Year after year I am astonished that squid has been kept back in Ubuntu, when all other distros update this important and hugely popular software with every release. Squid 3.3 became DEPRECATED in 2013 !!!
http://wiki.squid-cache.org/Squid-3.3 Please read the note from the squid page: "Squid-3.3 is CONSIDERED DANGEROUS as the security people say. Due to unfixed vulnerabilities CVE-2014-7141, CVE-2014-7142 and CVE-2014-6270 and any other recently discovered issues." PLEASE update it to 3.5.x (as 3.4 is also marked DEPRECATED - bold letters from squid website, not mine) in 16.04 LTS. ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2014-6270 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2014-7141 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2014-7142 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1473691 Title: Update to latest upstream stable release (3.5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/squid3/+bug/1473691/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
