Path to this page:
Subject: CVS commit: pkgsrc/www/squid31
From: Matthias Scheler
Date: 2010-09-07 21:55:17
Message id: 20100907195517.23B6A175DD@cvs.netbsd.org
Log Message:
Update "squid31" package to version 3.1.8. Changes since 3.1.7:
- Security fixes:
- Fixes for the request processing vulnerability tagged SQUID-2010:3.
http://www.squid-cache.org/Advisories/SQUID-2010_3.txt
- A hardening of the DNS client against packet queueing approaches
used to enable attacks. This completes the protection against attacks
published by Yamaguchi late in 2009.
- An HTTP request-line parser hardened against several categories of
request attack. This greatly increasing the speed of detection and
reducing resources used to detect these categories of attack.
- Fixes for the following bugs:
- Bug 3020: Segmentation fault: nameservers[vc->ns].vc = NULL
- Bug 3005,2972: Locate LTDL headers correctly (again)
- Bug 2872: leaking file descriptors
- Bug 2583: pure virtual method called
Files: