diff options
| author | taca <taca> | 2009-10-17 01:50:38 +0000 |
|---|---|---|
| committer | taca <taca> | 2009-10-17 01:50:38 +0000 |
| commit | 38ea3db1a21f5aaeb61f007b23caebf0783a9de8 (patch) | |
| tree | 5af004ede606cb8a38df48d959438a079e701e62 /www/squidGuard | |
| parent | 4d18be97c4f4793d128c272fe7397d401336ecfb (diff) | |
| download | pkgsrc-38ea3db1a21f5aaeb61f007b23caebf0783a9de8.tar.gz | |
Add official patch-20091015, quote from Readme.Patch-20091015.
Bump PKGREVISION.
Introduction:
=============
This patch fixes one buffer overflow problem in sgLog.c when overlong URLs
are requested. SquidGuard will then go into emergency mode were no blocking
occurs. This is not required in this situation.
The URLs must be build with a overlong sequence of slashes (/).
ATTENTION: While squidGuard will no longer go into emergeny mode when one
overlong URL is passed to it, it is possible to use the overlong URL to
bypass the filter. This vulnerability is not fixed by this patch!
You can check if this vulnerability is actually exploited on your system
by checking the logfile squidGuard.log for the following warning (provided
you have not used the option --with-nolog=yes with configure before compiling
squidguard):
Warning: Possible bypass attempt. Found multiple slashes where only one is expected:
Diffstat (limited to 'www/squidGuard')
| -rw-r--r-- | www/squidGuard/Makefile | 12 | ||||
| -rw-r--r-- | www/squidGuard/distinfo | 5 |
2 files changed, 14 insertions, 3 deletions
diff --git a/www/squidGuard/Makefile b/www/squidGuard/Makefile index 90bb94e351c..2e8a0486293 100644 --- a/www/squidGuard/Makefile +++ b/www/squidGuard/Makefile @@ -1,12 +1,16 @@ -# $NetBSD: Makefile,v 1.18 2009/08/31 08:55:31 adam Exp $ +# $NetBSD: Makefile,v 1.19 2009/10/17 01:50:38 taca Exp $ DISTNAME= squidGuard-1.4 +PKGREVISION= 1 CATEGORIES= www -MASTER_SITES= http://www.squidguard.org/Downloads/ +MASTER_SITES= http://www.squidguard.org/Downloads/ \ + http://www.squidguard.org/Downloads/Patches/1.4/ +DISTFILES= ${DEFAULT_DISTFILES} squidGuard-1.4-patch-20091015.tar.gz MAINTAINER= zuntum@NetBSD.org HOMEPAGE= http://www.squidguard.org/ COMMENT= Ultrafast and free filter, redirector and access controller for Squid +LICENSE= gnu-gpl-v2 .include "../../www/squid/Makefile.common" @@ -45,6 +49,10 @@ INSTALLATION_DIRS+= bin ${EGDIR} CGIBINDIR?= ${PREFIX}/libexec/cgi-bin/ +pre-patch: + ${CP} ${WRKDIR}/squidGuard-1.4-patch-20091015/sgLog.c \ + ${WRKSRC}/src + do-install: ${INSTALL_PROGRAM} ${WRKSRC}/src/squidGuard ${DESTDIR}${PREFIX}/bin ${INSTALL_DATA} ${WRKSRC}/samples/sample.conf \ diff --git a/www/squidGuard/distinfo b/www/squidGuard/distinfo index 9cf5591feb1..dd2b24a5797 100644 --- a/www/squidGuard/distinfo +++ b/www/squidGuard/distinfo @@ -1,5 +1,8 @@ -$NetBSD: distinfo,v 1.6 2009/08/31 08:55:31 adam Exp $ +$NetBSD: distinfo,v 1.7 2009/10/17 01:50:38 taca Exp $ +SHA1 (squidGuard-1.4-patch-20091015.tar.gz) = b6ad4c67222463e6bafa002593e947d73929db18 +RMD160 (squidGuard-1.4-patch-20091015.tar.gz) = 08991337d2966d44dbe2a9a131b26fa881e1e807 +Size (squidGuard-1.4-patch-20091015.tar.gz) = 2577 bytes SHA1 (squidGuard-1.4.tar.gz) = 0508ccb7db5c656b9952eacbcff2c956c01677d3 RMD160 (squidGuard-1.4.tar.gz) = c44880ddbfd7d1ad63fcda1c6ed777f24feedbba Size (squidGuard-1.4.tar.gz) = 1968492 bytes |