From d9dea7f9cc3c5657c159e527cc8bcf69a8d6ef30 Mon Sep 17 00:00:00 2001 From: Michael Date: Mon, 20 Oct 2025 15:08:50 +0200 Subject: [PATCH] www/squid: add email_err_data off as static (#4987) --- www/squid/Makefile | 2 +- www/squid/pkg-descr | 4 ++++ .../src/opnsense/service/templates/OPNsense/Proxy/squid.conf | 3 +++ 3 files changed, 8 insertions(+), 1 deletion(-) diff --git a/www/squid/Makefile b/www/squid/Makefile index 6e9236529..0678e6fd2 100644 --- a/www/squid/Makefile +++ b/www/squid/Makefile @@ -1,5 +1,5 @@ PLUGIN_NAME= squid -PLUGIN_VERSION= 1.3 +PLUGIN_VERSION= 1.4 PLUGIN_COMMENT= Squid is a caching proxy for the web PLUGIN_DEPENDS= squid squid-langpack PLUGIN_MAINTAINER= franco@opnsense.org diff --git a/www/squid/pkg-descr b/www/squid/pkg-descr index f885f0cce..6d36eeccd 100644 --- a/www/squid/pkg-descr +++ b/www/squid/pkg-descr @@ -5,6 +5,10 @@ content serving applications. Plugin Changelog ================ +1.4 + +* Make email_err_data static due to SQUID-2025:2 CVE 10.0 + 1.3 * Repackage template files using new contrib directory feature diff --git a/www/squid/src/opnsense/service/templates/OPNsense/Proxy/squid.conf b/www/squid/src/opnsense/service/templates/OPNsense/Proxy/squid.conf index 63d948db3..1134b1a9e 100644 --- a/www/squid/src/opnsense/service/templates/OPNsense/Proxy/squid.conf +++ b/www/squid/src/opnsense/service/templates/OPNsense/Proxy/squid.conf @@ -329,6 +329,9 @@ cache_dir rock {{OPNsense.proxy.general.cache.local.directory}} {{OPNsense.proxy # Leave coredumps in the first cache dir coredump_dir /var/squid/cache +# Disable Debug information in Administartor Email / SQUID-2025:2 +email_err_data off + # # Add any of your own refresh_pattern entries above these. #