kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/www/squid/distinfo

94 lines
8.3 KiB
Text
Raw Normal View History

One of official patch has been updated. * 2005-04-04 00:19 (Medium) Fails to process requests for files larger than 2GB in size Since the name of the patch file is the same as before, DIST_SUBDIR has been udpated via DIST_STAMP. Bump PKGREVISION.
2005-04-04 03:12:37 +02:00
$NetBSD: distinfo,v 1.88 2005/04/04 01:12:37 taca Exp $
Add NetBSD RCS Ids.
1998-08-07 15:27:33 +02:00
One of official patch has been updated. * 2005-04-04 00:19 (Medium) Fails to process requests for files larger than 2GB in size Since the name of the patch file is the same as before, DIST_SUBDIR has been udpated via DIST_STAMP. Bump PKGREVISION.
2005-04-04 03:12:37 +02:00
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9.tar.bz2) = 9605e274f548bfc8dcb60a299b680df2846ee74b
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9.tar.bz2) = 98e49ff58ffc4664a46350f3d6c34be99b713716
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9.tar.bz2) = 1057776 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-setcookie.patch) = 1f1a6692a32a00e81873741f4152bdb21e90b263
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-setcookie.patch) = 9e0faca4c185c0d689a3f78d156bc1d653854dfa
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-setcookie.patch) = 5328 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-ftp_EPLF.patch) = cdb2236bf58fa896fd6b70d0ee0c9aa6ff9d9334
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-ftp_EPLF.patch) = 3b438bad44b2bc2b9a7de737ae32399d75fbaddd
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-ftp_EPLF.patch) = 4108 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-ftp_base_href.patch) = 1c72fd034aeee6900283b2f803ebd1eaa28c5397
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-ftp_base_href.patch) = 06b2aa11b5a567d92c15086e2d7aedb508a0d8d1
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-ftp_base_href.patch) = 709 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-acl_error.patch) = fec6e7f2b82bd3a8f9f26e6044f516c8127b9120
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-acl_error.patch) = 820a48ca76d5512dd0a0a28c4247d1a09d1ff528
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-acl_error.patch) = 8499 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-date.patch) = 3e98e96f3ce41c8b93f11f455e909fe3c31fa1ff
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-date.patch) = 4bfbfc7acd55747b58ce72316c6bb058fa7d4c0a
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-date.patch) = 5647 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-reload_into_ims.patch) = 9313f40309fe075a05a76be26623acda67a1d0e4
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-reload_into_ims.patch) = 1a312d5ab48416a33dc9af2c8adad4e66f7edc52
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-reload_into_ims.patch) = 852 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-delay_access_doc.patch) = 9b96b169dfd5f383350460c6c89b7baca5fede6f
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-delay_access_doc.patch) = c209d9178829ed3289111be8d489a603d031ae07
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-delay_access_doc.patch) = 1258 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-config_overflow.patch) = 03f7e72278e34c7bce6cac37bd5dfb4b91cc359b
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-config_overflow.patch) = 9b286b4b77162b5bbafc0a57f976101c6f9a091e
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-config_overflow.patch) = 591 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-bzero.patch) = 2899bd43bc53c00d79a54eec89d90b3b33715e02
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-bzero.patch) = b8888bdf567935fd0e00342b327441d338e2e191
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-bzero.patch) = 11326 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-pid_t.patch) = b03fa99462a522ebfbd759c6d2252e8d516ac230
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-pid_t.patch) = e429d87b89dd3dd91f385c7b187b43b58ac92044
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-pid_t.patch) = 5576 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-ctype.patch) = d1956f64ab2312a146279971e06d0b3463956334
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-ctype.patch) = 2e70bdb6899b97be611ce344dfbd516d1d2a8b5d
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-ctype.patch) = 4698 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-defer_digest_fetch.patch) = a0ce5fa1787383ae000efab7cdbb7da7eda523b3
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-defer_digest_fetch.patch) = 0592299cbd0780faac1aa1fc56af6306a7d5ed15
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-defer_digest_fetch.patch) = 1026 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-dup_content_length.patch) = f7d424975a35e253d981d3092b8e336cee037de2
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-dup_content_length.patch) = fbd59d1acf271c5d36ecc99cb0ec64df11a52665
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-dup_content_length.patch) = 1685 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-excess_data.patch) = 7b272cadafb070c322d8ff488249c85e4640f5dd
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-excess_data.patch) = 4a87f35949b25171f5b24d195a4a770eb2b1c5c1
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-excess_data.patch) = 1553 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-aufs.patch) = 5e970b98c8ddfebf34d36587acc63a3ab9de9d78
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-aufs.patch) = e23f773014c69ec6df6f0ef00de8f1d816ff007c
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-aufs.patch) = 9317 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-long_basic_auth.patch) = 43b6ab0692290e38eddf8bdbd027bedadf6c36db
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-long_basic_auth.patch) = 331b2d19c436523b5b627b9c95f6c689f68e3f5d
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-long_basic_auth.patch) = 1328 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-CONNECT_truncated.patch) = c5d90e4bb1021c58b74275d7d12900d671edc12c
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-CONNECT_truncated.patch) = 8cda87c642edc90b5713430dfd0a8d85bbf1e613
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-CONNECT_truncated.patch) = 4885 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-LDAP_SUN_SDK.patch) = dc16026dc554116377da400ba7d35b501acf0f6b
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-LDAP_SUN_SDK.patch) = e77200c032598eee5c1d1c41f0251b4e25cd5b65
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-LDAP_SUN_SDK.patch) = 8490 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-disable_hostname_checks.patch) = 993f5111623ff0149352ec69e2f10380b3e3bc69
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-disable_hostname_checks.patch) = 12ec3273716a9e6da31be5ec1a880662cb2957ec
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-disable_hostname_checks.patch) = 2964 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-aufs_shutdown.patch) = 23ab9e4a8ef9042d03b5eaca366232c7609f6217
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-aufs_shutdown.patch) = 68d2e27eceb4e2738cd4e495769ad7d58f288768
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-aufs_shutdown.patch) = 10649 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-2GB.patch) = 11621dcbdb1f81f50cb1b457a7466d06baf7f061
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-2GB.patch) = 766d142570affef7a3210ad6a234f8dc9fc8bebc
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-2GB.patch) = 251242 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-rename_cleanup.patch) = d61dbbee6a39fac03a323a62a81342cab9e15228
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-rename_cleanup.patch) = 5f051fb2b6f9b655d2d938945789655d30f8e86b
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-rename_cleanup.patch) = 6055 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-cachemgr_objects.patch) = f010f54998b726998bc02a922f52ae2887a6f3fc
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-cachemgr_objects.patch) = 3b4d9f6547f9bbb47b46299b8b9862aed728430e
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-cachemgr_objects.patch) = 2625 bytes
SHA1 (squid-2.5.9-2005040300/squid-2.5.STABLE9-extaclauth.patch) = aaa6abdd081e24be771fa0ab8fb82eac2b16b854
RMD160 (squid-2.5.9-2005040300/squid-2.5.STABLE9-extaclauth.patch) = 775220147c070a0313a68f0ad6fc8958c89c6f2b
Size (squid-2.5.9-2005040300/squid-2.5.STABLE9-extaclauth.patch) = 1799 bytes
Update squid package to 2.5.7nb2. * Apply official three patches. - 2004-12-08 01:03 (Minor) cachemgr vm_objects segfault - 2004-12-08 00:47 (Minor) httpd_accel_port 0 (virtual) not working correctly - 2004-12-07 23:45 (Cosmetic / Minor Security issue) Random error messages in response to malformed host name * use VARBASE for data directory. * better handling data directory and user and group for squid with bsd.pkg.install.mk.
2004-12-14 15:27:07 +01:00
SHA1 (patch-aa) = 3e6fb677125eec276fdfa62336c134f26e1e1edd
Update squid to 2.5.1 with several patches from http://www.squid-cache.org/Versions/v2/2.5/bugs/. Now try to install more authentication modules, but those modules should be handled by proper frame work (Curretly, SASL modules aren't handled). Changes to squid-2.5 (): - Major rewrite of proxy authentication to support other schemes than basic. First in the line is NTLM support but others can easily be added (minimal digest is present). See Programmers Guide. (Robert Collins & Francesco Chemolli) - Reworked how request bodies are passed down to the protocols. Now all client side processing is inside client_side.c, and the pass and pump modules is no longer used. - Optimized searching in proxy_auth and ident ACL types. Squid should now handle large access lists a lot more efficiently. (Francesco Chemolli) - Fixed forwarding/peer loop detection code (Brian Degenhardt) - now a peer is ignored if it turns out to be us, rather than committing suicide - Changed the internal URL code to obey appendDomain for internal objects if it needs appending. This fixes weirdnesses where a machine can think it is "foo.bar.com", and "foo" is requested. (Brian Degenhardt) - Added the use of Automake to create the Makefile.in's in the squid source tree. This will allow libtool in the future, and immediately allows better dependency tracking - with or without gcc - as well as the dist-all and distcheck targets for developers which respectively build a tar.gz and a tar.bz2 distribution, and check that what will be distributed builds. - Added TOS and source address selection based on ACLs, written by Roger Venning. This allows administrators to set the TOS precedence bits and/or the source IP from a set of available IPs based upon some ACLs, generally to map different users to different outgoing links and traffic profiles. - Added 'max-conn' option to 'cache_peer' - Added SSL gatewaying support, allowing Squid to act as a SSL server in accelerator setups. - SASL authentication helper by Ian Castle - msntauth updated to v2.0.3 - no_cache now applies to cache hits as well as cache misses - the Gopher client in Squid has been significantly improved - Squid now sanity checks FTP data connections to ensure the connection is from the requested server. Can be disabled if needed by turning off the ftp_sanitycheck option. - external acl support. A mechanism where flexible ACL checks can be driven by external helpers. See the external_acl_type and acl external directives. - Countless other small things and fixes - HTML pages generated by Squid or CacheMgr as well as the ERR documents now contain a doctype declaration so that browsers know which HTML specification the document uses. In addition to that they have a new look (background-color, font) and are valid according to the HTML standards at www.w3.org. (Clemens Löser) - Login and password send to Basic auth helpers is now URL escaped to allow for spaces and other "odd" characters in logins and passwords - Proxy Authentication is no longer blindly forwarded to peer caches if not used locally. If forwarding of proxy authentication is desired then it must now be configured with the login=PASS cache_peer option. - Responses with Vary: in the header are now cached by squid. (Henrik Nordstrom). - Removed unused 'siteselect_timeout' directive.
2002-10-13 18:43:20 +02:00
SHA1 (patch-ab) = 1224ba4cee98a26d2c9d670eb6d57c6187ff2d56
Update checksum for "squid-2.5.STABLE1-disable-http-violations.patch".
2003-02-16 10:07:37 +01:00
SHA1 (patch-ac) = 1b283f0a573c02c82ce26f75e67d19b1ec5ff9f0
Update squid package to 2.5.6 (squid 2.5.STALBE6 + official patches). Squid 2.5.STABLE5 to 2.5.STABLE6: * Several "Assertion error" bugs fixed * Several "Segmentation fault" bugs fixes * Corrects a security issue in the old ntlm_auth NTLM helper used in transparent NTLM authentication to a NT domain without using samba. * Processing of Vary: * and Vary on error messages corrected * a large number of minor and cosmetic bugfixes. See the list of squid-2.5.STABLE5 patches and the ChangeLog file for details. 2.5.STABLE56 official patches: * 2004-08-20 08:18 (Major) NTLM authentication denial of service * 2004-08-14 21:07 (Minor) external_acl does not handle newlines * 2004-08-09 14:03 (Minor) Supplementary group memberships not set * 2004-08-05 20:33 (Medium) Segfaults and other strange crashes when using heap policies * 2004-08-06 11:05 (Cosmetic) Unknown %X errorpage codes incorrectly quoted * 2004-08-17 12:22 (Cosmetic) Grammatical corrections in squid.conf.default * 2004-07-27 21:52 (Minor) NTLM authentication truncated * 2004-07-17 22:43 (Minor) Memory leak in client_db * 2004-07-17 20:11 (Cosmetic) Add delay pools information to active_requests * 2004-07-17 19:57 (Minor) case insensitive authentication * 2004-07-17 19:48 (Cosmetic) Warn if cache_dir ufs can not create files * 2004-07-17 16:33 (Cosmetic) HEAD requests may return stale information * 2004-07-17 16:33 (Minor) Partial hit results in TCP_HIT, not TCP_MISS * 2004-07-17 16:33 (Cosmetic) request_header_max_size configuration option doesn't work correctly * 2004-07-29 13:29 (Minor) A large number of queued DNS lookups for the same domain * 2004-08-10 09:40 (Minor) LDAP helpers update * 2004-07-14 16:29 (Medium) storeCreate: no valid swapdirs for this object
2004-08-22 17:11:07 +02:00
SHA1 (patch-ad) = 88b46bc9051ea32ebd74f06ebd362ce16f8c5c4c
SHA1 (patch-ae) = 860c8ad41ea09282bdb0d626260084354458f653
Update squid package to 2.5.7. This includes security problem with SNMP support which enabled by default. <http://www.idefense.com/application/poi/display?id=152&type=vulnerabilities> * pkgsrc changes: - Don't use PKGNAME within DIST_SUBDIR. Instead, date based DIST_STAMP. This change prevent extra DIST_SUBDIR change asked by kim@. - Remove setproctitle(3) hack for dnsserver helper program since use of dnsserver itself is problematic with huge size of squid process. * Changes to squid-2.5.STABLE7 (11 Oct 2004) - [Medium] No objects cached in ufs cache_dir type in some configurations. Issue introduced in 2.5.STABLE6 by the patch for Bug #676. (Bug #1011) - [Minor] LDAP helpers update to correct LDAP connection management and add support for literal password compare instead of binding - [Minor] A large number of queued DNS lookups for the same domain (Bug #852) - [Cosmetic] request_header_max_size configuration partly ignored (Bug #899) - [Minor] Partial hit results in TCP_HIT, not TCP_MISS. (Bug #1001) - Bug #1012: [Cosmetic] HEAD requests may return stale information (Bug #1012) - [Cosmetic] Warn if cache_dir ufs can not create files. (Bug #918) - [Minor] case insensitive authentication (Bug #431) - [Cosmetic] Add delay pools information to active_requests. (Bug #882) - [Minor] Apparent memory leak in client_db (Bug #833) - [Minor] NTLM authentication truncated causing failures. (Bug #1016) - [Cosmetic] Grammatical corrections in squid.conf.default - [Cosmetic] Unknown %X errorpage codes incorrectly quoted. (Bug #1030) - [Medium] Segfaults and other strange crashes when using heap policies. (Bug #1009) - [Minor] Supplementary group memberships not set (Bug #1021) - [Cosmetic] ERR_TOO_BIG Portugese translation - [Minor] external_acl does not handle newlines (Bug #1038) - [Major] NTLM authentication denial of service when using msnt_auth or fake_auth (Bug #1045) - [Medium] Memory leaks when using NTLM authentication without challenge reuse. (Bug #994) - [Minor] Temporary NTLM memory leak with challenge reuse enabled (Bug #910) - [Minor] assertion failed: "n_ufs_dirs <= Config.cacheSwap.n_configured". (Bug #1053) - [Minor] Segfault in authenticateDigestHandleReply. (Bug #1031) - [Minor] acl time fails to parse multiple time specifications (Bug #1060) - [Minor] cachemgr config dumps mixed up Range and Request-Range headers in http_header_access & replace directives. (Bug #1056) - [Minor] Content-Disposition added as a well known header (Bug #961) - [Cosmetic] Don't warn about arp acls not being supported on FreeBSD (Bug #1074) - [Cosmetic] Limit internal send/receive buffer sizes (Bug #1075) - [Medium] New acl types to match arbitrary HTTP headers. In addition the http_header_access & replace directivess now support arbitrary headers and not only the well known ones. (Bug #961) - [Cosmetic] ncsa_auth now accepts Window formatted password files (Bug #1078) - [Cosmetic] Support the --program-prefix/suffix options or other configure program name transforms (Bug #1019) - [Minor] Fix race condition in CONNECT and also handle aborts of CONNECT requests in a more graceful manner. (Bug #859) - [Minor] New balance_on_multiple_ip directive to work around certain broken load balancers and optimized ipcache on reload requests (Bug #1058) - [Medium] New reply_header_max_size directive (Bug #874) - [Minor] Suspected instability on aborted PUT/POST requests (Bug #1089) - [Security] SNMP Denial of Service fix (CAN-2004-0918)
2004-10-13 17:35:55 +02:00
SHA1 (patch-ag) = 1ea73bcd19eb0c6e380c8fd173261b1171b9d787
Update squid to 2.5.1 with several patches from http://www.squid-cache.org/Versions/v2/2.5/bugs/. Now try to install more authentication modules, but those modules should be handled by proper frame work (Curretly, SASL modules aren't handled). Changes to squid-2.5 (): - Major rewrite of proxy authentication to support other schemes than basic. First in the line is NTLM support but others can easily be added (minimal digest is present). See Programmers Guide. (Robert Collins & Francesco Chemolli) - Reworked how request bodies are passed down to the protocols. Now all client side processing is inside client_side.c, and the pass and pump modules is no longer used. - Optimized searching in proxy_auth and ident ACL types. Squid should now handle large access lists a lot more efficiently. (Francesco Chemolli) - Fixed forwarding/peer loop detection code (Brian Degenhardt) - now a peer is ignored if it turns out to be us, rather than committing suicide - Changed the internal URL code to obey appendDomain for internal objects if it needs appending. This fixes weirdnesses where a machine can think it is "foo.bar.com", and "foo" is requested. (Brian Degenhardt) - Added the use of Automake to create the Makefile.in's in the squid source tree. This will allow libtool in the future, and immediately allows better dependency tracking - with or without gcc - as well as the dist-all and distcheck targets for developers which respectively build a tar.gz and a tar.bz2 distribution, and check that what will be distributed builds. - Added TOS and source address selection based on ACLs, written by Roger Venning. This allows administrators to set the TOS precedence bits and/or the source IP from a set of available IPs based upon some ACLs, generally to map different users to different outgoing links and traffic profiles. - Added 'max-conn' option to 'cache_peer' - Added SSL gatewaying support, allowing Squid to act as a SSL server in accelerator setups. - SASL authentication helper by Ian Castle - msntauth updated to v2.0.3 - no_cache now applies to cache hits as well as cache misses - the Gopher client in Squid has been significantly improved - Squid now sanity checks FTP data connections to ensure the connection is from the requested server. Can be disabled if needed by turning off the ftp_sanitycheck option. - external acl support. A mechanism where flexible ACL checks can be driven by external helpers. See the external_acl_type and acl external directives. - Countless other small things and fixes - HTML pages generated by Squid or CacheMgr as well as the ERR documents now contain a doctype declaration so that browsers know which HTML specification the document uses. In addition to that they have a new look (background-color, font) and are valid according to the HTML standards at www.w3.org. (Clemens Löser) - Login and password send to Basic auth helpers is now URL escaped to allow for spaces and other "odd" characters in logins and passwords - Proxy Authentication is no longer blindly forwarded to peer caches if not used locally. If forwarding of proxy authentication is desired then it must now be configured with the login=PASS cache_peer option. - Responses with Vary: in the header are now cached by squid. (Henrik Nordstrom). - Removed unused 'siteselect_timeout' directive.
2002-10-13 18:43:20 +02:00
SHA1 (patch-aj) = aa2271e53602fe168604aeced6ed66d28fe47707
Update squid package to 2.5.6 (squid 2.5.STALBE6 + official patches). Squid 2.5.STABLE5 to 2.5.STABLE6: * Several "Assertion error" bugs fixed * Several "Segmentation fault" bugs fixes * Corrects a security issue in the old ntlm_auth NTLM helper used in transparent NTLM authentication to a NT domain without using samba. * Processing of Vary: * and Vary on error messages corrected * a large number of minor and cosmetic bugfixes. See the list of squid-2.5.STABLE5 patches and the ChangeLog file for details. 2.5.STABLE56 official patches: * 2004-08-20 08:18 (Major) NTLM authentication denial of service * 2004-08-14 21:07 (Minor) external_acl does not handle newlines * 2004-08-09 14:03 (Minor) Supplementary group memberships not set * 2004-08-05 20:33 (Medium) Segfaults and other strange crashes when using heap policies * 2004-08-06 11:05 (Cosmetic) Unknown %X errorpage codes incorrectly quoted * 2004-08-17 12:22 (Cosmetic) Grammatical corrections in squid.conf.default * 2004-07-27 21:52 (Minor) NTLM authentication truncated * 2004-07-17 22:43 (Minor) Memory leak in client_db * 2004-07-17 20:11 (Cosmetic) Add delay pools information to active_requests * 2004-07-17 19:57 (Minor) case insensitive authentication * 2004-07-17 19:48 (Cosmetic) Warn if cache_dir ufs can not create files * 2004-07-17 16:33 (Cosmetic) HEAD requests may return stale information * 2004-07-17 16:33 (Minor) Partial hit results in TCP_HIT, not TCP_MISS * 2004-07-17 16:33 (Cosmetic) request_header_max_size configuration option doesn't work correctly * 2004-07-29 13:29 (Minor) A large number of queued DNS lookups for the same domain * 2004-08-10 09:40 (Minor) LDAP helpers update * 2004-07-14 16:29 (Medium) storeCreate: no valid swapdirs for this object
2004-08-22 17:11:07 +02:00
SHA1 (patch-ak) = 108b313149271457bee702ecf9489c61715ec9e7
Update squid package to 2.5.8 (squid-2.5.STABLE8). Most of these changes are already included in previous squid-2.5.7nb12. But last one is really new one. Changes to squid-2.5.STABLE8 (11 Feb 2005) - [Minor] 100% CPU usage on half-closed PUT/POST requests (Bug #354, #1096) - [Cosmetic] Document -v (protocol version) option to LDAP helpers - [Minor] The new req_header and resp_header acls segfaults immediately on parse of squid.conf (Bug #961) - [Minor] Failure to shut down busy helpers on -k rotate/reconfigure (Bug #1118) - [Minor] Don't use O_NONBLOCK on disk files. (Bug #1102) - [Minor] Squid fails to close TCP connection after blank HTTP response (Bug #1116) - [Minor security] Random error messages in response to malformed host name (Bug #1143) - [Minor] PURGE should not be able to delete internal objects (Bug #1112) - [Minor] httpd_accel_port 0 (virtual) not working correctly (Bug #1121) - [Minor] cachemgr vm_objects segfault (Bug #1149) - [Minor security] Confusing results on empty acl declarations (Bug #1166) - [Minor] Don't close all "other" filedescriptors on startup (Bug #1177) - [Minor] fakeauth_auth memory leak and NULL pointer access (Bug #1183) - [Security] buffer overflow bug in gopherToHTML() (Bug #1189) - [Medium security] Denial of service with forged WCCP messages (Bug #1190) - [Minor] DNS related memory leak on certain malformed DNS responses (Bug #1197) - [Minor] Internal DNS sometimes truncates host names in reverse (PTR) lookups (Bug #1136) - [Minor Security] Add sanity checks on LDAP user names (Bug #1187) - [Security] Harden Squid agains HTTP request smuggling attacks - [Minor] Icon URLs fails in non-anonymous FTP directory listings is short_icon_urls is on (Bug #1203) - [Security] Harden Squid agains HTTP response splitting attacks (Bug #1200) - [Medium security] Buffer overflow in WCCP recvfrom() call (Bug #1217) - [Security] Properly handle oversized reply headers (Bug #1216) - [Minor] LDAP helpers search fixed to properly ask for no attributes - [Minor] A sporadic segmentation fault when using ntlm authentication fixed (Bug #1127) - [Major] Segmentation fault on failed PUT/POST requests (Bug #1224) - [Medium] Persistent connection mismatch on failed PUT/POST request (Bug #1122) - [Minor] WCCP easily disturbed by forged packets (Bug #1225) - [Minor] Password management in ftp:// gatewaying improved (Bug #1226) - [Major] HTTP reply data corruption in certain situations involving reply headers split over multiple packets (Bug #1233)
2005-02-11 15:47:18 +01:00
SHA1 (patch-al) = 51d7c84b007ab9600ae911e1e9206cf91b937120
Update squid package to 2.5.7. This includes security problem with SNMP support which enabled by default. <http://www.idefense.com/application/poi/display?id=152&type=vulnerabilities> * pkgsrc changes: - Don't use PKGNAME within DIST_SUBDIR. Instead, date based DIST_STAMP. This change prevent extra DIST_SUBDIR change asked by kim@. - Remove setproctitle(3) hack for dnsserver helper program since use of dnsserver itself is problematic with huge size of squid process. * Changes to squid-2.5.STABLE7 (11 Oct 2004) - [Medium] No objects cached in ufs cache_dir type in some configurations. Issue introduced in 2.5.STABLE6 by the patch for Bug #676. (Bug #1011) - [Minor] LDAP helpers update to correct LDAP connection management and add support for literal password compare instead of binding - [Minor] A large number of queued DNS lookups for the same domain (Bug #852) - [Cosmetic] request_header_max_size configuration partly ignored (Bug #899) - [Minor] Partial hit results in TCP_HIT, not TCP_MISS. (Bug #1001) - Bug #1012: [Cosmetic] HEAD requests may return stale information (Bug #1012) - [Cosmetic] Warn if cache_dir ufs can not create files. (Bug #918) - [Minor] case insensitive authentication (Bug #431) - [Cosmetic] Add delay pools information to active_requests. (Bug #882) - [Minor] Apparent memory leak in client_db (Bug #833) - [Minor] NTLM authentication truncated causing failures. (Bug #1016) - [Cosmetic] Grammatical corrections in squid.conf.default - [Cosmetic] Unknown %X errorpage codes incorrectly quoted. (Bug #1030) - [Medium] Segfaults and other strange crashes when using heap policies. (Bug #1009) - [Minor] Supplementary group memberships not set (Bug #1021) - [Cosmetic] ERR_TOO_BIG Portugese translation - [Minor] external_acl does not handle newlines (Bug #1038) - [Major] NTLM authentication denial of service when using msnt_auth or fake_auth (Bug #1045) - [Medium] Memory leaks when using NTLM authentication without challenge reuse. (Bug #994) - [Minor] Temporary NTLM memory leak with challenge reuse enabled (Bug #910) - [Minor] assertion failed: "n_ufs_dirs <= Config.cacheSwap.n_configured". (Bug #1053) - [Minor] Segfault in authenticateDigestHandleReply. (Bug #1031) - [Minor] acl time fails to parse multiple time specifications (Bug #1060) - [Minor] cachemgr config dumps mixed up Range and Request-Range headers in http_header_access & replace directives. (Bug #1056) - [Minor] Content-Disposition added as a well known header (Bug #961) - [Cosmetic] Don't warn about arp acls not being supported on FreeBSD (Bug #1074) - [Cosmetic] Limit internal send/receive buffer sizes (Bug #1075) - [Medium] New acl types to match arbitrary HTTP headers. In addition the http_header_access & replace directivess now support arbitrary headers and not only the well known ones. (Bug #961) - [Cosmetic] ncsa_auth now accepts Window formatted password files (Bug #1078) - [Cosmetic] Support the --program-prefix/suffix options or other configure program name transforms (Bug #1019) - [Minor] Fix race condition in CONNECT and also handle aborts of CONNECT requests in a more graceful manner. (Bug #859) - [Minor] New balance_on_multiple_ip directive to work around certain broken load balancers and optimized ipcache on reload requests (Bug #1058) - [Medium] New reply_header_max_size directive (Bug #874) - [Minor] Suspected instability on aborted PUT/POST requests (Bug #1089) - [Security] SNMP Denial of Service fix (CAN-2004-0918)
2004-10-13 17:35:55 +02:00
SHA1 (patch-an) = febe1a78dfbda5caebe5a9f16af6da1e1a9e79ca
SHA1 (patch-bb) = cc0486eaf27f5796d83041e6b7a9562a134d8063
Update squid to 2.5.1 with several patches from http://www.squid-cache.org/Versions/v2/2.5/bugs/. Now try to install more authentication modules, but those modules should be handled by proper frame work (Curretly, SASL modules aren't handled). Changes to squid-2.5 (): - Major rewrite of proxy authentication to support other schemes than basic. First in the line is NTLM support but others can easily be added (minimal digest is present). See Programmers Guide. (Robert Collins & Francesco Chemolli) - Reworked how request bodies are passed down to the protocols. Now all client side processing is inside client_side.c, and the pass and pump modules is no longer used. - Optimized searching in proxy_auth and ident ACL types. Squid should now handle large access lists a lot more efficiently. (Francesco Chemolli) - Fixed forwarding/peer loop detection code (Brian Degenhardt) - now a peer is ignored if it turns out to be us, rather than committing suicide - Changed the internal URL code to obey appendDomain for internal objects if it needs appending. This fixes weirdnesses where a machine can think it is "foo.bar.com", and "foo" is requested. (Brian Degenhardt) - Added the use of Automake to create the Makefile.in's in the squid source tree. This will allow libtool in the future, and immediately allows better dependency tracking - with or without gcc - as well as the dist-all and distcheck targets for developers which respectively build a tar.gz and a tar.bz2 distribution, and check that what will be distributed builds. - Added TOS and source address selection based on ACLs, written by Roger Venning. This allows administrators to set the TOS precedence bits and/or the source IP from a set of available IPs based upon some ACLs, generally to map different users to different outgoing links and traffic profiles. - Added 'max-conn' option to 'cache_peer' - Added SSL gatewaying support, allowing Squid to act as a SSL server in accelerator setups. - SASL authentication helper by Ian Castle - msntauth updated to v2.0.3 - no_cache now applies to cache hits as well as cache misses - the Gopher client in Squid has been significantly improved - Squid now sanity checks FTP data connections to ensure the connection is from the requested server. Can be disabled if needed by turning off the ftp_sanitycheck option. - external acl support. A mechanism where flexible ACL checks can be driven by external helpers. See the external_acl_type and acl external directives. - Countless other small things and fixes - HTML pages generated by Squid or CacheMgr as well as the ERR documents now contain a doctype declaration so that browsers know which HTML specification the document uses. In addition to that they have a new look (background-color, font) and are valid according to the HTML standards at www.w3.org. (Clemens Löser) - Login and password send to Basic auth helpers is now URL escaped to allow for spaces and other "odd" characters in logins and passwords - Proxy Authentication is no longer blindly forwarded to peer caches if not used locally. If forwarding of proxy authentication is desired then it must now be configured with the login=PASS cache_peer option. - Responses with Vary: in the header are now cached by squid. (Henrik Nordstrom). - Removed unused 'siteselect_timeout' directive.
2002-10-13 18:43:20 +02:00
SHA1 (patch-bc) = 536299e59c396829f23484a14bb9a6f5c0a4de35
Update squid package to 2.5.6 (squid 2.5.STALBE6 + official patches). Squid 2.5.STABLE5 to 2.5.STABLE6: * Several "Assertion error" bugs fixed * Several "Segmentation fault" bugs fixes * Corrects a security issue in the old ntlm_auth NTLM helper used in transparent NTLM authentication to a NT domain without using samba. * Processing of Vary: * and Vary on error messages corrected * a large number of minor and cosmetic bugfixes. See the list of squid-2.5.STABLE5 patches and the ChangeLog file for details. 2.5.STABLE56 official patches: * 2004-08-20 08:18 (Major) NTLM authentication denial of service * 2004-08-14 21:07 (Minor) external_acl does not handle newlines * 2004-08-09 14:03 (Minor) Supplementary group memberships not set * 2004-08-05 20:33 (Medium) Segfaults and other strange crashes when using heap policies * 2004-08-06 11:05 (Cosmetic) Unknown %X errorpage codes incorrectly quoted * 2004-08-17 12:22 (Cosmetic) Grammatical corrections in squid.conf.default * 2004-07-27 21:52 (Minor) NTLM authentication truncated * 2004-07-17 22:43 (Minor) Memory leak in client_db * 2004-07-17 20:11 (Cosmetic) Add delay pools information to active_requests * 2004-07-17 19:57 (Minor) case insensitive authentication * 2004-07-17 19:48 (Cosmetic) Warn if cache_dir ufs can not create files * 2004-07-17 16:33 (Cosmetic) HEAD requests may return stale information * 2004-07-17 16:33 (Minor) Partial hit results in TCP_HIT, not TCP_MISS * 2004-07-17 16:33 (Cosmetic) request_header_max_size configuration option doesn't work correctly * 2004-07-29 13:29 (Minor) A large number of queued DNS lookups for the same domain * 2004-08-10 09:40 (Minor) LDAP helpers update * 2004-07-14 16:29 (Medium) storeCreate: no valid swapdirs for this object
2004-08-22 17:11:07 +02:00
SHA1 (patch-ca) = 132e45eea22cccf6678b5d920d913965f73f0db7
SHA1 (patch-cb) = 603471bf702c3ff4480585dc59dc326f23a5f2e8
Update squid packate to 2.5.9nb2. Add these official patches: * 2005-03-30 22:51 (Cosmetic) external acls requiring authentication does not request new credentials on access denials like proxy_auth does. * 2005-03-29 09:52 (Cosmetic) New cachemgr pending_objects and client_objects actions * 2005-03-26 23:53 (Minor) rename() related cleanup * 2005-03-30 22:51 (Medium) Fails to process requests for files larger than 2GB in size * 2005-03-19 23:57 (Cosmetic) aufs warning about open event filedescriptors on shutdown * 2005-03-19 01:35 (Minor) --disable-hostname-checks not working * 2005-03-19 01:11 (Cosmetic) LDAP helpers fails to compile with SUN LDAP SDK * 2005-03-21 20:44 (Minor) CONNECT requests truncated if client side disconnects first assertion failed: comm.c:430: "ntohs(address->sin_port) != 0" * 2005-03-19 00:25 (Minor) Basic authentication fails with very long logins or password * 2005-03-29 08:45 (Minor) Several minor aufs issues * 2005-03-09 15:46 (Cosmetic) Extend relaxed_header_parser to work around "excess data from" errors from many major web servers. * 2005-03-09 15:46 (Cosmetic) Duplicate content-length headers logged as conflicting with relaxed_header_parser off * 2005-03-09 15:46 (Cosmetic) Defer digest fetch if the peer is not allowed to be used * 2005-03-10 23:38 (Minor) Incorrect use of ctype functions * 2005-03-15 04:27 (Minor) compile warnings due to pid_t not being an int * 2005-03-09 15:46 (Minor) bzero is a non-standard function not available on all platforms * 2005-03-09 15:46 (Cosmetic) Check several squid.conf directives for int overflows * 2005-03-09 15:46 (Cosmetic) Clarify delay_access function * 2005-03-09 15:46 (Minor) reload_into_ims fails to revalidate negatively cached entries * 2005-03-09 15:46 (Minor) Handle odd date formats
2005-03-31 18:44:25 +02:00
SHA1 (patch-cc) = 53d72f0df09f1e2c4cc9b65a635d320e4d315cf5
Update squid package to 2.5.8 (squid-2.5.STABLE8). Most of these changes are already included in previous squid-2.5.7nb12. But last one is really new one. Changes to squid-2.5.STABLE8 (11 Feb 2005) - [Minor] 100% CPU usage on half-closed PUT/POST requests (Bug #354, #1096) - [Cosmetic] Document -v (protocol version) option to LDAP helpers - [Minor] The new req_header and resp_header acls segfaults immediately on parse of squid.conf (Bug #961) - [Minor] Failure to shut down busy helpers on -k rotate/reconfigure (Bug #1118) - [Minor] Don't use O_NONBLOCK on disk files. (Bug #1102) - [Minor] Squid fails to close TCP connection after blank HTTP response (Bug #1116) - [Minor security] Random error messages in response to malformed host name (Bug #1143) - [Minor] PURGE should not be able to delete internal objects (Bug #1112) - [Minor] httpd_accel_port 0 (virtual) not working correctly (Bug #1121) - [Minor] cachemgr vm_objects segfault (Bug #1149) - [Minor security] Confusing results on empty acl declarations (Bug #1166) - [Minor] Don't close all "other" filedescriptors on startup (Bug #1177) - [Minor] fakeauth_auth memory leak and NULL pointer access (Bug #1183) - [Security] buffer overflow bug in gopherToHTML() (Bug #1189) - [Medium security] Denial of service with forged WCCP messages (Bug #1190) - [Minor] DNS related memory leak on certain malformed DNS responses (Bug #1197) - [Minor] Internal DNS sometimes truncates host names in reverse (PTR) lookups (Bug #1136) - [Minor Security] Add sanity checks on LDAP user names (Bug #1187) - [Security] Harden Squid agains HTTP request smuggling attacks - [Minor] Icon URLs fails in non-anonymous FTP directory listings is short_icon_urls is on (Bug #1203) - [Security] Harden Squid agains HTTP response splitting attacks (Bug #1200) - [Medium security] Buffer overflow in WCCP recvfrom() call (Bug #1217) - [Security] Properly handle oversized reply headers (Bug #1216) - [Minor] LDAP helpers search fixed to properly ask for no attributes - [Minor] A sporadic segmentation fault when using ntlm authentication fixed (Bug #1127) - [Major] Segmentation fault on failed PUT/POST requests (Bug #1224) - [Medium] Persistent connection mismatch on failed PUT/POST request (Bug #1122) - [Minor] WCCP easily disturbed by forged packets (Bug #1225) - [Minor] Password management in ftp:// gatewaying improved (Bug #1226) - [Major] HTTP reply data corruption in certain situations involving reply headers split over multiple packets (Bug #1233)
2005-02-11 15:47:18 +01:00
SHA1 (patch-cd) = 2a22aa071cc0f50b5ed87e31c0e531a5fc9dc2b7
Reference in a new issue Copy permalink