From owner-cvs-all@FreeBSD.ORG  Sat Jan 22 09:31:33 2005
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id CC64916A4CF; Sat, 22 Jan 2005 09:31:33 +0000 (GMT)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id AD71B43D2D; Sat, 22 Jan 2005 09:31:33 +0000 (GMT)
	(envelope-from edwin@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id j0M9VX0F052692;
	Sat, 22 Jan 2005 09:31:33 GMT
	(envelope-from edwin@repoman.freebsd.org)
Received: (from edwin@localhost)
	by repoman.freebsd.org (8.13.1/8.13.1/Submit) id j0M9VX6G052691;
	Sat, 22 Jan 2005 09:31:33 GMT
	(envelope-from edwin)
Message-Id: <200501220931.j0M9VX6G052691@repoman.freebsd.org>
From: Edwin Groothuis <edwin@FreeBSD.org>
Date: Sat, 22 Jan 2005 09:31:33 +0000 (UTC)
To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org,
	cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: ports/www/squid Makefile distinfo
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 22 Jan 2005 09:31:34 -0000

edwin       2005-01-22 09:31:33 UTC

  FreeBSD ports repository

  Modified files:
    www/squid            Makefile distinfo 
  Log:
  [Maintainer/security] www/squid: protect against HTTP resonse split
  attack and other patches
  
      Integrate vendor patches as published on
      <http://www.squid-cache.org/Versions/v2/2.5/bugs/>:
  
      - FTP data connection fails on some FTP servers when requesting
        a directory without a trailing slash (squid bug #1194)
  
      - Icons fail to load on non-anonymous FTP when using the
        short_icons_url configuration directive (squid bug #1203)
  
      - Strengthen squid against HTTP response splitting cache pollution
        attacks (squid bug #1200), classified as security issue by
        the vendor
  
      Proposed VuXML information, entry date left to be filled in:
  
      (Note: I added only a publically accessible link to the Sanctum,
      Inc.  whitepaper, the squid bug tracker contains a deep link
      to the PDF itself; if we are allowed to publish it, it could
      instead be used as reference because Sanctum, Inc. wants you
      to register with them before you get access to their whitepapers.)
  
  PR:             ports/76550
  Submitted by:   Thomas-Martin Seck <tmseck@netcologne.de>
  
  Revision  Changes    Path
  1.151     +5 -2      ports/www/squid/Makefile
  1.115     +6 -0      ports/www/squid/distinfo