[pkgsrc/trunk]: pkgsrc/www/squid3 www/squid3: Add official secur...

[taca <taca%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/1a7b47b3dbfa
branches:  trunk
changeset: 307026:1a7b47b3dbfa
user:      taca <taca%pkgsrc.org@localhost>
date:      Mon Apr 30 08:57:49 2018 +0000
description:
www/squid3: Add official security patch SQUID-2018_3

Add security patch for SQUID-2018_3.

Bump PKGREVISION.

http://www.squid-cache.org/Advisories/SQUID-2018_3.txt

__________________________________________________________________

Problem Description:

 Due to incorrect pointer handling Squid is vulnerable to denial
 of service attack when processing ESI responses.

__________________________________________________________________

Severity:

 This problem allows a remote server delivering ESI responses
 to trigger a denial of service for all clients accessing the
 Squid service.

 This problem is limited to Squid operating as reverse proxy.

diffstat:

 www/squid3/Makefile |  7 ++++---
 www/squid3/distinfo |  6 +++++-
 2 files changed, 9 insertions(+), 4 deletions(-)

diffs (43 lines):

diff -r 23737876bc65 -r 1a7b47b3dbfa www/squid3/Makefile
--- a/www/squid3/Makefile       Mon Apr 30 08:51:39 2018 +0000
+++ b/www/squid3/Makefile       Mon Apr 30 08:57:49 2018 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.80 2018/01/25 16:54:28 veego Exp $
+# $NetBSD: Makefile,v 1.81 2018/04/30 08:57:49 taca Exp $
 
 DISTNAME=      squid-3.5.27
-PKGREVISION=   2
+PKGREVISION=   3
 CATEGORIES=    www
 MASTER_SITES=  http://www.squid-cache.org/Versions/v3/${PKGVERSION_NOREV:R}/
 MASTER_SITES+= ftp://ftp.squid-cache.org/pub/squid/
@@ -9,7 +9,8 @@
 EXTRACT_SUFX=  .tar.xz
 
 PATCH_SITES=           http://www.squid-cache.org/Versions/v3/3.5/changesets/
-PATCHFILES=            SQUID-2018_1.patch SQUID-2018_2.patch
+PATCHFILES=            SQUID-2018_1.patch SQUID-2018_2.patch \
+                       SQUID-2018_3.patch
 PATCH_DIST_STRIP=      -p1
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
diff -r 23737876bc65 -r 1a7b47b3dbfa www/squid3/distinfo
--- a/www/squid3/distinfo       Mon Apr 30 08:51:39 2018 +0000
+++ b/www/squid3/distinfo       Mon Apr 30 08:57:49 2018 +0000
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.62 2018/01/23 02:28:49 taca Exp $
+$NetBSD: distinfo,v 1.63 2018/04/30 08:57:49 taca Exp $
 
 SHA1 (SQUID-2018_1.patch) = e0b13479e183b831a754c89c34f10533ef042beb
 RMD160 (SQUID-2018_1.patch) = 23dd75b517f00a819f1f629d41ace08680275175
@@ -8,6 +8,10 @@
 RMD160 (SQUID-2018_2.patch) = 35730b31e8cee8565bbe81c49102822cad9858eb
 SHA512 (SQUID-2018_2.patch) = 392442527ead5cbb045f6eded522c9aff6ce395034ca028e7298394eccb6ed5b06c814f966ddc6cb264b9a37bf7ae2751e3ed87853566b1d7b757d99280fe60c
 Size (SQUID-2018_2.patch) = 1054 bytes
+SHA1 (SQUID-2018_3.patch) = 616a3d1df640d2b4bb3b297cb559603cc3e50633
+RMD160 (SQUID-2018_3.patch) = 83a66ce1f72657d6c071b0117bcada457a500d2a
+SHA512 (SQUID-2018_3.patch) = 20a036b34f7a595d83e707180d831c4adc9b7432f09be5341cfe7b3b00cbe3e5c0de07376a67834b94e08c849703822371eb71938a024307cb52cf8ef52138e8
+Size (SQUID-2018_3.patch) = 843 bytes
 SHA1 (squid-3.5.27.tar.xz) = 1e69c96d13cd49844da3bcf33a0b428fbe7b6f77
 RMD160 (squid-3.5.27.tar.xz) = d3426f5d4ebda4834d069b4cc4bb3366fc4873b4
 SHA512 (squid-3.5.27.tar.xz) = 4172a053c3b7ffe7a12dfb3febac96942d0fbbe7e98e3f797f22cd75b0a3a89cbbfe7260b5daad099e79d5e9303bb5dfbfee7499cb30a90590aa1bd242ff4817