Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (41m)  pkgsrc-2024Q1 (11d)  pkgsrc-2023Q4 (57d)  pkgsrc-2023Q2 (90d)  pkgsrc-2023Q3 (169d) 

2024-05-28 14:20:14 UTC Now

2018-04-30 08:57:49 UTC MAIN commitmail json YAML

www/squid3: Add official security patch SQUID-2018_3

Add security patch for SQUID-2018_3.

Bump PKGREVISION.

http://www.squid-cache.org/Advisories/SQUID-2018_3.txt

__________________________________________________________________

Problem Description:

Due to incorrect pointer handling Squid is vulnerable to denial
of service attack when processing ESI responses.

__________________________________________________________________

Severity:

This problem allows a remote server delivering ESI responses
to trigger a denial of service for all clients accessing the
Squid service.

This problem is limited to Squid operating as reverse proxy.

(taca)