CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/squid 7.7

HTTP Caching Proxy

Port info

Maintainer
timp87@gmail.com
Packages
latest: 7.7
Upstream
up to date
Last update
to 7.7 · c1ddf91668
Quarterly
2026Q4: 7.7
Formerly
www/squid26 until 2007-02-07
WWW
https://www.squid-cache.org/
Links
cgit · VuXML

Install

Package
# pkg install squid
installs 7.7 from latest; from quarterly (2026Q4) 7.7
Port
# cd /usr/ports/www/squid && make install clean
# make -C /usr/ports/www/squid config  # change options first
Size
2.5 MiB download · 7.9 MiB installed
Depends on
lang/perl5.42 5.42.3
License
GPLv2
Creates
user squid, group squid
Options
25 of 39 on in the package: ARP_ACL AUTH_NIS CACHE_DIGESTS DELAY_POOLS DOCS EXAMPLES FOLLOW_XFF FS_AUFS FS_DISKD FS_ROCK GSSAPI_BASE HTCP ICAP ICMP IPV6 KQUEUE LARGEFILE LAX_HTTP SNMP SSL SSL_CRTD TP_IPFW VIA_DB WCCP WCCPV2
Show the 14 options that are off
AUTH_LDAP AUTH_SASL AUTH_SMB AUTH_SQL DEBUG ECAP GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE NETTLE STACKTRACES TDB TP_IPF TP_PF
pkg-message
Shown after installing
o You can find the configuration files for this package in the
       directory /usr/local/etc/squid.

     o The default cache directory is /var/squid/cache/.
       The default log directory is /var/log/squid/.

       Note:
       You must initialize new cache directories before you can start
       squid.  Do this by running "squid -z" as 'root' or 'squid'.
       If your cache directories are already initialized (e.g. after an
       upgrade of squid) you do not need to initialize them again.

     o When using DiskD storage scheme remember to read documentation:
         http://wiki.squid-cache.org/Features/DiskDaemon
       and alter your kern.ipc defaults in /boot/loader.conf. DiskD will not
       work reliably without this. Last recomendations were:

         kern.ipc.msgmnb=8192
         kern.ipc.msgssz=64
         kern.ipc.msgtql=2048

     o The pre-translated error pages are no longer included into the port.
       If you need them install www/squid-langpack port as well.

     o The default configuration will deny everyone but the local host and
       local networks as defined in RFC 1918 for IPv4 and RFCs 4193 and
       4291 for IPv6 access to the proxy service.  Edit the "http_access
       allow/deny" directives in /usr/local/etc/squid/squid.conf
       to suit your needs.

     o If AUTH_SQL option is set, please, don't forget to install one of
       following perl modules depending on database you like:
         databases/p5-DBD-mysql (MySQL)
         databases/p5-DBD-mysql4 (MariaDB)
         databases/p5-DBD-Pg
         databases/p5-DBD-SQLite

     To enable Squid, set squid_enable=yes in either
     /etc/rc.conf, /etc/rc.conf.local or /etc/rc.conf.d/squid
     Please see /usr/local/etc/rc.d/squid for further details.

     Note:
     If you just updated your Squid installation from an earlier version,
     make sure to check your Squid configuration against the 3.4 default
     configuration file /usr/local/etc/squid/squid.conf.sample.

     /usr/local/etc/squid/squid.conf.documented is a fully annotated
     configuration file you can consult for further reference.

     Additionally, you should check your configuration by calling
     'squid -f /path/to/squid.conf -k parse' before starting Squid.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 167.77.7–
FreeBSD 157.77.7–
FreeBSD 147.77.77.7

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 157.77.7–
FreeBSD 147.77.77.7

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 7.7.

Fixed (45)

Show 45 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (428)

Peter Wemm (peter)
Update 1.1.9 -> 1.1.10.  See ChangeLog for details.
716b9db32e
Peter Wemm (peter)
Update 1.1.8+patches -> 1.1.9.

See ChangeLog for the (large) list of changes.
36ff53c9eb
Peter Wemm (peter)
Use official patches from dist site.  Included is a possible fix to the slowdown problem.

Note, I've changed the DIST_SUBDIR.. all the patches files seem to be
called "fixes.patch" and were colliding with each other.
Reviewed by:
Submitted by:
Obtained from:
4831d065a0
Peter Wemm (peter)
Update from 1.1.7+patches to 1.1.8.  This fixes a number of unresolved problems, including a patching braino on my part...
a33c2b4870
Peter Wemm (peter)
Update 1.1.6 -> 1.1.7 + vendor patches.

Note: the patch file on the web site has several problems.. First, it
doesn't apply, and second, it bogusly changes the version.  It also
introduces some problems for FreeBSD where the author missed the point of
a fix I sent back. :-(
07524f9e18
Satoshi Asami (asami)
Patchfile has changed.
3d10f648f7
Peter Wemm (peter)
Include patch distributed on the web page to tie up some problems: - POST didn't work if there were null characters (strncpy vs. memcpy) - defensive measures to try and stop "HELP! IP cache overflowing" - warn when forced to do blocking gethostbyxxxx() calls - fix some coredumps and other problems Reviewed by: Submitted by: Obtained from:
93145a0668
Peter Wemm (peter)
Update 1.1.5+patches -> 1.1.6

Note, there are a few important changes to the squid.conf file,
be sure to read the ChangeLog file for the details.  Some names
have been renamed, and a new option needs to be specified if squid
is run as root - it needs to know what uid to change to, it won't run
as root by default.  This may require changes to the port to create a
user or something.
8f69c1d194
Peter Wemm (peter)
Update 1.1.4+vendor patches to 1.1.5+vendor patches
917e646b61
Satoshi Asami (asami)
Put DIST_SUBDIR in right place.
67b760fa71
Peter Wemm (peter)
Update 1.1.3 -> 1.1.4 + distributed patches

Among the changes are some patches submitted to the maintainers by
yours truly to improve the password support in cachemgr.cgi.  It also
reports the resource "maxrss" correctly for what it is.

The distributed patches to 1.1.4:
    * ftpget.c.patch: Changes the default MIME type to
      "application/octet-stream" and fixes directory listings from
      NetWare servers.
    * icp.c.patch: Fixes "Unknown status reply from server: 0!" error
      messages in Netscape.
    * ipcache.c.patch: Fixes ipcache_dnsHandleRead() coredumps.
    * neighbors.c.patch: Fixes BIT_SET/BIT_TEST typo in
      getDefaultParent().

Reviewed by:
Submitted by:
Obtained from:
4b5079e3d2
Peter Wemm (peter)
Update 1.1.2 -> 1.1.3
b5e5e70ca2
Peter Wemm (peter)
Update 1.1.1 -> 1.1.2 The usual bug fixes, including one that prevented ftp objects being cached (they immediately timed out).....
55a7a37df3
Peter Wemm (peter)
Update 1.1.0 -> 1.1.1 ; from the Changelog: - Fixed announcement bug.  Announcements were always off unless   a file was specified. - Fixed wrong number of args to examine_select() debug. - Fixed null-string content-type - Don't cache replies with 'Set-Cookie:' headers. - Fixed bug when client issues IMS, Squid has stale object and   Squid's lastmod time is greater than the client IMS time.   A 30
38078b6e98
Peter Wemm (peter)
Update 1.1.beta28 -> 1.1.0
e8161884f8
Peter Wemm (peter)
Update 1.1.beta27 to 1.1.beta28.

This fixes some small bugs, including a CR/LF problem and (I think) two
problems with aborting.  The author has hinted that this might be the last
beta before 1.1.0.
a012d0d16c
Peter Wemm (peter)
Update 1.1beta26 -> 1.1beta27

Among the changes is a strcasecmp() fix to make POST operations work.
3d4c0f8433
Peter Wemm (peter)
Update 1.1.beta25 -> 1.1.beta26

Among the changes:
 - remove patch-aa, it's now in the standard distribution
 - checks for libgnumalloc for <= FreeBSD-2.1.x systems to avoid the
   nasty libc malloc problems.
 - more useful data in the logs
 - support for poll() syscall with unlimited number of file descriptors
   if present instead of select()'s restrictions.
   (Standard FreeBSD doesn't yet have poll()..)
 - the usual bug fixes
4851e97c68
Peter Wemm (peter)
Update 1.1.beta20 to 1.1.beta25

Lots of changes, see ChangeLog

Reviewed by:
Submitted by:
Obtained from:
f0a3caae30
Peter Wemm (peter)
Update 1.1beta19 to 1.1beta20 - more bug fixes. Reviewed by: Submitted by: Obtained from:
a98d4ecdba
Satoshi Asami (asami)
Use MAN? macros.  CATEGORIES+= -> CATEGORIES.
300c45cf2e
Peter Wemm (peter)
Update 1.1.beta16 -> 1.1.beta19

Mostly bug fixes.
Reviewed by:
Submitted by:
Obtained from:
edd507d74b
Peter Wemm (peter)
Update 1.1.beta13 -> 1.1.beta16

Included in this update:
 - large objects fix, apparently large objects could get stuck (eg:
   netscape, msie downloads etc)
 - configurable 1st and 2nd level directory hash sizes
 - can have a password in squid.conf for cachemgr.cgi
 - POST is now passthrough
 - other bugfixes
 - other new features and corresponding bugfixes :-)
Reviewed by:
Submitted by:
Obtained from:
3c460902f7
Peter Wemm (peter)
Shorten PKGNAME Don't send RunCache's output to /dev/console when run from the rc.d script, it's a bit messy and unneeded.

Reviewed by:
Submitted by:	asami
Obtained from:
b519625807
Peter Wemm (peter)
Squid-1.1.beta13.  This was a little unusual in that the www/squid ncvs files were repository copied to www/squid11, then this commit brings it to 1.1.b13.  (This was Satoshi's idea :-) It preserves the history)

Squid-1.0 and 1.1 are under parallel development, kinda like when we had
2.1-stable and 2.2-current in parallel development.  The 1.0 code is well
polished, and 1.1 is "on the bleeding edge" as such.  The features and
performance are much improved, but it can be a bit hair-raising.  I
personally have no major hassles with 1.1beta13.

Among the nicer things that this version has over 1.0:
- URL redirector..  ie: you can rewrite url's of sites with "mirrors"
  so that you don't have 15 copies of the same files.
- optional ident logging
- improved acl's
- dramatically improved cache directory structure (scales much better with
  gigantic disk caches)
- much improved DNS ttl handling (esp. with resolver hack)
- more control over neighbor status; parent, sibling etc.
- much improved refresh rules to help combat stupid sites that needlessly
  set the Expires: field to zero when it doesn't need to be.  (This is fine
  when it's genuinely needed, but some sites really abuse it to to attempt
  to negate caching to get inflated hit counts etc)
Reviewed by:
Submitted by:
Obtained from:
3f8bf3d375
Peter Wemm (peter)
Update from squid-1.0.0 to 1.0.20.  There are a large number of bug fixes and stability measures.

This port installs in a "FreeBSD-native" tree (like apache) rather than
with a mini hierarchy under /usr/local/squid/{bin,etc,cache,logs,...}

(the default behavior seems to have changed between 1.0.0 and 1.0.20)

Also, build a rc.d/squid.sh script.
a6d6133eb7
Satoshi Asami (asami)
Upgrade from 1.0 beta11 to 1.0 release.

Submitted by:	Andrew Stesin <stesin@elvisti.kiev.ua>
8b81bdf083
Satoshi Asami (asami)
A post-harvest www cache proxy.

Submitted by:	Andrew V. Stesin <stesin@elvisti.kiev.ua> and Peter Stubbs <PETERS@staidan.qld.edu.au>
f9a9561a7c