORY] SQUID-2019:4 Multiple Issues in HTTP Request processing

2020-04-19 Thread Dmitry Melekhov
19.04.2020 12:37, Amos Jeffries пишет: On 19/04/20 8:22 pm, Dmitry Melekhov wrote: 19.04.2020 12:18, TarotApprentice пишет: I am not sure if you have any contact with the Debian maintainers. I raised a bug with Debian in March asking for 4.10 to get promoted to buster-backports on the grounds

Re: [squid-users] [squid-announce] [ADVISORY] SQUID-2019:4 Multiple Issues in HTTP Request processing

2020-04-19 Thread Amos Jeffries
On 19/04/20 8:22 pm, Dmitry Melekhov wrote: > > 19.04.2020 12:18, TarotApprentice пишет: >> I am not sure if you have any contact with the Debian maintainers. I >> raised a bug with Debian in March asking for 4.10 to get promoted to >> buster-backports on the grounds of security fixes. If we’re

Re: [squid-users] [squid-announce] [ADVISORY] SQUID-2019:4 Multiple Issues in HTTP Request processing

2020-04-19 Thread TarotApprentice
I am not sure if you have any contact with the Debian maintainers. I raised a bug with Debian in March asking for 4.10 to get promoted to buster-backports on the grounds of security fixes. If we’re on the stable release (buster) we are stuck with 4.6 until the next stable release (up to 2

Re: [squid-users] [squid-announce] [ADVISORY] SQUID-2019:4 Multiple Issues in HTTP Request processing

2020-04-19 Thread Amos Jeffries
On 19/04/20 8:18 pm, TarotApprentice wrote: > I am not sure if you have any contact with the Debian maintainers. I > raised a bug with Debian in March asking for 4.10 to get promoted to > buster-backports on the grounds of security fixes. If we’re on the > stable release (buster) we are stuck with

Re: [squid-users] [squid-announce] [ADVISORY] SQUID-2019:4 Multiple Issues in HTTP Request processing

2020-04-19 Thread Dmitry Melekhov
19.04.2020 12:18, TarotApprentice пишет: I am not sure if you have any contact with the Debian maintainers. I raised a bug with Debian in March asking for 4.10 to get promoted to buster-backports on the grounds of security fixes. If we’re on the stable release (buster) we are stuck with 4.6

Re: [squid-users] [squid-announce] [ADVISORY] SQUID-2019:4 Multiple Issues in HTTP Request processing

2020-04-18 Thread Amos Jeffries
On 19/04/20 6:52 am, Marcus Kool wrote: > Amos, > The latest version of Squid is 4.10.  Do you mean "fixed in 4.10" > instead of "fixed in 4.8" ? > No, these CVE were fixed in 4.8. The advisory was embargoed for another issue, which is has taken too long and now going to be fixed in a later

Re: [squid-users] [squid-announce] [ADVISORY] SQUID-2019:4 Multiple Issues in HTTP Request processing

2020-04-18 Thread Marcus Kool
Amos, The latest version of Squid is 4.10.  Do you mean "fixed in 4.10" instead of "fixed in 4.8" ? Thanks, Marcus On 18/04/2020 14:10, Amos Jeffries wrote: __ Squid Proxy Cache Security Update Advisory SQUID-2019:4

[squid-users] [squid-announce] [ADVISORY] SQUID-2019:4 Multiple Issues in HTTP Request processing

2020-04-18 Thread Amos Jeffries
__ Squid Proxy Cache Security Update Advisory SQUID-2019:4 __ Advisory ID:SQUID-2019:4 Date: April 18, 2020 Summary:Multiple