131431 – [Maintainer] [Security] www/squid, www/squid30: update to 2.7.6/3.0.13 to fix a remote DOS vulnerability

no flags

- Update www/squid to 2.7.STABLE6
- Update www/squid30 to 3.0.STABLE13

These updates address Squid-Advisory 2009:1.

Proposed VuXML-Entry:

  <vuln vid="aecf2672-f3b9-11dd-8163-0048543d60ce">
    <topic>Squid -- remote denial of service vulnerability</topic>
    <affects>
      <package>
        <name>squid</name>
	<range><ge>2.7.1</ge><lt>2.7.6</lt></range>
	<range><ge>3.0.1</ge><lt>3.0.13</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
        <p>Squid security advisory 2009:1 reports:</p>
        <blockquote cite="http://www.squid-cache.org/Advisories/SQUID-2009_1.txt">
          <p>Due to an internal error Squid is vulnerable to a denial
	    of service attack when processing specially crafted requests.</p>
	  <p>This problem allows any client to perform a denial of service
	    attack on the Squid service.</p>
        </blockquote>
      </body>
    </description>
    <references>
      <url>http://secunia.com/advisories/33731/</url>
    </references>
    <dates>
      <discovery>2009-02-02</discovery>
    </dates>
  </vuln>

Fix: Apply these patches:

www/squid:

www/squid30: