[pkgsrc/pkgsrc-2018Q1]: pkgsrc/www/squid3 Pullup ticket #5752 - requested by ...

[spz <spz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/c1acc5b73806
branches:  pkgsrc-2018Q1
changeset: 408486:c1acc5b73806
user:      spz <spz%pkgsrc.org@localhost>
date:      Sun May 06 11:58:34 2018 +0000

description:
Pullup ticket #5752 - requested by taca
www/squid3: security patch

Revisions pulled up:
- www/squid3/Makefile                                           1.81
- www/squid3/distinfo                                           1.63

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Mon Apr 30 08:57:49 UTC 2018

   Modified Files:
        pkgsrc/www/squid3: Makefile distinfo

   Log Message:
   www/squid3: Add official security patch SQUID-2018_3

   Add security patch for SQUID-2018_3.

   Bump PKGREVISION.

   http://www.squid-cache.org/Advisories/SQUID-2018_3.txt

   __________________________________________________________________

   Problem Description:

    Due to incorrect pointer handling Squid is vulnerable to denial
    of service attack when processing ESI responses.

   __________________________________________________________________

   Severity:

    This problem allows a remote server delivering ESI responses
    to trigger a denial of service for all clients accessing the
    Squid service.

    This problem is limited to Squid operating as reverse proxy.


   To generate a diff of this commit:
   cvs rdiff -u -r1.80 -r1.81 pkgsrc/www/squid3/Makefile
   cvs rdiff -u -r1.62 -r1.63 pkgsrc/www/squid3/distinfo

diffstat:

 www/squid3/Makefile |  7 ++++---
 www/squid3/distinfo |  6 +++++-
 2 files changed, 9 insertions(+), 4 deletions(-)

diffs (43 lines):

diff -r f0b84b2f469a -r c1acc5b73806 www/squid3/Makefile
--- a/www/squid3/Makefile       Sun May 06 11:41:44 2018 +0000
+++ b/www/squid3/Makefile       Sun May 06 11:58:34 2018 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.80 2018/01/25 16:54:28 veego Exp $
+# $NetBSD: Makefile,v 1.80.2.1 2018/05/06 11:58:34 spz Exp $
 
 DISTNAME=      squid-3.5.27
-PKGREVISION=   2
+PKGREVISION=   3
 CATEGORIES=    www
 MASTER_SITES=  http://www.squid-cache.org/Versions/v3/${PKGVERSION_NOREV:R}/
 MASTER_SITES+= ftp://ftp.squid-cache.org/pub/squid/
@@ -9,7 +9,8 @@
 EXTRACT_SUFX=  .tar.xz
 
 PATCH_SITES=           http://www.squid-cache.org/Versions/v3/3.5/changesets/
-PATCHFILES=            SQUID-2018_1.patch SQUID-2018_2.patch
+PATCHFILES=            SQUID-2018_1.patch SQUID-2018_2.patch \
+                       SQUID-2018_3.patch
 PATCH_DIST_STRIP=      -p1
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
diff -r f0b84b2f469a -r c1acc5b73806 www/squid3/distinfo
--- a/www/squid3/distinfo       Sun May 06 11:41:44 2018 +0000
+++ b/www/squid3/distinfo       Sun May 06 11:58:34 2018 +0000
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.62 2018/01/23 02:28:49 taca Exp $
+$NetBSD: distinfo,v 1.62.2.1 2018/05/06 11:58:34 spz Exp $
 
 SHA1 (SQUID-2018_1.patch) = e0b13479e183b831a754c89c34f10533ef042beb
 RMD160 (SQUID-2018_1.patch) = 23dd75b517f00a819f1f629d41ace08680275175
@@ -8,6 +8,10 @@
 RMD160 (SQUID-2018_2.patch) = 35730b31e8cee8565bbe81c49102822cad9858eb
 SHA512 (SQUID-2018_2.patch) = 392442527ead5cbb045f6eded522c9aff6ce395034ca028e7298394eccb6ed5b06c814f966ddc6cb264b9a37bf7ae2751e3ed87853566b1d7b757d99280fe60c
 Size (SQUID-2018_2.patch) = 1054 bytes
+SHA1 (SQUID-2018_3.patch) = 616a3d1df640d2b4bb3b297cb559603cc3e50633
+RMD160 (SQUID-2018_3.patch) = 83a66ce1f72657d6c071b0117bcada457a500d2a
+SHA512 (SQUID-2018_3.patch) = 20a036b34f7a595d83e707180d831c4adc9b7432f09be5341cfe7b3b00cbe3e5c0de07376a67834b94e08c849703822371eb71938a024307cb52cf8ef52138e8
+Size (SQUID-2018_3.patch) = 843 bytes
 SHA1 (squid-3.5.27.tar.xz) = 1e69c96d13cd49844da3bcf33a0b428fbe7b6f77
 RMD160 (squid-3.5.27.tar.xz) = d3426f5d4ebda4834d069b4cc4bb3366fc4873b4
 SHA512 (squid-3.5.27.tar.xz) = 4172a053c3b7ffe7a12dfb3febac96942d0fbbe7e98e3f797f22cd75b0a3a89cbbfe7260b5daad099e79d5e9303bb5dfbfee7499cb30a90590aa1bd242ff4817