From tmseck@netcologne.de  Fri Feb  4 17:16:49 2005
Return-Path: <tmseck@netcologne.de>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C228D16A4CE
	for <bug-followup@freebsd.org>; Fri,  4 Feb 2005 17:16:49 +0000 (GMT)
Received: from smtp2.netcologne.de (smtp2.netcologne.de [194.8.194.218])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1697743D1F
	for <bug-followup@freebsd.org>; Fri,  4 Feb 2005 17:16:49 +0000 (GMT)
	(envelope-from tmseck@netcologne.de)
Received: from laurel.tmseck.homedns.org (xdsl-81-173-173-161.netcologne.de [81.173.173.161])
	by smtp2.netcologne.de (Postfix) with SMTP id C3CF8447F
	for <bug-followup@freebsd.org>; Fri,  4 Feb 2005 18:16:46 +0100 (MET)
Received: (qmail 18118 invoked by uid 1001); 4 Feb 2005 17:17:08 -0000
Message-Id: <20050204171645.GA575@laurel.tmseck.homedns.org>
Date: Fri, 4 Feb 2005 18:16:45 +0100
From: Thomas-Martin Seck <tmseck@netcologne.de>
To: bug-followup@freebsd.org
In-Reply-To: <20050201155343.3326.qmail@laurel.tmseck.homedns.org>
Subject: Re: [Maintainer/security] www/squid: integrate vendor patch regarding oversized HTTP reply headers
References: <20050201155343.3326.qmail@laurel.tmseck.homedns.org>

>Number:         77106
>Category:       ports
>Synopsis:       Re: [Maintainer/security] www/squid: integrate vendor patch regarding oversized HTTP reply headers
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Feb 04 17:20:02 GMT 2005
>Closed-Date:    Sat Feb 05 09:07:28 GMT 2005
>Last-Modified:  Sat Feb 05 09:07:28 GMT 2005
>Originator:     
>Release:        
>Organization:
>Environment:
>Description:
 Please integrate the following patches, too:
 
 - correct the search request generated by the LDAP authentication helper
 - fix a race within the NTLM authentication mechanism (squid bug #1127)
 - fix handling of failed PUT/POST requests (squid bug #1224)
 - fix problems with persistent server connections after failed PUT/POST
   requests (squid bug #1122)
 - improve handling of forged WCCP packets (squid bug #1225)
 
 
 Index: distinfo
 ===================================================================
 --- distinfo	(revision 394)
 +++ distinfo	(revision 395)
 @@ -48,3 +48,13 @@
  SIZE (squid2.5/squid-2.5.STABLE7-wccp_buffer_overflow.patch) = 505
  MD5 (squid2.5/squid-2.5.STABLE7-oversize_reply_headers.patch) = 729c626f76637546b5ded70da6e0ee20
  SIZE (squid2.5/squid-2.5.STABLE7-oversize_reply_headers.patch) = 3056
 +MD5 (squid2.5/squid-2.5.STABLE7-ldap_search.patch) = f2f39856ada003854e00b91ac258e07f
 +SIZE (squid2.5/squid-2.5.STABLE7-ldap_search.patch) = 3719
 +MD5 (squid2.5/squid-2.5.STABLE7-ntlm_segfault.patch) = 538a534a9a1acbbcb62cb64f618e325e
 +SIZE (squid2.5/squid-2.5.STABLE7-ntlm_segfault.patch) = 2076
 +MD5 (squid2.5/squid-2.5.STABLE7-post.patch) = ed73f46585b90319fc36e7f85130febc
 +SIZE (squid2.5/squid-2.5.STABLE7-post.patch) = 3172
 +MD5 (squid2.5/squid-2.5.STABLE7-server_post.patch) = 86733a0d6052dc65b913fe7bf6357e43
 +SIZE (squid2.5/squid-2.5.STABLE7-server_post.patch) = 1424
 +MD5 (squid2.5/squid-2.5.STABLE7-wccp_disturb.patch) = 658cc713f3928e8a9774cb6543547c49
 +SIZE (squid2.5/squid-2.5.STABLE7-wccp_disturb.patch) = 5075
 Index: Makefile
 ===================================================================
 --- Makefile	(revision 394)
 +++ Makefile	(revision 395)
 @@ -110,7 +110,12 @@
  		squid-2.5.STABLE7-short_icons_urls.patch \
  		squid-2.5.STABLE7-response_splitting.patch \
  		squid-2.5.STABLE7-wccp_buffer_overflow.patch \
 -		squid-2.5.STABLE7-oversize_reply_headers.patch
 +		squid-2.5.STABLE7-oversize_reply_headers.patch \
 +		squid-2.5.STABLE7-ldap_search.patch \
 +		squid-2.5.STABLE7-ntlm_segfault.patch \
 +		squid-2.5.STABLE7-post.patch \
 +		squid-2.5.STABLE7-server_post.patch \
 +		squid-2.5.STABLE7-wccp_disturb.patch
  PATCH_DIST_STRIP=	-p1
  
  MAINTAINER=	tmseck@netcologne.de
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: linimon 
State-Changed-When: Sat Feb 5 09:06:13 GMT 2005 
State-Changed-Why:  
Misfiled followup to ports/76967, which already seems to have this 
PR's content in it. 


Responsible-Changed-From-To: gnats-admin->freebsd-ports-bugs 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Sat Feb 5 09:06:13 GMT 2005 
Responsible-Changed-Why:  

http://www.freebsd.org/cgi/query-pr.cgi?pr=77106 
>Unformatted:
