Re: [squid-users] CVE-2019-12522

2020-08-12 Thread Simon Deziel
On 2020-08-11 11:00 p.m., Amos Jeffries wrote: > On 12/08/20 9:24 am, Simon Deziel wrote: >> Hello, >> >> I noticed that CVE-2019-12522 [*] was not yet fixed. I could confirm the >> saved UID is indeed 0 (root) on a Ubuntu 20.04.1 machine (5.4 kernel) so >> I was

[squid-users] CVE-2019-12522

2020-08-11 Thread Simon Deziel
Hello, I noticed that CVE-2019-12522 [*] was not yet fixed. I could confirm the saved UID is indeed 0 (root) on a Ubuntu 20.04.1 machine (5.4 kernel) so I was wondering if a fix was on the way. Thanks Regards, Simon *: https://gitlab.com/jeriko.one/security/-/blob/master/squid/CVEs/CVE-2019-1252