[Buildroot] [git commit] package/squid: security bump to version 6.6
Yann E. MORIN
yann.morin.1998 at free.fr
Tue Dec 26 21:06:02 UTC 2023
commit: https://git.buildroot.net/buildroot/commit/?id=c13199c9326fa2daa574f08ec8fc063a48d0eb06
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/master
- Drop patch (already in version)
- Fix CVE-2023-50269: This problem allows a remote client to perform
Denial of Service attack by sending a large X-Forwarded-For header
when the follow_x_forwarded_for feature is configured.
https://github.com/squid-cache/squid/security/advisories/GHSA-wgq4-4cfg-c4x3
https://github.com/squid-cache/squid/blob/SQUID_6_6/ChangeLog
Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998 at free.fr>
---
...8-Fix-ESI-build-with-libxml2-v2.12.0-1600.patch | 32 ----------------------
package/squid/squid.hash | 8 +++---
package/squid/squid.mk | 2 +-
3 files changed, 5 insertions(+), 37 deletions(-)
diff --git a/package/squid/0001-Bug-5328-Fix-ESI-build-with-libxml2-v2.12.0-1600.patch b/package/squid/0001-Bug-5328-Fix-ESI-build-with-libxml2-v2.12.0-1600.patch
deleted file mode 100644
index fcbdcc1749..0000000000
--- a/package/squid/0001-Bug-5328-Fix-ESI-build-with-libxml2-v2.12.0-1600.patch
+++ /dev/null
@@ -1,32 +0,0 @@
-From c9b3edc1396925aa7eca3d3cc6c798806286a974 Mon Sep 17 00:00:00 2001
-From: bkuhls <bkuhls at users.noreply.github.com>
-Date: Sun, 26 Nov 2023 15:09:21 +0000
-Subject: [PATCH] Bug 5328: Fix ESI build with libxml2 v2.12.0 (#1600)
-
- Libxml2Parser.cc:147:40: error: invalid conversion from
- 'const xmlError*' to 'xmlErrorPtr' {aka 'xmlError*'} [-fpermissive]
-
-libxml2 recently made xmlGetLastError() return a constant object.
-
-Upstream: https://github.com/squid-cache/squid/commit/c9b3edc1396925aa7eca3d3cc6c798806286a974
-Signed-off-by: Bernd Kuhls <bernd at kuhls.net>
----
- src/esi/Libxml2Parser.cc | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/src/esi/Libxml2Parser.cc b/src/esi/Libxml2Parser.cc
-index f03752885..236a37433 100644
---- a/src/esi/Libxml2Parser.cc
-+++ b/src/esi/Libxml2Parser.cc
-@@ -144,7 +144,7 @@ ESILibxml2Parser::lineNumber() const
- char const *
- ESILibxml2Parser::errorString() const
- {
-- xmlErrorPtr error = xmlGetLastError();
-+ const auto error = xmlGetLastError();
-
- if (error == nullptr)
- return nullptr;
---
-2.43.0
-
diff --git a/package/squid/squid.hash b/package/squid/squid.hash
index a163bd9ad3..4a8ea5d550 100644
--- a/package/squid/squid.hash
+++ b/package/squid/squid.hash
@@ -1,6 +1,6 @@
-# From http://www.squid-cache.org/Versions/v6/squid-6.5.tar.xz.asc
-md5 da2797d899cf538fab7f504fdf3c18bf squid-6.5.tar.xz
-sha1 07a08394625948750264778c82e19cf24ea7cb1f squid-6.5.tar.xz
+# From http://www.squid-cache.org/Versions/v6/squid-6.6.tar.xz.asc
+md5 5a41134ee1b7e75f62088acdec92d2ca squid-6.6.tar.xz
+sha1 f05e06a9dd3bf7501d2844e43d9ae1bd00e9edcc squid-6.6.tar.xz
# Locally calculated
-sha256 5070f8a3ae6666870c8fc716326befb0a1abe8b5ff3a6f3932cbc5543d7c8549 squid-6.5.tar.xz
+sha256 55bd7f9f4898153161ea1228998acb551bf840832b9e5b90fc8ecd2942420318 squid-6.6.tar.xz
sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING
diff --git a/package/squid/squid.mk b/package/squid/squid.mk
index c1477b1adf..3a9edac71e 100644
--- a/package/squid/squid.mk
+++ b/package/squid/squid.mk
@@ -4,7 +4,7 @@
#
################################################################################
-SQUID_VERSION = 6.5
+SQUID_VERSION = 6.6
SQUID_SOURCE = squid-$(SQUID_VERSION).tar.xz
SQUID_SITE = http://www.squid-cache.org/Versions/v6
SQUID_LICENSE = GPL-2.0+
More information about the buildroot
mailing list