rpms/squid
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Disable ESI support

Browse Source 
Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
  response content
This commit is contained in:
Luboš Uhliarik 2024-11-07 18:00:11 +01:00
parent 6eb57db57c
commit 6e6837efbd
1 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
squid.spec
View File

@ -2,7 +2,7 @@
Name: squid Name: squid
Version: 6.10 Version: 6.10
Release: 4%{?dist} Release: 5%{?dist}
Summary: The Squid proxy caching server Summary: The Squid proxy caching server
Epoch: 7 Epoch: 7
# See CREDITS for breakdown of non GPLv2+ code # See CREDITS for breakdown of non GPLv2+ code
@ -59,8 +59,6 @@ BuildRequires: openssl-devel
BuildRequires: krb5-devel BuildRequires: krb5-devel
# time_quota requires TrivialDB # time_quota requires TrivialDB
BuildRequires: libtdb-devel BuildRequires: libtdb-devel
# ESI support requires Expat & libxml2
BuildRequires: expat-devel libxml2-devel
# TPROXY requires libcap, and also increases security somewhat # TPROXY requires libcap, and also increases security somewhat
BuildRequires: libcap-devel BuildRequires: libcap-devel
# eCAP support # eCAP support
@ -143,7 +141,7 @@ sed -i 's|@SYSCONFDIR@/squid.conf.documented|%{_pkgdocdir}/squid.conf.documented
--enable-storeio="aufs,diskd,ufs,rock" \ --enable-storeio="aufs,diskd,ufs,rock" \
--enable-diskio \ --enable-diskio \
--enable-wccpv2 \ --enable-wccpv2 \
--enable-esi \ --disable-esi \
--enable-ecap \ --enable-ecap \
--with-aio \ --with-aio \
--with-default-user="squid" \ --with-default-user="squid" \
@ -328,6 +326,11 @@ fi
%changelog %changelog
* Thu Nov 07 2024 Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
- Disable ESI support
- Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
response content
* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 7:6.10-4 * Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 7:6.10-4
- Bump release for October 2024 mass rebuild: - Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018 Resolves: RHEL-64018