CVE and update status of the FreeBSD ports tree3,310 unaddressed CVEs in 678 portsAll times are CET
Port details

www/squid 7.7

HTTP Caching Proxy

Port info

Maintainer
timp87@gmail.com
Packages
latest: 7.7
Upstream
up to date
Last update
to 7.7 · c1ddf91668
Quarterly
2026Q4: 7.7
Formerly
www/squid26 until 2007-02-07
WWW
https://www.squid-cache.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install squid
installs 7.7 from latest; from quarterly (2026Q4) 7.7
Port
# cd /usr/ports/www/squid && make install clean
# make -C /usr/ports/www/squid config  # change options first
Size
2.5 MiB download · 7.9 MiB installed
Depends on
lang/perl5.42 5.42.3
License
GPLv2
Creates
user squid, group squid
Options
25 of 39 on in the package: ARP_ACL AUTH_NIS CACHE_DIGESTS DELAY_POOLS DOCS EXAMPLES FOLLOW_XFF FS_AUFS FS_DISKD FS_ROCK GSSAPI_BASE HTCP ICAP ICMP IPV6 KQUEUE LARGEFILE LAX_HTTP SNMP SSL SSL_CRTD TP_IPFW VIA_DB WCCP WCCPV2
Show the 14 options that are off
AUTH_LDAP AUTH_SASL AUTH_SMB AUTH_SQL DEBUG ECAP GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE NETTLE STACKTRACES TDB TP_IPF TP_PF
pkg-message
Shown after installing
o You can find the configuration files for this package in the
       directory /usr/local/etc/squid.

     o The default cache directory is /var/squid/cache/.
       The default log directory is /var/log/squid/.

       Note:
       You must initialize new cache directories before you can start
       squid.  Do this by running "squid -z" as 'root' or 'squid'.
       If your cache directories are already initialized (e.g. after an
       upgrade of squid) you do not need to initialize them again.

     o When using DiskD storage scheme remember to read documentation:
         http://wiki.squid-cache.org/Features/DiskDaemon
       and alter your kern.ipc defaults in /boot/loader.conf. DiskD will not
       work reliably without this. Last recomendations were:

         kern.ipc.msgmnb=8192
         kern.ipc.msgssz=64
         kern.ipc.msgtql=2048

     o The pre-translated error pages are no longer included into the port.
       If you need them install www/squid-langpack port as well.

     o The default configuration will deny everyone but the local host and
       local networks as defined in RFC 1918 for IPv4 and RFCs 4193 and
       4291 for IPv6 access to the proxy service.  Edit the "http_access
       allow/deny" directives in /usr/local/etc/squid/squid.conf
       to suit your needs.

     o If AUTH_SQL option is set, please, don't forget to install one of
       following perl modules depending on database you like:
         databases/p5-DBD-mysql (MySQL)
         databases/p5-DBD-mysql4 (MariaDB)
         databases/p5-DBD-Pg
         databases/p5-DBD-SQLite

     To enable Squid, set squid_enable=yes in either
     /etc/rc.conf, /etc/rc.conf.local or /etc/rc.conf.d/squid
     Please see /usr/local/etc/rc.d/squid for further details.

     Note:
     If you just updated your Squid installation from an earlier version,
     make sure to check your Squid configuration against the 3.4 default
     configuration file /usr/local/etc/squid/squid.conf.sample.

     /usr/local/etc/squid/squid.conf.documented is a fully annotated
     configuration file you can consult for further reference.

     Additionally, you should check your configuration by calling
     'squid -f /path/to/squid.conf -k parse' before starting Squid.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 167.77.7–
FreeBSD 157.77.7–
FreeBSD 147.77.77.7

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 157.77.7–
FreeBSD 147.77.77.7

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 7.7.

Fixed (45)

Show 45 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (428)

Sergei Kolobov (sergei) · 2.5.4_9
- integrate a new patch from squid-cache.org, see   http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE4-ftp_telnet   for details - integrate a patch by Glen Gibb to enable ARP based ACLs and make this an   OPTION; see also http://www.squid-cache.org/bugs/show_bug.cgi?id=909   for his original bug report - integrate additional vendor patches - make --enable-underscores an OPTION - se

PR:		ports/62442
Submitted by:	maintainer

- Fix checksum for updated errorpages patch

PR:		ports/62923
Submitted by:	Michal Pasternak <dotz@irc.pl>
Approved by:	maintainer
429f7b8550
Sergei Kolobov (sergei) · 2.5.4_8
- Update distinfo for the http_workarounds patch (again)   Please see http://www.squid-cache.org/bugs/show_bug.cgi?id=890 for details.   Bump PORTREVISION - Update to use new ports collection features:   + USE_SIZE   + use PORTDOCS and PLIST_FILES and extend the dynamic package list creation     to include squid's icon files, too   + move file and directory cleanup on deinstallation to pkg-deinsta

PR:		ports/62222
Submitted by:	maintainer
f7a539c509
Ying-Chieh Liao (ijliao) · 2.5.4_7
The http_workarounds.patch has been updated, update distinfo accordingly.

PR:		61595
Submitted by:	maintainer
8685074508
Ying-Chieh Liao (ijliao) · 2.5.4_7
- integrate another patch from squid-cache.org, see   http://www.squid-cache.org/Versions/v2/2.5/bugs/ for details - cleanup dynamic plist generation:   sort files, replace needlessly complex ex-scripting with a ${REINPLACE_CMD}   one-liner - integrate a patch to make the SMB-NTLM helper compile on 5.x and hook this   helper up to the build (thanks to Stefano Tagliaferri for reporting the bug   an

PR:		61543
Submitted by:	maintainer
8cbabeb774
Sergei Kolobov (sergei) · 2.5.4_6
- configure squid to run under a dedicated "squid" user by default; make use   of SQUID_{UID,GID} which other squid-related ports already implemented.   The user/group will be created on the fly if they do not already exist. - introduce WITH_SQUID_LDAP_AUTH to pull in the necessary bits to compile and   use the ldap_auth helper - install some more authentication helper applications by default - in

PR:		61315
Submitted by:	maintainer
07a7de4337
Sergei Kolobov (sergei) · 2.5.4_5
- Integrate another patch for the LDAP authentication helper   (see <http://www.squid-cache.org/Versions/v2/2.5/bugs/> for details) - Correct MASTER_SITES:   + fix URL for Melbourne University's ftp server   + replace unreachable ftp mirror at Loughborough University with     the one at LEO.org, Munich - Bump PORTREVISION

PR:		61128
Submitted by:	maintainer
be4fbdeab5
Sergei Kolobov (sergei) · 2.5.4_4
- Integrate a new patch issued by the squid development team   to correct the behaviour of the LDAP authentication helper wrt TLS,   see <http://www.squid-cache.org/Versions/v2/2.5/bugs/> for details - Reinstate the errorpages.patch and work around its partial brokenness   by installing some Lithuanian error pages manually. - Bump PORTREVISION

PR:		60950
Submitted by:	maintainer
f34fe178a0
Will Andrews (will) · 2.5.4_3
Change maintainer to Thomas-Martin Seck.

Approved by:	adrian
f86c3e7f09
Edwin Groothuis (edwin) · 2.5.4_3
More patches for squid, to keep up to date with the squid distribution.

Submitted by:	Thomas-Martin Seck <tmseck@netcologne.de> (privately)
Approved by:	maintainer timeout (still)
a8f032a31d
Edwin Groothuis (edwin) · 2.5.4_2
Add more patch files for www/squid

PR:		ports/59091 (based on)
Submitted by:	Thomas-Martin Seck <tmseck@netcologne.de>
0c807e28a4
Edwin Groothuis (edwin) · 2.5.4_1
Uncomment the lines I needed to test the port. Mea Culpa.

*grabs pointy hat*
6596ca7372
Edwin Groothuis (edwin) · 2.5.4_1
[PATCH] www/squid: update to 2.5-STABLE4 (+ vendor patches)

[...]
- Add 2.5-STABLE4 vendor patches
  - cache.log message on "squid -k reconfigure" confusing
  - digest auth never detects password changes
  - login with space confuses redirector helpers
  - FQDNcache discards negative responses when using internal DNS
  - Full details at http://www.squid-cache.org/Versions/v2/2.5/bugs/#STABLE4
[...]

PR:		ports/58090
Submitted by:	Jonathan Noack <noackj@concordiacrusaders.org>
Approved by: 	MAINTAINER TIMEOUT
23f0a346aa
Edwin Groothuis (edwin) · 2.5.4
[PATCH] www/squid: update to 2.5 STABLE 4

- Update to 2.5-STABLE4
	- plist is correct -- see ports/56392 for details on extra files

PR:		ports/56926
Submitted by:	Jonathan Noack <noackj@concordiacrusaders.org>
Approved by:	MAINTAINER TIMEOUT
888ac61430
Jun Kuriyama (kuriyama) · 2.5_4
o Allow to use $SQUID_CONFIGURE_ARGS in /etc/make.conf for additional   $CONFIGURE_ARGS.

No response from:	maintainer
6133b977dd
Adrian Chadd (adrian) · 2.5_4
.. add the missing file.

PR:		ports/54153
3104a509c0
Adrian Chadd (adrian) · 2.5_4
Massive upgrade to 2.5-stable3. Thanks!

PR:		ports/54153
Submitted by:	Jon Noack <noackjr@alumni.rice.edu>
30ebff3f31
Adrian Chadd (adrian) · 2.5_3
Bring the squid-2.5 port up to 2.5.STABLE2. Expect another few commits soon to improve features :)
f1257b0a60
Alexander Leidinger (netchild) · 2.5_2
Add vendor patches:  - fixes for some security issues  - fixes for Samba 2.2.6 or later  - fixes for OpenSSL 0.9.7 or later  - performance fixes  - reliability fixes  - stability fixes  - documentation fixes  - fixes/improvements for OpenLDAP 2.1.x or later  - ...

Have a look at http://www.squid-cache.org/Versions/v2/2.5/bugs/ for a
more detailed description.

Maintainer timeout after:	~3 months
Submitted by:	marius@alchemy.franken.de
Approved by:	kris
9cabafdc76
Ade Lovett (ade) · 2.5_1
Clear moonlight beckons. Requiem mors pacem pkg-comment, And be calm ports tree.

E Nomini Patri, E Fili, E Spiritu Sancti.
7e52725f2a
Adrian Chadd (adrian) · 2.5_1
Grab the patch against squid24 from a PR..

PR:		42747
2314294cfd
Sean Chittenden (seanc) · 2.5_1
Document the configure argument for reverse SSL proxies.
c3076efeb3
Edwin Groothuis (edwin) · 2.5_1
Removed double USE_PERL5

Submitted by:	marius@alchemy.franken.de
fb6be6b3b3
Edwin Groothuis (edwin) · 2.5_1
Half of these ones missed yesterday while converting to USE_REINPLACE. The other half needs perl to build.

Noticed on bento and others (full mailbox :-)
5019ffc91b
Edwin Groothuis (edwin) · 2.5_1
PERL -> REINPLACE Noticed by: bento
b9c12aa595
Adrian Chadd (adrian) · 2.5_1
Update the port to squid-2.5.stable1.

Notable features:

* I'm building _all_ of the error page languages now
* I'm building a handful of the helper modules (the ones that don't
  require ldap or samba to be installed)
* underscores in hostnames are enabled - every few weeks we squid people
  get emails asking why someone can't get to some_user.geocities.com .
  Bad geocities. :)
03e3464175
Akinori MUSHA (knu) · 2.4_10
- Use MASTER_SITE_SUBDIR. - Add MASTER_SITE_RINGSERVER to MASTER_SITES.
46723b1c08
Adrian Chadd (adrian) · 2.4_10
Update squid port to squid-2.4stable7. This fixes a few security bugs so users should upgrade. (Thanks for the reminder! :)

PR:		40175
3a063f9045
Adrian Chadd (adrian) · 2.4_9
Update the squid24 port to Squid-2.4.STABLE6.

STABLE5 was a buggy release, so we're skipping that one.
4e8d40ae7a
Adrian Chadd (adrian) · 2.4_8
Fix a typo, spotted by des.
42f0bf9749
Adrian Chadd (adrian) · 2.4_8
Update the port to squid-2.4stable4 .
70be6c595f
Adrian Chadd (adrian) · 2.4_7
Update the port to squid-2.4STABLE3.

From the ChangeLog:

Changes to Squid-2.4.STABLE3 (Nov 28, 2001):

        - Fixed bug #255: core dump on SSL/CONNECT if access denied by
          miss_access
        - Fixed bug #246: corrupt on-disk meta information preventing
          rebuilds of lost swap.state files
        - Fixed bug #243: squid_ldap_auth now supports spaces in passwords
        - Fixed a coredump when creating FTP directories
        - Fixed a compile time problem with statHistDump prototype
	  mistmatch, reported by some compilers
        - Fixed a potential coredump situation on snmpwalk in certain
          configurations
        - Fixed bug #229: filedescriptor leakage in the "aufs" cache_dir
          store implementation
        - Serbian error message translations
066b60ed0c
Adrian Chadd (adrian) · 2.4_6
Remove the RunCache stuff and let squid handle its own child maintainence. This now means that 'stop' as an argument works correctly, and doesn't end up having squid restarted.

I've added some sleep code to wait for squid to complete its shutdown,
but I have commented it out for the time being as I don't know whether
its good practice to have your machine sleep during shutdown.
I'll research it some more. :)
5fa3173ffa
Jimmy Olgeni (olgeni) · 2.4_5
Misc. fixes:

* Sort pkg-plist
* Replace %B%f with %B/%f (%B does not contain the trailing '/')
* Rewrote tests using || rather than &&. With &&, if the condition fails
  then the test returns false, and sysinstall's pkg_add would fail at
  install time.
56e5f94c60
Adrian Chadd (adrian) · 2.4_5
* Update the port to use the newly-release squid-2.4STABLE2 * Fix the Makefile to actually chown our log/cache dirs to nobody   when they're created
dab5cbaf8a
Adrian Chadd (adrian) · 2.4_4
Make sure we don't delete mime.conf and squid.conf at package uninstallation time if they've been modified.
a0cf24270f
Adrian Chadd (adrian) · 2.4_3
PR:	26339

Fix the diskd path issue. diskd should now be found by squid and work happy.
bdcd6c305d
Adrian Chadd (adrian) · 2.4_2
Add the latest patch - a HTCP (cache control protocol, not a HTTP extension) fix.
33c9c61150
Adrian Chadd (adrian) · 2.4_1
Add some PATCHFILES to this port, and bump its PORTREVISION.

I ran off and updated the patch files on the squid website for 2.4.stable1,
and then updated this port to use them.

Note that diskd is still broken here - I haven't actually
committed a fix to squid yet .. :-P
42e0c7c84e
Maxim Sobolev (sobomax) · 2.4
-pthread --> ${PTHREAD_LIBS} -D_THREAD_SAFE --> ${PTHREAD_CFLAGS}

Note: my first intention was to test this out on bento/beta, but per ade's
requiest I opted to do it quickly.
4ca0e60800
Adrian Chadd (adrian) · 2.4
.. and update the Makefile to indicate that its my port, built by me. :)
4ec1030ca3
Adrian Chadd (adrian) · 2.4
PR:		26059

Update the squid-2.4 port to actually _be_ squid-2.4 . Phew.
This port builds, installs, packages, pkg_delete's cleanly.

I'm going to run it through some more linting and tidying up before
I'm completely done with it.

Differences from squid22/squid23 :

* install-pinger isn't built. I'll tackle this later, possibly by creating
  a squid user/group. I don't like having suid binaries installed,
  even more so when 99% of the users of this port won't even enable
  ICMP pinging.

* I've enabled the lru and heap replacement policies. LRU is used by
  default, the beauty here is that the user can choose one or the other
  without needing a recompile.

* I've enabled ufs (sync), diskd (async) and null (no caching, only proxying).
  This again lets users choose what they want without needing a recompile.
  The default is still a 100mb cache in /usr/local/squid/cache/ running
  ufs. I would change it to diskd but if the user hasn't tweaked their
  sysV shm/msg parameters sufficiently they'll just be puzzled when squid
  gives mysterious sysV errors (and if they load it up enough to have UFS
  become an issue, they'd be better off reading the squid FAQ anyhow..)
88dd211266
Jimmy Olgeni (olgeni) · 2.3
Try to remove ${LOCALBASE}/squid at deinstall time, if it is empty.

Reported by:		bento logs
edbd395b42
Jimmy Olgeni (olgeni) · 2.3
Fix typo: othervise -> otherwise.
046b1114c5
Jimmy Olgeni (olgeni) · 2.3
Some spaces -> tabs for ports/www.
d2f3fc0d14
Peter Wemm (peter) · 2.3
Pass the maintainership bit to adrian (who happens to be a squid committer)
529787e5c4
Peter Wemm (peter) · 2.3
Long overdue update. Add some vendor supplied patches.

Nagged by: many folks
2d740e43f7
Peter Wemm (peter) · 2.3
These patches are redundant, and have been for quite some time. The configure script used to override our manual settings, but no more.
9b7938c331
Maxim Sobolev (sobomax) · 2.3
Update to the latest 2.3.STABLE4 version plus official patches.

PR:		20211
Submitted by:	Naoki IDO <ido@hitachi-ms.co.jp>
Reviewed by:	adrian
7d2b0dbb5c
Thomas Gellekum (tg) · 2.3
As threatened on freebsd-ports: all startup scripts know about the two options `start' and `stop' now (unless I have forgotten any). This allows us to call the scripts from /etc/rc.shutdown with the correct option.

The (42 or so) ports that already DTRT before are unchanged.
546041ba31
Maxim Sobolev (sobomax) · 2.3
Add an official patch.

Synopsis:

"If you fill up your squid cache, CPU will go to 100% but the cache will not be
cleaned up."

PR:		18920
Submitted by:	Mike Harding <mvh@ix.netcom.com>
Obtained from:	http://www.squid-cache.org/Versions/v2/2.3/bugs/
415b1f6a31