15f788cbd1
squid-2.2.stable5-newlines_in_auth.patch After decoding the base64 encoded "user:password" pair given by the client, squid doesn't strip out any '\n' found in the resulting string. Given such a string, any external authenticator will receive two lines instead of one, and most probably send two results. Now, any subsequent authentification exchange will have its answer shifted by one. Therefore, a malicious user can gain access to sites they should not have access to. squid-2.2.stable5-ipcache_negative.patch The IP cache immediately removes entries that should be negatively cached. This appears to be due to some changes made for retrying failed connections. squid-2.2.stable5-no_cache.patch A missing no_cache list is treated the same as no_cache deny all.
32 lines
896 B
Makefile
32 lines
896 B
Makefile
# $OpenBSD: Makefile,v 1.7 1999/12/09 19:48:17 brad Exp $
|
|
|
|
DISTNAME= squid-2.2.STABLE5
|
|
PKGNAME= squid-2.2
|
|
CATEGORIES= www
|
|
MASTER_SITES= http://squid.nlanr.net/Versions/v2/2.2/
|
|
EXTRACT_SUFX= -src.tar.gz
|
|
|
|
PATCH_SITES= http://squid.nlanr.net/Versions/v2/2.2/bugs/
|
|
PATCHFILES= squid-2.2.stable5-no_cache.patch \
|
|
squid-2.2.stable5-ipcache_negative.patch \
|
|
squid-2.2.stable5-newlines_in_auth.patch
|
|
.if defined(PATCH_DEBUG)
|
|
PATCH_DIST_ARGS=-d ${WRKSRC}/src -E ${PATCH_DIST_STRIP}
|
|
.else
|
|
PATCH_DIST_ARGS=-d ${WRKSRC}/src --forward --quiet -E ${PATCH_DIST_STRIP}
|
|
.endif
|
|
|
|
MAINTAINER= ports@openbsd.org
|
|
|
|
SYSCONFDIR= /etc/squid
|
|
GNU_CONFIGURE= yes
|
|
CONFIGURE_ARGS= --sysconfdir=${SYSCONFDIR} --localstatedir="/var/squid"
|
|
|
|
MAKEFILE= makefile
|
|
STRIP= # won't install scripts correctly otherwise.
|
|
|
|
post-install:
|
|
@PKG_PREFIX="${PREFIX}" ${SH} ${PKGDIR}/INSTALL ${DISTNAME} POST-INSTALL
|
|
|
|
.include <bsd.port.mk>
|