[Git][security-tracker-team/security-tracker][master] Update information for CVE-2019-12527/squid3

Salvatore Bonaccorso carnil at debian.org
Sat Jul 20 20:27:07 BST 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7fb09e7d by Salvatore Bonaccorso at 2019-07-20T19:26:07Z
Update information for CVE-2019-12527/squid3

This is safe to mark this way as the version fremoved from the archive
matching 3.5.x series upstream was 3.5.27-1 and thus earlier as the
introducing version. There were no src:squid3 versions ever affected.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4883,8 +4883,7 @@ CVE-2019-12528
 	RESERVED
 CVE-2019-12527 (An issue was discovered in Squid 4.0.23 through 4.7. When checking Bas ...)
 	- squid 4.8-1
-	- squid3 <removed>
-	[jessie] - squid3 <not-affected> (Vulnerable code is not present)
+	- squid3 <not-affected> (Vulnerable code introduced in 4.0.23)
 	NOTE: http://www.squid-cache.org/Advisories/SQUID-2019_5.txt
 	NOTE: http://www.squid-cache.org/Versions/v4/changesets/squid-4-7f73e9c5d17664b882ed32590e6af310c247f320.patch
 	NOTE: The code in squid 3.x limits the amount of input data decoded to one byte less



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7fb09e7ded31f8f32b0231e352bf61ef96d72911

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7fb09e7ded31f8f32b0231e352bf61ef96d72911
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190720/973945ab/attachment.html>


More information about the debian-security-tracker-commits mailing list