enterprise-support team mailing list archive

[Jamie Strandboge <jamie@xxxxxxxxxx>]

Security team review:

This MIR is actually at the request of the security team. While squid
and squid3 have quite a few CVEs in their history, upstream is very good
about supporting these, with timely announcements and patches. There are
indications that upstream is beginning to taper off its support for
squid 2, so it is important that we transition to squid3 for 12.04 so
that it is supportable for 5 years.

The package is well supported in Debian. Packaging it fine. This is the
next currently supported version of squid in both Debian and upstream,
and does not require a re-review from security. This builds fine with no
dependencies outside of main.

I can say I noticed a bunch of these in the build log:
$ egrep -i '(error|warning):' ./squid3_3.1.15-1ubuntu2-amd64-20111117-1713
g++: warning: switch '-fhuge-objects' is no longer supported
g++: warning: switch '-fhuge-objects' is no longer supported
g++: warning: switch '-fhuge-objects' is no longer supported
...

So we might want to get that cleaned up.

I have taken the liberty of promoting this. Please adjust the seeds to
use squid3 instead of squid accordingly.


** Changed in: squid3 (Ubuntu)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server/Client Support Team, which is subscribed to squid3 in Ubuntu.
Matching subscriptions: Ubuntu Server/Client Support Team
https://bugs.launchpad.net/bugs/889243

Title:
  [MIR] squid3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/squid3/+bug/889243/+subscriptions