CVSROOT:        /cvs
Module name:    ports
Changes by:     [email protected]   2015/09/30 02:55:18

Modified files:
        www/squid/snapshot: Tag: OPENBSD_5_8 Makefile distinfo 
        www/squid/snapshot/patches: Tag: OPENBSD_5_8 patch-bootstrap_sh 
                                    
patch-helpers_external_acl_wbinfo_group_ext_wbinfo_group_acl_pl_in 
                                    patch-src_squid_8_in 
                                    patch-src_ssl_support_cc 
Added files:
        www/squid/snapshot/patches: Tag: OPENBSD_5_8 
                                    patch-src_ssl_bio_cc 

Log message:
Backport from -current: update to squid-3.5.9, fixes problems with
TLS/SSL parsing in configurations using SSL-Bump.

- int overflow with extension parsing: char << 8 into a short
http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-13915.patch

- {Client,Server}Hello parsing; when checking for TLS extensions, don't
check for bytes following compression_method in the _whole_ message, only
in the *Hello part ("does not account for the fact that the message may
contain more than just ServerHello").
http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-13915.patch

Reply via email to