linux/meta-openembedded.git/meta-networking/recipes-daemons/squid, branch krogoth-next

squid: CVE-2016-4553

2016-08-16T17:29:39+00:00

client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4553 Backported upstream patch: http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch Signed-off-by: Catalin Enache Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald (cherry picked from commit d46c89ae44c811b64b117613072698601e483b32) Signed-off-by: Armin Kuster

squid: CVE-2016-3947

2016-05-10T02:05:02+00:00

Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3947 Signed-off-by: Catalin Enache Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald Signed-off-by: Otavio Salvador Signed-off-by: Armin Kuster

squid: Blacklist

2016-02-22T20:51:18+00:00

Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

squid: disable atomic operations for powerpc/mips

2015-10-21T19:57:26+00:00

Don't enable GNU atomic operations for all targets, it fails on powerpc and mips: AtomicWord.h: undefined reference to `__sync_fetch_and_add_8' collect2: error: ld returned 1 exit status Refer to https://gcc.gnu.org/bugzilla/show_bug.cgi?id=56300: There is no hardware support for 8 bytes atomic operations on 32-bit MIPS targets. The 32-bit PowerPC fails as well. Signed-off-by: Wenzong Fan Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

squid: upgrade to 3.5.7

2015-09-11T17:33:54+00:00

1. Remove the squid-change-ksh-referen*.patch which is not needed, since 3.5.7 did not use ksh by default. 2. Update the checksum of COPYING,since the date in it has been changed. 3. Define BUILDCXXFLAGS, otherwise the target gcc options -std=c++11 will add into it, and lead to building failure since host gcc maybe not support "-std=c++11" 4. Assume to support GNU atomic operations by default, the running check on cross-compile setup does not work 5. enable basic auth by checking the DISTRO_FEATURE, and the default dependency on db, opensasl and openldap nis have been set, so enable them by default. Signed-off-by: Roy Li Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

meta-networking: standardize SECTION values

2015-06-06T00:42:25+00:00

SECTION has been used inconsistently throughout the recipes in this layer. Convert them to all use the same convention. Signed-off-by: Joe MacDonald

squid: change ksh reference in krb ldap helper to sh

2014-11-04T21:02:44+00:00

This solves the following warning: squid-3.4.7: squid requires /bin/bash, /usr/bin/perl, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Chong Lu Signed-off-by: Joe MacDonald

squid: Add a PACKAGECONFIG for libnetfilter-conntrack

2014-10-30T07:59:31+00:00

This solves the following warning: WARNING: QA Issue: squid rdepends on libnetfilter-conntrack, but it isn't a build dependency? [build-deps] Signed-off-by: Chong Lu Signed-off-by: Martin Jansa

squid: add new recipe

2014-10-16T05:00:59+00:00

squid is a fully-featured http proxy and web-cache daemon for Linux. Signed-off-by: Jackie Huang Signed-off-by: Martin Jansa