linux/meta-openembedded.git/meta-networking/recipes-daemons/squid, branch master

squid: upgrade 7.4 -> 7.5

2026-03-18T21:33:30+00:00

License-Update: updated to latest GPLv2 text version [1] Changelog [2] - Bug 5501: Squid may exit when ACLs decode an invalid URI - ICP: Fix HttpRequest lifetime for ICP v3 queries - ICP: Fix validation of packet sizes and URLs - Do not escape malformed URI twice when sending ICP errors - ... and some code, CI, and documentation cleanups [1] https://github.com/squid-cache/squid/commit/765c7f4e7fa45ce87134b4a38ad175db4bda06dd [2] https://github.com/squid-cache/squid/releases/tag/SQUID_7_5 Signed-off-by: Peter Marko Signed-off-by: Khem Raj

squid: fix UPSTREAM_CHECK_REGEX

2026-03-18T21:33:30+00:00

Squid tags are in form SQUID__. This can also be seen in SRC_URI download link. This change will make "devtool latest-version squid" correctly show 7.5 Signed-off-by: Peter Marko Signed-off-by: Khem Raj

squid: upgrade 7.3 -> 7.4

2026-03-17T20:25:19+00:00

License-Update: update GPLv2 COPYING document Some terminology and FSF address changes since the GPLv2 https://github.com/squid-cache/squid/commit/4c5fbc7e8db25352722de4ebe7fe1cab904b62b6 Remove lines from patch, which modify not exist code. Changelog: https://github.com/squid-cache/squid/releases/tag/SQUID_7_4 Changes: - Do not create world-readable directories - digest_edirectory_auth: Fix LDAPS memory leaks - snmplib: Improve handling of zero-length ASN OCTET STRINGs - Debug tls_read_method()/tls_write_method() errors - ICMP: Harden echo paths, fix overflows, UB, and leaks - Set SSL_OP_LEGACY_SERVER_CONNECT when peeking at servers - security_file_certgen: Fix OPENSSL_malloc()/free(3) mismatch - Detect FreeBSD ports Heimdal package - Remove SQUID_CHECK_KRB5_HEIMDAL_BROKEN_KRB5_H macro - Remove SQUID_CHECK_KRB5_SOLARIS_BROKEN_KRB5_H macro - ext_kerberos_ldap_group_acl: Do not prohibit all LDFLAGS - negotiate_sspi_auth: Respond with ERR when FormatMessage() fails - ... and some code cleanups - ... and some CI improvements Signed-off-by: Andrej Kozemcak Signed-off-by: Khem Raj

squid: upgrade 7.2 -> 7.3

2025-11-01T23:45:17+00:00

* https://github.com/squid-cache/squid/releases/tag/SQUID_7_3 - Regression Bug 5520: ERR_INVALID_URL for CONNECT host with leading digit - Quit NTLM authenticate() on missing NTLM authorization header - Fix Auth::User::absorb() IP list transfer logic - Fix type mismatch in new/delete of addrinfo::ai_addr - Fix libntlmauth string parsing on big-endian machines - ... and some code cleanups - ... and some CI improvements Signed-off-by: Peter Marko Signed-off-by: Khem Raj

squid: upgrade 7.1 -> 7.2

2025-10-30T04:02:20+00:00

Handles CVE-2025-62168. Remove CVE patch included in this release. Refresh remaining patches. Signed-off-by: Peter Marko Signed-off-by: Khem Raj

squid: patch CVE-2025-59362

2025-10-09T23:15:49+00:00

Pick patch from PR ]1] mentioned in NVD report [2]. [1] https://github.com/squid-cache/squid/pull/2149 [2] https://nvd.nist.gov/vuln/detail/CVE-2025-59362 Signed-off-by: Peter Marko Signed-off-by: Khem Raj

squid: upgrade 6.12 -> 7.1

2025-10-09T23:15:49+00:00

Refresh all patches. ptest patches needed larger rework for new test testHeader. License-Update: copyright years refreshed Signed-off-by: Peter Marko Signed-off-by: Khem Raj

squid: download from github

2025-10-09T23:15:49+00:00

Devtool could not find latest versions before. Download page [1] shows message "Squid sources are released through GitHub. Please refer to the Releases Page to find all released versions." Note that also squid security advisories were moved to Github. [1] https://www.squid-cache.org/Versions/ Signed-off-by: Peter Marko Signed-off-by: Khem Raj

recipes: Fix variable assignment whitespace

2025-03-20T15:46:56+00:00

Signed-off-by: Richard Purdie Signed-off-by: Khem Raj

squid: handle CVE-2024-45802

2024-11-19T21:50:56+00:00

According to [1] the ESI implementation in squid feature is vulnerable without any fix available. NVD says it's fixed in 6.10, however the change in this release only disables ESI by default (which we always did via PACKAGECONFIG). This means CVE report would say Patched even if the vulnerability is still present if someone adapts squid PACKAGECONFIG. Commit in master branch related to this CVE is [2]. Title is "Remove Edge Side Include (ESI) protocol" and it's also what it does. So there will never be a fix for these ESI vulnerabilities. Based on this, remove vulnerable ESI PACKAGECONFIG already now. [1] https://github.com/squid-cache/squid/security/advisories/GHSA-f975-v7qw-q7hj [2] https://github.com/squid-cache/squid/commit/5eb89ef3d828caa5fc43cd8064f958010dbc8158 Signed-off-by: Peter Marko Signed-off-by: Khem Raj