-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 11 Feb 2018 22:00:18 +0100 Source: squid3 Binary: squid3 squid squid-dbg squid-common squidclient squid-cgi squid-purge Architecture: source Version: 3.5.23-5+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Luigi Gangitano <luigi@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 888719 888720 Description: squid - Full featured Web Proxy cache (HTTP proxy) squid-cgi - Full featured Web Proxy cache (HTTP proxy) - control CGI squid-common - Full featured Web Proxy cache (HTTP proxy) - common files squid-dbg - Full featured Web Proxy cache (HTTP proxy) - Debug symbols squid-purge - Full featured Web Proxy cache (HTTP proxy) - control utility squid3 - Transitional package squidclient - Full featured Web Proxy cache (HTTP proxy) - control utility Changes: squid3 (3.5.23-5+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * ESI: make sure endofName never exceeds tagEnd (CVE-2018-1000024) (Closes: #888719) * Fix indirect IP logging for transactions without a client connection (CVE-2018-1000027) (Closes: #888720) Checksums-Sha1: 82e86a7b5eae757a25f61dbf85e9293dde81f5b2 2737 squid3_3.5.23-5+deb9u1.dsc 6b0b2091896e7874024e5f1e28eeccb0acd7e962 4730792 squid3_3.5.23.orig.tar.gz 181ecf53e77ce323941feab04c24d328ddcf7988 27200 squid3_3.5.23-5+deb9u1.debian.tar.xz Checksums-Sha256: b7e2dc4ff27cec592675ef9a6846ce989e51c8207d3e540a03e2292847842514 2737 squid3_3.5.23-5+deb9u1.dsc f81eeee0fb046ad636566b51fe4f72b8bc66d454d7082ef38e273c3f4b09f6db 4730792 squid3_3.5.23.orig.tar.gz b35cf4c628cd7a163a9c2e12076d2561b1e558265d97e777423e0a8b3b6dd37b 27200 squid3_3.5.23-5+deb9u1.debian.tar.xz Files: 93fb63e96a457f2709324ddf327bfec3 2737 web optional squid3_3.5.23-5+deb9u1.dsc 49d790ddee8c611ee2992e66eb8e9ae9 4730792 web optional squid3_3.5.23.orig.tar.gz fe6c5c9548c25fe08bf274b6a895a942 27200 web optional squid3_3.5.23-5+deb9u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlqG5OtfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EJKsQAIqhv5RrvHj6L5ozLSsNnRNebe1cphch cIF+Vz6xsGqBRu04P7eMX/PzRAjJiPSgqDzQNC9msXJVjtLS9UNp5jH7huLadU9V QPe8SxZ0xJxvQ5rHVvMJMw9ZC8M6cIQ41wMgPA1BPnO2LD68ZgC+PbZZhtJb2R5W 1nK0ILqXcWAN/5h07Vh3ZJR1paXDdlzKOBIWf8GAwI7tTpyOXMxpuXu0dvjGbqJj a5lGXYDXuo5hw5vsd2d6tkjt/OCASxGqVzBnTqhIfaPeIarlQiZFoZxkJTLpdxA+ JUYeh6HmA1HtfRhheWn9hnCwM7/+mt3HC/wa9xKYIYx92zgetUF4bS7BkNiYWmKh 4GOEtsxr4ibLQMI/Famm4K+hjZPkrsv/qrv2bDeFktvFqgwiDdd/XKYeIk46AjeB OVgr6i4+FFmCYhiklSz42XTfhmk1bDMTwbR6pz5fuj6hCp7WG1o/SbkRKtXwOxpz coZ1ms5OvSlqzWdrTCWc+vLo6qWLQ6pv5TqFClej3P5flgNUqbj6xe5RAMigyFAY TP50fedSAo1PMLty2VunBmzN5GczkGtdAF103jMcvQl0s3MWm0S/e0kooRd3e2gw lgodU6BDlSYnwXax4bxlmz1/S1AF/mGEF/A8hqLwuNe8xxKTUb/BX6+vJbjbPeyz rsjCA/BUV+HL =wt1O -----END PGP SIGNATURE-----