Path to this page:
Subject: CVS commit: [pkgsrc-2015Q4] pkgsrc/www/squid3
From: Benny Siegert
Date: 2016-02-29 11:10:47
Message id: 20160229101047.5CDC5FBB7@cvs.NetBSD.org
Log Message:
Pullup ticket #4931 - requested by taca
www/squid3: security fix
Revisions pulled up:
- www/squid3/Makefile 1.60
- www/squid3/distinfo 1.47
---
Module Name: pkgsrc
Committed By: taca
Date: Wed Feb 24 06:38:57 UTC 2016
Modified Files:
pkgsrc/www/squid3: Makefile distinfo
Log Message:
Update squid3 package to 3.5.15, security release.
* SQUID-2016:2 - Multiple Denial of Service issues in HTTP Response
processing
http://www.squid-cache.org/Advisories/SQUID-2016_2.txt
Changes to squid-3.5.15 (23 Feb 2016):
- Bug 3870: assertion failed: String.cc: 'len_ + len <65536' in \
ESI::CustomParser
- Fix multiple assertion on String overflows
- Fix unit test errors on MacOS
- Better handling of huge response headers. Fewer incorrect "Bug \
#3279" messages.
- Log noise reduction for eCAP
Files: