Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 4c9f48ae by Salvatore Bonaccorso at 2019-07-18T22:39:20Z Add fixed version for squid upload to unstable Note that the changelog entry in https://tracker.debian.org/news/1046100/accepted-squid-48-1-source-amd64-all-into-unstable/ contains a typo for the first CVE id for SQUID-2019:1. - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -2282,8 +2282,9 @@ CVE-2019-13346 (In MyT 1.5.1, the User[username] parameter has XSS. ...) NOT-FOR-US: MyT CVE-2019-13345 (The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_ ...) {DLA-1847-1} - - squid <unfixed> (bug #931478) + - squid 4.8-1 (bug #931478) - squid3 <removed> + NOTE: http://www.squid-cache.org/Advisories/SQUID-2019_6.txt NOTE: https://bugs.squid-cache.org/show_bug.cgi?id=4957 NOTE: https://github.com/squid-cache/squid/pull/429 CVE-2019-13344 (An authentication bypass vulnerability in the CRUDLab WP Like Button p ...) @@ -3591,7 +3592,7 @@ CVE-2019-12855 (In words.protocols.jabber.xmlstream in Twisted through 19.2.1, X NOTE: https://twistedmatrix.com/trac/ticket/9561 CVE-2019-12854 [denial of service in cachemgr.cgi] RESERVED - - squid <unfixed> + - squid 4.8-1 - squid3 <not-affected> (Vulnerable code not present; Vulnerable code only in 4.x series) NOTE: http://www.squid-cache.org/Advisories/SQUID-2019_1.txt NOTE: http://www.squid-cache.org/Versions/v4/changesets/squid-4-2981a957716c61ff7e21eee1d7d6eb5a237e466d.patch @@ -4367,21 +4368,24 @@ CVE-2019-12531 CVE-2019-12530 (Incorrect access control was discovered in the stdonato Dashboard plug ...) NOT-FOR-US: Dashboard plugin for GLPI CVE-2019-12529 (An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through ...) - - squid <unfixed> + - squid 4.8-1 - squid3 <removed> + NOTE: http://www.squid-cache.org/Advisories/SQUID-2019_2.txt NOTE: http://www.squid-cache.org/Versions/v4/changesets/squid-4-dd46b5417809647f561d8a5e0e74c3aacd235258.patch CVE-2019-12528 RESERVED CVE-2019-12527 (An issue was discovered in Squid 4.0.23 through 4.7. When checking Bas ...) - - squid <unfixed> + - squid 4.8-1 - squid3 <removed> + NOTE: http://www.squid-cache.org/Advisories/SQUID-2019_5.txt NOTE: http://www.squid-cache.org/Versions/v4/changesets/squid-4-7f73e9c5d17664b882ed32590e6af310c247f320.patch TODO: check why this owuld not affect 3.x versions of upstream Squid. CVE-2019-12526 RESERVED CVE-2019-12525 (An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through ...) - - squid <unfixed> + - squid 4.8-1 - squid3 <removed> + NOTE: http://www.squid-cache.org/Advisories/SQUID-2019_3.txt NOTE: http://www.squid-cache.org/Versions/v4/changesets/squid-4-7f73e9c5d17664b882ed32590e6af310c247f320.patch CVE-2019-12524 RESERVED View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4c9f48ae6e1ccb4bd400857e1ce9ef64550dc68c -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4c9f48ae6e1ccb4bd400857e1ce9ef64550dc68c You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
