[squid-users] Patch for CVE-2014-7141 and CVE-2014-7142

[Amos Jeffries]

On 12/06/2015 4:30 a.m., Stacy Yeh wrote:
> Hello,
> 
> I am attempting to patch the security issues from CVE-2014-7141 and CVE-2014-7142 for Squid 3.1.23 using the 3.1 patch provided here:
> http://www.squid-cache.org/Advisories/SQUID-2014_4.txt
> 
> I am running into the following error when I attempt to build Squid:
> /builds/skyeh/squid-component/components/squid/squid-3.1.23/src/icmp/Icmp4.cc: In member function 'virtual void Icmp4::Recv()':
> /builds/skyeh/squid-component/components/squid/squid-3.1.23/src/icmp/Icmp4.cc:203:9: error: 'Ip' has not been declared
>          Ip::Address::FreeAddrInfo(from);
>          ^
> /builds/skyeh/squid-component/components/squid/squid-3.1.23/src/icmp/Icmp4.cc:261:9: error: 'Ip' has not been declared
>          Ip::Address::FreeAddrInfo(from);
>          ^
> make[4]: *** [Icmp4.o] Error 1
> make[4]: Leaving directory `/builds/skyeh/squid-component/components/squid/build/amd64/src/icmp'
> make[3]: *** [all-recursive] Error 1
> make[3]: Leaving directory `/builds/skyeh/squid-component/components/squid/build/amd64/src'
> make[2]: *** [all] Error 2
> make[2]: Leaving directory `/builds/skyeh/squid-component/components/squid/build/amd64/src'
> make[1]: *** [all-recursive] Error 1
> make[1]: Leaving directory `/builds/skyeh/squid-component/components/squid/build/amd64'
> gmake: *** [/builds/skyeh/squid-component/components/squid/build/amd64/.built] Error 2
> 
> 
> Can anyone shed some light on how to fix this? 
> 

Gah! So much for the unit testing. Sorry about that. The class name is
IpAddress in 3.1, (no ::'s)

New patch and advisory update underway already and just waiting the
mirrors servers. New URL will be:
 <http://www.squid-cache.org/Versions/v3/3.1/changesets/SQUID-2014_4.patch>


PS. Are you able to upgrade away from 3.1? current supported series is
3.5 and much more capable in dealing with the current Internet.

Amos