diff options
| author | taca <taca@pkgsrc.org> | 2002-02-18 17:00:38 +0000 |
|---|---|---|
| committer | taca <taca@pkgsrc.org> | 2002-02-18 17:00:38 +0000 |
| commit | 058d558941b279a2fbcc59f7a3a1c9a071106e86 (patch) | |
| tree | 6efbe7506c87102cac4114874c3c49baede22e64 /www/squid/Makefile | |
| parent | 1a7c3cbf8493315bb8c2e59a213b6aa080f8b156 (diff) | |
| download | pkgsrc-058d558941b279a2fbcc59f7a3a1c9a071106e86.tar.gz | |
Update squid to squid-2.4.3nb1.
- replace a hack adding fd_mask definition in autoconf.h with re-writing
configure script. It cause to run configure twice and result "no fd_mask".
- Incorporate three official patches from
http://www.squid-cache.org/Versions/v2/2.4/bugs/.
o SNMP memory leaks
synopsis
The SNMP implementation in Squid had several memory leaks
possibly causing an denial of service.
workaround
Disable the SNMP port if enabled by using "snmp_port 0" in
squid.conf. Or if you only use SNMP for MRTG data
collection running on the same host then use
"snmp_incoming_address 127.0.0.1" to limit reachability
of the SNMP port to only localhost or some other trusted
network.
o Coredump on certain ftp:// style URL's
synopsis
If certain constructed ftp:// style URL's are received then
squid crashes, causing a denial of service and maybe even
remote execution of code.
workaround
Deny forwarding of non-anonymous FTP URLs by inserting
the following rules at the top of squid.conf, prior to
any http_access allow lines.
acl non_anonymous_ftp url_regex -i ftp://[^/@]*@
http_access deny non_anonymous_ftp
o "htcp_port 0" fails to disable the HTCP port
synopsis
"htcp_port 0" fails to completely disable the HTCP port as
documented in squid.conf, instead HTCP will be listening on
a random port number.
Diffstat (limited to 'www/squid/Makefile')
| -rw-r--r-- | www/squid/Makefile | 15 |
1 files changed, 8 insertions, 7 deletions
diff --git a/www/squid/Makefile b/www/squid/Makefile index f6bfcbdc9e1..8327b8619ee 100644 --- a/www/squid/Makefile +++ b/www/squid/Makefile @@ -1,12 +1,19 @@ -# $NetBSD: Makefile,v 1.58 2002/02/10 19:26:56 veego Exp $ +# $NetBSD: Makefile,v 1.59 2002/02/18 17:00:38 taca Exp $ DISTNAME= squid-2.4.STABLE3-src PKGNAME= squid-2.4.3 +PKGREVISION= 1 CATEGORIES= www MASTER_SITES= http://www.squid-cache.org/Versions/v2/2.4/ \ ftp://ftp.leo.org/pub/comp/general/infosys/www/daemons/squid/squid-2/STABLE/ \ ftp://ftp1.au.squid-cache.org/pub/squid/squid-2/STABLE/ +PATCH_SITES= http://www.squid-cache.org/Versions/v2/2.4/bugs/ +PATCHFILES= squid-2.4.STABLE3-SNMP_memory_leaks.patch \ + squid-2.4.STABLE3-ftp_coredump.patch \ + squid-2.4.STABLE3-htcp_off.patch +PATCH_DIST_STRIP= -p1 + MAINTAINER= tron@netbsd.org HOMEPAGE= http://www.squid-cache.org/ COMMENT= Post-Harvest_cached WWW proxy cache and accelerator @@ -43,12 +50,6 @@ SQUID_SYSCONFDIR?= ${PKG_SYSCONFDIR} OPTIONAL_FILES= libexec/diskd libexec/dnsserver libexec/pinger libexec/unlinkd -post-configure: - @cd ${WRKSRC}/include && \ - ${MV} autoconf.h autoconf.h.prepatch && \ - ${SED} -e 's%#define fd_mask int%/* #undef fd_mask */%' <autoconf.h.prepatch \ - >autoconf.h - post-build: ${SED} s#@PREFIX@#${PREFIX}#g <${FILESDIR}/squid.sh >${WRKDIR}/squid.sh ${SED} s#@SYSCONFDIR@#${SQUID_SYSCONFDIR}#g <${PKGDIR}/INSTALL \ |