[pkgsrc/trunk]: pkgsrc/www/squid3 Update squid to 3.5.23, including security ...

[taca <taca%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/8ebe8c9c6e2c
branches:  trunk
changeset: 356063:8ebe8c9c6e2c
user:      taca <taca%pkgsrc.org@localhost>
date:      Sun Dec 18 03:18:57 2016 +0000

description:
Update squid to 3.5.23, including security fixes.

Changes to squid-3.5.23 (16 Dec 2016):

        - Bug 4627: fix generate-host-certificates and dynamic_cert_mem_cache_size docs
        - Bug 4620: NetBSD build error with --enable-ipf-transparent
        - Bug 4567: Strange IPv6 shown in access.log
        - Bug 4406: SIGSEV in TunnelStateData::handleConnectResponse() during reconfigure and restart
        - Bug 4174 partial: fix Write.cc:41 "!ccb->active()" assertion.
        - Bug 4169: HIT marked as MISS when If-None-Match does not match
        - Bug 4007: Hang on DNS query with dead-end CNAME
        - Bug 4004 partial: Fix segfault via Ftp::Client::readControlReply
        - Bug 3940 partial: hostHeaderVerify failures MISS when they should be HIT
        - Bug 3533: Cache still valid after HTTP/1.1 303 See Other
        - Bug 3379: Combination of If-Match and a Cache Hit result in TCP Connection Failure
        - Bug 3290: authenticate_ttl not working for digest authentication
        - Bug 2258: bypassing cache but not destroying cache entry
        - HTTP/1.1: make Vary:* objects cacheable
        - HTTP/1.1: Add registered codes entry for new 103 (Early Hints) status code
        - Support IPv6 NAT with PF for NetBSD and FreeBSD
        - TLS: Make key= before cert= an error instead of quietly hiding the issue
        - ... and some debug updates
        - ... and some build fixes
        - ... and several documentation updates

diffstat:

 www/squid3/Makefile                          |   4 ++--
 www/squid3/distinfo                          |  11 +++++------
 www/squid3/patches/patch-src_ip_Intercept.cc |  16 ----------------
 3 files changed, 7 insertions(+), 24 deletions(-)

diffs (57 lines):

diff -r 1a307e5f89d7 -r 8ebe8c9c6e2c www/squid3/Makefile
--- a/www/squid3/Makefile       Sun Dec 18 02:59:24 2016 +0000
+++ b/www/squid3/Makefile       Sun Dec 18 03:18:57 2016 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.69 2016/10/10 09:01:39 adam Exp $
+# $NetBSD: Makefile,v 1.70 2016/12/18 03:18:57 taca Exp $
 
-DISTNAME=      squid-3.5.22
+DISTNAME=      squid-3.5.23
 CATEGORIES=    www
 MASTER_SITES=  http://www.squid-cache.org/Versions/v3/${PKGVERSION_NOREV:R}/ \
                ftp://ftp.squid-cache.org/pub/squid/ \
diff -r 1a307e5f89d7 -r 8ebe8c9c6e2c www/squid3/distinfo
--- a/www/squid3/distinfo       Sun Dec 18 02:59:24 2016 +0000
+++ b/www/squid3/distinfo       Sun Dec 18 03:18:57 2016 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.56 2016/10/16 15:58:14 taca Exp $
+$NetBSD: distinfo,v 1.57 2016/12/18 03:18:57 taca Exp $
 
-SHA1 (squid-3.5.22.tar.xz) = 73e9199dd9d2a7f107f78d03454830713a4a571d
-RMD160 (squid-3.5.22.tar.xz) = 0a9e5545ae8fa20c5d9f97cfc3548c0e07c86ee4
-SHA512 (squid-3.5.22.tar.xz) = 40925c8b4d7b05a580397b1adf24457b66514eea2e05c0685251370aea3e48e0ac52b36ec9ec5ef5b1564ac46fec89bc8842e24cced413b9f3b24eb7778f6ba5
-Size (squid-3.5.22.tar.xz) = 2324164 bytes
+SHA1 (squid-3.5.23.tar.xz) = 33e43869d5eeb0fdfd1d625e6d6edee0617b2b22
+RMD160 (squid-3.5.23.tar.xz) = 104d6c957f1f55ac70cfe6e10e3c6159f8a5eded
+SHA512 (squid-3.5.23.tar.xz) = 3f2b3df60fc0b2aab3d0d9e3489832d60d0aac8222f09ad2ff6afb95202b904f41f6530d713e7ce446c6f62b66f0cd792a6b12005d43c53fe68d2371f9caa880
+Size (squid-3.5.23.tar.xz) = 2325884 bytes
 SHA1 (patch-compat_compat.h) = d6cd93fa7a6d0faad3bf1aca8ae4fa5c984fe288
 SHA1 (patch-compat_debug.cc) = 95fc0aa6901834175b9bbf1ddb51eeb7d9ddc8c7
 SHA1 (patch-compat_debug.h) = a828871704b1578b520d412393c3d398099a5fdc
@@ -12,6 +12,5 @@
 SHA1 (patch-src_SquidNew.cc) = eef6e72e168cf7f40518fab13dc2f55ed0268db9
 SHA1 (patch-src_adaptation_ecap_ServiceRep.cc) = 246bc60bf2b06ddd99cacf59ae99dcbeee7365c2
 SHA1 (patch-src_base_TidyPointer.h) = d05017d7db904286afb02600ed3cc2f0f253b939
-SHA1 (patch-src_ip_Intercept.cc) = c5fecf0adbc7b8a7c254ab70eb8ee8ee6cf058c8
 SHA1 (patch-src_store.cc) = 055d98a59103b02a51876a5c8ffed9514954beb4
 SHA1 (patch-tools_Makefile.in) = 3a7678c63a11a35fabef091a3b18e63859f0796f
diff -r 1a307e5f89d7 -r 8ebe8c9c6e2c www/squid3/patches/patch-src_ip_Intercept.cc
--- a/www/squid3/patches/patch-src_ip_Intercept.cc      Sun Dec 18 02:59:24 2016 +0000
+++ /dev/null   Thu Jan 01 00:00:00 1970 +0000
@@ -1,16 +0,0 @@
-$NetBSD: patch-src_ip_Intercept.cc,v 1.7 2016/10/16 15:58:15 taca Exp $
-
-Fix build problem when PKG_OPTIONS contains squid-ipf.
-
---- src/ip/Intercept.cc.orig   2016-10-09 19:58:01.000000000 +0000
-+++ src/ip/Intercept.cc
-@@ -25,6 +25,9 @@
- #define IPFILTER_VERSION        5000004
- #endif
- 
-+#if HAVE_SYS_PARAM_H
-+#include <sys/param.h>
-+#endif
- #if HAVE_SYS_IOCCOM_H
- #include <sys/ioccom.h>
- #endif