Pārlūkot izejas kodu

package/squid: security bump to version 5.7

Fixes the following security issues:

- CVE-2022-41317: Exposure of Sensitive Information in Cache Manager
  https://www.openwall.com/lists/oss-security/2022/09/23/1

- CVE-2022-41318: Buffer Over Read in SSPI and SMB Authentication
  https://www.openwall.com/lists/oss-security/2022/09/23/2

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard 2 gadi atpakaļ
vecāks
revīzija
e6c9a95a34
2 mainītis faili ar 5 papildinājumiem un 5 dzēšanām
  1. 4 4
      package/squid/squid.hash
  2. 1 1
      package/squid/squid.mk

+ 4 - 4
package/squid/squid.hash

@@ -1,6 +1,6 @@
-# From http://www.squid-cache.org/Versions/v5/squid-5.6.tar.xz.asc
-md5  2f2201a18a0a727ab589d951ebe4f815  squid-5.6.tar.xz
-sha1  a01f47b3e9ff06245c894773de30bfd88ab14f65  squid-5.6.tar.xz
+# From http://www.squid-cache.org/Versions/v5/squid-5.7.tar.xz.asc
+md5  7a3764a3c5833631a779d7827901cda7  squid-5.7.tar.xz
+sha1  141e8007d6b1cfee34654127a9ca025125b37b58  squid-5.7.tar.xz
 # Locally calculated
-sha256  38d27338a347597ce0e93d0c3be6e5f66b6750417c474ca87ee0d61bb6d148db  squid-5.6.tar.xz
+sha256  6b0753aaba4c9c4efd333e67124caecf7ad6cc2d38581f19d2f0321f5b7ecd81  squid-5.7.tar.xz
 sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING

+ 1 - 1
package/squid/squid.mk

@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-SQUID_VERSION = 5.6
+SQUID_VERSION = 5.7
 SQUID_SOURCE = squid-$(SQUID_VERSION).tar.xz
 SQUID_SITE = http://www.squid-cache.org/Versions/v5
 SQUID_LICENSE = GPL-2.0+