CVS log for pkgsrc/www/squid6/Makefile

Up to [cvs.NetBSD.org] / pkgsrc / www / squid6

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

*: recursive bump for default Kerberos implementation switch

*: recursive bump for icu 77 and libxml2 2.14

squid6: update to 6.13

Changes since 6.12:
- Bug 5352: Do not get stuck when RESPMOD is slower than read(2)
- Bug 5405: Large uploads fill request buffer and die
- Bug 5093: List http_port params that https_port/ftp_port lack
- Bug 5311: clarify configuration byte units
- Bug 5091: document that changes to workers require restart
- Bug 5481: Fix GCC v14 build [-Wmaybe-uninitialized]
- Nil request dereference in ACLExtUser and SourceDomainCheck ACLs
- Fix GCC v14 [-Wanalyzer-null-dereference] warnings in Kerberos
- Clarify --enable-ecap failure on missing shared library support
- Fix syntax error in configure.ac
- Remove GNU'ism in release notes Makefile
- Annotate PoolMalloc memory in valgrind builds
- Fix systemd startup sequence to require active Local Filesystem
- Display Linux variant at ./configure time
- Refactor peerRefreshDNS() to clarify its (void*)1 logic
- Portability: remove explicit check for libdl
- ext_time_quota_acl: remove -l option
- ... and some documentation updates
- ... and some CI updates

squid6: update to 6.12

Switch to github releases as per Squid project's new release strategy.
Use USE_CXX_FEATURES to specify c++17 instead of USE_LANGUAGES.
Remove superseded c++11 assertion from options.mk

Changes from 6.11:
- Fix validation of Digest auth header parameters
- Fix build with libtool v2.4 + automake v1.17
- Use git to extract default build-info when enabled
- ... and a minor source-maintenance portability fix

*: recursive bump for icu 76 shlib major version bump

*: revbump for icu downgrade

*: recursive bump for icu 76.1 shlib bump

squid6: update to 6.11

Changes in squid-6.11 since 6.10 (15 Sep 2024)
        - Fix Kerberos detection when cross-compiling
        - Improve robustness of DNS code on reconfigure
        - Prevent slow memory leak in TCP DNS queries
        - Improve errors emitted when invalid ACLs are parsed
        - Remove some unused code and obsolete compatiblity hacks

Pullup ticket #6870 - requested by sborrill
Pullup ticket #6871 - requested by taca
www/squid6: security fix

Revisions pulled up:
- www/squid6/Makefile                                           1.13
- www/squid6/distinfo                                           1.9

---
   Module Name:    pkgsrc
   Committed By:   sborrill
   Date:           Fri Jun 28 07:39:28 UTC 2024

   Modified Files:
            pkgsrc/www/squid6: Makefile distinfo

   Log Message:
   squid6: update to 6.10

   Changes since 6.9:
            - Bug 5378: type mismatch in libTrie
            - Disable ESI in default build
            - Fix build with clang v18 [-Wvla-cxx-extension]
            - ... and some unit test improvements
            - ... and some documentation improvements

squid6: update to 6.10

Changes since 6.9:
	- Bug 5378: type mismatch in libTrie
	- Disable ESI in default build
	- Fix build with clang v18 [-Wvla-cxx-extension]
	- ... and some unit test improvements
	- ... and some documentation improvements

revbump after icu and protobuf updates

squid6: update to 6.9

Changes since 6.8:
	- Regression Bug 5349: basic_nis_auth build error: unterminated #ifndef
	- Bug 5069: Keep listening after getsockname() error
	- Bug 5360: FwdState::noteDestinationsEnd() assertion "err"
	- Reduce stale errno usage
	- Plug memory leak in handling cache manager requests
	- Fix error: template-id not allowed for constructor in C++20
	- Improve release packaging automation

*: recursive bump for gnutls p11-kit option

(existing installations need the bl3.mk included, but it's now only
optionally included)

squid6: update to 6.8

Changes in squid-6.8 (4 Mar 2024)

        - Bug 5344: mgr:config segfaults without logformat
        - Bug 5343: Fix build on GCC 14
        - Fix infinite recursion when parsing malformed HTTP chunks
        - Fix max-stale in default refresh_pattern
        - Fix marking of problematic cached IP addresses
        - Improved portability to MacOS
        - ... and some documentation improvements

Changes in squid-6.7 (4 Feb 2024)

        - Bug 5337: workaround for crash on startup if -a option is used
        - Bug 5274: Successful tunnels logged as TCP_TUNNEL/500
        - Fix crash when NTLM and Negotiate helpers are queried with no HTTP request
        - Fix SslBump memory leak when mimicking certificates with Authority Key Identifier
        - Fix memory leak on SslBump certificates with Authority Key Identifier extension
        - Fix a possible integer overflow in FTP Gateway
        - Extend cache_log_message to Bug 5187 and job invalidation BUGs
        - Remove incorrect beta version warning
        - MS Windows portability improvements
        - ... and some documentation improvements

squid6: patch bug 1691

https://github.com/squid-cache/squid/pull/1691

Since inception in 2017 commit fd9c47d, Dns::CachedIps::have() always
returned position zero after finding a matching IP address (at zero or
positive position). The bug affected two callers:

* markAsBad() always marked the first stored address (as bad);
* forgetMarking() always cleared the first stored address marking.

Buggy markings led to Squid sometimes not attempting to use a working
address (e.g., IPv4) while using a known problematic one (e.g., IPv6).

squid6: update to 6.6


Changes since 6.5:
        - Bug 5328: Fix ESI build with libxml2 v2.12.0
        - Bug 5319: QOS Netfilter MARK preservation is always disabled
        - Bug 5318: peer_digest.cc:399: "fetch->pd && receivedData.data"
        - Bug 5317: FATAL attempt to read data from memory
        - Bug 5154: Do not open IPv6 sockets when IPv6 is disabled
        - FTP: Ignore credentials with a NUL-prefixed username
        - log_db_daemon: Fix DSN construction
        - Limit the number of allowed X-Forwarded-For hops
        - Do not update StoreEntry expiration after errorAppendEntry()
        - improve handling of response sending errors

*: recursive bump for icu 74.1

www/squid6: update to 6.5

Changes in squid-6.5 (6 Nov 2023):

- Remove mem_hdr::freeDataUpto() assertion
- Bug 5309: frequent "lowestOffset () <= target_offset" assertion
- Exit without asserting when helper process startup fails
- RFC 1123: Fix date parsing
- Improve handling of expanding HTTP header values
- Maintenance: reduce output of CONTRIBUTORS update script

*: bump for openssl 3

www/squid6: update to 6.4

Several security fixes:

	SQUID-2023:1
	SQUID-2023:2
	SQUID-2023:3
	SQUID-2023:5

Changes in squid-6.4 (22 Oct 2023):

- Regression: Restore support for legacy cache_object cache manager requests
- Regression: Do not use static initialization to register modules
- Bug 5301: cachemgr.cgi not showing new manager interface URLs
- Bug 5300: cachemgr.cgi assertion
- Fix stack buffer overflow when parsing Digest Authorization
- Fix userinfo percent-encoding
- Fix store_client caller memory leak on certain errors
- Fix validation of certificates with CN=*
- Fix handling of large stored response headers
- Miss if a HTTP/304 update would exceed reply_header_max_size
- RFC 9112: Improve HTTP chunked encoding compliance
- HTTP: Improve handling of empty lines received prior to request-line
- Y2038: improve printing of time settings
- Extend cache_log_message to problematic from-helper annotations
- ... and several Continuous Integration improvements

squid6: fix build and fix ntlm

Workaround linker problem removing ntlm auth
https://github.com/squid-cache/squid/commit/5596a2f4894f80864b660b035d05f5aec74f8312.patch

squid 6 requires GCC 8

Bump PKGREVISION

www/squid6: add package version 6.3

Squid 6.3 is latest stable release.

Squid is a fully-featured HTTP/1.0 proxy with partial HTTP/1.1 support
The 6 series brings many new features and upgrades to the basic
networking protocols. A short list of the major new features is:

Squid 6 represents a new feature release, the most important of these
new features are:

* TLS ServerHello
* Log TLS Communication Secrets
* Ban ACL key changes in ACLs
* Block to-local Traffic
* RFC 9211: HTTP Cache-Status support
* RFC 9111: Stop treating Warning specially
* ext_kerberos_ldap_group_acl: Support -b with -D
* Remove Gopher Protocol Support
* Removed Outdated Tools