From 2518b2542dbec8e1b7a7f05aaeb69f2d7e518fac Mon Sep 17 00:00:00 2001 From: taca Date: Sat, 17 Oct 2009 01:50:38 +0000 Subject: Add official patch-20091015, quote from Readme.Patch-20091015. Bump PKGREVISION. Introduction: ============= This patch fixes one buffer overflow problem in sgLog.c when overlong URLs are requested. SquidGuard will then go into emergency mode were no blocking occurs. This is not required in this situation. The URLs must be build with a overlong sequence of slashes (/). ATTENTION: While squidGuard will no longer go into emergeny mode when one overlong URL is passed to it, it is possible to use the overlong URL to bypass the filter. This vulnerability is not fixed by this patch! You can check if this vulnerability is actually exploited on your system by checking the logfile squidGuard.log for the following warning (provided you have not used the option --with-nolog=yes with configure before compiling squidguard): Warning: Possible bypass attempt. Found multiple slashes where only one is expected: --- www/squidGuard/Makefile | 12 ++++++++++-- www/squidGuard/distinfo | 5 ++++- 2 files changed, 14 insertions(+), 3 deletions(-) (limited to 'www/squidGuard') diff --git a/www/squidGuard/Makefile b/www/squidGuard/Makefile index 90bb94e351c..2e8a0486293 100644 --- a/www/squidGuard/Makefile +++ b/www/squidGuard/Makefile @@ -1,12 +1,16 @@ -# $NetBSD: Makefile,v 1.18 2009/08/31 08:55:31 adam Exp $ +# $NetBSD: Makefile,v 1.19 2009/10/17 01:50:38 taca Exp $ DISTNAME= squidGuard-1.4 +PKGREVISION= 1 CATEGORIES= www -MASTER_SITES= http://www.squidguard.org/Downloads/ +MASTER_SITES= http://www.squidguard.org/Downloads/ \ + http://www.squidguard.org/Downloads/Patches/1.4/ +DISTFILES= ${DEFAULT_DISTFILES} squidGuard-1.4-patch-20091015.tar.gz MAINTAINER= zuntum@NetBSD.org HOMEPAGE= http://www.squidguard.org/ COMMENT= Ultrafast and free filter, redirector and access controller for Squid +LICENSE= gnu-gpl-v2 .include "../../www/squid/Makefile.common" @@ -45,6 +49,10 @@ INSTALLATION_DIRS+= bin ${EGDIR} CGIBINDIR?= ${PREFIX}/libexec/cgi-bin/ +pre-patch: + ${CP} ${WRKDIR}/squidGuard-1.4-patch-20091015/sgLog.c \ + ${WRKSRC}/src + do-install: ${INSTALL_PROGRAM} ${WRKSRC}/src/squidGuard ${DESTDIR}${PREFIX}/bin ${INSTALL_DATA} ${WRKSRC}/samples/sample.conf \ diff --git a/www/squidGuard/distinfo b/www/squidGuard/distinfo index 9cf5591feb1..dd2b24a5797 100644 --- a/www/squidGuard/distinfo +++ b/www/squidGuard/distinfo @@ -1,5 +1,8 @@ -$NetBSD: distinfo,v 1.6 2009/08/31 08:55:31 adam Exp $ +$NetBSD: distinfo,v 1.7 2009/10/17 01:50:38 taca Exp $ +SHA1 (squidGuard-1.4-patch-20091015.tar.gz) = b6ad4c67222463e6bafa002593e947d73929db18 +RMD160 (squidGuard-1.4-patch-20091015.tar.gz) = 08991337d2966d44dbe2a9a131b26fa881e1e807 +Size (squidGuard-1.4-patch-20091015.tar.gz) = 2577 bytes SHA1 (squidGuard-1.4.tar.gz) = 0508ccb7db5c656b9952eacbcff2c956c01677d3 RMD160 (squidGuard-1.4.tar.gz) = c44880ddbfd7d1ad63fcda1c6ed777f24feedbba Size (squidGuard-1.4.tar.gz) = 1968492 bytes -- cgit v1.2.3