Notification time stamped 2021-03-31 18:31:13 UTC
From 72c3581ea5ba5bf6c6aa799ba22e64665b336cd6 Mon Sep 17 00:00:00 2001
From: Lubos Uhliarik <luhliari(a)redhat.com>
Date: Mar 31 2021 18:31:04 +0000
Subject: new version 4.14
Resolves: #1939927 - CVE-2020-25097 squid: improper input validation may allow
a trusted client to perform HTTP Request Smuggling
---
diff --git a/sources b/sources
index b026e38..44e9f71 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (squid-4.13.tar.xz) =
06807f82ed01e12afe2dd843aa0a94f69c351765b1889c4c5c3da1cf2ecb06ac3a4be6a24a62f04397299c8fc0df5397f76f64df5422ff78b37a9382d5fdf7fc
-SHA512 (squid-4.13.tar.xz.asc) =
be1265376927dcb3c96ea0c8c1b0f1d6bd7e3deb0fdd38ff80030c31f53f77345a8b8564c6b8cc79d7449aa361d4bdf1ba10d02f5f08af245ee35b484977b93a
+SHA512 (squid-4.14.tar.xz) =
3509caea9e10ea54547eeb769a21f0ca4d37e39a063953821fc51d588b22facfa183d0a48be9ab15831ee646e031079b515c75162515b8a4e7c708df2d41958b
+SHA512 (squid-4.14.tar.xz.asc) =
a556e5f20e25e598375e3a6d8a300a1e35b29c89b8125f31d3fb16f1f59f538548f7f2e7424f06fc957e330cca8f16e0efe534a4772699454cd1778a82d4647d
SHA512 (pgp.asc) =
09f7012030d68831dfc083d67ca63ee54ed851482ca8d0e9505b444ee3e7ddeed62369b53f2917c9b2e0e57cc0533fce46e8cafd2ebcd1c6cb186b516efd0ad2
diff --git a/squid.spec b/squid.spec
index 140ad3f..1e48fd8 100644
--- a/squid.spec
+++ b/squid.spec
@@ -1,8 +1,8 @@
%define __perl_requires %{SOURCE98}
Name: squid
-Version: 4.13
-Release: 3%{?dist}
+Version: 4.14
+Release: 1%{?dist}
Summary: The Squid proxy caching server
Epoch: 7
# See CREDITS for breakdown of non GPLv2+ code
@@ -300,6 +300,11 @@ fi
%changelog
+* Wed Mar 31 2021 Lubos Uhliarik <luhliari(a)redhat.com> - 7:4.14-1
+- new version 4.14
+- Resolves: #1939927 - CVE-2020-25097 squid: improper input validation may allow
+ a trusted client to perform HTTP Request Smuggling
+
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 7:4.13-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
https://src.fedoraproject.org/rpms/squid/c/72c3581ea5ba5bf6c6aa799ba22e64...