kumquat-buildroot/package/squid/squid.hash

# From http://www.squid-cache.org/Versions/v4/squid-4.11.tar.xz.asc
md5  10f34e852153a9996aa4614670e2bda1  squid-4.11.tar.xz
sha1  053277bf5497163ffc9261b9807abda5959bb6fc  squid-4.11.tar.xz
# Locally calculated
sha256  4ed947612410263f57ad0e39bfd087e60fb714f028d7d3b0e469943efd34287d  squid-4.11.tar.xz
sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING
package/squid: security bump to version 4.11 Fix CVE-2020-11945: An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to gain access to resources that are otherwise forbidden. This occurs because the attacker can overflow the nonce reference counter (a short integer). Remote code execution may occur if the pooled token credentials are freed (instead of replayed as valid credentials). http://www.squid-cache.org/Advisories/SQUID-2020_4.txt Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2020-05-06 22:15:41 +02:00			`# From http://www.squid-cache.org/Versions/v4/squid-4.11.tar.xz.asc`
			`md5 10f34e852153a9996aa4614670e2bda1 squid-4.11.tar.xz`
			`sha1 053277bf5497163ffc9261b9807abda5959bb6fc squid-4.11.tar.xz`
squid: bump version to 3.5.27 And add a hash for the license files. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2018-01-22 20:54:16 +01:00			`# Locally calculated`
package/squid: security bump to version 4.11 Fix CVE-2020-11945: An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to gain access to resources that are otherwise forbidden. This occurs because the attacker can overflow the nonce reference counter (a short integer). Remote code execution may occur if the pooled token credentials are freed (instead of replayed as valid credentials). http://www.squid-cache.org/Advisories/SQUID-2020_4.txt Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2020-05-06 22:15:41 +02:00			`sha256 4ed947612410263f57ad0e39bfd087e60fb714f028d7d3b0e469943efd34287d squid-4.11.tar.xz`
package/squid: security bump to version 4.10 Drop patch (already in version) Update indentation of hash file (two spaces) Fix the following issues: - CVE-2020-8517: Buffer Overflow issue in ext_lm_group_acl helper. - CVE-2019-12528: Information Disclosure issue in FTP Gateway. - CVE-2020-8449, CVE-2020-8450: Improper Input Validation issues in HTTP Request processing. - CVE-2019-18679: Information Disclosure issue in HTTP Digest Authentication. - CVE-2019-18678: HTTP Request Splitting issue in HTTP message processing. - CVE-2019-18677: Cross-Site Request Forgery issue in HTTP Request processing. - CVE-2019-12523, CVE-2019-18676: Multiple issues in URI processing. - CVE-2019-12526: Heap Overflow issue in URN processing. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2020-02-29 00:18:00 +01:00			`sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING`
No results found.