-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathChangeLog
5199 lines (4789 loc) · 242 KB
/
ChangeLog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Changes to squid-3.3.8 (13 Jul 2013):
- Bug 3869: assertion failed: MemBuf.cc:272: size < capacity
- Improved handling of port values in Host: header validation
Changes to squid-3.3.7 (11 Jul 2013):
- Bug 3297: Fix openSSL related build failures
- Fix build on FreeBSD 9.x platform with clang
- Protect against buffer overrun in DNS query generation
Changes to squid-3.3.6 (01 Jul 2013):
- Bug 3854: pt1: compile errors on AIX
- Bug 3802: Fix wrong check inside Format::Format::assemble
- Bug 3762: remove bogus WARNING in cache.log
- Bug 3717: assertion failed with dstdom_regex with IP based URL
- Bug 1991: kqueue causes SSL to hang
- Ask for SSL key password when started with -N but without sslpassword_program
- Make sure %<tt includes all [failed] connection attempts
- Support HTTP reply ACLs in icap_log and log_icap
- Fix incorrect external_acl_type codes
- Fix ICAP logging request headers and segmentation faults
- ... and some documentation polish
Changes to squid-3.3.5 (20 May 2013):
- Bug 3851: Delay Pool class 5 tag:levels displayed incorrectly in cache manager
- Bug 3845: http_port tcpkeepalive= option fails parsing
- Bug 3840: assertion failed 'sde' in UFS cache loading
- Bug 3836: make check failures with automake-1.13
- Bug 3827: Remove AccessLogEntry::cache.authuser
- Bug 3816 pt2: SSL_get_certificate call inside Ssl::verifySslCertificate crashes
- Bug 3780: cachemgr.cgi: output problem in HTTP Header Statistics
- Bug 3759: OpenSSL compilation error on stock Fedora17, RHEL, CentOS 6 systems
- Bug 3744: squid terminated: FATAL: Bungled (null) line 3: sslproxy_cert_sign signTrusted all
- Port from 2.6: external acl %ACL and %DATA tags
- Update copyright on SN.png
- ... and several minor memory leaks
- ... and some documentation polish
Changes to squid-3.3.4 (27 Apr 2013):
- Bug 3831: basic_ncsa_auth Blowfish and SHA support
- Bug 3816: SSL_get_certificate call inside Ssl::verifySslCertificate crashes
- Bug 3794: MacOS: workaround compiler errors and case-insensitivity
- Bug 3781: Proxy Authentication not sent to cache_peer
- Bug 3720 pt1: SourceLayout: shuffle fd_table definition into fde.h
- Bug 3720 pt2: Add missing include in /dev/poll I/O module
- Bug 3674: Improve compiler detection, better support warnings-as-errors on clang
- Add support for TPROXY on BSD
- Fix SSL Bump bypass for intercepted traffic
- Fix memory leaks in ConnStateData pinning
- Fix external_acl.cc "inBackground" assertion on queue overloads
- CacheMgr: fix missing column separator in helper stats
- OpenBSD: libpthreads requires OpenBSD 5.2 or later
- ... and lots of documentation updates
- ... and all changes from squid 3.2.10
Changes to squid-3.3.3 (12 Mar 2013):
- Bug 3720: Add missing include in /dev/poll I/O module (pt2)
- ... and all changes from squid 3.2.9
Changes to squid-3.3.2 (02 Mar 2013):
- Bug 3781: Proxy Authentication not sent to cache_peer
- Bug 3794: MacOS: workaround compiler errors
- Bug 3720: Compile error in Solaris /OpenIndiana
- ... and all changes from squid 3.2.8
Changes to squid-3.3.1 (09 Feb 2013):
- Bug 3726: build errors with --disable-ssl
- Propigate pinned connection persistency and closures to the client.
- Mimic SSL certificate Key Usage and Basic Constraints
- Fix segmentation fault on missing squid.conf values
- ext_sql_session_acl: Fix hex decoding on UID
- ... and some code polish
- ... and a lot of documentation polish
- ... and all changes from squid 3.2.7
Changes to squid-3.3.0.3 (09 Jan 2013):
- Bug 3729: 32-bit overflow in parsing 64-bit configuration values
- Bug 3728: Improve debug for cache_dir
- Additional fixes for CVE-2012-5643 / SQUID:2012-1
- kerberos_ldap_group: support multiple groups in squid.conf ACL definition
- kqueue: update status from experimental to fully available net I/O method
- ... and many memory leaks and potential bugs detected by Coverity Scan
Changes to squid-3.3.0.2 (03 Dec 2012):
- Support matching empty header field values using req_header and rep_header
- ... and some minor code polish and input vaidations
- ... and all changes from squid 3.2.4
Changes to squid-3.3.0.1 (21 Oct 2012):
- Bug 3610: Add peername_regex ACL
- Bug 3239: rename myip/myport as localip/localport
- Bug 3130: helpers are crashing too rapidly
- Add log_db_daemon SQL Database Logging Daemon
- Add ext_time_quota_acl helper managing sessions by bandwidth usage
- Add request_header_add option
- Support C++11 features where possible
- Support bump-ssl-server-first
- Support mimic SSL server certificates
- Remove --enable-ntlm-fail-open
- Fix TLS/SSL Options does not apply to the dynamically generated certificates
- Fix SslBump stuck after error
- Polish: display ACL enumeration text in debugs
- ... and many portability fixes for MacOS X, Windows and others
- ... and many compile error fixes
- ... and a very large amount of code polish for faster compilation
Changes to squid-3.2.13 (13 Jul 2013):
- Bug 3869: assertion failed: MemBuf.cc:272: size < capacity
- Improved handling of port values in Host: header validation
Changes to squid-3.2.12 (11 Jul 2013):
- Protect against buffer overrun in DNS query generation
- Avoid !closing assertions when helpers call comm_read during reconfigure.
- Fix several minor memory leaks during reconfigure
- Remove origin_tries limiter on forwarding and permit large max_forward_tries values
Changes to squid-3.2.11 (30 Apr 2013):
- Regression Bug 3839: build error: src/tools.h: No such file or directory
- Update copyright on SN.png
Changes to squid-3.2.10 (27 Apr 2013):
- Bug 3833: squidclient: Option '-k' is not present in man(1) page
- Bug 3825: basic_ncsa_auth: segfaulting with glibc-2.17
- Bug 3822: Locate LDAP and SASL headers for BSD support
- Bug 3817: Memory leak in SSL cert validate for alt_name peer certs
- Bug 3774: 'squid -k reconfigure' drops rock cache
- Bug 3565: Resuming postponed accept kills Squid
- HTTP/1.1: partial support for no-cache and private controls with parameters
- ssl_crtd: fix helpers dying during startup on ARM
- GNU Hurd: define MAP_NORESERVE as no-op when missing
- BSD: fix enter_suid/leave_suid build errors in ip/Intercept.cc
Changes to squid-3.2.9 (12 Mar 2013):
- Regression fix: Accept-Language header parse
- Bug 3673: Silence 'Failed to select source' messages
- Fix authentication headers sent on peer digest requests
- Fix build error on Solaris, OpenIndiana, Omnios
Changes to squid-3.2.8 (02 Mar 2013):
- Bug 3767: tcp_outgoing_tos/mark ACLs do not obey acl_uses_indirect_client
- Bug 3763: diskd Error: no filename in shm buffer
- Bug 3752: objects that cannot be cached in memory are not cached on disk
- Bug 3753: Removes the domain from the cache_peer server pconn key
- Bug 3749: IDENT lookup using wrong ports to identify the user
- Bug 3723: tcp_outgoing_tos/mark broken for CONNECT requests
- Bug 3686: cache_dir max-size default fails
- Bug 3515: crash in FtpStateData::ftpTimeout
- Bug 3329: Quieten orphan Comm::Connection messages
- Make squid -z for cache_dir rock preserve the rock DB
- Fixed several server connect problems
- ... and some build issues on Solaris, OpenIndiana, MacOS X
- ... and some documentation and debugs polishing
Changes to squid-3.2.7 (01 Feb 2013):
- Bug 3736: Floating point exception due to divide by zero
- Bug 3735: raw-IPv6 domain URLs crash if IPv6-disabled
- Bug 3732: Fix ConnOpener IPv6 awareness
- Bug 3729: 32-bit overflow in parsing 64-bit configuration values
- Bug 3728: Improve debug for cache_dir
- Bug 3687: unhandled exception: c when using interception and peers
- Bug 3678: external acl grace period causes acl lookup failures
- Bug 3567: Memory leak handling malformed requests
- Bug 3111: Mid-term fix for the forward.cc "err" assertion
- Support OpenSSL NO_Compression optio
- Fix IPv6 enabled pinger on split-stack or IPv6-disabled systems
- Fix "address.GetPort() != 0" assertion for helpers
- ... and several minor memory leaks
- ... and some cache.log message polishing
Changes to squid-3.2.6 (09 Jan 2013):
- Regression Bug 3731: TOS setsockopt() requires int value
- Regression Bug 3712: Rotating logs overwrites the previous log
- Bug 3727: LLVM compile errors in kerberos_ldap_group
- Bug 3650: Negotiate auth missing challenge token
- Additional fixes for CVE-2012-5643 / SQUID:2012-1
Changes to squid-3.2.5 (10 Dec 2012):
- Bug 3698: Add missing include of errno.h
Changes to squid-3.2.4 (03 Dec 2012):
- Ported: urllogin ACL from squid 2.7
- Bug 3688: Lots of Orphan Comm:Connections to ICAP server
- Bug 3677: Port un-pinning logic changes from squid 3.3
- Bug 3405: ssl_crtd crashes failing to remove certificate
- ... and major bugs fixed in squid 3.1.22
- Fix accept_filter on Linux
- Remove 'Bungled' warning on missing component directives
- ... and many buffer and memory leak issues in the bundled helpers
- ... and a small amount of code polishing
Changes to squid-3.2.3 (21 Oct 2012):
- Regression: SMP crashes on startup with workers > 1
- Bug 3655: pinning failure breaks NTLM and Negotiate authentication
- SMP: Allow a UFS cache_dir entry to coexist with a shared memory cache entry
- HTTP/1.1: honour Cache-Control before Pragma:no-cache
- HTTP/1.1: Cache-Control compliance upgrade
- Remove obsoleted refresh_pattern ignore-no-cache option
- Fix IPv6 enabled squidclient
- ... and several compile fixes
Changes to squid-3.2.2 (06 Oct 2012):
- Regression: Make login=PASS send no credentials when none available
- Regression: Handle dstdomain duplicates and overlapping names better
- Bug 3661: Segmentation fault when using more than 1 worker
- Bug 3660: ACLFilledChecklist::fd set with wrong fd for sslproxy_cert_error
- Bug 3658: ERR_ZERO_SIZE_OBJECT propagates out even after successful retry
- Bug 3648: polish String class files
- Bug 3647: parsing hier_code acl fails
- Bug 3626: forwarding loops on intercepted traffic
- Bug 3616: retrieve client connection for ACL checks from the related HttpRequest object
- Bug 3609: several RADIUS helper improvements
- Bug 3605: memory leak in Negotiate authentication
- Fix small memory leak in src ACL parse
- Fix maximum_single_addr_tries upgrade
- Fix chunked encoding on responses carrying a Content-Range header.
- Do not reuse persistent connections for PUTs to avoid ERR_ZERO_SIZE_OBJECT
- ... and several compile errors
Changes to squid-3.2.1 (15 Aug 2012):
- Bug 3605: memory leak in peer selection
- Bug 3478: better default handling without -DSTRICT_ORIGINAL_DST
- ... and some documentation updates
Changes to squid-3.2.0.19 (02 Aug 2012):
- Regression Bug 3580: IDENT request makes squid crash
- Regression Bug 3577: File Descriptors not properly closed
- Regression Bug 3478: Allow peer selection and connection auth on intercepted traffic
- Regression Fix: Restore memory caching ability
- Bug 3556 Workaround: epoll assertion failed: comm.cc:1093: isOpen(fd)
- Bug 3551: store_rebuild.cc:116: "store_errors == 0" assertion
- Bug 3525: Do not resend nibbled PUTs and avoid "mustAutoConsume" assertion.
- Avoid bogus "Disk space over limit" warnings when rebuidling dirty ufs index
- Support custom headers in [request|reply]_header_* manglers
- ... and much code polishing
Changes to squid-3.2.0.18 (29 Jun 2012):
- Bug 3576: ICY streams being Transfer-Encoding:chunked
- Bug 3537: statistics histogram leaks memory
- Bug 3526: digest authentication crash
- Bug 3484: Docs: sslproxy_cert_error example flawed
- Bug 3462: Delay Pools and ICAP
- Bug 3405: ssl_crtd crashes failing to remove certificate
- Bug 3380: Mac OSX compile errors with CMSG_SPACE
- Bug 3258: Requests hang when Host forgery verify fails
- Bug 3186: Digest auth caches failed state without revalidating
- Bug 2976: ERR_INVALID_URL for transparently captured requests when reconfiguring
- Bug 2885: AIX: check and set required compiler flags
- Fix ssl_crtd compile issues with libsslutil
- Fix build with GCC 4.7 (and probably other C++11 compilers).
- Fix double-escape of %R on deny_info redirect responses
- Support status 308 Permanent Redirect
- Support for TLSv1.1 and TLSv1.2 options and methods
- Support passing external_acl_type credentials on ICAP
- Language Updates: fr, hy, pt_BR
- ... and many compile issues on Windows
- ... and some minor code polish
Changes to squid-3.2.0.17 (12 Apr 2012):
- Bug 3527: EUI compile errors on Mac OS X 10.5.8 PPC
- Bug 3509: kQueue compile error
- Bug 3505: crash in CbcPointer<Comm::ConnOpener> constructor
- Bug 3441: Part 3: Replace corrupted v1 swap.state with new v2 format.
- Bug 3397: do not mark connection as opened until after SYN-ACK
- Bug 3193: NTLM decoder truncating strings
- Windows FD handling polish and some fixes
- Solaris 9/10 various build fixes
- ... and some more code polish
Changes to squid-3.2.0.16 (07 Mar 2012):
- Bug 3508: Correct DNS timeout handling.
- Bug 3503: DNS PTR queries timeout due to wrong QIDs.
- Bug 3497: Bad ssl_crtd db size file causes infinite loop
- Bug 3490: part 1: SegFault opening FTP active data connections
- Bug 3490: Crash writing Apache Common and Referer/Useragent logs
- Bug 3458: Icon Serving (squid-internal-static) Broken
- Bug 3457: Display TLS error details in ERR_SECURE_CONNECT_FAIL
- Bug 3381: 32-bit overflow assertion in StatHist
- Bug 3324: loadFromFile: parse error while reading template file
- Support sslpassword_program for ssl-bump HTTP ports
- Support CoAP protocol coap:// and coaps:// URL schemes in HTTP requests
- Retry requests that failed due to a persistent connection race
- Log '-' on requests with no Referer or User-Agent headers
- ... and several fixes related to in-transit object performance
- ... and some structural design changes for portability
Changes to squid-3.2.0.15 (06 Feb 2012):
- Bug 3472: segfault with the message 'urlParse: URL too large'
- Bug 3471: segfault when %la formating code used
- Bug 3449: part 3: shm_open can fail with a mangled path
- Bug 3449: part 4: shm_open failed (fixing memory_cache_shared defaults)
- Bug 3448: 204 response problem in adaptation chains
- Bug 3447: assertion failed: CommCalls.h:150: "dp"
- Bug 3461: build regression in IPFilter NAT
- Bug 3413: raise cbdata lock limits
- Bug 3391: forwarded_for log functionality broken
- Bug 3268: Squid cannot do anything else during ufs/diskd rebuild
- Bug 3268: remove wrong 'Ready to serve requests.' message
- Bug 2519: ssl_bump + Authentication (LDAP Digest) issues
- Disable OpenSSL SSL/TLS bug workarounds by default
- Send DNS A and AAAA queries in parallel
- Cache Manager migration support
- Allow service of internal requests over reverse-proxy ports
- Fix trimMemory for unswappable objects
- ... and several build and polish fixes
Changes to squid-3.2.0.14 (12 Dec 2011):
- Bug 3433: Segfault closing SNMP
- Bug 3420: Request body consumption races and !theConsumer exception.
- Bug 3406: SSL Log Error in debug
- Bug 3383: store.cc:1631: "new_status != IN_MEMORY" assertion
- Bug 3383: unhandled exception: theGroupBSize > 0
- Bug 3377: assertion failed: store.cc:885: "store_status == STORE_PENDING"
- Bug 3367: fix inverted check on host_strict_verify
- Bug 3366: assertion comm.cc:1276: isOpen(fd) via CompositePoolNode::kickReads
- Bug 3364: SNMP Orphans
- Bug 3301: ERR_DNS_FAIL never shown
- Bug 3150: do not start useless unlinkd
- ext_session_acl: version 1.2
- Add adaptation_meta option
- Add a mask on the qos_flows miss configuration value
- Support intermediate CA in ssl-bump traffic certificates
- Support SSL certificate failure details on error page
- Fix flags for NAT intercept and TPROXY not set correctly
- Fix fastCheck() default result on multi-line actions
- Fix missing SMP shared memory statistics
- Fix Comm::Write closing() assertion when retrying a failed UDP DNS query
- ... and several other TCP and SMP support behaviour fixes
- ... and many code polishing cleanups and fixed build errors
- ... and several documentation polishings
Changes to squid-3.2.0.13 (14 Oct 2011):
- Regression Bug 3363: never_direct always 'unable to forward this request at this time'
- Regression Bug 3351: FTP timeout causing "store_status == STORE_PENDING" assertion
- Regression Bug 3336: reconfigure assertion 'hlp->childs.n_running > 0'
- Regression fix: always_direct/never_direct failures
- Regression fix: stop an SSL header file being included after --disable-ssl
- Regression fix: parse HTTP list headers with embedded 8-bit characters
- Bug 3355: configure setting --with-swapdir ignored
- Bug 3325: option to selectively enable strict host verify checks
- Bug 3337: HTTP status 200 is not accepted for deny_info
- Bug 3077: '\' in url query strings cause Digest authentication to fail
- Support SMP worker shared memory cache
- Support SMP worker shared disk cache (rock)
- ext_session_acl: version 1.1
- Fix Host verify: do not pinn destination IP if URL re-write has been done
- Fix IPF interception
- Fix ssl_crtd "Cannot add certificate to db" when updating expired cert
- Fix ssl_crtd CertificateDB locking scheme
- ... and all changes from 3.1.16
- ... and many compile and polishing fixes
Changes to squid-3.2.0.12 (17 Sep 2011):
- Regression Bug 3335: ICAP service is down
- Regression Bug 3322: adapt:: and icap:: format codes do not parse
- Regression Bug 3303: Support for non-English usernames in log files
- Regression Bug 3259: assertion failed: Connection.cc:29: 'fd<0' after REVIVED PARENT
- Regression: %I shows hostname on SSL error page
- Regression: FTP outgoing port always 'in use' on PASV connections
- Bug 3337: (partial) status 200 is not accepted for deny_info
- Bug 3319: Inconsistencies in error messages
- Bug 3281: pconn in-use while closing assertion
- Bug 3243: Fix cases: raw-IPv6, case variant FQDN, internal request
- Fixed max-stale check. Entities not exceeding max-stale were marked as stale
- Adjust format code %la for intercepted connections
- Log ICAP_ERR_GONE ICAP transaction outcome when ICAP initiator disappears early
- Send RST packet when closing an ICAP connection after a transaction error
- Support maximum field width for string access.log fields
Changes to squid-3.2.0.11 (28 Aug 2011):
- Bug 3243: CVE-2009-0801 Bypass of browser same-origin access control
- Host: authority validation of intercepted destination IP
- Host: authority validation of request URL
- Host: authority validation of CONNECT tunnel destination
- Preserve client destination IP in intercepted communication
- Regression Bug 3316: Failed to connect to nameserver using TCP
- Regression Bug 3311: segmentation fault in getMyPort() with only intercept port set
- Regression Bug 3310: %<pt translates as %<p
- Regression Bug 3301: ERR_DNS_FAIL never shown (partial)
- Regression Bug 3288: %<la and %<lp not displaying
- Bug 3289: cache manager parameters not parsed without password
- Bug 2279: Log Format options to log server source IP and port
- Bug 3211: ssl_crtd start even if no ssl-bump port is configured
- Bug 3138: squidclient mgr:objects/mgr:vm_objects never ends
- Bug 3118: ecap_enable on forces icap_enable on
- Bug 3107: ncsa_auth DES silently truncates passwords to 8 bytes
- Default to vhost for accelerator mode (reverse proxy)
- Display HTTP protocol syntax at section 11 level 2
- Support for using custom keys in CARP parents
- Optimize regular expression ACLs
- ... and a lot of code portability fixes
- ... and all bugs and polish changes from 3.1.15
Changes to squid-3.2.0.10 (24 Jul 2011):
- Port from 2.7: act-as-origin for reverse proxy ports
- Regression fix: broken --disable-ipv6
- Regression fix: negative cacheing on unknown or -1 expiry timestamp
- Regression fix: vhost and defaultsite causing vport to be ignored
- Regression fix: several errors in persistent connection handling
- Regression Bug 3280: allow max-size unset and min-size=N for large objects
- Regression Bug 3245: reconfigure assertion in MemPools[type]
- Regression Bug 3274: assertion failed: CommCalls.h:144: "dp"
- Regression Bug 3273: assertion comm.cc:775: Comm::IsConnOpen(conn)
- Regression Bug 3269: cache.log applyQueryParams messages
- Regression Bug 3264: Segmentation Fault in src/ipc/Strand.cc(54) receive: 3
- Regression Bug 3246: assertion client_side.cc:1407 connIsUsable(http->getConn())
- Bug 3267: workers IPC mount points disobey --localstatedir
- Bug 3248: login=NEGOTIATE sends wrong auth header to origin peers
- Bug 3247: Domain from URL Stripped when going through peers
- Bug 3244: wrong port for peer relayed requests
- Bug 3195: kerberos_ldap_group will not build without kerberos
- Bug 2862: add http(s):// support to cache manager
- kerberos_ldap_group: several fixes to -S option
- ssl_crtd: Add man(8) file
- ... and several pieces of code cleanup and polishing.
- ... and most bug fixes and updates from 3.1.14 and 3.1.15
Changes to squid-3.2.0.9 (18 Jun 2011):
- Bug 3159: delay pools --disable-auth compile problems
- HTTP/1.1: Support multiline quoted-string header fields
- HTTP/1.1: Send 505 Unsupported Version on mangled version codes
- Support configurable and translated SSL error details messages
- Add log format codes for split client/server views of HTTP request line
- Major upgrade of TCP connection handling
- Support split-stack IPv6 to servers
- Support persistent connections with tcp_outgoing_address/tcp_outgoing_tos
- Optimized persistent connection handling
- Optimized FTP data connection handling
- Optimized TCP failure recovery
- ... and all bug fixes and updates from 3.1.12.3
- ... and many code polish, documentation and translation cleanups
Changes to squid-3.2.0.8 (30 May 2011):
- Bug 3214: "helperHandleRead: unexpected read from ssl_crtd" errors.
- Bug 3043: Properly detect Iphlpapi.h on windows
- Bug 2055: Honor ICAP Max-Connections
- Fix NTLM/Negotiate reply auth PASSTHRU to peers
- Support SSL SNI to origin servers
- Add %EXT_LOG and %EXT_TAG external_acl_type format options
- Add %b tag for proxy listening port display in error pages
- Optimize base64 encoding/decoding
- Require libcap before enabling netfilter MARK support
- Require libtool 2.2
- Bundle pkg.m4 from pkg-config 0.25 for OS without pkg-config
- ... and all bug fixes and updates from 3.1.12.2
- ... and some documentation and code polishing
Changes to squid-3.2.0.7 (19 Apr 2011):
- Regression fix: NTLM and Negotiate auth assertion "RefCountCount() == 2"
- Regression fix: icons/ FHS compliance
- Regression fix: Startup aborts with URL error when --disable-htcp
- Bug 3192: comm.cc:216: "fd_table[fd].halfClosedReader != NULL"
- Add negotiate_wrapper_auth version 1.0.1
- Fixed %dt logging in the presence of REQMOD
- Fixed chunked request forwarding in ICAP REQMOD presence
- ... all bug fixes and updates from 3.1.12.1
- ... many code polishings and display cleanups
Changes to squid-3.2.0.6 (04 Apr 2011):
- Regression fix: upgrade existing icons
- Regression fix: dont crash when accessing an SSL certificate with errors
- Regression fix: prevent stdio log module segfaults on rotate
- Regression fix: shutdown properly even if a worker process crashes on exit
- Regression Bug 3159: (partial fix) ICAP and --disable-auth compile problems
- Bug 3170: "Unsupported or unconfigured/inactive proxy-auth scheme" on shutdown
- Bug 3105: malformed Proxy-Authorization leaks memory
- Bug 3007: CONNECT to cache_peer returns 000 status code
- Bug 2885: Compile errors on AIX
- Support parameterized Cache Manager queries
- Support libecap v0.2.0; fixed eCAP body handling and logging
- Support dynamic adaptation plans that cover multiple vectoring points
- Support %D details for documented OpenSSL errors
- Support logging of all transactions including those with uncertain status or no sent response
- Updrate negotiate_kerberos_auth to version 3.0.4sq
- Update ext_kerberos_ldap_group_acl to version 1.3.0sq
- Update ext_edirectory_userip_acl to version 2.1
- Convert dns_timeout and dns_retransmit_interval directives to use millisecond resolution
- Change the default dns_timeout value from 2 minutes to 30 seconds
- Fix TCP log stream flushing on every line
- ... all bug fixes and updates from 3.1.12
- ... a great many compiler portability fixes
- ... many code polishings and display cleanups
Changes to squid-3.2.0.5 (12 Feb 2011):
- Regression Fix: profiler should not be built by default
- Regression Bug 3081: assertion failed: AsyncCallQueue
- Regression Bug 2948: Requests for FTP active downloads cause failed assertion
- Bug 3089: FTP command output overrides directory listing
- Bug 2870: --disable-auth does not work
- Bug 2586: multiple memory leaks during reconfigure
- Bug 2581: FTP directory listing sometimes fails
- Port from 2.7: maximum staleness limits
- HTTP/1.1: Support RFC 5861 Cache-Control: stale-if-error option
- HTTP/1.1: Support configurable status codes for deny_info
- Support upcoming "fresh message creation" eCAP API
- Aggregate SNMP responses when using SMP with multiple workers
- Several more Solaris, Windows and ICC support fixes
- ... all bug fixes and updates from 3.1.11
- ... and more code cleanup shufflings
- ... and several documentation updates
Changes to squid-3.2.0.4 (22 Dec 2010):
- Port 2.x: cache_dir min-size setting
- Bug 3059: Crash on digest auth headers with unknown nonce
- Fix cachemgr reported HTTP/ICP requests/messages per minute when multiple workers used
- Fix cachemgr mem-pools reporting
- Add Dynamic SSL certificate generation
- Add useragent, referer, combined built-in log formats
- Obsolete log_fqdn directive
- Obsolete useragent/referer/forward_log directives
- HTTP/1.1: Send 1.1 on CONNECT responses
- Updated Kerberos support for newer GSSAPI releases
- Improve handling of adapted body delivery failures in REQMOD request satisfaction mode
- Improve handling of early eCAP transaction failures
- Various ext_edirectory_acl fixes
- ... all bug and feature fixes included in 3.1.10 release
- ... and a lot of code and documentation polishing
Changes to squid-3.2.0.3 (07 Nov 2010):
- Regression fix: SMP broke ICP outgoing IP lookup if no udp_outgoing_addr set
- Regression fix: ESI processing of Surrogate filter
- Bug 3091: bypassed ICAP errors are not counted as service failures
- Bug 3048: "commio_has_callback(fd, IOCB_READ, ccb)" assertion.
- Bug 3038: Detatch libmisc from libcompat
- Bug 3028: Permit wbinfo_group.pl to authenticate Kerberos users with NT domain
- Bug 3002: store initialization (-z) does not work with SMP configs
- Bug 2999: v2.0 of ext_edirectory_userip_acl
- Bug 2785: DNS needs to set EDNS options advertising Squid capabilities
- Bug 595: Add %err_code and %err_detail logformat codes for transaction failures
- HTTP/1.1: support If-Match and If-None-Match requests
- HTTP/1.1: forward 1xx control messages to clients that support them
- HTTP/1.1: send Age:0 header even if it may break IE5
- HTTP/1.1: dechunk incoming requests and chunk outgoing requests
- HTTP/1.1: entry is stale if request has max-age=0
- HTTP/1.1: harden quoted-string parser
- Add --enable-build-info for extra "squid -v" display
- Add --with-swapdir=PATH to override default /var/cache/squid
- Add cpu_affinity_map directive to bind workers to CPU cores
- Add Netfilter MARK support for QoS
- Add upgrade process for obsolete options
- Add support for RFC 2965 Set-Cookie2 / Cookie2 headers
- Add support for client send bandwidth limits (a.k.a., quota or delay pool)
- Fixes Eui48 support on OpenBSD
- Fixes cache manager support with SMP configs
- ... several documentation updates
- ... all bug and feature fixes included in 3.1.9 release.
- ... many more code polishes and leak removals
Changes to squid-3.2.0.2 (04 Sep 2010):
- Bug 3015: assertion failed: comm.cc:143: "ccb->active()"
- Support rotating logs from cachemgr and squidclient
- Support Kerberos authentication in squidclient
- Add manual page for negotiate_kerberos_auth
- Add helper ext_kerberos_ldap_group_acl to lookup Kerberos/NTLM group via LDAP
- Add tool 'purge' for management of UFS/AUFS/DiskD caches (experimental)
- Added log options %http::<bs and %icap::<bs
- Collapse HTCP cache_peer options into one setting
- Improved request smuggling attack detection. Tolerating valid benign HTTP
- ... and several HTTP/1.1 compliance improvements
- ... and all improvements in 3.1.7 and 3.1.8
Changes to squid-3.2.0.1 (03 Aug 2010):
- Port from 2.7: Logging infrastructure updates
- Port from 2.7: Unique sequence number per log line
- Port from 2.6: STORE_META_OBJSIZE swapout storage type
- Bug 2792: tcp_outgoing_addr does not work with TPROXY
- Bug 2631: refresh_pattern store-stale option
- Bug 2305: Multiple leaks and assertion crashes in authentication
- Bug 1239: Much needed ACL type random
- Bug 7: (partial): Migrate on-disk objects to cache_mem on hit/refresh and update
- Support full Surrogate/1.0 protocol extensions to HTTP for reverse-proxies
- Support SMP for essential non-caching functionality
- Support logging over TCP
- Support Solaris 10 pthreads (experimental)
- Support Kerberos login to peers
- Support EUI / MAC in more environments
- Support format tags in deny_info URLs
- Support running helpers on-demand instead of all at startup
- Support fully transparent login=PASSTHRU of authentication headers to peers
- Support multi-lingual localised FTP directory listings
- Support TPROXYv4 spoofing of X-Forwarded-For client address
- Support ICAP 206 Partial Content extension
- Append the _ABORTED or _TIMEDOUT suffixes to the action access.log field
- Add ACL support to range_offset_limit
- Add helpers for url_rewrite
- Add helper multiplexer for concurrency emulation with legacy helpers
- Add Perl library which facilitates parsing access logfile entries.
- Add a simple script to summarise traffic use per user
- Add templates for captive portal proxy configuration instructions
- Add logging of the local TCP port used by transactions with HTTP servers
- Update mswin_check_ad_group to version 2.0
- Update squid_kerb_auth helper to version 3.0.2
- Remove double-language error page hack (replaced by locale auto-negotiation)
- Remove TPROXYv2 support (replaced by TPROXYv4)
- Remove no_check.pl NTLM helper (replaced by ntlm_fake_auth)
- Re-work ./configure script for smarter auto-detect and early error checks
- Auto-enable all features by default
- Workaround com_err.h C++ brokenness triggered by OpenSSL includes
- Helpers naming scheme
- Add support for write timeouts
- Modify icap_service_failure_limit option to forget old ICAP errors
- Updated man(8) manuals including several additions and translations
- ... and a great many code cleanups
- ... and a great many testing improvements
- ... and many documentation updates
Changes to squid-3.1.23 (09 Jan 2013):
- Additional fixes for CVE-2012-5643 / SQUID:2012-1
Changes to squid-3.1.22 (03 Dec 2012):
- Bug 3685: Squid hangs in Delay Pools ClassCBucket::update
- Bug 3659: read_timeout problem with HTTPS
- Bug 3654: Fix IPv6 enabled squidclient
- Bug 3189: AIO thread race on pipe() initialization
- cachemgr.cgi: Memory Leaks and DoS Vulnerability
Changes to squid-3.1.21 (23 Sep 2012):
- Bug 3622: peerClearRRStart scheduling multiple events
- Bug 3615: configure check for default max number of FDs is broken
- Bug 3607: --enable-auth documented default action incorrect
- Bug 3593: socket failure: Address family not supported by protocol
- Bug 3584: Detection of setresuid() is broken
- Bug 3568: Consolidate external_acl_type config dumping and add missing %%
- Bug 3564: eCAP not supporting CoAP URI schemes
- Bug 3484: Docs: sslproxy_cert_error example flawed
- Bug 3462: Delay Pools and ICAP
- Bug 3133: better fix: Memory leak handling requests for sites that don't exist
- Bug 2976: ERR_INVALID_URL for transparently captured requests when reconfiguring
- Silence IOS 15.1 unknown capabilities messages.
- Account for Store disk client quota when bandwidth-limiting the server.
- ... and several documentation fixes
- ... and several compile fixes
Changes to squid-3.1.20 (08 Jun 2012):
- Regression Bug 3545: FreeBSD dnsserver segfaults
- Regression Bug 3504: clientside_tos fails to mark traffic
- Bug 3539: CONNECT server connection not closed correctly on errors
- Bug 3502: client timeout uses server-side read_timeout, not request_timeout
- Bug 3466: Adaptation stuck on last single-byte body piece
- Bug 3463: dnsserver fails to compile
- Bug 3439: correct external_acl_type documented default for ipv4/ipv6 option
- Bug 3390: Proxy auth data visible to scripts
- Bug 3263: ssl_crtd: undefined references to squid_curtime
- Bug 3233: Invalid URL accepted with url host is white spaces
- Bug 3133: Memory leak handling requests for sites that don't exist
- Bug 3074: Improper URL handling with empty path (RFC 3986)
- Bug 3013: segmentation fault on shutdown commSetCloseOnExec at comm.cc:1889
- Regression: snmp/udp address directives not resolving hostname
- Better helper-to-Squid buffer size management.
- Support CoAP over HTTP (coap:// and coaps:// URLs)
- Support for 3.2 error template codes
Changes to squid-3.1.19 (06 Feb 2012):
- Regression Bug 3441: part 2: Prevent further cache size corruption of swap.state
- Bug 3473: erase last uses of obsolete auth_user_hash_pointer
- Bug 3470: GCC 4.7
- Bug 3442: assertion failed: external_acl.cc:908: ch->auth_user_request != NULL
- Bug 3441: part 1: Minimize cache size corruption by malformed swap.state
- Bug 3440: compile error in Adaptation
- Bug 3420: Request body consumption races and !theConsumer exception
- Bug 3370: external ACL sometimes skipping
- Bug 3085: Crash when parsing esi:include
- HTTP/1.1: do not add 110 and 111 Warnings to revalidated responses
- Fix SSL library dependency fixes
Changes to squid-3.1.18 (03 Dec 2011):
- Regression: compile error in FTP
Changes to squid-3.1.17 (03 Dec 2011):
- Bug 3432: Crash logging FTP errors
- Bug 3428: Active FTP data channel accepted twice
- Bug 3423: access violation in URL parser
- Bug 3422: Buffer overflow in recv-announce
- Bug 3412: External ACL Uses Invalid Cache Entry
- Bug 3408: Wrong header length leads to EFAULTs when creating UFS swap.log.new
- Bug 3398: persistent server connection closed after PUT/DELETE
- Bug 3299: dnsserver: various undefined references
- Bug 3077: '\' in url query strings cause Digest authentication to fail
- Bug 2910: MemBuf may grow beyond max_capacity
- Bug 2619: Excessive RAM growth due to unlimited adapted body data consumption
- Bug 1243: Build overrides configured AR setting
- Avoid crashes when processing bad X509 common names (CN).
- Support %% in external ACL format
- ... and several other compile error fixes
- ... and several documentation fixes
Changes to squid-3.1.16 (14 Oct 2011):
- Bug 3373: invalid URL in ERR_CACHE_ACCESS_DENIED
- Bug 3368: Unhandled exceptions are not logged (workaround)
- Bug 3326: miss_access incorrect default
- Bug 3320: miss_access description confusing
- Bug 3241: squid_kerb_auth cross compilation fix
- Bug 3237: seq fault in free() from rfc1035RRDestroy
- Bug 3190: Large HTTP POST stuck after early ICAP 400 error response
- db_auth: display available DSN drivers on connect error
- Updated OpenSSL 1.0.0 version checks
- ... and several documentation fixes
Changes to squid-3.1.15 (28 Aug 2011):
- Regression fix: vhost and defaultsite causing vport to be ignored
- Regression Bug 3295: broken escaping in rfc1738_do_escape
- Bug #3232: fails to compile with OpenSSL v1.0.0
- Bug #3222: cache_peer name is not logging on CONNECT
- Bug #3131: fd_table[fd].closing() assert from ConnStateData::noteMoreBodySpaceAvailable()
- Bug #3217: "!fd_table[fd].closing()" from ServerStateData::noteMoreBodySpaceAvailable
- Bug #3213: https sites (CONNECT) not open when using NTLM
- Bug #3114: Memory leak in SSL certificate verify code
- Bug #3107: ncsa_auth DES silently truncates passwords to 8 bytes
- Bug #2662: cf_gen failure when cross compiling
- Bug #2655: passing wrong the username to the url_rewrite_program
- Bug #2495: ignore whitespace prefix on config lines
- Bug #2051: 'default' cache_peer option does not match documentation
- Bug #1842: Optimize order of tests in peerWouldBePinged() and peerHTTPOkay()
- Bug #1791: timestampsSet does not validate Date: if server sends very old date
- Correct parsing of large Gopher indexes
- Enable negative cacheing on unknown or -1 expiry timestamp
- Remove hierarchy_stoplist default value
- Migrate cf_gen tool from C-style to C++
- ... and several documentation and compiler warning fixes
Changes to squid-3.1.14 (04 Jul 2011):
- Regression Bug 3261: Could not create a DNS socket and exit
Changes to squid-3.1.13 (01 Jul 2011):
- Regression Bug 3239: problems with myip/myport upgrade
- Bug 3153: hung ICAP RESPMOD transactions
- Update ssl_crtd to use 'OK' status inline with other helpers
Changes to squid-3.1.12.3 (18 Jun 2011):
- Bug 3236: Port of %oa, %<lp and %<lp and %<la log format options
- Bug 3214: unexpected read from ssl_crtd
- Bug 3153: Prevent ICAP RESPMOD transactions getting stuck with the adapted body
- Fix RADIUS helper resource leak
- Fix segfault parsing digest auth realm
- Fix segfault in parse_eol()
- Fixed bypass of SSL certificate validation errors
- Warn about myip/myport problems on interception proxies
- Polish: display easily grepped config lines on -k parse
- Fix squidclient -V option and allow non-HTTP protocols to be tested
Changes to squid-3.1.12.2 (30 May 2011):
- Bug 3226: Tags from external ACLs do not correctly expire
- Bug 3215: Malformed IPv6 DNS reverse lookup
- Bug 3209: ssl-bumped requests forwarded unencrypted to the parent proxies/caches
- Bug 3205: SSL-bump starts then hangs
- Bug 3178: gcc-4.6 complains unused variables
- Bug 3122: Unknown record type in WCCPv2 Packet (6)
- Bug 2965 (partial): Compile errors on MinGW
- Fix to only ssl-bump CONNECT requests if they are about to be tunneled
- Fix cache manager display of -i/+i in regex ACL config display
- Fix cache manager display of cache_peer options userhash and sourcehash
- Fix URL re-writer loosing many transaction details
- Fix always-true comparison in ICAP for some 32-bit platforms
- Support for 'slow' group ACLs in ssl_bump access control
- Support OpenSSL 1.0.0 built without SSLv2
- Support GCC 4.6 and binutils-gold
- Add CSS id attribute to BODY tag of generated error pages.
- Display WARNING and ERROR when max_filedescriptors has failed
Changes to squid-3.1.12.1 (19 Apr 2011):
- Port from 3.2: Dynamic SSL Certificate generation
- Bug 3194: selinux may prevent ntlm_smb_lm_auth from using /tmp
- Bug 3185: 3.1.11 fails to compile on OpenBSD 4.8 and 4.9
- Bug 3183: Invalid URL accepted with url host part of only '@'
- Display ERROR in cache.log for invalid configured paths
- Cache Manager: send User-Agent header from cachemgr.cgi
- ... and many portability compile fixes for non-GCC systems.
Changes to squid-3.1.12 (04 Apr 2011):
- Regression fix: Use bigger buffer for server reads.
- Regression fix: Add reply_header_replace directive for ability lost since 2.7
- Bug 3181: /dev/poll fails to build on Solaris with GCC 4.5.0
- Bug 3177: assertion failed: comm.cc:1583: "fd >= 0"
- Bug 3175: IPv6 PTR lookup crashes on raw-IP URLs when IPv6 disabled
- Bug 3173: Assertion bodyPipe!=NULL on SslBump CONNECT response writing failure
- Bug 3164: Total memory info display 32-bit overflows
- Bug 3155: Werror is hard-coded in libTrie build
- Bug 3151: squid_kerb_auth: use autoconf LIBS instead of FLAGS for library linkage
- Bug 2976: invalid URL on intercepted requests during reconfigure (workaround)
- Bug 2720: comment in same line as cache/mem_replacement_policy causes error
- Bug 2621: Provide request headers to RESPMOD when using cache_peer.
- Bug 2330: AuthUser objects are never unlocked
- Prevent CONNECT request relaying to origin servers
- squidclient HTTP/1.1 compliance updates (Pragma and User-Agent headers)
- squidclient: send Cache Manager password using -w
- eCAP: give full Request-URI to adapters
- ... and several debug and error display cleanups
Changes to squid-3.1.11 (08 Feb 2011):
- Bug 3149: not caching eCAP adapted body
- Bug 3144: redirector program blocks while reading STDIN
- Bug 3140: memory leak in error page generation
- Bug 3137: RADIUS auth helper does not send identifier to RADIUS server
- Bug 3115: logging segfaults if access_log is set to a directory
- Bug 2968: Show the Vary: headers information in cachemgr objects report
- Bug 2959: remove SAMBAPREFIX dependency
- Bug 2868: icc doesn't like string literal in assert checks
- HTTP/1.1: Send 307 status on deny_info redirection
- HTTP/1.1: Support POST/PUT with no body
- HTTP/1.1: Allow persistent connections for Mozilla/3.0 User-Agents
- Support RFC 5861 Cache-Control: stale-if-error option
- Add ftp_eprt directive to disable EPRT extensions in FTP
- Fix external_acl_type grace=0 to obey TTL
- Fix IP/FQDN cache accounting to avoid idle caches on busy servers
- Prevent pipeline_prefetch misconfigurations breaking NTLM/Negotiate auth
- ... and some documentation updates and corrections
- ... and some portability and stability fixes
Changes to squid-3.1.10 (22 Dec 2010):
- Bug 3121: memory leak in DigestAuth: AuthUser object is locked twice
- Bug 3113: Consuming too much memory when uploading files
- Bug 3110: 'reply_body_max_size none' does not work with x-forwarded-for
- Bug 3096: Consuming too much memory when delaying traffic
- Bug 3091: Bypassed ICAP errors are not counted as service failures
- Bug 3090: Polish FTP login error handing
- Bug 3068: cache_dir capacity and usage overflows
- Bug 3028: Permit wbinfo_group.pl to authenticate Kerberos users with NT domain
- Bug 427: HTTP Compliance: Support If-Match and If-None-Match requests
- Fix memory leak in adaptation_access
- Fix /dev/poll and poll() selection priority
- Fix PREFIX/var/run creation during install
- Fix cachemgr http_port config report display
- Add upgrade help process for obsolete options
- Accept RFC 2965 Set-Cookie2 / Cookie2 headers as 'known'
- HTTP/1.1: entry is stale if request has max-age=0
- HTTP/1.1: do not forward TRACE with Max-Forwards: 0 after REQMOD
- Toolchain update to support newer auto-tools
- ... and updated error page translations
- ... and updated documentation
- ... and some code optimization/simplification polish
Changes to squid-3.1.9 (25 Oct 2010):
- Bug 3088: dnsserver is segfaulting
- Bug 3084: IPv6 without Host: header in request causes connection to hang
- Bug 3082: Typo in error message
- Bug 3073: tunnelStateFree memory leak of host member
- Bug 3058: errorSend and ICY leak MemBuf object
- Bug 3057: 64-bit Solaris 9 Squid unable to determine peer IP and port
- Bug 3056: comm.cc "!fd_table[fd].closing()" assertion crash when a helper dies
- Bug 3053: cache version 1 LFS support detection broken
- Bug 3051: integer display overflow
- Bug 3040: Lower-case domain entries from hosts and resolv.conf files
- Bug 3036: adaptation_access acls cannot see myportname
- Bug 3023: url_rewrite_program silently fails to rewrite on broken URLs
- Bug 2964: Prevent memory leaks when ICAP transactions fail
- Bug 2808: getRoundRobinParent not handling weights correctly
- Bug 2793: memory statistics sometimes display wrong
- Bug 2356: Port from 2.7: Solaris /dev/poll event ports support
- Bug 2311: crashes with ICAP RESPMOD for HTTP body size greater than 100kb
- Ensure /var/cache or jail equivalent exists on install
- HTTP/1.1: delete Warnings that have warning-date different from Date
- HTTP/1.1: do not remove ETag header from partial responses
- HTTP/1.1: make date parser stricter to better handle malformed Expires
- HTTP/1.1: improve age calculation
- HTTP/1.1: reply with a 504 error if required validation fails
- HTTP/1.1: add appropriate Warnings if serving a stale hit
- HTTP/1.1: support requests with Cache-Control: min-fresh
- HTTP/1.1: do not cache replies to requests with Cache-Control: no-store
- squidclient: Display IP(s) connected to in verbose (-v) display
- Fixes several issues with ICAP persistent connections
- Fixes small leaks in Netdb, DNS, ICAP, ICY, HTTPS
- ... and some cosmetic polishing
Changes to squid-3.1.8 (04 Sep 2010):
- Bug 3033: incorrect information regarding TOS
- Bug 3020: Segmentation fault: nameservers[vc->ns].vc = NULL
- Bug 3005,2972: Locate LTDL headers correctly (again)
- Bug 2872: leaking file descriptors
- Bug 2583: pure virtual method called
- Hardened DNS client against packet queue attacks
- Hardened HTTP request-line parser
- Several HTTP/1.1 support improvements
- Improved cross-compile support
- .. and several internal pointer safety fixes
Changes to squid-3.1.7 (23 Aug 2010):
- Regression Bug 3021: Large DNS reply causes crash
- Regression Bug 3011: ICAP, HTTPS, cache_peer probe IPv4-only port fixes
- Regression Bug 2997: visible_hostname directive no longer matches docs
- Bug 3012: deprecate sslBump and support ssl-bump spelling in http_port
- Bug 3006: handle IPV6_V6ONLY definition missing
- Bug 3004: Solaris 9 SunStudio 12 build failure
- Bug 3003: inconsistent concepts in documentation of cache_dir
- Bug 3001: dnsserver link issues
- HTTP/1.1: default keep-alive for 1.1 clients (bug 3016)
- HTTP/1.1: Improved Range header field validation
- HTTP/1.1: Forward multiple unknown Cache-Control directives
- HTTP/1.1: Stop sending Proxy-Connection header
- Fix 32-bit wrap in refresh_pattern min/max values
- ... and several documentation corrections.
Changes to squid-3.1.6 (02 Aug 2010):
- Bug 2994, 2995: IPv4-only regressions
- Bug 2991: Wrong parameters to fcntl() in commSetCloseOnExec()
- Bug 2975: chunked requests not supported after regular ones
- Fix: 32-bit overflow in reported bytes received from next hop
- Fix Libtool build regressions
- Limited split-stack IPv6 support.
- squid_db_auth support MD5 encrypted passwords
Changes to squid-3.1.5.1 (28 Jul 2010):
- Update Libtool to 2.2.
- Bug 2985: search scope for digest_ldap_auth didn't work
- Bug 2972: LTDL 2.2.6b compile errors
- Bug 2963: Stop ignoring --with-valgrind-debug failures
- Bug 2885: AIX support: several fixes
- Bug 2651: crash handling NULL write callback
- Fixed several memory leaks related to Range requests
- Fixed Joomla DB auth handling
- Fixed SASL helper build checks
- Fixed several IPv6 portability problems
- Updated error page translations
Changes to squid-3.1.5 (02 Jul 2010):
- Bug 2967: raw-IPv6 address URL with append_domain broken
- Bug 2950: HTTP responses with no Date, L-M or Expires can now be cached
- Bug 2943: ICAP tokens not logged when using multiple access
- Bug 2937: Fails to detect chunked encoding if not given in all lower case
- Bug 2903: does not send indirect X-Client-Ip in ICAP respmod
- Fix free memory corruption and off-by-one error when comparing SNMP OIDs
- Port from 2.7: max_filedescriptor config option
- Fix persistent_connection_after_error is meant to be on by default
- ... and several build errors.
Changes to squid-3.1.4 (30 May 2010):
- Bug 2933: Verification of the max. port number for WCCP2 dynamic service
- Bug 2924: RADIUS helper compile issues
- Bug 2922: Fix assertion failed: HttpHeader.cc: "Headers[id].stat.aliveCount"
- Bug 2919: tcp_outgoing_address ACLs not obeying acl_uses_indirect_client
- Bug 2896: Fix assertion failed: comm.cc:2063: "!fd_table[fd].closing()"
- Bug 2879: pt2: 3.0 regression in headers end finding
- Bug 2877: pt2: only output zero-size warning on reverse-proxy requests
- Bug 2876: FD_SETSIZE override not working on all linux distributions
- Bug 2810: common log format generates 2 lines of syslog