| Commit History - (may be incomplete: see SVNWeb link above for full details) |
| Date | By | Description |
08 Dec 2004 23:16:53
2.5.7_4  |
sem  |
Integrate the following vendor patches as published on
http://www.squid-cache.org/Versions/v2/2.5/bugs/:
- a malformed hostname can cause squid to return random data as error messages,
possibly leaking internal information from former requests (squid bug #1143).
(This is classified as a minor security issue by the squid developers, so
maintainer cc'ed security-team@. See VuXML entry.)
- the "httpd_accel_port 0" directive does not work on its own (squid bug #1121)
- fix crashes occuring when using cachemgr's "vm_objects" operation (squid
bug #1149)
PR: ports/74859
Submitted by: maintainer |
14 Nov 2004 09:55:41
2.5.7_3  |
krion  |
- fix shutting down of helper applications on reconfigure or
logrotation (squid bug #1118)
- properly close the client TCP connection when a malformed blank
HTTP response was received from the server (squid bug #1116)
PR: ports/73913
Submitted by: maintainer |
27 Oct 2004 08:48:52
2.5.7_2  |
sergei  |
- Integrate the following vendor patches:
- document the LDAP helpers' -v option
- correct the implementation of the req_header and resp_header acls
(the original implementation submitted in squid bug #961 was faulty)
See <http://www.squid-cache.org/Versions/v2/2.5/bugs/> for further details.
- Bump PORTREVISION
PR: ports/73154
Submitted by: Thomas-Martin Seck (maintainer) |
18 Oct 2004 21:50:20
2.5.7_1  |
sergei  |
- Integrate a vendor patch that prevents squid from consuming 100%
CPU for half closed PUT/POST requests (squid bugs #354, 1096).
See <http://www.squid-cache.org/Versions/v2/2.5/bugs/> for further
details.
- Adapt the follow_xff patch to changes in some of squid's data
structures and unbreak the WITH_SQUID_FOLLOW_XFF option.
- Bump PORTREVISION.
PR: ports/72840
Submitted by: Thomas-Martin Seck (maintainer) |
13 Oct 2004 09:43:48
2.5.7  |
sergei  |
- Update to 2.5-STABLE7; this release fixes a security issue regarding
the SNMP module
- Remove a patch that is now part of the distribution
- Miscellaneuous small fixes:
+ in squid.sh, make stop_command poll for the squid processes' exit in
the rcNG case too; this eliminates the need to do this in restart_command
+ make the information regarding rcNG'ness in pkg-install easier to read
+ install unstripped binaries if WITH_SQUID_STACKTRACES is defined
PR: ports/72581
Submitted by: Thomas-Martin Seck (maintainer) |
11 Oct 2004 07:43:34
2.5.6_12  |
sergei  |
- Unbreak fetching squid again:
The recently updated client_db_gc patch has been reissued again;
according to squid CVS to "finetune the client db garbage collection
interval". Update distinfo accordingly and bump PORTREVISION.
PR: ports/72461 [1], ports/72463 [2]
Submitted by: Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net> [1],
Thomas-Martin Seck (maintainer) [2]
Approved by: portsmgr (krion) |
07 Oct 2004 08:42:16
2.5.6_11  |
sergei  |
- Unbreak fetching:
The client_db_gc patch contained a wrong debugging information
and was thus reissued by the vendor.
Update distinfo accordingly and bump PORTREVISION.
PR: ports/72387
Submitted by: Thomas-Martin Seck (maintainer)
Approved by: portsmgr (krion) |
02 Sep 2004 06:44:14
2.5.6_10  |
sem  |
Implement vendor patches for the following issues:
- try to prevent crashes of the digest helper (squid bug #1031)
- correct parsing of the acl_time directive when multiple time specifications
are given (squid bug #1060)
- correct "cachemgr config" output for http_header_* directives
(squid bug #1056)
- recognize the Content-Disposition header to be able to specify
http_header_access directives using it (squid bug #961)
See <http://www.squid-cache.org/Versions/v2/2.5/bugs/> for further
information.
Reimplement the rcNG support. See UPDATING for details.
PR: ports/71260
Submitted by: maintainer |
28 Aug 2004 20:51:36
2.5.6_9  |
sem  |
Integrate vendor patches for the following issues:
- close a memory leak when NTLM authentication without challenge reuse
is used (squid bug #994)
- close a temporary memory leak when NTLM challenge response reuse is
enabled (squid bug #910)
- when performing log rotation with 'squid -k rotate' do not crash if a
swap state file or a cache directory is unwriteable (squid bug #1053)
See <http://www.squid-cache.org/Versions/v2/2.5/bugs/> for further
information.
PR: ports/71082
Submitted by: maintainer |
21 Aug 2004 12:28:56
2.5.6_8  |
krion  |
Fix grammatical and whitespace errors in squid.conf.default.
Set supplementary group membership correctly when running squid
as a non-root user and do not ignore the squid_group setting
when starting squid as root (squid bug #1021)
Enable the external_acl helper protocol to handle newlines
in the embedded data (squid bug #1038)
PR: ports/70767
Submitted by: maintainer |
20 Aug 2004 13:54:30
2.5.6_7  |
sem  |
* Integrate a vendor patch for a possible DOS against the NTLM
authentication helpers, see squid bug #1045.
* Bump PORTREVISION.
PR: ports/70707
Submitted by: maintainer |
11 Aug 2004 19:18:07
2.5.6_6  |
krion  |
The ldap_helpers patch has been updated again; see squid bug
#1032 for details.
PR: ports/70312
Submitted by: maintainer |
07 Aug 2004 19:28:16
2.5.6_5  |
krion  |
Integrate new vendor patches:
- fix a problem in the heap policy code that could cause memory
corruption when a {cache,memory}_replacement_policy other
than the default "lru" was used (squid bug #1009)
- correct quoting of unknown % escape codes when generating
error pages (squid bug #1030)
PR: ports/70110
Submitted by: maintainer |
29 Jul 2004 23:08:51
2.5.6_5  |
edwin  |
[Maintainer] www/squid: chase re-issued patch, unbreak fetching
The concurrent_dns_lookups patch was reissued, update distinfo accordingly.
See <http://www.squid-cache.org/bugs/show_bug.cgi?id=852> for
further information.
PR: ports/69764
Submitted by: Thomas-Martin Seck <tmseck@netcologne.de> |
28 Jul 2004 18:56:48
2.5.6_4  |
krion  |
- integrate a new version of the LDAP update patch, the
problems with the previous version are hopefully fixed (squid bug #1018)
- integrate a new NTLM authentication patch to address a problem with
truncating NTLM authentication blobs (squid bug #1016)
- remove two patches which were withdrawn (see squid bugs #910
and 994)
PR: ports/69719
Submitted by: maintainer |
28 Jul 2004 02:10:54
2.5.6_3  |
ijliao  |
Fix a bug that disallowed explicit unsetting of the squid_flags variable.
PR: 69670
Submitted by: maintainer |
25 Jul 2004 16:30:43
2.5.6_3  |
pav  |
- Tweaks to RC script
- Fix dynamic plist generation to not include files that happen to be
in target directories. This prevents their removal on deinstallation
or upgrade.
PR: ports/69552, ports/69266
Submitted by: Thomas-Martin Seck <tmseck@netcologne.de> (maintainer) |
24 Jul 2004 16:03:45
2.5.6_2  |
sem  |
Remove ldap_helpers.patch
PR: ports/69487 (partially)
Submitted by: maintainer |
23 Jul 2004 12:25:45
2.5.6_2  |
eik  |
Remove squid-2.5.STABLE6-ldap_helpers.patch until it is fixed.
cf <http://www.squid-cache.org/bugs/show_bug.cgi?id=1018>
Do not bump PORTREVISION, since
a) ldap is not in the default configuration
b) we hope to have that fixed soon
PR: 69465
Submitted by: Thomas-Martin Seck <tmseck@netcologne.de> (maintainer) |
22 Jul 2004 06:09:06
2.5.6_2  |
krion  |
The ldap_helpers patch has been rerolled (a missing return
statement was inserted).
PR: ports/69408
Submitted by: maintainer |
19 Jul 2004 21:25:39
2.5.6_1  |
krion  |
Integrate the following vendor patches as published on
http://www.squid-cache.org/Versions/v2/2.5/bugs/:
- fix a memory leak in client_db (squid bug #833)
- add delay pools information to cachemgr's active_requests
page
- make basic authentication operate case insensitive by
default, case sensitive operation can be enabled via
squid.conf
- log if cache files cannot be created for some reason
- make sure that a HTTP HEAD request does not return stale data
- correctly log partial hits as TCP_MISS instead of TCP_HIT
- fix memory leaks within the NTLM authentication helper
- handle the request_header_max_size directive correctly
- avoid creating a large number of queued DNS lookups for the
same domain in case of DNS problems
- update LDAP helper
PR: ports/69307
Submitted by: maintainer |
14 Jul 2004 18:33:12
2.5.6  |
krion  |
Update to 2.5-STABLE6
PR: ports/69060
Submitted by: maintainer |
28 Jun 2004 16:56:04
2.5.5_12  |
krion  |
Fix the patch that simulates the autotools bootstrap for the
follow-xff-patchset (thanks to Michael Ranner for spotting the
problem and testing the fix). While at it, wordsmith the
comments in the patch.
Use the official patch for the NTLM auth helper vulnerability,
see <http://www.squid-cache.org/Versions/v2/2.5/bugs/> for
details.
Build install the SMB basic authentication helpers by default
PR: ports/68448
Submitted by: maintainer |
18 Jun 2004 11:49:45
2.5.5_11  |
krion  |
Correct the patch for the NTLM helper vulnerability according
to <http://www.squid-cache.org/bugs/show_bug.cgi?id=998>
Apply some cleanups:
+ prefer PATCHDIR over FILEDIR when referring patches
+ remove unnecessary quotes
+ move all substitution tasks to the post-patch target
+ use "${FALSE}" instead of "exit 1" to generate error 1 from a shell
Bump PORTREVISION
PR: ports/68078
Submitted by: maintainer |
10 Jun 2004 15:40:44
2.5.5_10  |
krion  |
- Support systems where pf(4) must be installed from ports (see
ports/67724, submitted by Michal F. Hanula)
- Change ": foo=${foo:=bar}" into "foo=${foo:-bar}" to make the
shell scripts easier to read and understand
- Correct credits for the recently published NTLM auth
vulnerability and fix a nearby braino, too
- Bump PORTREVISION
PR: ports/67797
Submitted by: maintainer |
09 Jun 2004 20:34:00
2.5.5_9  |
des  |
Add a couple of patches, including one for a buffer overflow in the NTLM
authentication helper.
PR: ports/67764
Submitted by: maintainer |
02 Jun 2004 18:10:02
2.5.5_8  |
krion  |
- correct report of available cache memory for cache sizes >2GB
in cache.log (squid bug #570)
- correct the least-load store directory selection algorithm
for the cache directories using the "ufs" storage scheme (squid bug #676)
- correct the type of the cacheCurrentUnlinkRequests SNMP variable
(squid bug #946)
- include client IP addresses in debug output (squid bug #948)
- correct the HTML doctype for autogenerated FTP directory listings
(squid bug #969)
- if no resolv.conf is present the dns_servers variable now defaults
to 127.0.0.1 (squid bug #991)
- update the documentation of the MSNT basic authentication helper
(squid bug #717)
PR: ports/67495
Submitted by: maintainer |
01 May 2004 20:48:47
2.5.5_7  |
krion  |
- Add new vendor patches:
+ clarify the meaning of the ERR keyword in digest authentication
+ correct a spelling error in the Turkish ERR_DNS_FAIL error page
(squid bug #950)
+ fix a problem regarding negatively cached 404 replies with VARY: header
(squid bug #616)
+ correct a parsing bug which rejected a 'range_offset_limit -1 KB'
statement in squid.conf (squid bug #968)
- Bump PORTREVISION
PR: ports/66139
Submitted by: maintainer |
28 Apr 2004 19:49:18
2.5.5_6  |
krion  |
- Fix plist
- Bump PORTREVISION
- Clean up pkg-deinstall:
+ remove an unnecessary variable
+ replace rmdir -p with two distinct rmdir calls since we
do not want to delete $PKG_PREFIX too if it happens to be empty
PR: ports/65918
Submitted by: maintainer |
19 Apr 2004 19:47:44
2.5.5_5  |
krion  |
- Add a vendor patch to fix an assertion failure that could
occur in certain rare conditions involving aborted POST/PUT
requests (squid bug #943)
- Bump PORTREVISION
PR: ports/65776
Submitted by: maintainer |
18 Apr 2004 17:04:26
2.5.5_4  |
krion  |
- integrate a vendor patch to fix a segfault that occured when
submitting a blank username in digest authentication (squid bug #954)
and bump PORTREVISION
- follow Duane Wessel's squid book and use "storage scheme"
instead of "store type"
- remove trailing whitespace
- no longer hardcode the path of the nologin binary in
pkg-install and re-wrap pw(8)'s arguments for better readability
PR: ports/65723
Submitted by: maintainer |
12 Apr 2004 13:27:47
2.5.5_3  |
krion  |
- Integrate a vendor patch that fixes an assertion caused by
truncated DNS replies (squid bug #962)
- Bump PORTREVISION
PR: ports/65458
Submitted by: maintainer |
09 Apr 2004 18:54:13
2.5.5_2  |
krion  |
- Integrate two new vendor patches, please see
<http://www.squid-cache.org/Versions/v2/2.5/bugs/> for details
- Correct OpenSSL support and, while at it, clean up CFLAGS and
LDFLAGS handling (thanks to dinoex for lots of helpful advice!).
- better be safe than sorry and pass PTHREAD_CFLAGS through in
case we are compiling with threads
- try to remove the errorpages directory silently since user
defined directories might legitimately be present
- clean up shell scripting:
+ do not use too many variables
+ use /bin/sh's features instead of external commands
PR: ports/65356
Submitted by: maintainer |
01 Apr 2004 14:12:37
2.5.5_1  |
pav  |
- Integrate four new vendor patches applicable to FreeBSD, see
http://www.squid-cache.org/Versions/v2/2.5/bugs/ for details
- Fix OPTIONS parser to handle a default-to-on option correctly
when either the portoptions file does not exist and/or is not read
(i.e. the PACKAGE_BUILDING and BATCH cases)
- use IGNORE instead of .error to abort
- use ${ID} consistently
- inform the user of squid.sh's rcNG-ness when /etc/rc.subr is present
at installation time
- bump PORTREVISION
PR: ports/64946
Submitted by: Thomas-Martin Seck <tmseck@netcologne.de> (maintainer) |
17 Mar 2004 07:06:46
2.5.5  |
sergei  |
- update to squid-2.5.STABLE5, including two vendor patches issued so far
- provide more OPTIONS, including (untested) support for pf(4)
- integrate the follow-XFF-patch from devel.squid-cache.org (submitted by
Michael Ranner), this should improve interaction with dansguardian
- use id 100 for the squid pseudo user instead of choosing the first free
id greater than 3127, a behaviour introduced with PORTVERSION 2.5.4_6.
Provide a 'changeuser' target to make migration from a high id to id 100
possible (requested by Kris Kennaway)
- don't let the port CONFLICT with itself (criticized by Oliver Eikemeier)
- provide rcNG support in squid.sh only on systems with /etc/rc.subr
PR: ports/64061
Submitted by: Thomas-Martin Seck (maintainer) |
23 Feb 2004 16:41:51
2.5.4_10  |
eik  |
- Integrate a new set of vendor patches, see
http://www.squid-cache.org/Versions/v2/2.5/bugs/ for details
- Remove two local patches in favour of the respective vendor patches
- Bump PORTREVISION
PR: 63030
Submitted by: Thomas-Martin Seck <tmseck@netcologne.de>
Obtained from: http://www.squid-cache.org/Versions/v2/2.5/bugs/ |
17 Feb 2004 11:07:19
2.5.4_9  |
sergei  |
- integrate a new patch from squid-cache.org, see
http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE4-ftp_telnet
for details
- integrate a patch by Glen Gibb to enable ARP based ACLs and make this an
OPTION; see also http://www.squid-cache.org/bugs/show_bug.cgi?id=909
for his original bug report
- integrate additional vendor patches
- make --enable-underscores an OPTION
- set a tighter ACL on libexec/pinger
- use $SQUID_USER and $SQUID_GROUP in pkg-install
- wordsmith comments
- bump PORTREVISION
PR: ports/62442
Submitted by: maintainer
- Fix checksum for updated errorpages patch
PR: ports/62923
Submitted by: Michal Pasternak <dotz@irc.pl>
Approved by: maintainer |
02 Feb 2004 15:28:16
2.5.4_8  |
sergei  |
- Update distinfo for the http_workarounds patch (again)
Please see http://www.squid-cache.org/bugs/show_bug.cgi?id=890 for details.
Bump PORTREVISION
- Update to use new ports collection features:
+ USE_SIZE
+ use PORTDOCS and PLIST_FILES and extend the dynamic package list creation
to include squid's icon files, too
+ move file and directory cleanup on deinstallation to pkg-deinstall
+ get rid of pkg-plist
+ use OPTIONS for the most commonly used options,
leave SQUID_CONFIGURE_OPTIONS for more obscure options
- document known non-working features
- use lowercase for local variables
- other minor cleanups
PR: ports/62222
Submitted by: maintainer |
20 Jan 2004 01:45:36
2.5.4_7  |
ijliao  |
The http_workarounds.patch has been updated, update distinfo accordingly.
PR: 61595
Submitted by: maintainer |
19 Jan 2004 03:03:11
2.5.4_7  |
ijliao  |
- integrate another patch from squid-cache.org, see
http://www.squid-cache.org/Versions/v2/2.5/bugs/ for details
- cleanup dynamic plist generation:
sort files, replace needlessly complex ex-scripting with a ${REINPLACE_CMD}
one-liner
- integrate a patch to make the SMB-NTLM helper compile on 5.x and hook this
helper up to the build (thanks to Stefano Tagliaferri for reporting the bug
and testing the patch)
- bump PORTREVISION
PR: 61543
Submitted by: maintainer |
16 Jan 2004 21:18:20
2.5.4_6  |
sergei  |
- configure squid to run under a dedicated "squid" user by default; make use
of SQUID_{UID,GID} which other squid-related ports already implemented.
The user/group will be created on the fly if they do not already exist.
- introduce WITH_SQUID_LDAP_AUTH to pull in the necessary bits to compile and
use the ldap_auth helper
- install some more authentication helper applications by default
- install helper applications to ${PREFIX}/libexec/squid instead of
${PREFIX}/libexec, add notes about it in pkg-install and pkg-descr
- cleanup the pre-installation tasks and move them from Makefile and pkg-plist
into the pkg-install script; make 'make install' and 'pkg_add' actually do
the same thing
- introduce a pkg-deinstall script
- make squid.sh rcNG compatible (when either /etc/rc_subr or
${PREFIX}/etc/rc_subr is present, the first one will be used, otherwise the
script will work as a "rc classic" script so no additional dependency on(Only the first 15 lines of the commit message are shown above ) |
09 Jan 2004 17:19:32
2.5.4_5  |
sergei  |
- Integrate another patch for the LDAP authentication helper
(see <http://www.squid-cache.org/Versions/v2/2.5/bugs/> for details)
- Correct MASTER_SITES:
+ fix URL for Melbourne University's ftp server
+ replace unreachable ftp mirror at Loughborough University with
the one at LEO.org, Munich
- Bump PORTREVISION
PR: 61128
Submitted by: maintainer |
06 Jan 2004 08:12:55
2.5.4_4  |
sergei  |
- Integrate a new patch issued by the squid development team
to correct the behaviour of the LDAP authentication helper wrt TLS,
see <http://www.squid-cache.org/Versions/v2/2.5/bugs/> for details
- Reinstate the errorpages.patch and work around its partial brokenness
by installing some Lithuanian error pages manually.
- Bump PORTREVISION
PR: 60950
Submitted by: maintainer |
05 Jan 2004 09:54:57
2.5.4_3  |
will  |
Change maintainer to Thomas-Martin Seck.
Approved by: adrian |
02 Jan 2004 00:28:12
2.5.4_3  |
edwin  |
More patches for squid, to keep up to date with the squid distribution.
Submitted by: Thomas-Martin Seck <tmseck@netcologne.de> (privately)
Approved by: maintainer timeout (still) |
30 Dec 2003 09:22:31
2.5.4_2  |
edwin  |
Add more patch files for www/squid
PR: ports/59091 (based on)
Submitted by: Thomas-Martin Seck <tmseck@netcologne.de> |
28 Dec 2003 11:03:28
2.5.4_1  |
edwin  |
Uncomment the lines I needed to test the port. Mea Culpa.
*grabs pointy hat* |
28 Dec 2003 09:58:21
2.5.4_1  |
edwin  |
[PATCH] www/squid: update to 2.5-STABLE4 (+ vendor patches)
[...]
- Add 2.5-STABLE4 vendor patches
- cache.log message on "squid -k reconfigure" confusing
- digest auth never detects password changes
- login with space confuses redirector helpers
- FQDNcache discards negative responses when using internal DNS
- Full details at http://www.squid-cache.org/Versions/v2/2.5/bugs/#STABLE4
[...]
PR: ports/58090
Submitted by: Jonathan Noack <noackj@concordiacrusaders.org>
Approved by: MAINTAINER TIMEOUT |
28 Dec 2003 09:46:35
2.5.4  |
edwin  |
[PATCH] www/squid: update to 2.5 STABLE 4
- Update to 2.5-STABLE4
- plist is correct -- see ports/56392 for details on extra files
PR: ports/56926
Submitted by: Jonathan Noack <noackj@concordiacrusaders.org>
Approved by: MAINTAINER TIMEOUT |
13 Dec 2003 13:35:49
2.5_4  |
kuriyama  |
o Allow to use $SQUID_CONFIGURE_ARGS in /etc/make.conf for additional
$CONFIGURE_ARGS.
No response from: maintainer |
27 Jul 2003 08:45:41
2.5_4  |
adrian  |
.. add the missing file.
PR: ports/54153 |
27 Jul 2003 08:45:11
2.5_4  |
adrian  |
Massive upgrade to 2.5-stable3. Thanks!
PR: ports/54153
Submitted by: Jon Noack <noackjr@alumni.rice.edu> |
09 Apr 2003 08:31:30
2.5_3  |
adrian  |
Bring the squid-2.5 port up to 2.5.STABLE2.
Expect another few commits soon to improve features :) |
09 Mar 2003 10:59:08
2.5_2  |
netchild  |
Add vendor patches:
- fixes for some security issues
- fixes for Samba 2.2.6 or later
- fixes for OpenSSL 0.9.7 or later
- performance fixes
- reliability fixes
- stability fixes
- documentation fixes
- fixes/improvements for OpenLDAP 2.1.x or later
- ...
Have a look at http://www.squid-cache.org/Versions/v2/2.5/bugs/ for a
more detailed description.
Maintainer timeout after: ~3 months
Submitted by: marius@alchemy.franken.de
Approved by: kris |
07 Mar 2003 06:12:57
2.5_1  |
ade  |
Clear moonlight beckons.
Requiem mors pacem pkg-comment,
And be calm ports tree.
E Nomini Patri, E Fili, E Spiritu Sancti. |
31 Jan 2003 09:02:49
2.5_1  |
adrian  |
Grab the patch against squid24 from a PR..
PR: 42747 |
02 Jan 2003 20:21:40
2.5_1  |
seanc  |
Document the configure argument for reverse SSL proxies. |
05 Nov 2002 00:48:06
2.5_1  |
edwin  |
Removed double USE_PERL5
Submitted by: marius@alchemy.franken.de |
04 Nov 2002 22:57:37
2.5_1  |
edwin  |
Half of these ones missed yesterday while converting to USE_REINPLACE.
The other half needs perl to build.
Noticed on bento and others (full mailbox :-) |
04 Nov 2002 01:13:23
2.5_1  |
edwin  |
PERL -> REINPLACE
Noticed by: bento |
14 Oct 2002 05:51:12
2.5_1  |
adrian  |
Update the port to squid-2.5.stable1.
Notable features:
* I'm building _all_ of the error page languages now
* I'm building a handful of the helper modules (the ones that don't
require ldap or samba to be installed)
* underscores in hostnames are enabled - every few weeks we squid people
get emails asking why someone can't get to some_user.geocities.com .
Bad geocities. :) |
13 Oct 2002 21:07:00
2.4_10  |
knu  |
- Use MASTER_SITE_SUBDIR.
- Add MASTER_SITE_RINGSERVER to MASTER_SITES. |