USN-3192-1: Squid vulnerabilities

Ubuntu Security Notice USN-3192-1

6th February, 2017

squid3 vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 16.10



• Ubuntu 16.04 LTS



• Ubuntu 14.04 LTS



• Ubuntu 12.04 LTS

Summary

Squid could be made to expose sensitive information over the network.

Software description

• squid3
  - Web proxy cache server
  
  

Details

Saulius Lapinskas discovered that Squid incorrectly handled processing
HTTP conditional requests. A remote attacker could possibly use this issue
to obtain sensitive information related to other clients' browsing
sessions. ()

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 16.10:

Ubuntu 16.04 LTS:

Ubuntu 14.04 LTS:

Ubuntu 12.04 LTS:

To update your system, please follow these instructions:
,

CVE-2016-10003