BSD PortsVulnerable: version 4.17nb19 is affected by 12 known vulnerabilities. See below.
www/squid4 4.17nb19 NetBSD
Post-Harvest_cached WWW proxy cache and accelerator
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- Last update
- Commit
875dbc2057- License
- gnu-gpl-v2
- Categories
- www
- Package size
- 2504.3 KiB, 10513.3 KiB installed
Description
Squid is a fully-featured HTTP/1.0 proxy with partial HTTP/1.1 support The 4 series brings many new features and upgrades to the basic networking protocols. A short list of the major new features is:
Squid 4 represents a new feature release above 3.5.
The most important of these new features are:
* Configurable helper queue size * Helper concurrency channels changes * SSL support removal * Helper Binary Changes * Secure ICAP * Improved SMP support * Improved process management * Initial GnuTLS support * ESI Custom Parser removal
In the other systems
Install
Binary package:
pkgin install squidFrom pkgsrc:
cd /usr/pkgsrc/www/squid4 && make install cleanPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 4.17nb19 |
| NetBSD 10.1 aarch64 | 4.17nb19 |
| SmartOS / illumos x86_64 | 4.17nb19 |
| macOS 15 arm64 | 4.17nb19 |
Dependencies
Run dependencies 2
No port depends on this one.
Known vulnerabilities 12
- squid: cross-site-scripting (CVE-2018-19131)
- squid: memory-leak (CVE-2018-19132)
- squid: buffer-overflow (CVE-2019-12519)
- squid: cache-poisoning (CVE-2019-12520)
- squid: denial-of-service (CVE-2019-12521)
- squid: bypass-protection (CVE-2019-12522)
- squid: security-bypass (CVE-2019-12524)
- squid: cross-site-scripting (CVE-2019-13345)
- squid: arbitrary-memory-access (CVE-2022-41318)
- squid: heap-overflow (CVE-2025-54574)
- squid: stack-overflow (CVE-2025-59362)
- squid: information-disclosure (CVE-2025-62168)