[squid-users] [squid-announce] [ADVISORY] SQUID-2020:7 Cache Poisoning Issue in HTTP Request processing

[TarotApprentice]

Debian bug 964283 raised. If you are talking to the Debian security team you might want to discuss pushing it into buster with one of their point releases.

MarkJ

> On 28 Jun 2020, at 12:57 am, Amos Jeffries <squid3 at treenet.co.nz> wrote:
> 
> On 28/06/20 2:27 am, TarotApprentice wrote:
>> Any plans to get this into Debian, or if they’ll apply the patch to 4.11?
>> 
> 
> v4.12 package is already being worked on. I'm not sure of ETA though,
> its already taken longer than usual.
> 
> Can't speak for the security team about the stable Debian packages.
> 
> 
> Amos
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users