USN-6500-1 fixed several vulnerabilities in Squid. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
Original advisory details:
Joshua Rogers discovered that Squid incorrectly handled the Gopher protocol. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. Gopher support has been disabled in this update. (CVE-2023-46728)
Joshua Rogers discovered that Squid incorrectly handled HTTP Digest Authentication. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-46847)
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "squid": "3.5.12-1ubuntu7.16+esm2", "squid-dbg": "3.5.12-1ubuntu7.16+esm2", "squid-common": "3.5.12-1ubuntu7.16+esm2", "squid-cgi": "3.5.12-1ubuntu7.16+esm2", "squidclient": "3.5.12-1ubuntu7.16+esm2", "squid-purge": "3.5.12-1ubuntu7.16+esm2", "squid-cgi-dbgsym": "3.5.12-1ubuntu7.16+esm2", "squid3": "3.5.12-1ubuntu7.16+esm2", "squidclient-dbgsym": "3.5.12-1ubuntu7.16+esm2", "squid-dbgsym": "3.5.12-1ubuntu7.16+esm2", "squid-purge-dbgsym": "3.5.12-1ubuntu7.16+esm2" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "squid": "3.5.27-1ubuntu1.14+esm1", "squid-dbg": "3.5.27-1ubuntu1.14+esm1", "squid-common": "3.5.27-1ubuntu1.14+esm1", "squid-cgi": "3.5.27-1ubuntu1.14+esm1", "squidclient": "3.5.27-1ubuntu1.14+esm1", "squid-purge": "3.5.27-1ubuntu1.14+esm1", "squid3": "3.5.27-1ubuntu1.14+esm1" } ] }