[ADVISORY] SQUID-2021:4 Multiple issues in HTTP Range header
[email protected] Tue, 11 May 2021 00:43:06 +1200
| Newsgroups | gmane.comp.web.squid.announce |
|---|---|
| Message-ID | <80e8ffc8716ff55f379758c45f811803__31548.1824379944$1620651744$gmane$org@treenet.co.nz> |
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fCgpTcXVpZCBQcm94eSBDYWNoZSBTZWN1cml0eSBVcGRhdGUgQWR2aXNvcnkgU1FV SUQtMjAyMTo0Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwoKQWR2aXNvcnkgSUQ6ICAgICAgIHwgU1FVSUQtMjAyMTo0CkRh dGU6ICAgICAgICAgICAgICB8IE1heSAxMCwgMjAyMQpTdW1tYXJ5OiAgICAgICAgICAgfCBNdWx0 aXBsZSBpc3N1ZXMgaW4gSFRUUCBSYW5nZSBoZWFkZXIKQWZmZWN0ZWQgdmVyc2lvbnM6IHwgU3F1 aWQgMi41IC0+IDIuNy5TVEFCTEU5CiAgICAgICAgICAgICAgICAgICAgfCBTcXVpZCAzLnggLT4g My41LjI4CiAgICAgICAgICAgICAgICAgICAgfCBTcXVpZCA0LnggLT4gNC4xNAogICAgICAgICAg ICAgICAgICAgIHwgU3F1aWQgNS54IC0+IDUuMC41CkZpeGVkIGluIHZlcnNpb246ICB8IFNxdWlk IDQuMTYsIDUuMC42Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXwoKICAgPGh0dHA6Ly9jdmUubWl0cmUub3JnL2NnaS1iaW4v Y3ZlbmFtZS5jZ2k/bmFtZT1DVkUtMjAyMS0zMTgwNj4KICAgPGh0dHA6Ly9jdmUubWl0cmUub3Jn L2NnaS1iaW4vY3ZlbmFtZS5jZ2k/bmFtZT1DVkUtMjAyMS0zMTgwNz4KICAgPGh0dHA6Ly9jdmUu bWl0cmUub3JnL2NnaS1iaW4vY3ZlbmFtZS5jZ2k/bmFtZT1DVkUtMjAyMS0zMTgwOD4KX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fCgpQcm9ibGVtIERlc2NyaXB0aW9uOgoKICBEdWUgdG8gYW4gaW5jb3JyZWN0IGlucHV0IHZh bGlkYXRpb24gYnVnIFNxdWlkIGlzIHZ1bG5lcmFibGUgdG8KICBhIERlbmlhbCBvZiBTZXJ2aWNl IGF0dGFjayBhZ2FpbnN0IGFsbCBjbGllbnRzIHVzaW5nIHRoZSBwcm94eS4KCiAgRHVlIHRvIGFu IGluY29ycmVjdCBtZW1vcnkgbWFuYWdlbWVudCBidWcgU3F1aWQgaXMgdnVsbmVyYWJsZSB0bwog IGEgRGVuaWFsIG9mIFNlcnZpY2UgYXR0YWNrIGFnYWluc3QgYWxsIGNsaWVudHMgdXNpbmcgdGhl IHByb3h5LgoKICBEdWUgdG8gYW4gaW50ZWdlciBvdmVyZmxvdyBidWcgU3F1aWQgaXMgdnVsbmVy YWJsZSB0byBhIERlbmlhbAogIG9mIFNlcnZpY2UgYXR0YWNrIGFnYWluc3QgYWxsIGNsaWVudHMg dXNpbmcgdGhlIHByb3h5LgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fCgpTZXZlcml0eToKCiAgVGhlc2UgcHJvYmxlbXMg YWxsIGFsbG93IGEgdHJ1c3RlZCBjbGllbnQgdG8gcGVyZm9ybSBEZW5pYWwgb2YKICBTZXJ2aWNl IHdoZW4gbWFraW5nIEhUVFAgUmFuZ2UgcmVxdWVzdHMuCgogIFRoZSBpbnRlZ2VyIG92ZXJmbG93 IHByb2JsZW0gYWxsb3dzIGEgcmVtb3RlIHNlcnZlciB0byBwZXJmb3JtCiAgRGVuaWFsIG9mIFNl cnZpY2Ugd2hlbiBkZWxpdmVyaW5nIHJlc3BvbnNlcyB0byBIVFRQIFJhbmdlCiAgcmVxdWVzdHMu IFRoZSBpc3N1ZSB0cmlnZ2VyIGlzIGEgaGVhZGVyIHdoaWNoIGNhbiBiZSBleHBlY3RlZCB0bwog IGV4aXN0IGluIEhUVFAgdHJhZmZpYyB3aXRob3V0IGFueSBtYWxpY2lvdXMgaW50ZW50LgoKQ1ZT UyBTY29yZSBvZiA4LjAKPGh0dHBzOi8vbnZkLm5pc3QuZ292L3Z1bG4tbWV0cmljcy9jdnNzL3Yz LWNhbGN1bGF0b3I/dmVjdG9yPUFWOk4vQUM6TC9QUjpML1VJOk4vUzpVL0M6Ti9JOk4vQTpIL0U6 UC9STDpPL1JDOkMvQ1I6WC9JUjpYL0FSOkgvTUFWOk4vTUFDOkwvTVBSOkwvTVVJOk4vTVM6Qy9N QzpYL01JOlgvTUE6SCZ2ZXJzaW9uPTMuMT4KCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwoKVXBkYXRlZCBQYWNrYWdlczoK ClRoaXMgYnVnIGlzIGZpeGVkIGJ5IFNxdWlkIHZlcnNpb25zIDQuMTUgYW5kIDUuMC42LgoKICBJ biBhZGRpdGlvbiwgcGF0Y2hlcyBhZGRyZXNzaW5nIHRoaXMgcHJvYmxlbSBmb3IgdGhlIHN0YWJs ZQogIHJlbGVhc2VzIGNhbiBiZSBmb3VuZCBpbiBvdXIgcGF0Y2ggYXJjaGl2ZXM6CgpTcXVpZCA0 OgogIAo8aHR0cDovL3d3dy5zcXVpZC1jYWNoZS5vcmcvVmVyc2lvbnMvdjQvY2hhbmdlc2V0cy9z cXVpZC00LWU3Y2Y4NjRmOTM4ZjI0ZWVhOGFmMDY5MmMwNGQxNjc5MDk4M2M4MjMucGF0Y2g+CgpT cXVpZCA1OgogIAo8aHR0cDovL3d3dy5zcXVpZC1jYWNoZS5vcmcvVmVyc2lvbnMvdjUvY2hhbmdl c2V0cy9zcXVpZC01LTZiZjY2NzMzYzEyMjgwNGZhZGE3ZjU4MzllZjVmM2I1N2U1NzU5MWMucGF0 Y2g+CgogIElmIHlvdSBhcmUgdXNpbmcgYSBwcmVwYWNrYWdlZCB2ZXJzaW9uIG9mIFNxdWlkIHRo ZW4gcGxlYXNlIHJlZmVyCiAgdG8gdGhlIHBhY2thZ2UgdmVuZG9yIGZvciBhdmFpbGFiaWxpdHkg aW5mb3JtYXRpb24gb24gdXBkYXRlZAogIHBhY2thZ2VzLgoKX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCgpEZXRlcm1pbmlu ZyBpZiB5b3VyIHZlcnNpb24gaXMgdnVsbmVyYWJsZToKCiAgU3F1aWQgb2xkZXIgdGhhbiAzLjUu MjggaGF2ZSBub3QgYmVlbiB0ZXN0ZWQgYW5kIHNob3VsZCBiZQogIGFzc3VtZWQgdG8gYmUgdnVs bmVyYWJsZS4KCiAgQWxsIFNxdWlkLTQueCB1cCB0byBhbmQgaW5jbHVkaW5nIDQuMTQgYXJlIHZ1 bG5lcmFibGUuCgogIEFsbCBTcXVpZC01LnggdXAgdG8gYW5kIGluY2x1ZGluZyA1LjAuNSBhcmUg dnVsbmVyYWJsZS4KCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXwoKV29ya2Fyb3VuZDoKCiAgVGhlcmUgYXJlIG5vIHdvcmth cm91bmRzIGtub3duIGZvciB0aGVzZSBwcm9ibGVtcy4KCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwoKQ29udGFjdCBkZXRh aWxzIGZvciB0aGUgU3F1aWQgcHJvamVjdDoKCiAgRm9yIGluc3RhbGxhdGlvbiAvIHVwZ3JhZGUg c3VwcG9ydCBvbiBiaW5hcnkgcGFja2FnZWQgdmVyc2lvbnMKICBvZiBTcXVpZDogWW91ciBmaXJz dCBwb2ludCBvZiBjb250YWN0IHNob3VsZCBiZSB5b3VyIGJpbmFyeQogIHBhY2thZ2UgdmVuZG9y LgoKICBJZiB5b3UgaW5zdGFsbCBhbmQgYnVpbGQgU3F1aWQgZnJvbSB0aGUgb3JpZ2luYWwgU3F1 aWQgc291cmNlcwogIHRoZW4gdGhlIDxzcXVpZC11c2Vyc0BsaXN0cy5zcXVpZC1jYWNoZS5vcmc+ IG1haWxpbmcgbGlzdCBpcyB5b3VyCiAgcHJpbWFyeSBzdXBwb3J0IHBvaW50LiBGb3Igc3Vic2Ny aXB0aW9uIGRldGFpbHMgc2VlCiAgPGh0dHA6Ly93d3cuc3F1aWQtY2FjaGUub3JnL1N1cHBvcnQv bWFpbGluZy1saXN0cy5odG1sPi4KCiAgRm9yIHJlcG9ydGluZyBvZiBub24tc2VjdXJpdHkgYnVn cyBpbiB0aGUgbGF0ZXN0IFNUQUJMRSByZWxlYXNlCiAgdGhlIHNxdWlkIGJ1Z3ppbGxhIGRhdGFi YXNlIHNob3VsZCBiZSB1c2VkCiAgPGh0dHA6Ly9idWdzLnNxdWlkLWNhY2hlLm9yZy8+LgoKICBG b3IgcmVwb3J0aW5nIG9mIHNlY3VyaXR5IHNlbnNpdGl2ZSBidWdzIHNlbmQgYW4gZW1haWwgdG8g dGhlCiAgPHNxdWlkLWJ1Z3NAbGlzdHMuc3F1aWQtY2FjaGUub3JnPiBtYWlsaW5nIGxpc3QuIEl0 J3MgYSBjbG9zZWQKICBsaXN0ICh0aG91Z2ggYW55b25lIGNhbiBwb3N0KSBhbmQgc2VjdXJpdHkg cmVsYXRlZCBidWcgcmVwb3J0cwogIGFyZSB0cmVhdGVkIGluIGNvbmZpZGVuY2UgdW50aWwgdGhl IGltcGFjdCBoYXMgYmVlbiBlc3RhYmxpc2hlZC4KCl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwoKQ3JlZGl0czoKCiAgVGhp cyB2dWxuZXJhYmlsaXR5IHdhcyBkaXNjb3ZlcmVkIGJ5IEpvc2h1YSBSb2dlcnMgb2YgT3BlcmEK ICBTb2Z0d2FyZS4KCiAgRml4ZWQgYnkgQWxleCBSb3Vzc2tvdiBvZiBUaGUgTWVhc3VyZW1lbnQg RmFjdG9yeS4KCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwoKUmV2aXNpb24gaGlzdG9yeToKCiAgMjAyMS0wMy0xOSAwNjo0 OTo1MiBVVEMgSW5pdGlhbCBSZXBvcnQgb2YgRGVuaWFsIG9mIFNlcnZpY2UKICAyMDIxLTAzLTI0 IDA4OjUxOjA4IFVUQyBBZGRpdGlvbmFsIFJlcG9ydCBvZiBVc2UtQWZ0ZXItRnJlZQogIDIwMjEt MDMtMjUgMjE6NTc6MDcgVVRDIEFkZGl0aW9uYWwgUmVwb3J0IG9mIGludGVnZXItb3ZlcmZsb3cK X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fCkVORApfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXwpzcXVpZC1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKc3F1aWQtYW5ub3VuY2VAbGlzdHMuc3F1 aWQtY2FjaGUub3JnCmh0dHA6Ly9saXN0cy5zcXVpZC1jYWNoZS5vcmcvbGlzdGluZm8vc3F1aWQt YW5ub3VuY2UK