diff --git a/www/squid/Makefile b/www/squid/Makefile index 6e9236529..0678e6fd2 100644 --- a/www/squid/Makefile +++ b/www/squid/Makefile @@ -1,5 +1,5 @@ PLUGIN_NAME= squid -PLUGIN_VERSION= 1.3 +PLUGIN_VERSION= 1.4 PLUGIN_COMMENT= Squid is a caching proxy for the web PLUGIN_DEPENDS= squid squid-langpack PLUGIN_MAINTAINER= franco@opnsense.org diff --git a/www/squid/pkg-descr b/www/squid/pkg-descr index f885f0cce..6d36eeccd 100644 --- a/www/squid/pkg-descr +++ b/www/squid/pkg-descr @@ -5,6 +5,10 @@ content serving applications. Plugin Changelog ================ +1.4 + +* Make email_err_data static due to SQUID-2025:2 CVE 10.0 + 1.3 * Repackage template files using new contrib directory feature diff --git a/www/squid/src/opnsense/service/templates/OPNsense/Proxy/squid.conf b/www/squid/src/opnsense/service/templates/OPNsense/Proxy/squid.conf index 63d948db3..1134b1a9e 100644 --- a/www/squid/src/opnsense/service/templates/OPNsense/Proxy/squid.conf +++ b/www/squid/src/opnsense/service/templates/OPNsense/Proxy/squid.conf @@ -329,6 +329,9 @@ cache_dir rock {{OPNsense.proxy.general.cache.local.directory}} {{OPNsense.proxy # Leave coredumps in the first cache dir coredump_dir /var/squid/cache +# Disable Debug information in Administartor Email / SQUID-2025:2 +email_err_data off + # # Add any of your own refresh_pattern entries above these. #