This bug was fixed in the package squid - 5.7-1ubuntu1 --------------- squid (5.7-1ubuntu1) lunar; urgency=medium
* Merge with Debian unstable (LP: #1993446). Remaining changes: - d/usr.sbin.squid: Add sections for squid-deb-proxy and squidguard - d/p/90-cf.data.ubuntu.patch: Add refresh patterns for deb packaging - Use snakeoil certificates: + d/control: add ssl-cert to dependencies + d/p/99-ubuntu-ssl-cert-snakeoil.patch: add a note about ssl to the default config file - d/rules, d/NEWS: drop the NIS basic auth helper (LP #1895694) - d/p/fix-max-pkt-sz-for-icmpEchoData-padding.patch: Adjust MAX_PKT{4,6}_SZ to account for icmpEchoData padding, fixing FTBFS with GCC 11 (LP #1939352). - d/p/0009-Fix-Werror-alloc-size-larger-than-on-GCC-12.patch: Fix FTBFS due to -Werror=alloc-size-larger-than on GCC 12. * Drop changes: - d/t/upstream-test-suite: Also export DEB_*_MAINT_APPEND variables here. (LP #1988217) [ Not necessary anymore. ] - SECURITY UPDATE: Exposure of Sensitive Information in Cache Manager - debian/patches/CVE-2022-41317.patch: fix typo in ACL in src/cf.data.pre. - CVE-2022-41317 [ Incorporated upstream. ] - SECURITY UPDATE: Buffer Over Read in SSPI and SMB Authentication - debian/patches/CVE-2022-41318.patch: improve checks in lib/ntlmauth/ntlmauth.cc. [ Incorporated upstream. ] -- Sergio Durigan Junior <sergio.duri...@canonical.com> Tue, 03 Jan 2023 17:39:52 -0500 ** Changed in: squid (Ubuntu) Status: In Progress => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-41317 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-41318 -- You received this bug notification because you are a member of Ubuntu Server/Client Support Team, which is subscribed to squid in Ubuntu. Matching subscriptions: Ubuntu Server/Client Support Team https://bugs.launchpad.net/bugs/1993446 Title: Merge squid from Debian unstable for l-series To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/squid/+bug/1993446/+subscriptions -- Mailing list: https://launchpad.net/~enterprise-support Post to : enterprise-support@lists.launchpad.net Unsubscribe : https://launchpad.net/~enterprise-support More help : https://help.launchpad.net/ListHelp