<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="3">
<package pkgid="0f1e2c8458fe780041980179d4f61e0a1ce6c595981ada1b442ebc31c6c2431e" name="libecap" arch="i686">
  <version epoch="0" ver="1.0.1" rel="2.module+el8.1.0+4044+36416a77"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-10" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.0.0-1" date="1426248000">- new version 1.0.0</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 1.0.0-2" date="1430568000">- Rebuilt for GCC 5 C++11 ABI change</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.0-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-4" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-5" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-6" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.0.1-1" date="1503316800">- new version 1.0.1
- autoconf.h moved from lookaside to dist-git</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1.0.1-2" date="1566561600">- Resolves: #1695587 - Ensure modular RPM upgrade path</changelog>
</package>
<package pkgid="cee971dec94c10b4a2673a84e2e77d9b3911e42552d2c3f41702f2d6de4dc928" name="libecap-devel" arch="i686">
  <version epoch="0" ver="1.0.1" rel="2.module+el8.1.0+4044+36416a77"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-10" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.0.0-1" date="1426248000">- new version 1.0.0</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 1.0.0-2" date="1430568000">- Rebuilt for GCC 5 C++11 ABI change</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.0-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-4" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-5" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-6" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.0.1-1" date="1503316800">- new version 1.0.1
- autoconf.h moved from lookaside to dist-git</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1.0.1-2" date="1566561600">- Resolves: #1695587 - Ensure modular RPM upgrade path</changelog>
</package>
<package pkgid="8cfeda38d7759e9892e2423acbcdbf995062a782bd26e66fda9a4788eb47dfe9" name="squid" arch="i686">
  <version epoch="7" ver="4.11" rel="3.module+el8.3.0+7851+7808b5f9"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:4.4-2" date="1544529600">- Resolves: #1657847 - Unable to start Squid in Selinux Enforcing mode</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:4.4-3" date="1544529601">- Resolves: #1642384 - squid doesn't work with active ftp</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:4.4-4" date="1544529602">- Resolves: #1612524 - Man page scan results for squid</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:4.4-6" date="1561118400">- Resolves: #1679526 - Missing detailed configuration file
- Resolves: #1703117 - RHEL 7 to 8 fails with squid installed because dirs
  changed to symlinks
- Resolves: #1691741 - Squid cache_peer DNS lookup failed when not all lower
  case
- Resolves: #1683527 - "Reloading" message on a fresh reboot after enabling
  squid</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:4.4-7" date="1564574400">- Resolves: #1729436 - CVE-2019-13345 squid: XSS via user_name or auth parameter
  in cachemgr.cgi</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:4.4-8" date="1566561600">- Resolves: # 1738485 - CVE-2019-12527 squid:4/squid: heap-based buffer overflow
  in HttpHeader::getAuth</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:4.4-9" date="1588075200">- Resolves: #1738583 - CVE-2019-12525 squid:4/squid: parsing of header
  Proxy-Authentication leads to memory corruption
- Resolves: #1828369 - CVE-2020-11945 squid: improper access restriction upon
  Digest Authentication nonce replay could lead to remote code execution
- Resolves: #1828370 - CVE-2019-12519 squid: improper check for new member in
  ESIExpression::Evaluate allows for stack buffer overflow</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:4.11-1" date="1588852800">- new version 4.11
- libsystemd integration
- Resolves: #1829467 - squid:4 rebase
- Resolves: #1828378 - CVE-2019-12521 squid:4/squid: off-by-one error in
  addStackElement allows for a heap buffer overflow and a crash
- Resolves: #1828377 - CVE-2019-12520 squid:4/squid: improper input validation
  in request allows for proxy manipulation
- Resolves: #1828375 - CVE-2019-12524 squid:4/squid: improper access restriction
  in url_regex may lead to security bypass
- Resolves: #1820664 - CVE-2019-18860 squid: mishandles HTML in the host
  parameter to cachemgr.cgi which could result in squid behaving in unsecure way
- Resolves: #1802514 - CVE-2020-8449 squid:4/squid: Improper input validation
  issues in HTTP Request processing
- Resolves: #1802513 - CVE-2020-8450 squid:4/squid: Buffer overflow in a Squid
  acting as reverse-proxy
- Resolves: #1802512 - CVE-2019-12528 squid:4/squid: Information Disclosure
  issue in FTP Gateway
- Resolves: #1771288 - CVE-2019-18678 squid:4/squid: HTTP Request Splitting
  issue in HTTP message processing
- Resolves: #1771283 - CVE-2019-18679 squid:4/squid: Information Disclosure
  issue in HTTP Digest Authentication
- Resolves: #1771280 - CVE-2019-18677 squid:4/squid: Cross-Site Request Forgery
  issue in HTTP Request processing
- Resolves: #1771275 - CVE-2019-12523 squid:4/squid: Improper input validation
  in URI processor
- Resolves: #1771272 - CVE-2019-18676 squid:4/squid: Buffer overflow in URI
  processor
- Resolves: #1771264 - CVE-2019-12526 squid:4/squid: Heap overflow issue in URN
  processing
- Resolves: #1738581 - CVE-2019-12529 squid: OOB read in Proxy-Authorization
  header causes DoS</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:4.11-2" date="1593691200">- Resolves: #1853130 - CVE-2020-15049 squid:4/squid: request smuggling and
  poisoning attack against the HTTP cache
- Resolves: #1853136 - CVE-2020-14058 squid:4/squid: DoS in TLS handshake</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:4.11-3" date="1598443200">- Resolves: #1871705 - CVE-2020-24606 squid: Improper Input Validation could
  result in a DoS
- Resolves: #1871702 - CVE-2020-15811 squid: HTTP Request Splitting could result
  in cache poisoning
- Resolves: #1871700 - CVE-2020-15810 squid: HTTP Request Smuggling could result
  in cache poisoning</changelog>
</package>
</otherdata>