-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sat, 18 Sep 2010 17:34:19 +1000 Source: squid3 Binary: squid3 squid3-common squidclient squid3-cgi Architecture: source all amd64 Version: 3.0.STABLE8-3+lenny4 Distribution: stable-security Urgency: high Maintainer: Luigi Gangitano <luigi@debian.org> Changed-By: Steffen Joeris <white@debian.org> Description: squid3 - A full featured Web Proxy cache (HTTP proxy) squid3-cgi - A full featured Web Proxy cache (HTTP proxy) - control CGI squid3-common - A full featured Web Proxy cache (HTTP proxy) - common files squidclient - A full featured Web Proxy cache (HTTP proxy) - control utility Closes: 596086 Changes: squid3 (3.0.STABLE8-3+lenny4) stable-security; urgency=high . * Non-maintainer upload by the security team * Fix DoS due to wrong string handling (Closes: #596086) Fixes: CVE-2010-3072 Checksums-Sha1: 0a1383e3efcfa4d3f6e14e1f6ddfebd79e4ac8ad 1193 squid3_3.0.STABLE8-3+lenny4.dsc 00660cd64338e172b14a76a1bf1b149a2dd5ab74 20699 squid3_3.0.STABLE8-3+lenny4.diff.gz 0c46529de1430e9a5bca4561e8a498d7fb976a20 289406 squid3-common_3.0.STABLE8-3+lenny4_all.deb 6de2daa9f14fcc761ccf77e9244b1bb27ce976d8 1008578 squid3_3.0.STABLE8-3+lenny4_amd64.deb 338c55b0a18db3025d220a7de18077feba68689d 89072 squidclient_3.0.STABLE8-3+lenny4_amd64.deb d105783ca03c17987b85bac50aa57656f93326d5 92634 squid3-cgi_3.0.STABLE8-3+lenny4_amd64.deb Checksums-Sha256: c8951b37df5b1d346fe39bef3a9e7ae948020028fc513b1bf7fa38a51d106408 1193 squid3_3.0.STABLE8-3+lenny4.dsc 663b6f6b44faf2e805e8f9a99a59cf02a4ad19fb79b929f8ca940c50a2347de7 20699 squid3_3.0.STABLE8-3+lenny4.diff.gz eecefebd05dccd103a0a45284da64f4a71676583b9f3da9cd3a164d9f4ed2bd1 289406 squid3-common_3.0.STABLE8-3+lenny4_all.deb 1d6d0774bc4961955a2c740b4dc0df6945cd0a9ce552400220cfaddb1b8cb389 1008578 squid3_3.0.STABLE8-3+lenny4_amd64.deb 16942b87aff2caa0b1a553d0955b8d28ef151f26d96873946e7c117ce4bffea8 89072 squidclient_3.0.STABLE8-3+lenny4_amd64.deb 8d9a3792e585a205fa5546d051f3eec94097f78ac6d46646f8aab0a762638ee4 92634 squid3-cgi_3.0.STABLE8-3+lenny4_amd64.deb Files: c301ce03c043f892a1dab392b82f5454 1193 web optional squid3_3.0.STABLE8-3+lenny4.dsc 8660e684fab99044d17ee435cd8718d9 20699 web optional squid3_3.0.STABLE8-3+lenny4.diff.gz 954e5536f90c542c1fc7300fc9a6ad0e 289406 web optional squid3-common_3.0.STABLE8-3+lenny4_all.deb 55e7a138a3cf2ac850757bdb3dc80d65 1008578 web optional squid3_3.0.STABLE8-3+lenny4_amd64.deb 0c3df278512da844a33cc3e4294f0860 89072 web optional squidclient_3.0.STABLE8-3+lenny4_amd64.deb 13a26c111e3344c2e0bc2da0291c0b26 92634 web optional squid3-cgi_3.0.STABLE8-3+lenny4_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAkyVlTcACgkQ62zWxYk/rQdjtwCffQRfq0hXgfywxEos5qxDsxks UQ4AnRGqo+K1krtGaxFdEgYpxJwb3860 =u/dw -----END PGP SIGNATURE----- Accepted: squid3-cgi_3.0.STABLE8-3+lenny4_amd64.deb to main/s/squid3/squid3-cgi_3.0.STABLE8-3+lenny4_amd64.deb squid3-common_3.0.STABLE8-3+lenny4_all.deb to main/s/squid3/squid3-common_3.0.STABLE8-3+lenny4_all.deb squid3_3.0.STABLE8-3+lenny4.diff.gz to main/s/squid3/squid3_3.0.STABLE8-3+lenny4.diff.gz squid3_3.0.STABLE8-3+lenny4.dsc to main/s/squid3/squid3_3.0.STABLE8-3+lenny4.dsc squid3_3.0.STABLE8-3+lenny4_amd64.deb to main/s/squid3/squid3_3.0.STABLE8-3+lenny4_amd64.deb squidclient_3.0.STABLE8-3+lenny4_amd64.deb to main/s/squid3/squidclient_3.0.STABLE8-3+lenny4_amd64.deb