diff --git a/SPECS/squid.spec b/SPECS/squid.spec index b1e88bc..81bc0f0 100644 --- a/SPECS/squid.spec +++ b/SPECS/squid.spec @@ -2,7 +2,7 @@ Name: squid Version: 6.10 -Release: 3%{?dist} +Release: 5%{?dist} Summary: The Squid proxy caching server Epoch: 7 # See CREDITS for breakdown of non GPLv2+ code @@ -59,8 +59,6 @@ BuildRequires: openssl-devel BuildRequires: krb5-devel # time_quota requires TrivialDB BuildRequires: libtdb-devel -# ESI support requires Expat & libxml2 -BuildRequires: expat-devel libxml2-devel # TPROXY requires libcap, and also increases security somewhat BuildRequires: libcap-devel # eCAP support @@ -143,7 +141,7 @@ sed -i 's|@SYSCONFDIR@/squid.conf.documented|%{_pkgdocdir}/squid.conf.documented --enable-storeio="aufs,diskd,ufs,rock" \ --enable-diskio \ --enable-wccpv2 \ - --enable-esi \ + --disable-esi \ --enable-ecap \ --with-aio \ --with-default-user="squid" \ @@ -328,6 +326,15 @@ fi %changelog +* Thu Nov 07 2024 Luboš Uhliarik - 7:6.10-5 +- Disable ESI support +- Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI + response content + +* Tue Oct 29 2024 Troy Dawson - 7:6.10-4 +- Bump release for October 2024 mass rebuild: + Resolves: RHEL-64018 + * Wed Oct 23 2024 Luboš Uhliarik - 7:6.10-3 - Resolves: RHEL-64426 - TCP_MISS_ABORTED/100 erros when uploading