CVSROOT:        /cvs
Module name:    ports
Changes by:     [email protected]   2018/04/19 15:50:12

Modified files:
        www/squid      : Tag: OPENBSD_6_3 Makefile 
        www/squid/patches: Tag: OPENBSD_6_3 
                           patch-src_client_side_request_cc 

Log message:
fix http://www.squid-cache.org/Advisories/SQUID-2018_3.txt

Due to incorrect pointer handling Squid is vulnerable to denial
of service attack when processing ESI responses.

This problem allows a remote server delivering ESI responses
to trigger a denial of service for all clients accessing the
Squid service.

This problem is limited to Squid operating as reverse proxy.

Reply via email to