Michael Tremer d6c40f585d squid: Apply fix for Squid Advisory SQUID-2015:2 ...

Squid configured with cache_peer and operating on explicit proxy
traffic does not correctly handle CONNECT method peer responses.

The bug is important because it allows remote clients to bypass
security in an explicit gateway proxy.

However, the bug is exploitable only if you have configured
cache_peer to receive CONNECT requests.

  http://www.squid-cache.org/Advisories/SQUID-2015_2.txt

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

2015-07-09 13:10:38 +02:00

config

squid: Apply fix for Squid Advisory SQUID-2015:2

2015-07-09 13:10:38 +02:00

doc

ipsec: Allow selection of ESP group type

2015-06-15 22:33:28 +02:00

html

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

2015-06-17 20:40:14 +02:00

langs

ipsec: Allow selection of ESP group type

2015-06-15 22:33:28 +02:00

lfs

squid: Apply fix for Squid Advisory SQUID-2015:2

2015-07-09 13:10:38 +02:00

src

squid: Apply fix for Squid Advisory SQUID-2015:2

2015-07-09 13:10:38 +02:00

tools

Add rootfile check for hardcoded machine type.

2015-04-25 13:23:34 +02:00

.gitignore

Buildsystem: generate image md5sums.

2011-01-01 11:40:19 +01:00

.mailmap

Add .mailmap.

2010-01-22 11:37:55 +01:00

make.sh

libnetfilter_cthelper: New package

2015-06-23 14:01:44 +02:00

Description

No description provided

101 MiB

Languages

Perl 70.4%

Shell 23%

C 4%

Python 0.6%

Makefile 0.5%

Other 1.4%