CVS commit: [pkgsrc-2018Q1] pkgsrc/www/squid3

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   spz
Date:           Sun May  6 11:58:34 UTC 2018

Modified Files:
        pkgsrc/www/squid3 [pkgsrc-2018Q1]: Makefile distinfo

Log Message:
Pullup ticket #5752 - requested by taca
www/squid3: security patch

Revisions pulled up:
- www/squid3/Makefile                                           1.81
- www/squid3/distinfo                                           1.63

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Mon Apr 30 08:57:49 UTC 2018

   Modified Files:
        pkgsrc/www/squid3: Makefile distinfo

   Log Message:
   www/squid3: Add official security patch SQUID-2018_3

   Add security patch for SQUID-2018_3.

   Bump PKGREVISION.

   http://www.squid-cache.org/Advisories/SQUID-2018_3.txt

   __________________________________________________________________

   Problem Description:

    Due to incorrect pointer handling Squid is vulnerable to denial
    of service attack when processing ESI responses.

   __________________________________________________________________

   Severity:

    This problem allows a remote server delivering ESI responses
    to trigger a denial of service for all clients accessing the
    Squid service.

    This problem is limited to Squid operating as reverse proxy.

   To generate a diff of this commit:
   cvs rdiff -u -r1.80 -r1.81 pkgsrc/www/squid3/Makefile
   cvs rdiff -u -r1.62 -r1.63 pkgsrc/www/squid3/distinfo


To generate a diff of this commit:
cvs rdiff -u -r1.80 -r1.80.2.1 pkgsrc/www/squid3/Makefile
cvs rdiff -u -r1.62 -r1.62.2.1 pkgsrc/www/squid3/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/squid3/Makefile
diff -u pkgsrc/www/squid3/Makefile:1.80 pkgsrc/www/squid3/Makefile:1.80.2.1
--- pkgsrc/www/squid3/Makefile:1.80     Thu Jan 25 16:54:28 2018
+++ pkgsrc/www/squid3/Makefile  Sun May  6 11:58:34 2018
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.80 2018/01/25 16:54:28 veego Exp $
+# $NetBSD: Makefile,v 1.80.2.1 2018/05/06 11:58:34 spz Exp $
 
 DISTNAME=      squid-3.5.27
-PKGREVISION=   2
+PKGREVISION=   3
 CATEGORIES=    www
 MASTER_SITES=  http://www.squid-cache.org/Versions/v3/${PKGVERSION_NOREV:R}/
 MASTER_SITES+= ftp://ftp.squid-cache.org/pub/squid/
@@ -9,7 +9,8 @@ MASTER_SITES+=  http://ftp.nluug.nl/inter
 EXTRACT_SUFX=  .tar.xz
 
 PATCH_SITES=           http://www.squid-cache.org/Versions/v3/3.5/changesets/
-PATCHFILES=            SQUID-2018_1.patch SQUID-2018_2.patch
+PATCHFILES=            SQUID-2018_1.patch SQUID-2018_2.patch \
+                       SQUID-2018_3.patch
 PATCH_DIST_STRIP=      -p1
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/www/squid3/distinfo
diff -u pkgsrc/www/squid3/distinfo:1.62 pkgsrc/www/squid3/distinfo:1.62.2.1
--- pkgsrc/www/squid3/distinfo:1.62     Tue Jan 23 02:28:49 2018
+++ pkgsrc/www/squid3/distinfo  Sun May  6 11:58:34 2018
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.62 2018/01/23 02:28:49 taca Exp $
+$NetBSD: distinfo,v 1.62.2.1 2018/05/06 11:58:34 spz Exp $
 
 SHA1 (SQUID-2018_1.patch) = e0b13479e183b831a754c89c34f10533ef042beb
 RMD160 (SQUID-2018_1.patch) = 23dd75b517f00a819f1f629d41ace08680275175
@@ -8,6 +8,10 @@ SHA1 (SQUID-2018_2.patch) = 896a38f3a4cc
 RMD160 (SQUID-2018_2.patch) = 35730b31e8cee8565bbe81c49102822cad9858eb
 SHA512 (SQUID-2018_2.patch) = 392442527ead5cbb045f6eded522c9aff6ce395034ca028e7298394eccb6ed5b06c814f966ddc6cb264b9a37bf7ae2751e3ed87853566b1d7b757d99280fe60c
 Size (SQUID-2018_2.patch) = 1054 bytes
+SHA1 (SQUID-2018_3.patch) = 616a3d1df640d2b4bb3b297cb559603cc3e50633
+RMD160 (SQUID-2018_3.patch) = 83a66ce1f72657d6c071b0117bcada457a500d2a
+SHA512 (SQUID-2018_3.patch) = 20a036b34f7a595d83e707180d831c4adc9b7432f09be5341cfe7b3b00cbe3e5c0de07376a67834b94e08c849703822371eb71938a024307cb52cf8ef52138e8
+Size (SQUID-2018_3.patch) = 843 bytes
 SHA1 (squid-3.5.27.tar.xz) = 1e69c96d13cd49844da3bcf33a0b428fbe7b6f77
 RMD160 (squid-3.5.27.tar.xz) = d3426f5d4ebda4834d069b4cc4bb3366fc4873b4
 SHA512 (squid-3.5.27.tar.xz) = 4172a053c3b7ffe7a12dfb3febac96942d0fbbe7e98e3f797f22cd75b0a3a89cbbfe7260b5daad099e79d5e9303bb5dfbfee7499cb30a90590aa1bd242ff4817