Control: 950237 fixed 4.9 On Thu, 30 Jan 2020 11:53:30 +0000 Christian Ruppert wrote: > Package: squid > Version: 3.5.23-5+deb9u1 > > Hi, > > I just wanted to ask if there's any ETA for > https://security-tracker.debian.org/tracker/CVE-2019-18676 and > https://security-tracker.debian.org/tracker/CVE-2019-12523 for jessie > and buster. The other ones had been fixed already. Patches are > available according to the security tracker.
There is not. Whether it happens at all will depend on the LTS backporters. The patch available assumes some features of Squid-4 and C++11 compiler capabilities not supported in Squid-3.x. So the port has some work required. Amos
