18:36 Vladimir Druzenko (vvd)  Author: Pavel Timofeev

www/squid: update to 6.9

Changelog:
https://www.squid-cache.org/Versions/v6/squid-6.9-RELEASENOTES.html

PR:		278291
Approved by:	arrowd (mentor, implicit)

    eee2e163

13:23 Philippe Audeoud (jadawin) 

www/squid: update to 6.8

remove patch no longer needed
add patch to remove ifdef duplicate

PR:	277672
Approved by:	maintainer, bapt (mentor)
Differential Revision:	https://reviews.freebsd.org/D44431

    df24358

22:47 Li-Wen Hsu (lwhsu)  Author: Pavel Timofeev

www/squid: Update to 6.7

Release notes:
	https://www.squid-cache.org/Versions/v6/squid-6.7-RELEASENOTES.html

PR:		277195

    b345050

16:54 Fernando Apesteguía (fernape)  Author: Pavel Timofeev

www/squid: update to 6.6

ChangeLog: http://www.squid-cache.org/Versions/v6/squid-6.6-RELEASENOTES.html

 * TLS ServerHello
 * Log TLS Communication Secrets
 * Ban ACL key Changes in ACLs
 * Block to-local Traffic
 * RFC 9211: HTTP Cache-Status support
 * RFC 9111: Stop treating Warning specially
 * ext_kerberos_ldap_group_acl: Support -b with -D
 * Remove Gopher Protocol Support
 * Remove Outdated Tools

PR:		275639
Reported by:	timp87@gmail.com (maintainer)

    da4620c

11:27 Vladimir Druzenko (vvd)  Author: Pavel Timofeev

www/squid: update to 6.5 - dumps core after updating from 6.3 to 6.4

Fixed bug in 6.4 after fix CVE.

PR:		274825
Approved by:	arrowd (mentor)
MFH:		2023Q4

    c37e92a

20:47 Joel Bodenmann (jbo)  Author: Pavel Timofeev

www/squid: Update to 6.4

Changelog:
https://github.com/squid-cache/squid/blob/7254f20cbc449119ae39bfeeced965f2c80bad75/ChangeLog

Also remove a dead mirror.

PR:			274646
Approved by:		tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D42324

    55cdc95

06:04 Robert Clausecker (fuz)  Author: Pavel Timofeev

www/squid: update to 6.3

Error message translation files are now part of www/squid-langpack.

Changelog: http://www.squid-cache.org/Versions/v6/squid-6.3-RELEASENOTES.html

PR:		272524

    5313460

22:27 Matthew Seaman (matthew)  Author: Pavel Timofeev

www/squid: update to 5.9

Changes:	https://github.com/squid-cache/squid/blob/4a7431df0fff6e55ed1b544be6f1ed08d6580aae/ChangeLog#L113-L117

PR:		271725
Approved by:	Pavel Timofeev (maintainer)

    a142061

10:19 Robert Clausecker (fuz)  Author: Pavel Timofeev

www/squid: update to 5.8

Changelog:
https://github.com/squid-cache/squid/blob/491933673f2492ffc7b2238ea0d5ac8308dd3160/ChangeLog#L113-L121

PR:		269999

    4a29b00

17:36 Yasuhiro Kimura (yasu) 

www/squid: Update to 5.7

ReleaseNotes:	http://www.squid-cache.org/Versions/v5/squid-5.7-RELEASENOTES.html
PR:		266625
Approved by:	maintainer
MFH:		2022Q4
Security:	f9ada0b5-3d80-11ed-9330-080027f5fec9

    41c0968

16:02 Nuno Teixeira (eduardo)  Author: Pavel Timofeev

www/squid: Update to 5.6

ChangeLog: https://github.com/squid-cache/squid/blob/master/ChangeLog

PR:		264505

    d215389

19:29 Neel Chauhan (nc)  Author: Pavel Timofeev

www/squid: update to 5.5

Changes: https://github.com/squid-cache/squid/commits/v5

PR:	263477

    0e51d9f

05:24 Guangyuan Yang (ygy)  Author: Pavel Timofeev

www/squid: Update to 5.4.1

Changelog:	https://github.com/squid-cache/squid/commits/v5

PR:		261913

    e415dda

10:11 Daniel Engberg (diizzy)  Author: Pavel Timofeev

www/squid: update to 5.3: New port: Google Chat plugin for libpurple

Changelog: http://www.squid-cache.org/Versions/v5/squid-5.3-RELEASENOTES.html

PR:		260927

    d792ff1

09:15 Nuno Teixeira (eduardo)  Author: Pavel Timofeev

www/squid: update to 4.15

- Use DISTVERSION instead of PORTVERSION

ChangeLog:
https://github.com/squid-cache/squid/pull/818/files#diff-91c5b46dc84a94604a4e4d0caed9bf85590a2eddbb12d2e8dc80badf324a9dfbR1-R16

PR:		256358
Approved by:	dbaio, garga (mentors, implicit)

    b5c8df5

16:48 nc 

www/squid: update to 4.14

Changes: https://github.com/squid-cache/squid/commits/v4

PR:		253378
Submitted by:	timp87 AT gmail DOT com (maintainer)

 

15:07 pi 

www/squid: update 4.12 -> 4.13

- https://lists.freebsd.org/pipermail/freebsd-ports/2020-August/119290.html
  mentions security issues, but no CVEs

PR:		248856
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)
MFH:		2020Q3
Relnotes:	http://www.squid-cache.org/Versions/v4/changesets/
Security:	probably

 

14:50 garga 

www/squid: Update to 4.12 among other changes

- Update to 4.12
- Remove upstreamed patches
- Enhance rc script (thanks to Walter von Entferndt for ideas!):
-- create piddir if missing (/var/run may be a tmpfs)
-- don't wait endlessly if squid can't create a pidfile
-- define squid_group
- address GREASEd (thanks to Joshua Kinard and Juraj Lutter!)

PR:		247397
Submitted by:	Juraj Lutter <juraj@lutter.sk>
Reworked by:	maintainer
Approved by:	maintainer
MFH:		2020Q3 (bug-fix release)
Sponsored by:	Rubicon Communications, LLC (Netgate)

 

15:59 pi 

www/squid: add CONFLICTS with incoming squid-devel and rework

- add delayer external acl helper to the build
- add eDirectory_userip external acl helper to the build if LDAP enabled
- add eDirectory and LDAP digest auth helpers to the build if LDAP enabled
- add DB log daemon helper to the build
- add LFS url rewrite helper to the build
- remove useless REINPLACE_CMD from post-patch
- remove DIST_SUBDIR as it's useless now
- simplify REINPLACE_CMD in post-patch-IPV6-off
- regenerate patches to make portlint happy
- reverse sort plist

PR:		246139
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)

 

19:30 pi 

www/squid: update 4.10 -> 4.11

PR:		245758
Submitted by:	timp87@gmail.com (maintainer)
Relnotes:	http://www.squid-cache.org/Versions/v4/squid-4.11-RELEASENOTES.html

 

19:46 pi 

www/squid: upgrade 4.9 -> 4.10

PR:		244026
Submitted by:	timp87@gmail.com (maintainer)
Relnotes:	http://lists.squid-cache.org/pipermail/squid-announce/2020-February/000107.html
Security:	http://www.squid-cache.org/Advisories/SQUID-2020_1.txt
		http://www.squid-cache.org/Advisories/SQUID-2020_2.txt
		http://www.squid-cache.org/Advisories/SQUID-2020_3.txt

 

08:28 joneum 

Update to 4.9

Changelog: http://www.squid-cache.org/Advisories/SQUID-2019_11.txt

PR:		241976
MFH:		2019Q4
Security:	620685d6-0aa3-11ea-9673-4c72b94353b5
Sponsored by:	Netzkommune GmbH

 

17:35 swills 

www/squid: update to 4.8

PR:		239214
Submitted by:	timp87@gmail.com (maintainer)

 

09:06 joneum 

Update to 4.7

Changelog:

- Bug 4942: --with-filedescriptors does not do anything
- Bug 4928: Cannot convert non-IPv4 to IPv4
- Bug 4823: assertion failed: "lowestOffset () <= target_offset"
- Bug 4796: comm.cc !isOpen(conn->fd) assertion when rotating logs
- Fix squidclient authentication to origin servers
- Fix stack-based buffer-overflow when parsing SNMP messages
- Add support for buffer-size= to UDP logging
- TLS: When using OpenSSL, trust intermediate CAs from trusted store

PR:		237882
Submitted by:		timp87@gmail.com (maintainer)
Sponsored by:	Netzkommune GmbH

 

19:10 swills 

www/squid: update to 4.6

PR:		236090
Submitted by:	timp87@gmail.com (maintainer)
Reported by:	ncrogers@gmail.com

 

12:22 swills 

www/squid: update to 4.5

PR:		234777
Submitted by:	timp87@gmail.com (maintainer)

 

00:18 swills 

www/squid: Update to 4.4

While here, pet portlint

PR:		233845
Submitted by:	takefu@airport.fm
Approved by:	timp87@gmail.com (maintainer)

 

18:31 pi 

www/squid: update 4.1 -> 4.3

- fix build with LibreSSL

PR:		231442
Submitted by:	timp87@gmail.com (maintainer), takefu@airport.fm
Relnotes:	http://www.squid-cache.org/Versions/v4/changesets/

 

20:46 swills 

www/squid: update to 4.1

PR:		229601
Submitted by:	timp87@gmail.com (maintainer)

 

21:20 madpilot 

Update www/squid to 3.5.27

PR:		221765
Submitted by:	timp87@gmail.com (maintainer)

 

17:08 joneum 

- www/squid: Update from 3.5.25 to 3.5.26
- Changes:
 *Bug 4711: SubjectAlternativeNames is missing in some generated certificates
 *Bug 4695: squidpurge: GCC 7 build errors
 *Bug 4682: ignoring http_access deny when client-first bumping mode is used
 *Bug 4682: Fix ssl_bump "bump" action documentation
 *Bug 4653: %st lies about tunneled traffic volumes
 *Bug 4589: ssl_crtd: returning zero on failure
 *Bug 3772: message from FTP server gets mangled
 *Bug 3102: FTP directory listing drops fist character of file names
 *Add OpenSSL library details to -v output
 *... and some documentatino updates

PR:		219773
Submitted by:	timp87 at gmail.com (maintainer)
Approved by:	tz, miwi (mentors)
Differential Revision:	https://reviews.freebsd.org/D11041

 

13:51 miwi 

- Update to 3.5.25

PR:		218343
Submitted by:	maintainer

 

15:11 riggs 

Update to upstream version 3.5.24; retire support for FreeBSD < 10

PR:		216578
Submitted by:	timp87@gmail.com (maintainer)

 

03:41 junovitch 

www/squid: update 3.5.22 -> 3.5.23

- Spell CHOSEN_COMPILER_TYPE correctly
- Remove upstreamed patch (IPv6 + PF crash)
- Add --enable-zph-qos option to default set
  http://wiki.squid-cache.org/Features/QualityOfService

PR:		215416
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)
Security:	CVE-2016-10002
Security:	CVE-2016-10003
Security:	https://vuxml.FreeBSD.org/freebsd/41f8af15-c8b9-11e6-ae1b-002590263bf5.html
MFH:		2016Q4

 

12:39 amdmi3 

- Update to 3.5.22
- Switch to options helpers

PR:		212909
Submitted by:	timp87@gmail.com (maintainer)

 

00:59 junovitch 

www/squid: update 3.5.19 -> 3.5.20

- Also swap USE_OPENSSL=yes to USES=ssl

PR:		210811
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)

 

12:56 matthew 

Security update to 3.5.19

PR:		209334
Submitted by:	timp87@gmail.com (maintainer)
Security:	25e5205b-1447-11e6-9ead-6805ca0b3d42

 

18:49 pi 

www/squid: 3.5.16 -> 3.5.17

Changes:
  http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID_3_5_17.html
  http://www.squid-cache.org/Advisories/SQUID-2016_5.txt

PR:		208939
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)
MFH:		2016Q2
Security:	CVE-2016-4052, CVE-2016-4053, CVE-2016-4054

 

13:45 pi 

www/squid: Add all available official patches up to 14031

It fixes two annoying and long-standing problems:
- header forgery detection (using sslbump) leads to crash
- add chained certificates and signing certificate to
  peek-then-bumped connections.

PR:		207901
MFH:		2016Q2
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)
Reported by:	Christophe Anselme-Moizan <christophe.anselmemoizan@orange.com>

 

15:13 riggs 

Update to upstream version 3.5.16

PR:		208463
Submitted by:	timp87@gmail.com (maintainer)

 

19:05 pi 

www/squid: cleanup, adding patches

1. Turn ON all options that don't require external dependencies.
2. Split SMB options to more items to make it possible to compile
   squid with samba36 and samba42.*
3. Set databases/p5-DBI as a dependency for SQL option and add note
   to pkg-message about perl DBD drivers.*
4. Add fix for PF+IPv6.**
5. Require SSL option if SSL_CRTD is on.
6. Small fixes.
7. Add all available patches from upstream.

*  thanks to Alonso Cardenas Marquez!
** thanks to Orlando Bassotto!

PR:		208290
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)

 

16:26 feld 

www/squid: Fix crashes under heavy load

Squid 3.5.15 addresses security issues, but reports have been made that
it is unstable under load. These patches repair stability while not
requiring we downgrade to 3.5.14 which reintroduces security vulnerabilities.

PR:		207762
Approved by:	maintainer
MFH:		2016Q1

 

01:09 junovitch 

www/squid: update 3.5.14 -> 3.5.15

Changes:
* Bug 3870 assertion failed: String.cc: 'len_ + len <65536' in ESI::CustomParser
* Fix multiple assertion on String overflows
* Fix unit test errors on MacOS
* Better handling of huge response headers. Fewer incorrect "Bug #3279" messages
* Log noise reduction for eCAP

PR:		207454
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)
Security:	https://vuxml.FreeBSD.org/freebsd/660ebbf5-daeb-11e5-b2bd-002590263bf5.html
X-MFH-With:	r406625, r409148

 

03:40 junovitch 

www/squid: update 3.5.13 -> 3.5.14

PR:		207294
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)
Security:	CVE-2016-2390
Security:	https://vuxml.FreeBSD.org/freebsd/56562efb-d5e4-11e5-b2bd-002590263bf5.html
X-MFH-Note:	MFH not required, only 3.5.13 in ports/head is vulnerable

 

00:20 junovitch 

www/squid: update 3.5.12 -> 3.5.13

Changes:
* Bug 4397: DragonFly BSD, POSIX shared memory is implemented as filepath
* Bug 4387: Kerberos build errors on Solaris
* TLS: Support Ephemeral Elliptic Curve Diffie-Hellman (EECDH) key exchange
* TLS: Complete certificate chains using external intermediate certificates
* Avoid memory leaks when an X.509 certificate validator is used with SslBump
* Fix connection retry and fallback after failed server TLS connections
* Fix GnuTLS detection via pkg-config
* Fix startup crash with a misconfigured (too-small) shared memory cache
* ... and some documentation updates

PR:             206127
Submitted by:   Pavel Timofeev <timp87@gmail.com> (maintainer)

 

18:45 flo 

Update to 3.5.12

PR:		204913
Submitted by:	<timp87@gmail.com> (maintainer)

 

17:24 junovitch 

www/squid: update 3.5.10 -> 3.5.11

- Regen patches for new release and for portlint
- Drop creating/deleting /var/run/squid in the rc script as this duplicates
  handling it in the pkg-plist

Changes:
* Bug 3574: crashes on reconfigure and startup
* Bug 4347: compile errors with LibreSSL 2.3
* Bug 4281: copy-paste typos in src/tools.cc
* Bug 4279: No response from proxy for FTP-download of non-existing file
* Bug 4188: Bumping intercepted SSL connections does not work on Solaris
* Fix incorrect authentication headers on cache digest requests
* Fix connection stats, including %<lp, missing for persistent connections
* Fix invalid memory access issues in SBuf
* Avoid errors when parsing manager ACL in old squid.conf

PR:		204217
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)
Tested by:	ncrogers@gmail.com

 

18:53 flo 

Update to 3.5.10

PR:		203501
Submitted by:	<timp87@gmail.com> (maintainer)

 

01:51 junovitch 

www/squid: security update and build fix

- security update 3.5.8 -> 3.5.9 [1]
- Fix TP_IPF build on FreeBSD 9 [2]

PR:		203186 [1]
PR:		202950 [2]
Approved by:	Pavel Timofeev <timp87@gmail.com> (maintainer) [1]
Security:	d3a98c2d-5da1-11e5-9909-002590263bf5
MFH:		2015Q3
X-MFH-With:	r391555, r392222, r393602, r396106, r396185, r397215

 

16:12 junovitch 

www/squid: update 3.5.7 -> 3.5.8

PR:		202826
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)
Approved by:	feld (mentor)

 

18:32 robak 

www/squid: update 3.5.6 -> 3.5.7

- Fix build with ecap by clang
- Get rid of useless and always empty /var/squid/logs
- Rework patches to make portlint a bit happier

PR:		202053
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)

 

17:38 feld 

Update to 3.5.6
Resolve security issue, no CVE assigned yet

Approved by:	maintainer
Security:	150d1538-23fa-11e5-a4a5-002590263bf5

 

21:03 flo 

- update to 3.5.5
- fix GASSAPI_NONE handling;
- unbreak eCAP option, but only for FreeBSD < 10, no luck with clang.

PR:		200070
Submitted by:	<timp87@gmail.com> (maintainer)

 

16:34 pi 

www/squid: 3.4.12 -> 3.5.3

As it is written on http://www.squid-cache.org/Versions/ for 3.4.x
versions: they are no longer intended for general use in new installations.
So this is a big upgrade.

Changes to squid-3.5.3 (28 Mar 2015):

- Regression Bug 4213: negotiate_kerberos_auth: freeing non-dynamic memory
- Regression Bug 4206: Incorrect connection close on expect:100-continue
- Bug 4204: ./configure does not abort when required helpers cannot be built
- Bug 3805: support shared memory on MacOS X in Mem::IPC::Segment
- Bug 2907: high CPU usage on CONNECT when using delay pools
- basic_getpwnam_auth: fail authentication on crypt() failures
- basic_nis_auth: fail authentication on crypt() failures
- ext_kerberos_ldap_group_acl: Heimdal support improvements
- ext_wbinfo_group_acl: Perl 5.20 support
- ... and several compile issues

Changes to squid-3.5.2 (18 Feb 2015):

- Regression Bug 4176: Digest auth too many helper lookups
- Regression Bug 4180: not-fully-initialized data member in ACLUserData
- Bug 4172: Solaris broken krb5-config
- Bug 4073: Cygwin compile errors
- Bug 3919: remove several never-true / never-false comparisons
- HTTPS: Add missing root CAs when validating chains that passed
  internal checks
- Fix some cbdataFree related memory leaks
- Quieten CBDATA 'leak' messages
- Set SNI information in transparent bumping mode
- negotiate_kerberos_auth: fix krb5.conf backward compatibility
- Fix memory leaks in cachemgr.cgi URL parser
- Fix sslproxy_options in peek-and-splice mode
- ... and fix several portability and build issues
- ... and some documentation updates
- ... and all fixes from squid 3.4.11

Changes to squid-3.5.1 (13 Jan 2015):

- Fix handling of invalid SSL server certificates when splicing connections
- basic_smb_lm_auth: Simplified MSNT basic auth helper
- squidclient: Fix -A and -P options
- ... and several portability fixes
- ... and all fixes from squid 3.4.11
- ... and a lot of documentation updates

Changes to squid-3.5.0.4 (21 Dec 2014):

- Bug 3826: pt 2: Provide a systemd .service file for Squid
- Support http_access denials of SslBump "peeked" connections.
- Fix DONT_VERIFY_DOMAIN ssl flag
- Fix peek-and-splice mode: certificate validation for domain mismatched errors
- negotiate_kerberos_auth: MEMORY keytab and replay cache support
- ... and some documentation updates
- ... and a large amount of code polishing (non-logic changes)

Changes to squid-3.5.0.3 (09 Dec 2014):

- Bug 4146: workaround SSL Bump crash on Linux
- Bug 4135: Support \-escaped characters in regex patterns
- Bug 4131: SIGSEGV at store.cc:962 content_length > store_maxobjsize
- Fix delay_parameters parsing
- HTTP/2: handle 'PRI' method found in HTTP/1.x traffic
- ... and all changes from squid 3.4.10
- ... and a lot of documentation updates

Changes to squid-3.5.0.2 (31 Oct 2014):

- Fix FTP socket opening during reconfigure
- ... and all changes from 3.4.9
- ... and some build errors in rarely used code
- ... and several documentation updates

Changes to squid-3.5.0.1 (17 Oct 2014):

- Port from 2.7: redirector and logging urlgroup feature
- Bug 4093: source-maintenance.sh bad perl -i option
- Bug 3608: per-service name for workers UDS sockets
- Bug 2554: 32-bit wrap in AUFS counters
- Bug 1961 pt1: URL handling redesign
- Bug 1202 pt1: documentation for refresh_pattern algorithms
- Update Squid boilerplate copyright/license
- Update the http(s)_port directives protocol= parameter
- Update forward_max_tries to permit 25 server paths
- Update Kerberos library detection and build options
- Support ACLs on ftp_epsv directive
- Support >32KB objects in cache_dir rock storage
- Support client connection annotation by helpers via clt_conn_tag=TAG
- Support native FTP Relay
- Support libgnugss Kerberos library
- Support libecap v1.0
- Support SSL Peek and Splice feature
- Support receiving PROXY protocol version 1 and 2
- Replace --enable-ssl build option with --with-openssl
- Enable -n service name command line option for all Squid builds
- Enable ICAP client by default
- Fix configuration file parsing bugs, related to quoted strings
- Fix Windows MinGW build errors
- Fix multiple TCP outgoing TOS/DiffServ bugs
- Fix Cygwin /etc/resolv.conf parsing
- Fix crash when sending %ssl::cert_subject to external ACL w/o certificate
- Fix crash reading malformed config files
- Send selected SSL version and cipher to the certificate validation helper
- Validate server certificates without bumping
- Add zero-copy string buffer support
- Add automated squid.conf parser testing with squid -k parse
- Add adaptation_service ACL
- Add logformat code %tS to log transaction start time
- Add logformat code %>rd to log client URL domain name
- Add key_extras to proxy authentication
- Add url_rewrite_extras and store_id_extras directives
- Add send_hit and store_miss directives
- Add collapsed_forwarding directive
- Add sslproxy_cert_sign_hash directive
- Add SMP SSL session cache
- Add cache_peer standby connections
- Add helper ext_delayer_acl
- Add TCP_TUNNEL log code for CONNECT tunnels which are not SSL-bumped
- Add BUILDCXX and BUILDCXXFLAGS configure options for cross-compile
- Remove COSS storage in favour of Rock storage
- Remove dnsserver and external DNS helper API in favour of mDNS
- Remove broken mallinfo() accounting and memory tracing
- Remove hierarchy_stoplist in favour of always_direct
- Deprecate tag ACL type in favour of note ACL type
- Deprecate urlgroup feature in favour of note ACL type
- HTTP/1.1: method names are case-sensitive
- HTTP/1.1: register new headers from RFC 723x
- squidclient: polish and update help display
- squidclient: support TLS with GnuTLS 3.1.5+
- squidclient: support verbosity levels
- squidclient: --ping mode module support
- url_fake_rewrite: support concurrency
- storeid_file_rewrite: support concurrency
- digest_file_auth: support concurrency
- digest_edirectory_auth: support concurrency
- digest_ldap_auth: support concurrency
- ... and many error page translation updates
- ... and much code cleanup and polishing

PR:		198089
Submitted by:	Pavel Timofeev <timp87@gmail.com>
Tested by:	John Marshall <john.marshall@riverwillow.com.au>

 

19:58 sunpoet 

- Update to 3.4.12
- While I'm here:
  - Pet portlint
  - Remove contiguous blank lines

Changes:	http://www.squid-cache.org/Versions/v3/3.4/RELEASENOTES.html
PR:		197812
Submitted by:	<timp87@gmail.com>

 

12:50 madpilot 

- Update to 3.4.11
- Fix STACKTRACES option
- Put correct permissions on /var directories creted by the port

PR:		196711
Submitted by:	timp87 at gmail.com

 

13:58 marino 

www/squid: Upgrade version 3.4.9 => 3.4.10

PR:		195843
Submitted by:	timp87 (gmail)

 

22:12 marino 

www/squid: Upgrade version 3.4.8 => 3.4.9

This update should address some memory leak issues

PR:		193938
PR:		194726
Submitted by:	timp87 (gmail)

 

13:24 madpilot 

Update squid to 3.4.8 and add patches to squid33.

This update addresses CVE-2014-6270.

PR:		193737
Submitted by:	timp87 at gmail.com

 

12:29 marino 

www/squid: Upgrade version 2.7.9 => 3.4.7

From now on, there will only be one squid port, this one.  Squid33 has
been deprecated and will expire on 31 JAN 2015.

PR:		192828
Submitted by:	timp87 (gmail)
Contributions:	takefu (airport.fm), Dennis Glatting

 

19:41 tmseck 

- Add the vendor patch for SQUID-2012:1 (CVE-2012-5643) and update VuXML
  information accordingly
- Bump PORTREVISION

PR:		ports/177773
Submitted by:	Kan Sasaki
Approved by:	flo (mentor)
Security:	c37de843-488e-11e2-a5c9-0019996bc1f7

 

12:38 miwi 

- Get Rid MD5 support

10:51 miwi 

- Update to 2.7.STABLE9
- Update MASTER_SITES
- Move default cache and log directories from $PREFIX/squid/ to /var/squid/

PR:             145674
Submitted by:   Thomas-Martin Seck <tmseck@web.de> (maintainer)

07:42 miwi 

- Update to 2.7.STABLE8

PR:             144668
Submitted by:   Thomas-Martin Seck <tmseck@web.de> (maintainer)

06:29 delphij 

Update www/squid and www/squid30 to address Squid HTCP Packet Processing
NULL Pointer Dereference vulnerability (SQUID-2010:2)

22:41 miwi 

- Update to 2.7-STABLE7

PR:             138941
Submitted by:   Thomas-Martin Seck <tmseck@web.de> (maintainer)
Feature safe:   yes

14:32 miwi 

- Update 2.7.STABLE6

PR:             131431
Submitted by:   Thomas-Martin Seck <tmseck@web.de> (maintainer)
Security:      
http://www.vuxml.org/freebsd/9c2460a4-f6b1-11dd-94d9-0030843d3802.html

12:36 miwi 

- Update to 2.7.STABLE5

PR:             128253
Submitted by:   Thomas-Martin Seck <tmseck@web.de> (maintainer)

21:57 miwi 

- Update to 2.7.STABLE4

PR:             126413
Submitted by:   Thomas-Martin Seck <tmseck@web.de> (maintainer)

19:10 beech 

- Update to 2.7.STABLE3

Submitted by:   Thomas-Martin Seck <tmseck@web.de> (maintainer)

22:27 beech 

- Update to 2.6.STABLE21

PR:             ports/125099
Submitted by:   Thomas-Martin Seck <tmseck@web.de> (maintainer)

12:07 miwi 

- Update to 2.6STABLE20

PR:             123432
Submitted by:   Thomas-Martin Seck <tmseck@web.de> (maintainer)

00:46 beech 

- Update to 2.6.STABLE19
- Add a patch for Squid bug #2203 (Fixed in the 3.0 but not yet in the 2.6
series)
- Update maintainer mail address

PR:             ports/122383
Submitted by:   Thomas-Martin Seck <tmseck@web.de> (maintainer)

13:11 miwi 

- Update to 2.6.STABLE18

PR:             119563
Submitted by:   Thomas-Martin Seck <tmseck@web.de> (maintainer)

19:24 delphij 

Update to 2.6.STABLE17

PR:             ports/118430
Submitted by:   maintainer

19:48 delphij 

Apply vendor patch 11780 for SQUID-2007_2.

Security:       Denial of Service from trusted client
Security:       VuXML 6eb580d7-a29c-11dc-8919-001c2514716c
Approved by:    portmgr (erwin)

00:26 miwi 

- Update to 2.6.STABLE16

PR:             116165
Submitted by:   Thomas-Martin Seck <tmseck@netcologne.de> (maintainer)

15:27 sem 

- Update to 2.6STABLE15 + 5 vendors patches.
  See http://www.squid-cache.org/Versions/v2/2.6/changesets/

PR:             ports/116093
Submitted by:   maintainer

02:32 delphij 

 - Update to 2.6.STABLE14 plus three patches (see
   http://www.squid-cache.org/Versions/v2/2.6/changesets/ for details)
 - Add two new authentication helpers: DB and squid_kerb_auth
 - Add the website mirrors to the list of download sites as a last resort
   in case the distfiles do not make it to the FTP mirrors in time
 - Update the mirror server list a bit after checking with the official list
   at http://www.squid-cache.org/Download/mirrors.dyn
 - Stop handling the "WITH_DEBUG" case: bsd.port.mk handles this just fine
 - Add a new rc configuration variable "squid_pidfile" that defaults to
   $PREFIX/squid/logs/squid.pid, use this variable for $pidfile in
   the rc script and document it in the Squid default/example configuration
 - Update the ICAP-2.6-bootstrap patch to reflect changes in the Squid
   sources

Submitted by:   maintainer
PR:             ports/115453 (in followup)

01:52 delphij 

 - update to 2.6.STABLE13
 - replace sunsite.auc.dk which is no longer serving Squid distfiles
   (cf fenner's distfile survey) and replace it with ftp.belnet.be.
   The Squid mirror list seems to have vanished (temporarily) during
   their website redesign spree but it used to be listed there as
   an official Belgian mirror.
 - remove files/extra-patch-changeset_11375 which was added in
   2.6.12_1, the fix is present in 2.6.STABLE13.
 - simplify the SQUID_KQUEUE parsing; Squid-2 will automatically enable
   kqueue(2) support and the new OPTIONS parser does no longer require
   .ifndef WITHOUT_* constructs
 - remove IGNORE for the combination of SQUID_SSL and SQUID_ICAP
 - (try to) adapt the ICAP-core patch to the changes in the Squid code base
 - add a +ICAP identifier to the internal Squid version string to help the
   Squid developers in identifying patched up Squid versions (some
   reported bugs were not really Squid but rather ICAP bugs it seems)

Submitted by:   Thomas-Martin Seck (maintainer)
PR:             ports/112751

13:13 miwi 

- Update to 2.6.STABLE.12

PR:             110610
Submitted by:   Thomas-Martin Seck <tmseck@netcologne.de> (maintainer)
Security:      
http://www.vuxml.org/freebsd/c27bc173-d7aa-11db-b141-0016179b2dd5.html

11:49 miwi 

- Update to 2.6.STABLE11.
- Update the ICAP client patchset to not remove a specific function call;
  this should fix timeout issues reported on the squid-dev list

PR:             110471
Submitted by:   Thomas-Martin Seck <tmseck@netcologne.de> (maintainer)

22:47 miwi 

- Update to 2.6 stable10

PR:             110046
Submitted by:   Thomas-Martin Seck <tmseck@netcologne.de> (maintainer)

08:42 pav 

Rename

  www/squid -> www/squid25
  www/squid26 -> www/squid

thus effectively updating www/squid to 2.6.STABLE9

PR:             ports/108562
Submitted by:   Thomas-Martin Seck <tmseck@netcologne.de> (maintainer)
Repocopies by:  marcus

23:03 miwi 

- update pkg-descr and remove some cruft
- consistently use "Squid" when referring to the software's name
- define COMMENT a bit less chatty
- replace the progeny.com mirror with the one hosted by Vistech
- fix a wrong path in pkg-message.in (thanks to "Tuc at the Beach House")
- pass ${squid_flags} when stopping or reconfiguring Squid (ports/100510)

PR:             ports/105023
Submitted by:   Thomas-Martin Seck <tmseck@netcologne.de> (maintainer)
Sponsored by:   FreeBSD Bug-a-thon #2

09:26 itetcu 

- integrate a vendor patch from
  <http://www.squid-cache.org/Versions/v2/2.5/bugs/>
  to correct a problem with logging that could occur in certain cases
  (Squid bug #1605)
- add some of the WWW mirrors found on
  <http://www.squid-cache.org/Mirrors/http-mirrors.html> as additional
  PATCH_SITES
  (thanks to Robert Backhaus for the initial submission)
- make the rc.d script print "Stopping squid." in the hand rolled stop command
  when shutting down, just like default rc.subr stop routine would do

PR:             ports/100056
Submitted by:   maintainer

19:55 sem 

- Integrate a vendor patch published on
  <http://www.squid-cache.org/Versions/v2/2.5/bugs/> to fix an "assertion
  failed: HttpReply.c:105: rep" error (squid bug #1606).

- Update the customlog patchset accordingly.

- Bump PORTREVISION.

PR:             ports/97066
Submitted by:   maintainer

16:11 garga 

- Update to 2.5.STABLE14
- accept 7-CURRENT's WITHOUT_NIS switch as a synonym for NO_NIS
- add a missing "/" in files/pkg-message.in
- update the ICAP core patchset to the latest CVS (2006-05-21)
- update the custom logfile patchset to the latest CVS (2006-05-21)

PR:             ports/97607
Submitted by:   maintainer

21:33 ehaupt 

- Introduce four vendor patches [1] which:

 - simplify definition of the SQUIDHOSTNAMELEN constant (squid bug #1434)
 - correct display of mime icons when visible_hostname contains only the plain
   hostname  without a domain (squid bug #1532)
 - plug a memory leak in the HTCP client code (squid bug #1553)
 - plug a memory leak in the ident processing code (squid bug #1557)

- Bump PORTREVISION

[1] http://www.squid-cache.org/Versions/v2/2.5/bugs/

PR:             97356
Submitted by:   Thomas-Martin Seck <tmseck@netcologne.de> (maintainer)

17:11 pav 

- Update to 2.5.STABLE13
- Implement a new option WITH_SQUID_SASL_AUTH, off by default
- Update the ICAP core patchset to the latest CVS
- Extensive portlintification and cleanups

PR:             ports/94642
Submitted by:   Thomas-Martin Seck <tmseck@netcologne.de> (maintainer)

15:44 sem 

Integrate two vendor patches being published on
<http://www.squid-cache.org/Versions/v2/2.5/bugs/>:

- Fix wbinfo_group.pl to correctly work with the wbinfo command
  from samba-3.0.21 (squid bug #1472)

- Fix a crash when accessing async IO function counters via the
  cachemgr CGI in cases where squid was compiled for aufs support
  but not actually using it (squid bug #1464)

While at it, remove an unneeded patch from the ICAP core patchset.

PR:             ports/91831
Submitted by:   maintainer

16:01 garga 

- Integrate vendor patch to fix a problem with the SMB helper when
  --enable-ntlm-fail-open was specified as an additional configuration
  option (squid bug #1022).
  The port does not enable this option by default; document it, while at it.
- Add SHA256 checksum for the squid tarball
- Integrate ICAP client support based upon the icap project's CVS repository,
  turned off by default.
  To activate it, build the port with WITH_SQUID_ICAP defined or rerun
  'make config'.
- Bump PORTREVISION

PR:             ports/90688
Submitted by:   maintainer

14:05 krion 

Update to 2.5.STABLE12

PR:             ports/88327
Submitted by:   maintainer

12:21 garga 

Integrate the following vendor patches as published on
<http://www.squid-cache.org/Versions/v2/2.5/bugs/>:

- document that tcp_outgoing_xxx works badly in combination with
  server_persistent_connections (squid bug #454)
- add more tracing in test mode of squid_ldap_auth (squid bug #1395)
- fix breakage of accel_single_host when combined with
  server_persistent_connection (squid bug #1402)
- correctly implement the CACHE_HTTP_PORT configuration directive
  (squid bug #1403)
- fix the problem that CNAME addresses were remembered with a wrong TTL
  (squid bug #1404)
- fix incorrect handling of squid-internal-dynamic/netdb in conjunction with
  httpd_accel/transparent proxies (squid bug #1410)
- properly revalidate the cache on HEAD requests (squid bug #1411)
- correct handling of Set-Cookie headers on cache refreshes (squid bug #1419)
- fix a vulnerability in the FTP parsing code (squid bug #1426)

PR:             ports/87637
Submitted by:   maintainer

12:55 garga 

Integrate a patch from
<http://www.squid-cache.org/Versions/v2/2.5/bugs/>:
- fix delay pools behaviour which was broken by the patch for squid bug #500,
  introduced in squid-2.5.10_6 (squid bug #1405)

PR:             ports/86669
Submitted by:   maintainer

17:28 garga 

- Update to 2.5-STABLE11
- Adapt the follow-XFF patches to the changes to squid's sources

PR:             ports/86472
Submitted by:   maintainer

17:39 pav 

Update the NTLM-scheme patch to version 2. The first version of the patch is
broken (cf <http://www.squid-cache.org/bugs/show_bug.cgi?id=1391>).

PR:             ports/86215
Submitted by:   Thomas-Martin Seck <tmseck@netcologne.de> (maintainer)

20:10 pav 

- Integrate the following vendor patches:
  - LDAP helpers do not work with TLS (-Z option)
    (squid bug #1389)
  - Incorrect store dir selection debug message on objects >2G
    (squid bug #1343)
  - Enums cannot be assumed to be signed ints
    (squid bug #1343)
  - Allow leaving core dumps on Linux
    (squid bug #1335)
  - Do not let clients bypass delay pools by faking a cache hit
    (squid bug #500)
  - Fix problems regarding CONNECT requests when squid is configured with
    "pipeline_prefetch on"
  - Fix a possible DOS condition which may be triggered by certain NTLM
    authentication requests
    (squid bug #1391)
- Remove patching relevant to recently removed pf from ports option

PR:             ports/86179
Submitted by:   Thomas-Martin Seck <tmseck@netcologne.de> (maintainer)

07:57 sem 

- Fix somewhat messed up titles in FTP listings (squid bug #1220)
- FTP listings use "BASE HREF" much more than necessary (squid bug #1204)
- Cleanups for 64bit architectures (squid bug #1316)
- Allow wb_ntlm_auth to run more silent (squid bug #518)
- Add a new 'mail_program' configuration option
- Fix a possible denial of service condition regarding sslConnectTimeout
  (squid bug #1355, Secunia Advisory SA16674)
- Avoid a possible assertion failure in StatHist.c (squid bug #1325)
- Fix issues regarding chroot'ed installations on 'squid -k reconfigure'
  (squid bug #1331)
- Make URLs in error pages more consistent and less confusing (squid bug #1342)
- Fix compilation when _FORTIFY_SOURCE is defined (squid bug #1344)
- Fix handling of unexpected 250 replies from certain odd FTP servers
  (squid bug #1348)
- Add Greek error pages (squid bug #1351)
- Fix a possible denial of service condition with regards to aborted requests
  (squid bug #1368)
- Fix the -U option of squid_ldap_auth (squid bug #1370)
- Fix the output of the SNMP cacheClientTable for IP adresses that consist of
  16 digits (squid bug #1375)
- Make the From: field of mails sent from squid configurable to avoid
  mails getting lost due to spam filtering (squid bug #1380)

PR:             ports/85688
Submitted by:   maintainer

19:25 flz 

- Update transparent patch.

PR:             ports/82838
Submitted by:   maintainer