CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2015/09/30 02:55:18
Modified files:
www/squid/snapshot: Tag: OPENBSD_5_8 Makefile distinfo
www/squid/snapshot/patches: Tag: OPENBSD_5_8 patch-bootstrap_sh
patch-helpers_external_acl_wbinfo_group_ext_wbinfo_group_acl_pl_in
patch-src_squid_8_in
patch-src_ssl_support_cc
Added files:
www/squid/snapshot/patches: Tag: OPENBSD_5_8
patch-src_ssl_bio_cc
Log message:
Backport from -current: update to squid-3.5.9, fixes problems with
TLS/SSL parsing in configurations using SSL-Bump.
- int overflow with extension parsing: char << 8 into a short
http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-13915.patch
- {Client,Server}Hello parsing; when checking for TLS extensions, don't
check for bytes following compression_method in the _whole_ message, only
in the *Hello part ("does not account for the fact that the message may
contain more than just ServerHello").
http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-13915.patch