summaryrefslogtreecommitdiffstats
path: root/package/squid
Commit message (Collapse)AuthorAgeFilesLines
* package/squid: fix typoBernd Kuhls2017-08-291-1/+1
| | | | | | | | Fixed typo added by https://git.buildroot.net/buildroot/commit/package/squid?id=d2f7d0d72cd7e00ffbe869011d200f0a4a53e7a5 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: uClibc workaround no longer requiredWaldemar Brodkorb2017-07-011-5/+0
| | | | | | | | | | As all librt and libpthread functions are integrated into libc for a while, workaround no longer required. Signed-off-by: Waldemar Brodkorb <wbx@openadk.org> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Acked-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: bump version to 3.5.26Vicente Olivert Riera2017-06-022-4/+4
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: bump version to 3.5.25Vicente Olivert Riera2017-04-042-4/+4
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* boot, linux, package: use SPDX short identifier for GPLv2/GPLv2+Rahul Bedarkar2017-04-011-1/+1
| | | | | | | | | | | We want to use SPDX identifier for license strings as much as possible. SPDX short identifier for GPLv2/GPLv2+ is GPL-2.0/GPL-2.0+. This change is done by using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\<GPLv2\>/GPL-2.0/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: security bump to version 3.5.24Gustavo Zacarias2017-01-302-4/+4
| | | | | | | | Fixes: * Mitigate DoS attacks that use client-initiated SSL/TLS renegotiation. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: security bump to version 3.5.23Gustavo Zacarias2016-12-182-4/+4
| | | | | | | | | | Fixes: CVE-2016-10002: http://www.squid-cache.org/Advisories/SQUID-2016_11.txt CVE-2016-10003: http://www.squid-cache.org/Advisories/SQUID-2016_10.txt [Peter: add CVE references] Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: bump to version 3.5.22Gustavo Zacarias2016-10-142-4/+4
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: disable netfilter for musl toolchainsGustavo Zacarias2016-10-141-1/+1
| | | | | | | | It has been broken for several releases, fixes: http://autobuild.buildroot.net/results/d6c/d6cf725e88bc0a4afd0b7e1ae58a8e5a649ae6c3/ Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: bump to version 3.5.21Gustavo Zacarias2016-09-092-4/+4
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: bump version to 3.5.20Vicente Olivert Riera2016-07-052-4/+4
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: bump to version 3.5.19Gustavo Zacarias2016-05-102-4/+4
| | | | | | | Fixes regression introduced in 3.5.18 (via CVE-2016-4554 patch/fix). Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: security bump to version 3.5.18Gustavo Zacarias2016-05-082-4/+4
| | | | | | | | | | | | | Fixes: CVE-2016-4553 - Cache Poisoning issue in HTTP Request handling CVE-2016-4554 - Header Smuggling issue in HTTP Request processing CVE-2016-4555 - Multiple Denial of Service issues in ESI Response processing (client_side_request.cc) CVE-2016-4556 - Multiple Denial of Service issues in ESI Response processing (Esi.cc) Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: security bump to version 3.5.17Gustavo Zacarias2016-04-202-5/+5
| | | | | | | | | | | | Fixes: SQUID-2016:5 (CVE-2016-4051) - Buffer overflow in cachemgr.cgi SQUID-2016:6 (CVE-2016-4052) - Multiple issues in ESI processing. CVE-2016-4053 & CVE-2016-4054 which are part of SQUID-2016:6. Switch to xz-compressed tarball as well. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: bump version to 3.5.16Vicente Olivert Riera2016-04-052-4/+4
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libcap, cdrkit, dvdrw-tools, fastd, squid: remove headers >= 3.0 dependencyThomas Petazzoni2016-03-161-3/+2
| | | | | | | | | | | | | | | | | | Now that the libcap package has a patch that makes it build with kernel headers < 3.0 (which was needed for the host variant of libcap), there is no longer a need to have a dependency on headers >= 3.0 for the target variant of libcap. All reverse dependencies of libcap are handled in this commit, except lxc, which will be handled in a separate commit since it needs some special solution. The build of all those packages has been tested with a toolchain that uses kernel headers 2.6.32, which is the oldest that our default glibc version accepts to use. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: security bump to version 3.5.15Gustavo Zacarias2016-02-292-4/+4
| | | | | | | | | Fixes: SQUID-2016:2 - Multiple Denial of Service issues in HTTP Response processing. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: security bump to version 3.5.14Gustavo Zacarias2016-02-162-4/+4
| | | | | | | | | | Fixes: SQUID-2016:1 - Remote Denial of service issue in SSL/TLS processing. CVE-2016-2390 assigned. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: rework atomic handlingThomas Petazzoni2016-02-061-6/+4
| | | | | | | | | | | | | | | | | | | | | squid can use the __sync built-ins when available, but uses an AC_TRY_RUN autoconf tests to check their availability, which isn't compatible with cross-compilation. Due to this, squid.mk is already hinting the configure script about this by passing squid_cv_gnu_atomics=yes/no depending on the availability of atomic operations. So far, squid.mk was assuming that BR2_ARCH_HAS_ATOMICS && BR2_ARCH_IS_64 was needed, since 8 bytes __sync built-ins are used. However, this was a bit too restrictive, since certain 32 bits architectures (ARM, x86) do provide 8 bytes __sync built-ins. So, instead of using BR2_ARCH_HAS_ATOMICS, we now rely on BR2_TOOLCHAIN_HAS_SYNC_4 and BR2_TOOLCHAIN_HAS_SYNC_8, since both 4 bytes and 8 bytes __sync built-ins are tested by the autoconf test. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
* squid: bump to version 3.5.13Gustavo Zacarias2016-01-082-5/+5
| | | | | | | | Switch to bz2 tarball since there doesn't seem to be an xz release this time around. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: bump to version 3.5.12Gustavo Zacarias2015-11-302-4/+4
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: bump to version 3.5.11Gustavo Zacarias2015-11-032-4/+4
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package: Replace 'echo -n' by 'printf'Maxime Hadjinlian2015-10-041-4/+4
| | | | | | | | | | | | 'echo -n' is not a POSIX construct (no flag support), we shoud use 'printf', especially in init script. This patch was generated by the following command line: git grep -l 'echo -n' -- `git ls-files | grep -v 'patch'` | xargs sed -i 's/echo -n/printf/' Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: bump to version 3.5.10Gustavo Zacarias2015-10-022-4/+4
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: bump to version 3.5.9Vicente Olivert Riera2015-09-192-4/+4
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: bump to version 3.5.8Gustavo Zacarias2015-09-132-4/+4
| | | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Reviewed-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Tested-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Merge branch 'next'Peter Korsgaard2015-09-012-4/+4
|\ | | | | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * squid: bump to version 3.5.7Gustavo Zacarias2015-08-092-4/+4
| | | | | | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* | squid: fix systemd unit file locationThomas Petazzoni2015-08-061-1/+1
|/ | | | | | | | | | squid.service is in tools/systemd/, not in tools/. Fixes: http://autobuild.buildroot.net/results/cec/cecb968172cb00281e439566e5ae154538435a51/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: explicitly disable openssl support when BR2_PACKAGE_OPENSSL != yVicente Olivert Riera2015-07-061-0/+2
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: add gnutls supportVicente Olivert Riera2015-07-061-0/+7
| | | | | | | | | | | | A new --without-gnutls option has been added to configure, so let's use it in order to enable or disable gnutls support in squid. Related: http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.6-RELEASENOTES.html#ss4.1 Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: bump to version 3.5.6Vicente Olivert Riera2015-07-062-7/+6
| | | | | | | | | | | | | - Bump to version 3.5.6 - Update hash file - Change configure options according to release notes Release notes: http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.6-RELEASENOTES.html Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: systemd supportAlex Suykov2015-07-051-0/+8
| | | | | | | | | squid comes with a .service file, but does not install it. [Thomas: use relative path for symlink instead of absolute path.] Signed-off-by: Alex Suykov <alex.suykov@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: bump to version 3.5.5Gustavo Zacarias2015-06-022-4/+4
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: security bump to version 3.5.4Gustavo Zacarias2015-05-022-4/+4
| | | | | | | | Fixes: CVE-2015-3455 - Incorrect X509 server certificate validation Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: remove non-IPv6 dependencies and tweaksGustavo Zacarias2015-04-221-4/+2
| | | | | | | | Now that IPv6 is mandatory remove package dependencies and conditionals for it. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: adjust styleGustavo Zacarias2015-03-301-6/+6
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: bump to version 3.5.3Gustavo Zacarias2015-03-302-4/+15
| | | | | | | | [Thomas: slightly expand the comment about atomic operations, after the discussion with Baruch.] Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: bump to version 3.5.2Gustavo Zacarias2015-02-192-4/+4
| | | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Reviewed-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Tested-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: all salute the passing of avr32Yann E. MORIN2015-02-141-1/+0
| | | | | Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: fix old distro gcc build failureGustavo Zacarias2015-01-272-3/+3
| | | | | | | | | | | | | | | | | | | Squid 3.5.x deprecated the use of HOSTCXX & friends in favour of BUILDCXX and BUILDCXXFLAGS. When they are not specified BUILDCXXFLAGS takes flags from target CXXFLAGS which specifies C11 standard and which older vesions of gcc don't understand, thus causing breakage. cf_gen hasn't got any C11 features so it's not required. Fixes: http://autobuild.buildroot.net/results/816/8162e4ec941e7642248373be47cca99113a648e8/ Also drop ACLOCAL and AUTOMAKE trickery from e27ccbab since it's no longer required. And fix a typo in the hash file pointing to an improper hash file upstream. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: bump to version 3.5.1Gustavo Zacarias2015-01-275-21/+22
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: add sysv initscriptGustavo Zacarias2015-01-142-0/+45
| | | | | | | | | | | | | | | | | | | | | | | Add SysV-style initscript, complete rewrite from http://patchwork.ozlabs.org/patch/412057/ 'stop' is handled by squid itself to gracefully (as possible) close every pending connection and commit changes to disk. By default this is configured for 30 seconds and can be configured via shutdown_lifetime in /etc/squid.conf if someone is too anxious. The script won't block until squid is properly shutdown - but people should _REALLY_ use restart or reload if that's what they want, instead of stop+start. 'restart' is handled by squid itself, since if we do a stop/start cycle we must wait for a clean shutdown cycle (takes time). 'reload' is also handled by squid itself and it's not the same as restart, it will just trigger a configuration reload without purging runtime cache (RAM) contents. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: create a user/groupGustavo Zacarias2015-01-141-1/+6
| | | | | | | | | | Even though squid uses nobody/nogroup it ain't good for security if every daemon around uses it, specially since squid is used as a caching proxy most of the time and that would mean other daemons/scripts run as nobody would have access to potentially sensitive information. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: bump to version 3.4.11Gustavo Zacarias2015-01-142-4/+4
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: fix automake breakageGustavo Zacarias2015-01-121-1/+3
| | | | | | | | | | | | | | | | | | | Squid bundles a copy of libltdl (from libtool) which autoreconfigures on its own. For some odd reason when automake was bumped to version 1.15 and if the host system has another automake version, for example 1.14, the ACLOCAL and AUTOMAKE variables don't expand properly when the internal autoreconf is triggered hence calling the missing handler which in turn tries to use an incorrect automake version. The solution is to pass unexpanded ACLOCAL and AUTOMAKE variables that defer the evaluation to a later moment and avoid the issue. Fixes: http://autobuild.buildroot.net/results/73f/73fcffafbea320f8c64378bbe8a96922b5e7c6b5/ Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Tested-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package: indentation cleanupJerzy Grzegorek2014-12-241-17/+24
| | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package: indentation cleanupJerzy Grzegorek2014-12-201-1/+1
| | | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Reviewed-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* squid: bump to version 3.4.10Gustavo Zacarias2014-12-102-4/+4
| | | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Reviewed-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Tested-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Merge branch 'next'Peter Korsgaard2014-12-011-1/+5
|\ | | | | | | | | | | | | | | | | Conflicts: Makefile package/flac/0001-fix-altivec-logic.patch package/grantlee/Config.in Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
OpenPOWER on IntegriCloud