[squid-users] [squid-announce] [ADVISORY] SQUID-2019:4 Multiple Issues in HTTP Request processing

Amos Jeffries squid3 at treenet.co.nz
Sun Apr 19 08:37:01 UTC 2020

On 19/04/20 8:22 pm, Dmitry Melekhov wrote:
> 19.04.2020 12:18, TarotApprentice пишет:
>> I am not sure if you have any contact with the Debian maintainers. I
>> raised a bug with Debian in March asking for 4.10 to get promoted to
>> buster-backports on the grounds of security fixes. If we’re on the
>> stable release (buster) we are stuck with 4.6 until the next stable
>> release (up to 2 years), use the testing release which has other
>> changes or we have to compile our own.
>> Link to bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=954488
> 4.10 does not contain fix :-)

Which fix are you talking about?

 The bug TarotApprentice referenced is a publishing issue within Debian.
Requesting an event which has not happened yet.

 The bug this advisory is talking about definitely is fixed in Squid
4.10 code. The patch was added way back in 4.8 release.


More information about the squid-users mailing list