• http://www.squid-cache.org//Versions/v2/2.7/ (Download)
• ftp://ftp.openbsd.org/pub/OpenBSD/distfiles/squid/ (Download)
• ftp://ftp.usa.openbsd.org/pub/OpenBSD/distfiles/squid/ (Download)

• ldap
• snmp

• (2010-02-03) Updated to version: squid-2.7.STABLE7p0
• (2009-10-30) Updated to version: squid-2.7.STABLE7
• (2009-09-09) Updated to version: squid-2.7.STABLE6p0
• (2009-02-09) Updated to version: squid-2.7.STABLE6
• (2009-01-08) Updated to version: squid-2.7.STABLE5
• (2008-08-21) Updated to version: squid-2.7.STABLE4
• (2008-07-17) Updated to version: squid-2.7.STABLE3
• (2008-05-31) Updated to version: squid-2.6.STABLE20
• (2008-02-20) Updated to version: squid-2.6.STABLE18p0
• (2008-01-29) Updated to version: squid-2.6.STABLE18

Log message:
MFC:
SECURITY FIX
Resolves:  CVE-2009-2855, CVE-2010-0308, and bugfixes
ok Brad jasper@

Log message:
SECURITY FIX for CVE-2010-0308, "Squid DNS Packet Processing
Denial of Service Vulnerability"
brad (MAINTAINER) came up with the same diff
ok ajacoutot@ sthen@

Log message:
update to the latest bug fix release in the 2.7 branch. From Brad (maintainer).

Log message:
MFC:
SECURITY FIX
Resolve CVE-2009-2855

Log message:
MFC:
SECURITY FIX
Resolve CVE-2009-2855
ok jasper@

Log message:
Security fix for CVE-2009-2855
ok brad (MAINTAINER)

Log message:
bug fix update to Squid 2.7-STABLE6, from Brad.

Log message:
update to 2.7.STABLE5, various bugfixes. From Brad (and running here ~3wks).

Log message:
Upgrade Squid to 2.7-STABLE4
ok ajacoutot@

Log message:
Upgrade Squid to 2.7-STABLE3.
ok okan@

Log message:
- update squid to 2.6STABLE20
- update license marker
- remove transparent flavor
- add ldap flavor
from brad@ (MAINTAINER), testing by several users

Log message:
Add missing @sample markers in PLIST, bump PKGNAME.
from brad@

Log message:
- update squid to 2.6.STABLE18
from brad@

Log message:
update to 2.6.STABLE17
from maint; works and builds ok for me

Log message:
enable the "X-Forwarded-For" headers support which has been added in
Squid 2.6. It's not the default in squid.conf but can be enabled, and
it's useful e.g. when you are using squid through dansguardian, in order
to keep/show the source address of the client in the logs (otherwise,
squid thinks that everything comes from dansguardian).
ok brad@

Log message:
Update to Squid 2.6.STABLE16.
From brad (MAINTAINER)
ok sthen@

Log message:
Change Brads email address for now, so people can reach him instead of
getting bounces or 550s. Bump pkgnames. While here, remove quotes from
comments.
prompted by espie@

Log message:
update to 2.6 stable13, from brad@ (maint)
ok kili@ tested by me

Log message:
update to version 2.6.STABLE12 (regen patches while here);
from MAINTAINER; Brad <brad@comstyle.com>

Log message:
more base64 checksums

Log message:
bugfix maintenance release update for Squid.
from maint brad@

Log message:
bugfix update; from maintainer (brad@)

Log message:
upgrade to 2.6.STABLE5

Log message:
fix the MESSAGE file, s/2.5/2.6/

Log message:
upgrade to 2.6.STABLE4
Squid 2.6 supports kqueue and hw accelerated SSL via OpenSSL,
as well as many other improvements.

Log message:
Back out change with no review.
ok espie@, pvalchev@

Log message:
upgrade to 2.5.STABLE14

Log message:
upgrade to 2.5.STABLE13

Log message:
Have Squid open /dev/pf in read-only mode.
From: Andrey Matveev <evol at online dot ptt dot ru>

Log message:
Always explicitly set the AUTOCONF_VERSION to use.  In some cases
the default was not appropriate.

Log message:
MFC:
upgrade to 2.5.STABLE12
- [Major] Error introduced in 2.5.STABLE11 causing truncated responses
when using delay pools (Bug #1405)
ok brad

Log message:
MFC:
upgrade to 2.5.STABLE12
- [Major] Error introduced in 2.5.STABLE11 causing truncated responses
when using delay pools (Bug #1405)
ok brad

Log message:
MFC:
upgrade to 2.5.STABLE11
Alex Masterov has reported a vulnerability in Squid,
which potentially can be exploited by malicious people
to cause a DoS.
The vulnerability is caused due to an unspecified error
in the "sslConnectTimeout()" function after handling
malformed requests. This may be exploited to crash Squid.
CAN-2005-2796
ok brad@

Log message:
upgrade to 2.5.STABLE12
- [Major] Error introduced in 2.5.STABLE11 causing truncated responses
when using delay pools (Bug #1405)

Log message:
ups

Log message:
MFC:
upgrade to 2.5.STABLE11
Alex Masterov has reported a vulnerability in Squid,
which potentially can be exploited by malicious people
to cause a DoS.
The vulnerability is caused due to an unspecified error
in the "sslConnectTimeout()" function after handling
malformed requests. This may be exploited to crash Squid.
CAN-2005-2796
ok brad@

Log message:
MFC:
upgrade to 2.5.STABLE11
Alex Masterov has reported a vulnerability in Squid,
which potentially can be exploited by malicious people
to cause a DoS.
The vulnerability is caused due to an unspecified error
in the "sslConnectTimeout()" function after handling
malformed requests. This may be exploited to crash Squid.
CAN-2005-2796
ok brad@

Log message:
upgrade to 2.5.STABLE11
Alex Masterov has reported a vulnerability in Squid,
which potentially can be exploited by malicious people
to cause a DoS.
The vulnerability is caused due to an unspecified error
in the "sslConnectTimeout()" function after handling
malformed requests. This may be exploited to crash Squid.
CAN-2005-2796

Log message:
SECURITY: update to 2.5.STABLE10
fix multiple vulnerabilities
http://www.vuxml.org/openbsd/cf9986f2-cd8d-11d9-a230-00065bd5b0b6.html
ok brad@

Log message:
SECURITY: update to 2.5.STABLE10
fix multiple vulnerabilities
http://www.vuxml.org/openbsd/cf9986f2-cd8d-11d9-a230-00065bd5b0b6.html
ok brad@

Log message:
upgrade to 2.5.STABLE10
- Malicious users may spoof DNS lookups if the DNS client UDP port (random,
assigned by OS at startup) is unfiltered and your network is not protected
from IP spoofing.
- CVE-1999-0710, adds access controls to the cachemgr.cgi script, preventing
it from being abused to reach other servers than allowed in a local
configuration file.

Log message:
better check for missing error files
ok brad@

Log message:
better check for missing error files
ok brad@

Log message:
update to squid 2.5.STABLE9
ok brad@

Log message:
update to squid 2.5.STABLE9
ok brad@

Log message:
upgrade to Squid 2.5.STABLE9

Log message:
MFC:
upgrade to Squid 2.5.STABLE8 + patches
Fixes 2 major issues over STABLE7 + the previous round of patches..
- Data corruption when HTTP reply headers is split in several packets
- Assertion failure on certain odd DNS responses
ok brad@

Log message:
MFC:
upgrade to Squid 2.5.STABLE8 + patches
Fixes 2 major issues over STABLE7 + the previous round of patches..
- Data corruption when HTTP reply headers is split in several packets
- Assertion failure on certain odd DNS responses
ok brad@

Log message:
upgrade to Squid 2.5.STABLE8 + patches
Fixes 2 major issues over STABLE7 + the previous round of patches..
- Data corruption when HTTP reply headers is split in several packets
- Assertion failure on certain odd DNS responses

Log message:
MFC:
add missing ERR_INVALID_RESP to PLIST
ok brad@

Log message:
MFC:
add missing ERR_INVALID_RESP to PLIST
ok brad@

Log message:
add missing ERR_INVALID_RESP to PLIST

Log message:
MFC:
SECURITY:
add most of the latest distribution patches which include 4 security
fixes.
-Correct handling of oversized reply headers
-Buffer overflow in WCCP recvfrom() call
-Strengthen Squid from HTTP response splitting cache pollution attack
-Reject malformed HTTP requests and responses that conflict with the HTTP
specifications
ok brad@

Log message:
MFC:
SECURITY:
add most of the latest distribution patches which include 4 security
fixes.
-Correct handling of oversized reply headers
-Buffer overflow in WCCP recvfrom() call
-Strengthen Squid from HTTP response splitting cache pollution attack
-Reject malformed HTTP requests and responses that conflict with the HTTP
specifications
ok brad@

Log message:
fix for ldap_search

Log message:
SECURITY:
add most of the latest distribution patches which include 4 security
fixes.
-Correct handling of oversized reply headers
-Buffer overflow in WCCP recvfrom() call
-Strengthen Squid from HTTP response splitting cache pollution attack
-Reject malformed HTTP requests and responses that conflict with the HTTP specifications

Log message:
MFC:
upgrade to Squid 2.5.STABLE7
A parsing error exists in the SNMP module of Squid where a
specially-crafted UDP packet can potentially cause the server to
restart, closing all current connections.
MFC:
upgrade to Squid 2.5.STABLE7
A parsing error exists in the SNMP module of Squid where a
specially-crafted UDP packet can potentially cause the server to
restart, closing all current connections.
---
Fix 2 security issues...
A bug exists in the code that parses responses from Gopher servers.
The bug results in a buffer overflow if a Gopher server returns a
line longer than 4096 bytes.  The overflow results in memory
corruption and usually crashes Squid.
CAN-2005-0094
A bug exists in the code that parses WCCP messages.  An attacker
that sends a malformed WCCP messages, with a spoofed source address
matching Squid's "home router" can crash Squid.
CAN-2005-0095
ok brad@

Log message:
MFC:
upgrade to Squid 2.5.STABLE7
A parsing error exists in the SNMP module of Squid where a
specially-crafted UDP packet can potentially cause the server to
restart, closing all current connections.
---
Fix 2 security issues...
A bug exists in the code that parses responses from Gopher servers.
The bug results in a buffer overflow if a Gopher server returns a
line longer than 4096 bytes.  The overflow results in memory
corruption and usually crashes Squid.
CAN-2005-0094
A bug exists in the code that parses WCCP messages.  An attacker
that sends a malformed WCCP messages, with a spoofed source address
matching Squid's "home router" can crash Squid.
CAN-2005-0095
ok brad@

Log message:
Fix 2 security issues...
A bug exists in the code that parses responses from Gopher servers.
The bug results in a buffer overflow if a Gopher server returns a
line longer than 4096 bytes.  The overflow results in memory
corruption and usually crashes Squid.
CAN-2005-0094
A bug exists in the code that parses WCCP messages.  An attacker
that sends a malformed WCCP messages, with a spoofed source address
matching Squid's "home router" can crash Squid.
CAN-2005-0095

Log message:
SIZE

Log message:
- Kill DEINSTALL
- Replace INSTALL with @samples, @execs, etc.
- Add WANTLIB marker
- Bump PKGNAME

Log message:
use @newgroup / @newuser

Log message:
better

Log message:
upgrade to Squid 2.5.STABLE7
A parsing error exists in the SNMP module of Squid where a
specially-crafted UDP packet can potentially cause the server to
restart, closing all current connections.

Log message:
new plists.
comment out netscape-dynmotif, since we don't have the required motif lib.

Log message:
fix up MODGNU_CONFIG_GUESS_DIRS

Log message:
sync

Log message:
upgrade to Squid 2.5.STABLE6

Log message:
remove messages about user/group change.

Log message:
- add 2 more distribution patches
- add snmp FLAVOR from Joel CARNAT <joel at carnat dot net>
- add some auth types and auth/acl helpers
- add NTLM auth SMB patch even though the default port does NOT compile this support in

Log message:
one of the distrib patches was updated

Log message:
more distribution patches

Log message:
MFC:
upgrade to Squid 2.5.STABLE5 + latest patches
A bug in Squid that allows users to bypass certain access controls.
Squid versions 2.5.STABLE4 and earlier contain a bug in the "%xx"
URL decoding function. It may insert a NULL character into decoded
URLs, which may allow users to bypass url_regex ACLs.
http://www.squid-cache.org/Advisories/SQUID-2004_1.txt
and
Add 2 more distribution patches. One of them fixes an issue if using
Digest authentication. Users can crash Squid with a segmentation fault
simply by entering a blank user name.

Log message:
MFC:
Add 2 more distribution patches. One of them fixes an issue if using
Digest authentication. Users can crash Squid with a segmentation fault
simply by entering a blank user name.

Log message:
Add 2 more distribution patches. One of them fixes an issue if using
Digest authentication. Users can crash Squid with a segmentation fault
simply by entering a blank user name.

Log message:
MFC:
upgrade to Squid 2.5.STABLE5 + latest patches
A bug in Squid that allows users to bypass certain access controls.
Squid versions 2.5.STABLE4 and earlier contain a bug in the "%xx"
URL decoding function. It may insert a NULL character into decoded
URLs, which may allow users to bypass url_regex ACLs.
http://www.squid-cache.org/Advisories/SQUID-2004_1.txt

Log message:
sync

Log message:
catch @extra escapers ...

Log message:
@extraaaaaaaaaaaaaaaaa ...
ok dhartmei@ jolan@ brad@ for their respective port;

Log message:
- add some distribution patches. From: Robert Nagy <thuglife at bsd dot hu>
- only apply optimization workaround for gcc if using 2.95

Log message:
Tell squid that m88k does not imply SysV; maintainer ok

Log message:
upgrade to Squid 2.5.STABLE5

Log message:
The sparc64 compiler is gcc3 now; don't require the gcc3 module.

Log message:
add 29 of the latest distribution patches.

Log message:
remove WWW lines

Log message:
upgrade to Squid 2.5.STABLE4

Log message:
apply another distribution patch, the squid-2.5.STABLE3-mem_cfd.patch patch
broke the forwarded_for directive.

Log message:
add some more distribution patches.
--
Thanks to mpech@ for some testing

Log message:
optimization issues with gcc 2.95, use gcc 3 on sparc64.
--
From: Matthieu Herrb <matthieu dot herrb at laas dot fr>

Log message:
apply a number of distribution patches.

Log message:
switch to new schema for user/group.
--
From: sturm@
Thanks to mpech@ for testing and pointing out the user/group
I almost missed in MESSAGE.

Log message:
upgrade to Squid 2.5.STABLE3
throw in the SSL gatewaying support, this is not enabled by default.

Log message:
upgrade to Squid 2.5.STABLE2

Log message:
upgrade to Squid 2.5.STABLE1

Log message:
upgrade to Squid 2.5.PRE13