rpms/squid
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Disable ESI support

Browse Source 
Resolves: RHEL-65080 - CVE-2024-45802 squid: Denial of Service processing
  ESI response content
This commit is contained in:
Luboš Uhliarik 2024-11-14 17:51:47 +01:00
parent a5dad5a9da
commit 797ab646b1
1 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
squid.spec
View File

@ -2,7 +2,7 @@
Name: squid Name: squid
Version: 5.5 Version: 5.5
Release: 16%{?dist} Release: 17%{?dist}
Summary: The Squid proxy caching server Summary: The Squid proxy caching server
Epoch: 7 Epoch: 7
# See CREDITS for breakdown of non GPLv2+ code # See CREDITS for breakdown of non GPLv2+ code
@ -102,8 +102,6 @@ BuildRequires: openssl-devel
BuildRequires: krb5-devel BuildRequires: krb5-devel
# time_quota requires TrivialDB # time_quota requires TrivialDB
BuildRequires: libtdb-devel BuildRequires: libtdb-devel
# ESI support requires Expat & libxml2
BuildRequires: expat-devel libxml2-devel
# TPROXY requires libcap, and also increases security somewhat # TPROXY requires libcap, and also increases security somewhat
BuildRequires: libcap-devel BuildRequires: libcap-devel
# eCAP support # eCAP support
@ -221,7 +219,7 @@ sed -i 's|@SYSCONFDIR@/squid.conf.documented|%{_pkgdocdir}/squid.conf.documented
--enable-storeio="aufs,diskd,ufs,rock" \ --enable-storeio="aufs,diskd,ufs,rock" \
--enable-diskio \ --enable-diskio \
--enable-wccpv2 \ --enable-wccpv2 \
--enable-esi \ --disable-esi \
--enable-ecap \ --enable-ecap \
--with-aio \ --with-aio \
--with-default-user="squid" \ --with-default-user="squid" \
@ -405,6 +403,11 @@ fi
%changelog %changelog
* Thu Nov 14 2024 Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-17
- Disable ESI support
- Resolves: RHEL-65080 - CVE-2024-45802 squid: Denial of Service processing
ESI response content
* Tue Oct 22 2024 Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-16 * Tue Oct 22 2024 Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-16
- Resolves: RHEL-12356 - TCP_MISS_ABORTED/100 erros when uploading - Resolves: RHEL-12356 - TCP_MISS_ABORTED/100 erros when uploading