Module Name:	pkgsrc
Committed By:	salo
Date:		Fri Jan 21 14:37:07 UTC 2005

Modified Files:
	pkgsrc/www/squid [pkgsrc-2004Q4]: Makefile distinfo

Log Message:
Pullup ticket 239 - requested by Takahiro Kambe
security fix for squid

Revisions pulled up:
- pkgsrc/www/squid/Makefile 1.125-1.128
- pkgsrc/www/squid/distinfo 1.73-1.74

   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Jan 16 15:46:25 UTC 2005

   Modified Files:
   	pkgsrc/www/squid: Makefile

   Log Message:
   Set PKG_USERS and PKG_GROUPS with SQUID_USER and SQUID_GROUP.
   Now squid's user and group are handled by bsd.pkg.install.mk properly.

   Thanks much to Volker Wiegand at t-online dot de noted this problem
   by private mail.

   Bump PKGREVISION.
---
   Module Name:	pkgsrc
   Committed By:	kim
   Date:		Wed Jan 19 00:19:27 UTC 2005

   Modified Files:
   	pkgsrc/www/squid: Makefile

   Log Message:
   Record SQUID_USER and SQUID_GROUP in BUILD_DEFS.
---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Jan 19 14:56:55 UTC 2005

   Modified Files:
   	pkgsrc/www/squid: Makefile distinfo

   Log Message:
   Apply three official patch including a minor security problem.

   o 2005-01-17 04:29 (Minor Secuity issue) Sanity check usernames
     in squid_ldap_auth
   o 2005-01-17 02:52 (Minor) FQDN names truncated on compressed DNS
     responses
   o 2005-01-17 02:52 (Minor) Internal DNS memory leak on malformed
     responses

   Bump package revision; squid-2.5.7nb7.
---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Jan 21 13:41:27 UTC 2005

   Modified Files:
   	pkgsrc/www/squid: Makefile distinfo

   Log Message:
   Update new official patched.

   o  2005-01-21 12:43 (Security issue)
   	Strengthen Squid from HTTP response splitting cache pollution attack

   o  2005-01-21 12:10 (Minor)
   	Icons fails to load on non-anonymous FTP when using
   	short_icons_url directive

   o  2005-01-21 12:10 (Minor)
   	FTP data connection fails on some FTP servers when requesting
   	directory without a trailing slash

   One patch has problem to apply and hold to apply

   o  2005-01-21 12:10 (Minor) Disable Path-MTU discovery on intercepted
      requests

   Bump package revision.


To generate a diff of this commit:
cvs rdiff -r1.120.2.2 -r1.120.2.3 pkgsrc/www/squid/Makefile
cvs rdiff -r1.68.2.2 -r1.68.2.3 pkgsrc/www/squid/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.