openSUSE Build Service

buildservice-autocommit accepted request 825214 from

Martin Pluskal (pluskalm) over 4 years ago (revision 220)

baserev update by copy to link target

Martin Pluskal (pluskalm) accepted request 822709 from

Adam Majer (adamm) over 4 years ago (revision 219)

- Change pinger and basic_pam_auth helper to use standard permissions.
  pinger uses cap_net_raw=ep instead (bsc#1171569)
- Move squid helpers under /usr/lib{,64}/squid for Tumbleweed and SLE16
  Please adjust your config paths accordingly

buildservice-autocommit accepted request 817633 from

Adam Majer (adamm) over 4 years ago (revision 218)

baserev update by copy to link target

Adam Majer (adamm) committed over 4 years ago (revision 217)

Add missing CVE number

Adam Majer (adamm) committed over 4 years ago (revision 216)

  * HTTP: validate Content-Length value prefix (CVE-CVE-2020-15049, bsc#1173455)

buildservice-autocommit accepted request 816822 from

Adam Majer (adamm) over 4 years ago (revision 215)

baserev update by copy to link target

Adam Majer (adamm) committed over 4 years ago (revision 214)

  * Fixes a potential Denial of Service when processing TLS certificates
    during HTTPS or SSL-Bump connections (CVE-2020-14059, bsc#1173304)

buildservice-autocommit accepted request 816284 from

Martin Pluskal (pluskalm) over 4 years ago (revision 213)

baserev update by copy to link target

Martin Pluskal (pluskalm) accepted request 816219 from

Andreas Stieger (AndreasStieger) over 4 years ago (revision 212)

squid 4.12

buildservice-autocommit accepted request 796564 from

Adam Majer (adamm) over 4 years ago (revision 211)

baserev update by copy to link target

Adam Majer (adamm) committed over 4 years ago (revision 210)

- Update to squid 4.11:
  * Fix incorrect buffer handling that can result in cache
    poisoning, remote execution, and denial of service attacks when
    processing ESI responses
    (CVE-2019-12519, CVE-2019-12521, bsc#1169659)
  * Fixes possible information disclosure when translating
    FTP server listings into HTTP responses.
    (CVE-2019-12528, bsc#1162689)
  * Fixes possible denial of service caused by incorrect buffer
    management ext_lm_group_acl when processing NTLM Authentication
    credentials. (CVE-2020-8517, bsc#1162691)
  * Fixes a potential remote execution vulnerability when using
    HTTP Digest Authentication (CVE-2020-11945, bsc#1170313)
  * Fixes problem when reconfigure killed Coordinator in
    SMP+ufs configurations (#556)

buildservice-autocommit accepted request 795800 from

Adam Majer (adamm) over 4 years ago (revision 209)

baserev update by copy to link target

Adam Majer (adamm) accepted request 795761 from

Thorsten Kukuk (kukuk) over 4 years ago (revision 208)

- Make logrotate recommended, it's not strictly required and 
  doesn't make any sense in containers

buildservice-autocommit accepted request 792007 from

Factory Maintainer (factory-maintainer) over 4 years ago (revision 207)

baserev update by copy to link target

Adam Majer (adamm) committed over 4 years ago (revision 206)

Add missing CVE number to upstream release

buildservice-autocommit accepted request 776229 from

Martin Pluskal (pluskalm) almost 5 years ago (revision 205)

baserev update by copy to link target

Martin Pluskal (pluskalm) accepted request 776203 from

Thorsten Kukuk (kukuk) almost 5 years ago (revision 204)

- Use sysusers instead of shadow to create squid user and groups
- Don't hard require systemd

buildservice-autocommit accepted request 770216 from

Adam Majer (adamm) almost 5 years ago (revision 203)

baserev update by copy to link target

Adam Majer (adamm) committed almost 5 years ago (revision 202)

- Update to squid 4.10:
  * fixes a security issue allowing a remote client ability to cause
    use a buffer overflow when squid is acting as reverse-proxy.
    (CVE-2020-8449, CVE-2020-8450, bsc#1162687)
  * fixes a security issue allowing for information disclosure in
    FTP gateway (CVE-2019-12528, bsc#1162689)
  * fixes a security issue in ext_lm_group_acl when processing
    NTLM Authentication credentials. (CVE-2020-8517, bsc#1162691)
  * improve cache handling with chunked responses

buildservice-autocommit accepted request 746661 from

Adam Majer (adamm) about 5 years ago (revision 201)

baserev update by copy to link target

Places

Revisions of squid

Places