Bug 193737 - security fix for squids
Summary: security fix for squids
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Many People
Assignee: Guido Falsi
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-09-18 08:26 UTC by timp87
Modified: 2014-09-18 13:28 UTC (History)
1 user (show)

See Also:


Attachments
www/squid (1.71 KB, patch)
2014-09-18 08:26 UTC, timp87
no flags Details | Diff
www/squid33 (1.85 KB, patch)
2014-09-18 08:26 UTC, timp87
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description timp87 2014-09-18 08:26:07 UTC
Created attachment 147427 [details]
www/squid

Some security vulnerabilities were reported for squid.
Developers released squid-3.4.8 with that fixed. They also released patches for squid-3.3.13

Here is info http://squidproxy.wordpress.com/2014/09/07/squid-cache-org-outage/

Here is two diffs for our ports tree which update www/squid to lastest 3.4.8 and add official patches to www/squid33.
Comment 1 timp87 2014-09-18 08:26:25 UTC
Created attachment 147428 [details]
www/squid33
Comment 2 commit-hook freebsd_committer 2014-09-18 13:21:32 UTC
A commit references this bug:

Author: madpilot
Date: Thu Sep 18 13:20:58 UTC 2014
New revision: 368455
URL: http://svnweb.freebsd.org/changeset/ports/368455

Log:
  Document new squid vulnerability.

  PR:		193737
  Submitted by:	timp87 at gmail.com
  MFH:		2014Q3

Changes:
  head/security/vuxml/vuln.xml
Comment 3 commit-hook freebsd_committer 2014-09-18 13:24:34 UTC
A commit references this bug:

Author: madpilot
Date: Thu Sep 18 13:24:03 UTC 2014
New revision: 368457
URL: http://svnweb.freebsd.org/changeset/ports/368457

Log:
  Update squid to 3.4.8 and add patches to squid33.

  This update addresses CVE-2014-6270.

  PR:		193737
  Submitted by:	timp87 at gmail.com

Changes:
  head/www/squid/Makefile
  head/www/squid/distinfo
  head/www/squid33/Makefile
  head/www/squid33/distinfo
Comment 4 Guido Falsi freebsd_committer 2014-09-18 13:28:53 UTC
Committed, with minor changes.

Thanks.