CVS commit: pkgsrc/www/squid3

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Mon Apr 30 08:57:49 UTC 2018

Modified Files:
        pkgsrc/www/squid3: Makefile distinfo

Log Message:
www/squid3: Add official security patch SQUID-2018_3

Add security patch for SQUID-2018_3.

Bump PKGREVISION.

http://www.squid-cache.org/Advisories/SQUID-2018_3.txt

__________________________________________________________________

Problem Description:

 Due to incorrect pointer handling Squid is vulnerable to denial
 of service attack when processing ESI responses.

__________________________________________________________________

Severity:

 This problem allows a remote server delivering ESI responses
 to trigger a denial of service for all clients accessing the
 Squid service.

 This problem is limited to Squid operating as reverse proxy.


To generate a diff of this commit:
cvs rdiff -u -r1.80 -r1.81 pkgsrc/www/squid3/Makefile
cvs rdiff -u -r1.62 -r1.63 pkgsrc/www/squid3/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/squid3/Makefile
diff -u pkgsrc/www/squid3/Makefile:1.80 pkgsrc/www/squid3/Makefile:1.81
--- pkgsrc/www/squid3/Makefile:1.80     Thu Jan 25 16:54:28 2018
+++ pkgsrc/www/squid3/Makefile  Mon Apr 30 08:57:49 2018
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.80 2018/01/25 16:54:28 veego Exp $
+# $NetBSD: Makefile,v 1.81 2018/04/30 08:57:49 taca Exp $
 
 DISTNAME=      squid-3.5.27
-PKGREVISION=   2
+PKGREVISION=   3
 CATEGORIES=    www
 MASTER_SITES=  http://www.squid-cache.org/Versions/v3/${PKGVERSION_NOREV:R}/
 MASTER_SITES+= ftp://ftp.squid-cache.org/pub/squid/
@@ -9,7 +9,8 @@ MASTER_SITES+=  http://ftp.nluug.nl/inter
 EXTRACT_SUFX=  .tar.xz
 
 PATCH_SITES=           http://www.squid-cache.org/Versions/v3/3.5/changesets/
-PATCHFILES=            SQUID-2018_1.patch SQUID-2018_2.patch
+PATCHFILES=            SQUID-2018_1.patch SQUID-2018_2.patch \
+                       SQUID-2018_3.patch
 PATCH_DIST_STRIP=      -p1
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/www/squid3/distinfo
diff -u pkgsrc/www/squid3/distinfo:1.62 pkgsrc/www/squid3/distinfo:1.63
--- pkgsrc/www/squid3/distinfo:1.62     Tue Jan 23 02:28:49 2018
+++ pkgsrc/www/squid3/distinfo  Mon Apr 30 08:57:49 2018
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.62 2018/01/23 02:28:49 taca Exp $
+$NetBSD: distinfo,v 1.63 2018/04/30 08:57:49 taca Exp $
 
 SHA1 (SQUID-2018_1.patch) = e0b13479e183b831a754c89c34f10533ef042beb
 RMD160 (SQUID-2018_1.patch) = 23dd75b517f00a819f1f629d41ace08680275175
@@ -8,6 +8,10 @@ SHA1 (SQUID-2018_2.patch) = 896a38f3a4cc
 RMD160 (SQUID-2018_2.patch) = 35730b31e8cee8565bbe81c49102822cad9858eb
 SHA512 (SQUID-2018_2.patch) = 392442527ead5cbb045f6eded522c9aff6ce395034ca028e7298394eccb6ed5b06c814f966ddc6cb264b9a37bf7ae2751e3ed87853566b1d7b757d99280fe60c
 Size (SQUID-2018_2.patch) = 1054 bytes
+SHA1 (SQUID-2018_3.patch) = 616a3d1df640d2b4bb3b297cb559603cc3e50633
+RMD160 (SQUID-2018_3.patch) = 83a66ce1f72657d6c071b0117bcada457a500d2a
+SHA512 (SQUID-2018_3.patch) = 20a036b34f7a595d83e707180d831c4adc9b7432f09be5341cfe7b3b00cbe3e5c0de07376a67834b94e08c849703822371eb71938a024307cb52cf8ef52138e8
+Size (SQUID-2018_3.patch) = 843 bytes
 SHA1 (squid-3.5.27.tar.xz) = 1e69c96d13cd49844da3bcf33a0b428fbe7b6f77
 RMD160 (squid-3.5.27.tar.xz) = d3426f5d4ebda4834d069b4cc4bb3366fc4873b4
 SHA512 (squid-3.5.27.tar.xz) = 4172a053c3b7ffe7a12dfb3febac96942d0fbbe7e98e3f797f22cd75b0a3a89cbbfe7260b5daad099e79d5e9303bb5dfbfee7499cb30a90590aa1bd242ff4817