<div dir="ltr"><div dir="ltr"><div>
Dear Mr. Negi</div><div><br></div><div>Reference to email received from Squid forum regarding Squid-4.13 release package by Mr.
Amos Jeffries.</div><div><br></div><div>See below information. I am planning to upgrade my server by trying it soon<br></div><div><br></div><div>COPIED <br></div><div><div class="gmail_quote"><div dir="ltr" class="gmail_attr">........<br></div><div dir="ltr" class="gmail_attr">On Sun, Aug 23, 2020 at 1:35 PM Amos Jeffries <<a href="mailto:squid3@treenet.co.nz" target="_blank">squid3@treenet.co.nz</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">The Squid HTTP Proxy team is very pleased to announce the availability<br>
of the Squid-4.13 release!<br>
<br>
<br>
This release is a security release resolving several issues found in<br>
the prior Squid releases.<br>
<br>
<br>
The major changes to be aware of:<br>
<br>
* SQUID-2020:8 HTTP(S) Request Splitting<br>
(CVE-2020-15811)<br>
<br>
This problem is serious because it allows any client, including<br>
browser scripts, to bypass local security and poison the browser<br>
cache and any downstream caches with content from an arbitrary<br>
source.<br>
<br>
See the advisory for patches:<br>
<<a href="https://github.com/squid-cache/squid/security/advisories/GHSA-c7p8-xqhm-49wv" rel="noreferrer" target="_blank">https://github.com/squid-cache/squid/security/advisories/GHSA-c7p8-xqhm-49wv</a>><br>
<br>
<br>
* SQUID-2020:9 Denial of Service processing Cache Digest Response<br>
(CVE pending allocation)<br>
<br>
This problem allows a trusted peer to deliver to perform Denial<br>
of Service by consuming all available CPU cycles on the machine<br>
running Squid when handling a crafted Cache Digest response<br>
message.<br>
<br>
This attack is limited to Squid using cache_peer with cache<br>
digests feature.<br>
<br>
See the advisory for patches:<br>
<<a href="https://github.com/squid-cache/squid/security/advisories/GHSA-vvj7-xjgq-g2jg" rel="noreferrer" target="_blank">https://github.com/squid-cache/squid/security/advisories/GHSA-vvj7-xjgq-g2jg</a>><br>
<br>
<br>
* SQUID-2020:10 HTTP(S) Request Smuggling<br>
(CVE-2020-15810)<br>
<br>
This problem is serious because it allows any client, including<br>
browser scripts, to bypass local security and poison the proxy<br>
cache and any downstream caches with content from an arbitrary<br>
source.<br>
<br>
<br>
See the advisory for patches:<br>
<<a href="https://github.com/squid-cache/squid/security/advisories/GHSA-3365-q9qx-f98m" rel="noreferrer" target="_blank">https://github.com/squid-cache/squid/security/advisories/GHSA-3365-q9qx-f98m</a>><br>
<br>
<br>
* Bug 5051: Some collapsed revalidation responses never expire<br>
<br>
This bug appears as a 4xx or 5xx status response becoming the only<br>
response delivered by Squid to a URL when Collapsed Forwarding<br>
feature is used.<br>
<br>
It primarily affects Squid which are caching the 4xx/5xx status<br>
object since Bug 5030 fix in Squid-4.11. But may have been<br>
occurring for short times on any proxy with Collapsed Forwarding.<br>
<br>
<br>
<br>
* SSL-Bump: Support parsing GREASEd (and future) TLS handshakes<br>
<br>
Chrome Browser intentionally sends random garbage values in the<br>
TLS handshake to force TLS implementations to cope with future TLS<br>
extensions cleanly. The changes in Squid-4.12 to disable TLS/1.3<br>
caused our parser to be extra strict and reject this TLS garbage.<br>
<br>
This release adds explicit support for Chrome, or any other TLS<br>
agent performing these "GREASE" behaviours.<br>
<br>
<br>
* Honor on_unsupported_protocol for intercepted https_port<br>
<br>
This behaviour was one of the intended use-cases for unsupported<br>
protocol handling, but somehow was not enabled earlier.<br>
<br>
Squid should now be able to perform the on_unsupported_protocol<br>
selected action for any traffic handled by SSL-Bump.<br>
<br>
<br>
All users of Squid are urged to upgrade as soon as possible.<br>
<br>
<br>
See the ChangeLog for the full list of changes in this and earlier<br>
releases.<br>
<br>
Please refer to the release notes at<br>
<a href="http://www.squid-cache.org/Versions/v4/RELEASENOTES.html" rel="noreferrer" target="_blank">http://www.squid-cache.org/Versions/v4/RELEASENOTES.html</a><br>
when you are ready to make the switch to Squid-4<br>
<br>
This new release can be downloaded from our HTTP or FTP servers<br>
<br>
<a href="http://www.squid-cache.org/Versions/v4/" rel="noreferrer" target="_blank">http://www.squid-cache.org/Versions/v4/</a><br>
<a href="ftp://ftp.squid-cache.org/pub/squid/" rel="noreferrer" target="_blank">ftp://ftp.squid-cache.org/pub/squid/</a><br>
<a href="ftp://ftp.squid-cache.org/pub/archive/4/" rel="noreferrer" target="_blank">ftp://ftp.squid-cache.org/pub/archive/4/</a><br>
<br>
or the mirrors. For a list of mirror sites see<br>
<br>
<a href="http://www.squid-cache.org/Download/http-mirrors.html" rel="noreferrer" target="_blank">http://www.squid-cache.org/Download/http-mirrors.html</a><br>
<a href="http://www.squid-cache.org/Download/mirrors.html" rel="noreferrer" target="_blank">http://www.squid-cache.org/Download/mirrors.html</a><br>
<br>
If you encounter any issues with this release please file a bug report.<br>
<a href="http://bugs.squid-cache.org/" rel="noreferrer" target="_blank">http://bugs.squid-cache.org/</a><br>
<br>
<br>
Amos Jeffries<br>
_______________________________________________<br>
squid-announce mailing list<br>
<a href="mailto:squid-announce@lists.squid-cache.org" target="_blank">squid-announce@lists.squid-cache.org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-announce" rel="noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-announce</a><br>
</blockquote></div><br clear="all">
</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Aug 24, 2020 at 9:07 AM <<a href="mailto:rahul.negi@orange.com">rahul.negi@orange.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_7894144082286618261WordSection1">
<p class="gmail-m_7894144082286618261MsoPlainText">Hi Team,<u></u><u></u></p>
<p class="gmail-m_7894144082286618261MsoPlainText"><u></u><u></u></p>
<p class="gmail-m_7894144082286618261MsoPlainText">Can anyone please share squid latest stable version 4.13 RPM packaged files for CentOS7 distribution and x86_64 architecture.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal" style="margin-right:0in;margin-bottom:2pt;margin-left:0in">
<b><span style="font-size:9pt;font-family:"Arial","sans-serif";color:black">Thanks and Regards,<u></u><u></u></span></b></p>
<p class="MsoNormal" style="margin-right:0in;margin-bottom:2pt;margin-left:0in">
<b><span style="font-size:9pt;font-family:"Arial","sans-serif";color:black">Rahul Negi<u></u><u></u></span></b></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<pre>_________________________________________________________________________________________________________________________
Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.
</pre></div>
_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">With Regards,<br>
<p><br><b style="font-size:12.8px"><span style="color:rgb(23,54,93);background-image:initial;background-position:initial;background-repeat:initial">Arsalan Hussain</span></b><br><b style="font-size:12.8px"><span style="color:rgb(192,80,77)">Assistant Director, Networks & Information System</span></b></p><p><span><b style="font-size:12.8px"><span style="font-size:14pt;font-family:"Baskerville Old Face",serif;color:rgb(79,129,189)">PRESTON UNIVERSITY</span></b><br><span style="color:rgb(31,73,125);font-size:12.8px"> </span><span style="color:rgb(31,73,125);font-size:12.8px"></span></span><br><span><span style="color:rgb(31,73,125);font-size:12.8px"></span></span></p><p><span><span style="color:rgb(31,73,125);font-size:12.8px"></span></span></p><p><span><span style="color:rgb(31,73,125);font-size:12.8px"></span></span><b><font size="2">Complaining is finding faults, wisdom is finding solutions<br></font></b></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>