20:46 swills 

www/squid: update to 4.1

PR:		229601
Submitted by:	timp87@gmail.com (maintainer)

 

03:41 junovitch 

www/squid: update 3.5.22 -> 3.5.23

- Spell CHOSEN_COMPILER_TYPE correctly
- Remove upstreamed patch (IPv6 + PF crash)
- Add --enable-zph-qos option to default set
  http://wiki.squid-cache.org/Features/QualityOfService

PR:		215416
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)
Security:	CVE-2016-10002
Security:	CVE-2016-10003
Security:	https://vuxml.FreeBSD.org/freebsd/41f8af15-c8b9-11e6-ae1b-002590263bf5.html
MFH:		2016Q4

 

13:45 pi 

www/squid: Add all available official patches up to 14031

It fixes two annoying and long-standing problems:
- header forgery detection (using sslbump) leads to crash
- add chained certificates and signing certificate to
  peek-then-bumped connections.

PR:		207901
MFH:		2016Q2
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)
Reported by:	Christophe Anselme-Moizan <christophe.anselmemoizan@orange.com>

 

19:05 pi 

www/squid: cleanup, adding patches

1. Turn ON all options that don't require external dependencies.
2. Split SMB options to more items to make it possible to compile
   squid with samba36 and samba42.*
3. Set databases/p5-DBI as a dependency for SQL option and add note
   to pkg-message about perl DBD drivers.*
4. Add fix for PF+IPv6.**
5. Require SSL option if SSL_CRTD is on.
6. Small fixes.
7. Add all available patches from upstream.

*  thanks to Alonso Cardenas Marquez!
** thanks to Orlando Bassotto!

PR:		208290
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)

 

17:24 junovitch 

www/squid: update 3.5.10 -> 3.5.11

- Regen patches for new release and for portlint
- Drop creating/deleting /var/run/squid in the rc script as this duplicates
  handling it in the pkg-plist

Changes:
* Bug 3574: crashes on reconfigure and startup
* Bug 4347: compile errors with LibreSSL 2.3
* Bug 4281: copy-paste typos in src/tools.cc
* Bug 4279: No response from proxy for FTP-download of non-existing file
* Bug 4188: Bumping intercepted SSL connections does not work on Solaris
* Fix incorrect authentication headers on cache digest requests
* Fix connection stats, including %<lp, missing for persistent connections
* Fix invalid memory access issues in SBuf
* Avoid errors when parsing manager ACL in old squid.conf

PR:		204217
Submitted by:	Pavel Timofeev <timp87@gmail.com> (maintainer)
Tested by:	ncrogers@gmail.com

 

01:51 junovitch 

www/squid: security update and build fix

- security update 3.5.8 -> 3.5.9 [1]
- Fix TP_IPF build on FreeBSD 9 [2]

PR:		203186 [1]
PR:		202950 [2]
Approved by:	Pavel Timofeev <timp87@gmail.com> (maintainer) [1]
Security:	d3a98c2d-5da1-11e5-9909-002590263bf5
MFH:		2015Q3
X-MFH-With:	r391555, r392222, r393602, r396106, r396185, r397215

 

05:12 cy 

Rather than produce a warning message that IPv6 is not supported
under ipfilter 4 (FreeBSD 9) every tenth time, reduce the message
to one in a million. This has the effect of displaying the message
at or shortly after startup with a reminder every blue moon.

PR:		202950