** Description changed: + [Impact] + This bug tracks the following MRE updates for the Squid package: - - [Release codename] ([Release version]): Squid [Squid version] - - [...] + - Resolute (26.04): 7.2 -> 7.7 - This update includes bugfixes following the SRU policy exception defined - at https://documentation.ubuntu.com/sru/en/latest/reference/exception-Squid-Updates + This update is a best effort to only include bug fixes, following the + SRU policy exception defined at + https://documentation.ubuntu.com/project/SRU/reference/exception-Squid- + Updates/. [Upstream changes] - TODO: Add a link to the upstream changelog + The main changes seen in upstream for the 7.7 release are: + - Protect several base64 encoding buffers + - Honor directive parameters after a quoted filename reference + - FTP: Reject commands with parameters containing CR + - FTP: Do not send commands with embedded CRs or LFs - TODO: List the major changes introduced in this release + Plus all changes from version 7.3 to 7.6. + + The full upstream changelog can be checked in https://github.com/squid- + cache/squid/blob/SQUID_7_7/ChangeLog [Test Plan] + The package builds in TBD + as seen, for example, in TBD - TODO: link the build log containing all tests being executed - - TODO: All tests are passing during build time, as shown in the build log + All tests are passing during build time, as shown in the build log (builds would fail otherwise, see LP: #2004050). - TODO: add results of local autopkgtest run against all the new Squid - versions being uploaded here + Results of autopkgtest run against all the new Squid versions + being shown here: TBD [Regression Potential] Upstream tests are always executed during build-time. Failures would prevent builds from succeeding. Squid does not have many reverse dependencies. However, any upgrade is a risk to introduce breakage to other packages. Whenever a regression occurs in autopkgtests, we will investigate and provide fixes. - TODO: consider any other regression potential specific to the version - being updated and list them here if any. - [Other Info] - TODO-A: No CVEs are being addressed this time. Therefore, this should go - through the updates pockets. + No CVEs are being addressed this time. Therefore, this should go through + the updates pocket. - TODO-B: CVEs TBD are being addressed by these updates. Therefore, this - update should go through the security pocket. + This is a recurring effort. For reference, previous previous Squid SRU + backports: - TODO: list previous MREs for this package, if any. + * LP: #2013423 5.7 for Jammy + * LP: #2040470 5.9 for Jammy + * LP: #2073322 6.10 for Noble + * LP: #2085197 6.13 for Noble + * LP: #2127669 6.14 for Noble, Questing
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2153490 Title: Backport squid for stonking cycle To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/squid/+bug/2153490/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
