From abcd5831a068e43c25eb42396860cf26840baecc8c8cbe663e1b91d34cbe7ccb Mon Sep 17 00:00:00 2001 From: Adam Majer Date: Tue, 18 May 2021 08:58:40 +0000 Subject: [PATCH] - Bug 5106: Broken cache manager URL parsing (bsc#1185918, CVE-2021-28652) (bsc#1185921, CVE-2021-28651) (bsc#1185919, CVE-2021-28662) - Handle more Range requests (bsc#1185916, CVE-2021-31806) - Handle more partial responses (bsc#1185923) OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=234 --- squid.changes | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/squid.changes b/squid.changes index 332e896..e41fa2e 100644 --- a/squid.changes +++ b/squid.changes @@ -3,15 +3,17 @@ Tue May 11 21:54:04 UTC 2021 - Dirk Müller - update to 4.15: - Bug 5112: Excessively loud chunked reply parsing error reporting - - Bug 5106: Broken cache manager URL parsing + - Bug 5106: Broken cache manager URL parsing (bsc#1185918, CVE-2021-28652) - Bug 5104: Memory leak in RFC 2169 response parsing + (bsc#1185921, CVE-2021-28651) - Bug 3556: "FD ... is not an open socket" for accept() problems - Profiling: CPU timing implemented for MAC non-x86 - Fix HttpHeaderStats definition to include hoErrorDetail - Fix Squid-to-client write_timeout triggers client_lifetime timeout - Limit HeaderLookupTable_t::lookup() to BadHdr and specific IDs - - Handle more Range requests - - Handle more partial responses + (bsc#1185919, CVE-2021-28662) + - Handle more Range requests (bsc#1185916, CVE-2021-31806) + - Handle more partial responses (bsc#1185923) - Stop processing a response if the Store entry is gone - ... and some portability fixes - ... and some documentation updates