========================================================================== Ubuntu Security Notice USN-4059-1 July 15, 2019 squid, squid3 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.04 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in Squid. Software Description: - squid: Web proxy cache server - squid3: Web proxy cache server Details: It was discovered that Squid incorrectly handled certain SNMP packets. A remote attacker could possibly use this issue to cause memory consumption, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-19132) It was discovered that Squid incorrectly handled the cachemgr.cgi web module. A remote attacker could possibly use this issue to conduct cross-site scripting (XSS) attacks. (CVE-2019-13345) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: squid 4.4-1ubuntu2.1 Ubuntu 18.04 LTS: squid3 3.5.27-1ubuntu1.2 Ubuntu 16.04 LTS: squid3 3.5.12-1ubuntu7.7 In general, a standard system update will make all the necessary changes. References: https://usn.ubuntu.com/4059-1 CVE-2018-19132, CVE-2019-13345 Package Information: https://launchpad.net/ubuntu/+source/squid/4.4-1ubuntu2.1 https://launchpad.net/ubuntu/+source/squid3/3.5.27-1ubuntu1.2 https://launchpad.net/ubuntu/+source/squid3/3.5.12-1ubuntu7.7