projects / thirdparty / squid.git / blame
| Commit | Line | Data |
|---|---|---|
| 49193367 | 1 | Changes in squid-6.0.1 (28 Feb 2023): |
| 552d1774 AJ |
2 | |
| 3 | - Bug 5256: Intercepting port fails to accept | |
| 4 | - Bug 5241: Block all non-localhost requests by default | |
| 5 | - Bug 5241: Block to-localhost, to-link-local requests by default | |
| 6 | - Bug 5232: Fix GCC v12 build [-Wuse-after-free] | |
| 7 | - Bug 5211: support.cc:355: "!filledCheck->sslErrors" assertion | |
| 8 | - Bug 5194: Remove all unused debug sections | |
| 9 | - Bug 5162: mgr:index URL do not produce MGR_INDEX template | |
| 10 | - Bug 5129 pt1: remove Lock use from HttpRequestMethod | |
| 11 | - Bug 5128: Translation: Fix % i typo in es/ERR_FORWARDING_DENIED | |
| 12 | - Bug 5021: Add a script to fix spelling error with codespell | |
| 13 | - Bug 4946: client_side_request.cc: "request != newRequest" | |
| 14 | - Bug 4832: '!schemeAccess' assertion on exit | |
| 5afcde4d | 15 | - Bug 4572: squidclient: Remove deprecated cache_object:// support |
| 552d1774 AJ |
16 | - Bug 4528: ICAP transactions quit on async DNS lookups |
| 17 | - Add scripts/trace-context.pl: a debugging tool | |
| 18 | - Remove cache_diff tool | |
| 19 | - Remove membanger tool | |
| 20 | - Remove pconn-banger tool | |
| 21 | - Remove recv-announce tool | |
| 22 | - Remove send-announce tool | |
| 23 | - Remove tcp-banger* tools | |
| 24 | - Remove ufsdump tool | |
| 25 | - Remove support for Gopher protocol | |
| 26 | - Remove support for unused libbsd | |
| 27 | - Remove bundled GnuRegex library | |
| 28 | - Remove CPU profiler mechanism | |
| 29 | - Remove leakfinder (--enable-leakfinder) | |
| 30 | - Remove --enable-kill-parent-hack | |
| 31 | - Remove --disable-loadable-modules | |
| 32 | - Remove unused/disabled/broken LEAK_CHECK_MODE code | |
| 33 | - Remove SCO 3.2 support | |
| 34 | - Remove m88k-specific support | |
| 35 | - Remove NeXTSTEP support | |
| 36 | - Remove HPUX compiler support | |
| 37 | - Remove CBDATA debugging | |
| 38 | - Require C++17 | |
| 193ed125 | 39 | - cachemgr.cgi: Remove deprecated cache_object:// support |
| 552d1774 AJ |
40 | - ext_kerberos_ldap_group_acl: Support -b with -D |
| 41 | - ext_lm_group_acl: Improved username handling | |
| 42 | - negotiate_wrapper: ensure null-termination of strings | |
| 43 | - pinger: Fix MAX_PKT{4,6}_SZ to account for icmpEchoData padding | |
| 44 | - HTTP: Replaced X-Cache and X-Cache-Lookup headers with Cache-Status | |
| 45 | - HTTP: Update Host, Via, and other headers in-place when possible | |
| 46 | - HTTP: Update status code 413 compliance | |
| 47 | - RFC 9110: Reject different HTTP requests with unusual framing | |
| 48 | - RFC 9111: Stop treating Warning specially | |
| 49 | - RFC 9113: update documentation references | |
| 50 | - RFC 9218: Priority header registration | |
| 51 | - SSL-Bump: Remove step2+ stare-and-splice and peek-and-bump support | |
| 52 | - TLS: Do not send more than one self-signed certificate | |
| 53 | - TLS: Sort CA certificates in tls-cert=bundle | |
| 54 | - TLS: Preserve configured order of intermediate CA certificate chain | |
| 55 | - WCCP: Validate packets better | |
| 56 | - CI: Support "negative" squid-conf-tests | |
| 57 | - CI: Maintenance: Support custom astyle versions | |
| 58 | - CI: test-builds.sh: in case of error dump full log | |
| 59 | - CI: Add --progress option to test-builds.sh | |
| 60 | - CI: Change time_units test to also work on 32bit systems | |
| 61 | - CI: Maintenance: Update astyle version to 3.1 | |
| 62 | - Add cache_log_message directive | |
| 63 | - Add paranoid_hit_validation directive | |
| 64 | - Add tls_key_log to report TLS communication secrets | |
| 65 | - Add %busy_time logformat code | |
| 66 | - Add %transport::>connection_id logformat code | |
| 67 | - Add %request_attempts logformat code | |
| 68 | - Warn about some bad from-helper annotations | |
| 69 | - Ban acl key changes in req_header, rep_header, and note ACLs | |
| 70 | - Optimize ephemeral port reuse with IP_BIND_ADDRESS_NO_PORT | |
| 71 | - Honor httpd_suppress_version_string in more contexts | |
| 72 | - Honor ftp_port worker-queues option | |
| 73 | - Log early level-0/1 debugs() messages to cache_log | |
| 74 | - Support reliable zeroing of sensitive buffers | |
| 75 | - Do not overwrite caching bans | |
| 76 | - Do not blame cache_peer for 4xx CONNECT responses | |
| 77 | - Mimic GET reforwarding decisions when our CONNECT fails | |
| 78 | - Discarded connections do not contribute to forward_max_tries | |
| 79 | - Honor assertions during shutdown | |
| 80 | - Do not stop listening after "ERROR: NAT/TPROXY lookup failed..." | |
| 81 | - Do not skip problematic regexes in ACLs | |
| 82 | - Improve coredump_dir on FreeBSD and Solaris based OS | |
| 83 | - Avoid reverse DNS lookups when logformat %>A is unused | |
| 84 | - BUG: Unexpected state while connecting to ... server | |
| 85 | - Properly track (and mark) truncated store entries | |
| 86 | - Support "file" syntax for 'squid_error' and 'has' ACL parameters | |
| 87 | - Allow sending "squid -k ..." signals to PID 1 | |
| 88 | - Remove bogus "found KEY_PRIVATE" WARNINGs | |
| 89 | - Avoid "BUG #3329: Lost orphan ..." during accept problems | |
| 90 | - Report SMP store queues state (mgr:store_queues) | |
| 91 | - Remove 8K limit for single access.log line | |
| 92 | - Rename ./configure option --with-libxml2 to --with-xml2 | |
| 93 | - Rename ./configure option --with-libcap to --with-cap | |
| 94 | - Match ./configure --help parameter names with their defaults | |
| 193ed125 | 95 | - Remove broken -sha1 option from server_cert_fingerprint |
| 552d1774 AJ |
96 | - Fix typo in manager ACL |
| 97 | - Fix milliseconds in certain cache.log messages | |
| 98 | - Fix ignore-cc/act-as-origin in wildcard split-stack ports | |
| 99 | - Fix comm.cc:644: "address.port() != 0" assertion | |
| 100 | - Fix StoreMap.cc "anchorAt(anchorId).reading()" assertions | |
| 101 | - Fix double-free segmentation fault on shutdown | |
| 102 | - Fix client_side_request.cc:2028 "request->method.id()" assertion | |
| 103 | - Fix reconfiguration leaking tls-cert=... memory | |
| 104 | - Fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY handling | |
| 105 | - Fix "mem_obj->inmem_lo == 0" assertion in StoreEntry::swapOut() | |
| 106 | - Fix TCP keepalive | |
| 107 | - Fix SslBump reconfiguration leaking public key memory | |
| 108 | - Fix socket accounting for TCP accept() | |
| 109 | - ... and many documentation changes | |
| 110 | - ... and much code cleanup and polishing | |
| 111 | - ... and all fixes from 5.8 | |
| 112 | ||
| 4a7431df FC |
113 | Changes in squid-5.9 (30 Apr 2023): |
| 114 | ||
| 115 | - Improve reply_body_max_size matching accuracy | |
| 116 | - ... and some documentation changes | |
| 117 | - ... and many portability fixes | |
| 118 | ||
| 49193367 AJ |
119 | Changes in squid-5.8 (28 Feb 2023): |
| 120 | ||
| 121 | - Bug 5162: mgr:index URL do not produce MGR_INDEX template | |
| 122 | - Bug 5241: Block all non-localhost requests by default | |
| 123 | - Bug 5241: Block to-localhost, to-link-local requests by default | |
| 124 | - ext_kerberos_ldap_group_acl: Support -b with -D | |
| 125 | - Fix ACL type typo in req_header, rep_header key-changing ERRORs | |
| 126 | - ... and several compile fixes | |
| 127 | - ... and some code cleanup and polishing | |
| 128 | ||
| 911833fc AJ |
129 | Changes in squid-5.7 (05 Sep 2022): |
| 130 | ||
| 131 | - Regression Fix: Typo in manager ACL | |
| 132 | - Bug 5186: noteDestinationsEnd check failed: transportWait | |
| 133 | - Bug 5160: Test suite fails with -flto=auto | |
| 134 | - Bug 3193 pt2: NTLM decoder truncating strings | |
| 135 | - Bug 5133: OpenSSL 3.0 support | |
| 136 | - ext_session_acl: fix TDB key lookup | |
| 137 | - forward_max_tries: Do not count discarded connections | |
| 138 | - ... and many compile and debugging fixes | |
| 139 | ||
| 6f4bee9d AJ |
140 | Changes in squid-5.6 (06 Jun 2022): |
| 141 | ||
| 142 | - Bug 5208: Part 1: Restart kids killed by SIGKILL | |
| 143 | - Fix SQUID-MIB smilint errors | |
| 144 | - negotiate_kerberos_auth: Initialise default_keytab | |
| 145 | - Improve handling of Gopher responses | |
| 146 | - ... and some semi-automated code polish | |
| 147 | ||
| c40111e8 AJ |
148 | Changes in squid-5.5 (12 Apr 2022): |
| 149 | ||
| 150 | - Regression Bug 5192: esi_parser default is incorrect | |
| 151 | - Bug 5177: clientca certificates sent to https_port clients | |
| 152 | - Bug 5090: Must(!request->pinnedConnection()) violation | |
| 153 | - Kid restart leads to persistent queue overflows, delays/timeouts | |
| 154 | - Fix build on Illumos | |
| 155 | - ESI: Drop incorrect and unnecessary xmlSetFeature() call | |
| 156 | ||
| 157 | Changes in squid-5.4.1 (12 Feb 2022): | |
| b62df37f AJ |
158 | |
| 159 | - Bug 5055: FATAL FwdState::noteDestinationsEnd exception: opening | |
| 160 | - Fix FATAL ServiceRep::putConnection exception: theBusyConns > 0 | |
| 161 | - Fix ConnOpener orphan connection warnings when requester ends early | |
| 162 | - Fix ConnOpener connection handling when sending negative answers | |
| 163 | - Fix Comm::ConnOpener::cleanFd() debugging | |
| 164 | - Fix ConnOpener callback's syncWithComm() | |
| 165 | - Fix FwdState::advanceDestination() losing ERR_GATEWAY_FAILURE details | |
| 166 | - Fix Tunneler handling of last-resort callback on premature job ending | |
| 167 | - Fix PeerConnector handling of last-resort callback on premature job ending | |
| 168 | - Fix FreeBSD 14 build | |
| 169 | - Fix OpenBSD 7.0 build | |
| 170 | - Add Comm::Connection::cloneDestinationDetails() debugging | |
| 171 | - Improve Security::PeerConnector::serverConn and Http::Tunneler::connection management | |
| 172 | - Refactor ConnOpener users to stop relying on the answer providing Comm::Connection | |
| 173 | - Refactor ICAP connection-establishing code | |
| 174 | - Polish PeerPoolMgr code | |
| 175 | - Polish IDENT code | |
| 176 | - Polish Gopher code | |
| 177 | - Polished AsyncJob::Start() API | |
| 178 | - ... and update code documentation | |
| 179 | ||
| c40111e8 | 180 | Changes in squid-5.4 (07 Feb 2022): |
| 4f019e78 AJ |
181 | |
| 182 | - Bug 5190: Preserve configured order of intermediate CA certificate chain | |
| 183 | - Bug 5188: Fix reconfiguration leaking tls-cert=... memory | |
| 184 | - Bug 5187: Properly track (and mark) truncated store entries | |
| 185 | - Bug 5134: assertion failed: Transients.cc:221: "old == e" | |
| 186 | - Bug 5132: Close the tunnel if to-server conn closes after client | |
| 187 | - langpack: Fix typo in Russian texts | |
| 188 | - copyright years and CONTRIBUTORS update | |
| 189 | ||
| 3bdbb995 AJ |
190 | Changes in squid-5.3 (06 Dec 2021): |
| 191 | ||
| 192 | - Bug 5169: StoreMap.cc:517 "!s.reading()" assertion | |
| 193 | - Bug 5158: AnyP::Uri::host() mishandles [escaped] IPv6 addresses | |
| 194 | - Bug 5060: Parallel builds are not reliable | |
| 195 | - Documentation updates for logformat directive | |
| 196 | ||
| 04add666 AJ |
197 | Changes in squid-5.2 (03 Oct 2021): |
| 198 | ||
| 199 | - Bug 5164: a copy-paste typo in HttpHdrCc::hasMinFresh() | |
| 200 | - Bug 4922: Improve ftp://... filename extraction | |
| 201 | - TLS: Fix X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY handling | |
| 202 | - ... and all fixes from 4.17 | |
| 203 | ||
| 0c6f7c33 AJ |
204 | Changes in squid-5.1 (01 Aug 2021): |
| 205 | ||
| 206 | - Bug 4696: Fix leaky String move assignment operator | |
| 207 | - Fix ACL-related reconfiguration memory leak | |
| 208 | - Fix SSL-Bump reconfiguration leaking public key memory | |
| 209 | - Fix build on RISC-V | |
| 210 | - Fix build on Ubuntu 21.04 | |
| 211 | ||
| 5ea861f5 AJ |
212 | Changes in squid-5.0.7 (04 Jul 2021): |
| 213 | ||
| 214 | - Fix a helper logging issues | |
| 215 | - Fix some helper connection issues | |
| 216 | - Cleanup: remove much unused code | |
| 217 | - ... and all fixes from 4.16 | |
| 218 | ||
| 5297c853 AJ |
219 | Changes in squid-5.0.6 (10 May 2021): |
| 220 | ||
| 221 | - Bug 5057: Generated response lacks status code | |
| 222 | - TLS: Handling missing issuer certificates for TLSv1.3 | |
| 223 | - TLS: Detail certificate validation errors during TLS handshake | |
| 224 | - TLS: Detail client closures of CONNECT tunnels during TLS handshake | |
| 225 | - TLS: %ssl::<negotiated_version and %ssl::>negotiated_version for TLS/1.3 | |
| 226 | - HTTP: Allow 1xx and 204 responses with Transfer-Encoding headers | |
| 227 | - Maintenance: Start following Inclusive Naming Initiative advice | |
| 228 | - Maintenance: Sort source file lists in Makefiles | |
| 229 | - Maintenance: Support plugin-style scripts for source format enforcement | |
| 230 | - Cleanup: Deduplicating IPC strand messages | |
| 231 | - ... and some compile and debugging fixes | |
| 232 | - ... and all fixes from 4.15 | |
| 233 | ||
| 5f37a71a AJ |
234 | Changes in squid-5.0.5 (02 Feb 2021): |
| 235 | ||
| 236 | - HTTP: Do not send Connection:keep-alive/close in HTTP Upgrade requests | |
| 237 | - Translations: Add es-mx dialect translation of error pages | |
| 238 | - Fix missing port in request-target of CONNECT requests to peers | |
| 239 | - Fix some warnings about client_lifetime timeout | |
| 240 | - ... and several documentation updates | |
| 241 | - ... and some debug improvements | |
| 242 | - ... and all fixes from 4.14 | |
| 243 | ||
| 76b18386 AJ |
244 | Changes in squid-5.0.4 (23 Aug 2020): |
| 245 | ||
| 246 | - Bug 5054: mark dns_v4_first as obsolete in cf.data.pre | |
| 247 | - Bug 5048: ResolvedPeers.cc:35: "found != paths_.end()" assertion | |
| 248 | - Reforward CONNECT after TLS handshake failure with peer | |
| 249 | - Do not send keep-alive in 101 (Switching Protocols) responses | |
| 250 | - Add http_port sslflags=CONDITIONAL_AUTH | |
| 251 | - ... and several documentation changes | |
| 252 | - ... and some compile fixes | |
| 253 | - ... and all fixes from 4.13 | |
| 254 | ||
| 5b0fbc71 AJ |
255 | Changes in squid-5.0.3 (05 Jun 2020): |
| 256 | ||
| 257 | - Bug 5046: FreeBSD lacks open(2) O_DSYNC flag | |
| 258 | - Happy Eyeballs: Do not discard viable reforwarding destinations | |
| 259 | - Reduced startup time with large rock cache_dirs | |
| 260 | - Fix the ABA problem with Ipc::Mem::PageStack::pop() in v5.0.1 | |
| 261 | - Fix sending of unknown validation errors to certificate validator | |
| 262 | - ... and several debug improvements | |
| 263 | - ... and all fixes from 4.12 | |
| 264 | ||
| 51f07c98 AJ |
265 | Changes in squid-5.0.2 (18 Apr 2020): |
| 266 | ||
| 267 | - Bug 5030: Negative responses are never cached | |
| 268 | - Bug 4796: comm.cc !isOpen(conn->fd) assertion when rotating logs | |
| 269 | - Support worker-dedicated listening queues (SO_REUSEPORT) | |
| 270 | - High precision time units | |
| 271 | - Ban reserved annotations in "note", "adaptation_meta" directives | |
| 272 | - ESI: convert parse exceptions into 500 status response | |
| 273 | - Fix PURGE error responses | |
| 274 | - ... and several documentation changes | |
| 275 | - ... and some compile fixes | |
| 5b0fbc71 | 276 | - ... and all fixes from 4.11 |
| 51f07c98 | 277 | |
| 755eac94 AJ |
278 | Changes in squid-5.0.1 (14 Jan 2020): |
| 279 | ||
| 280 | - Bug 4989: Leaking StoreEntry objects on Cache Digest rebuilds | |
| 281 | - Bug 4912: same-name notes being appended instead of replaced | |
| 282 | - Bug 4864: !Comm::MonitorsRead assertion in maybeReadVirginBody() | |
| 283 | - Bug 4579: cannot hit an entry being written by another worker | |
| 284 | - ICAP: Initial support for trailers | |
| 285 | - Add auth_schemes to control schemes presence and order in 401s/407s | |
| 286 | - Make CONNECT ACL a built-in default | |
| 287 | - Remove USE_CHUNKEDMEMPOOLS compiler flag | |
| 288 | - Two new ACLs implemented: annotate_transaction and annotate_client | |
| 289 | - Add response delay pools feature for Squid-to-client speed limiting | |
| 290 | - QA: allow test-suite to be run without a full build | |
| 291 | - Happy Eyeballs: Use each fully resolved forwarding destination ASAP | |
| 292 | - Support selective CF: collapsed_forwarding_access | |
| 293 | - Reworked packet/connection marking | |
| 294 | - Add new deny_info %A macro | |
| 295 | - Identify collapsed transactions | |
| 296 | - Add sample Kerberos group authentication external_acl helper | |
| 297 | - Optimization: Fewer memory (re)allocations for HTTP headers | |
| 298 | - Add TrivialDB support | |
| 299 | - Do not send Content-Length in 1xx or 204 responses | |
| 300 | - negotiate_kerberos_auth: fix memory leaks | |
| 301 | - ntlm_fake_auth: add ability to test delayed responses | |
| 302 | - Add %ssl::<cert macro for logging server X.509 certificate | |
| 303 | - Reuse reserved Negotiate and NTLM helpers after an idle timeout | |
| 304 | - Log PROXY protocol v2 TLVs | |
| 305 | - Support logformat %codes in error page templates | |
| 306 | - Fix incremental parsing of chunked quoted extensions | |
| 307 | - Peering support for SslBump | |
| 308 | - RFC 8586: Loop Detection in Content Delivery Networks | |
| 309 | - Prevent TLS transaction stalls by preserving flags.read_pending | |
| 310 | - Fix "BUG: Lost previously bumped from-Squid connection" | |
| 311 | - Add %master_xaction logformat code | |
| 312 | - Log "-" instead of the made-up method "NONE" | |
| 313 | - Add GeneratingCONNECT step for the existing at_step ACL | |
| 314 | - Report context of level-0/1 cache.log messages | |
| 315 | - Re-enabled updates of stored headers on HTTP 304 responses | |
| 316 | - Translations: Fix grammatical error in French error pages | |
| 317 | - Smarter auth_param utf8 handling, including CP1251 support | |
| 318 | - Fix rock disk entry contamination related to aborted swapouts | |
| 319 | - Send HTTP/500 (Internal Server Error) when lacking peers | |
| 320 | - Fix prohibitively slow search for new SMP shm pages | |
| 321 | - Centralized PagePool/PageStack ID generation | |
| 322 | - ... and many documentation changes | |
| 323 | - ... and much code cleanup and polishing | |
| 5b0fbc71 AJ |
324 | - ... and all fixes from 4.10 |
| 325 | ||
| 04add666 AJ |
326 | Changes in squid-4.17 (03 Oct 2021): |
| 327 | ||
| 328 | - WCCP: Validate packets better | |
| 329 | ||
| 5ea861f5 AJ |
330 | Changes in squid-4.16 (04 Jul 2021): |
| 331 | ||
| 332 | - Regression Fix: --with-valgrind-debug build broken since 4.15 | |
| 333 | - Bug 5129 pt1: remove Lock use from HttpRequestMethod | |
| 334 | - Bug 5128: Translation: Fix '% i' typo in es/ERR_FORWARDING_DENIED | |
| 335 | - Bug 4528: ICAP transactions quit on async DNS lookups | |
| 336 | ||
| 5297c853 AJ |
337 | Changes in squid-4.15 (10 May 2021): |
| 338 | ||
| 339 | - Bug 5112: Excessively loud chunked reply parsing error reporting | |
| 340 | - Bug 5106: Broken cache manager URL parsing | |
| 341 | - Bug 5104: Memory leak in RFC 2169 response parsing | |
| 342 | - Bug 3556: "FD ... is not an open socket" for accept() problems | |
| 343 | - Profiling: CPU timing implemented for MAC non-x86 | |
| 344 | - Fix HttpHeaderStats definition to include hoErrorDetail | |
| 345 | - Fix Squid-to-client write_timeout triggers client_lifetime timeout | |
| 346 | - Limit HeaderLookupTable_t::lookup() to BadHdr and specific IDs | |
| 347 | - Handle more Range requests | |
| 348 | - Handle more partial responses | |
| 349 | - Stop processing a response if the Store entry is gone | |
| 350 | - ... and some portability fixes | |
| 351 | - ... and some documentation updates | |
| 352 | ||
| 5f37a71a AJ |
353 | Changes in squid-4.14 (02 Feb 2021): |
| 354 | ||
| 355 | - Regression Fix: support for non-lowercase Transfer-Encoding value | |
| 356 | - Regression Fix: cachemgr.cgi wrong 403 response to authenticated menu URIs | |
| 357 | - Bug 5076: WCCP Security Info incorrect | |
| 358 | - Bug 5073: Compile error: index was not declared in this scope | |
| 359 | - Bug 5065: url_rewrite_program documentation update | |
| 360 | - Bug 3074 pt2: improved handling of URI paths implicit '/' | |
| 361 | - Fix transactions exceeding client_lifetime logged as _ABORTED | |
| 362 | ||
| 76b18386 AJ |
363 | Changes to squid-4.13 (23 Aug 2020): |
| 364 | ||
| 365 | - Regression Fix: Support parsing GREASEd (and future) TLS handshakes | |
| 366 | - Bug 5051: Some collapsed revalidation responses never expire | |
| 367 | - HTTP: Enforce token characters for field-name | |
| 368 | - HTTP: Forbid obs-fold and bare CR whitespace in framing header fields | |
| 369 | - HTTP: Improve Transfer-Encoding handling | |
| 370 | - WCCP: Fix GCC-10 -Wstringop-truncation failures | |
| 371 | - Honor on_unsupported_protocol for intercepted https_port | |
| 372 | - Fix livelocking in peerDigestHandleReply | |
| 373 | - Do not stall while debugging a scan of an empty store_table | |
| 374 | ||
| 5b0fbc71 AJ |
375 | Changes to squid-4.12 (05 Jun 2020): |
| 376 | ||
| 377 | - Regression Fix: Revert to slow search for new SMP shm pages | |
| 378 | - Bug 5045: ext_edirectory_userip_acl is missing include files | |
| 379 | - Bug 5041: Missing Debug::Extra breaks build on hosts with systemd | |
| 380 | - Bug 5030: Negative responses are never cached | |
| 381 | - HTTP: validate Content-Length value prefix | |
| 382 | - HTTP: add flexible RFC 3986 URI encoder | |
| 383 | - SslBump: disable OpenSSL TLSv1.3 support for older TLS traffic | |
| 384 | - Tests: Support passing a custom config.cache to test builds | |
| 385 | - Fix IPFilter IPv6 detection, especially on NetBSD | |
| 386 | - Fix stall if transaction overwrites a recently active cache entry | |
| 387 | - ... and some compile fixes | |
| 755eac94 | 388 | |
| 51f07c98 AJ |
389 | Changes to squid-4.11 (18 Apr 2020): |
| 390 | ||
| 391 | - Bug 5036: capital 'L's in logs when daemon queue overflows | |
| 392 | - Bug 5022: Reconfigure kills Coordinator in SMP+ufs configurations | |
| 393 | - Bug 5016: systemd thinks Squid is ready before Squid listens | |
| 394 | - kerberos_ldap_group: fix encryption type for cross realm check | |
| 395 | - HTTP: Ignore malformed Host header in intercept and reverse proxy mode | |
| 396 | - Fix Digest authentication nonce handling | |
| 397 | - Supply ALE to request_header_add/reply_header_add | |
| 398 | - ... and some documentation updates | |
| 399 | - ... and some compile fixes | |
| 400 | ||
| 755eac94 AJ |
401 | Changes to squid-4.10 (14 Jan 2020): |
| 402 | ||
| 403 | - Bug 5009: Build failure with older clang libc++ | |
| 404 | - Bug 5008: SIGBUS in PagePool::level() with custom rock slot size | |
| 405 | - Bug 5007: Docs: Fix max_filedescriptors description | |
| 406 | - Bug 4735: Truncated chunked responses cached as whole | |
| 407 | - ext_lm_group_acl: Improved username handling | |
| 408 | - Fix FTP buffers handling | |
| 409 | - Fix shared memory size calculation on 64-bit systems | |
| 410 | - Fix server_cert_fingerprint on cert validator-reported errors | |
| 411 | - Fix request URL generation in reverse proxy configurations | |
| 412 | - ... and several documentation updates | |
| 413 | - ... and several compile fixes | |
| 414 | ||
| 47f1e147 AJ |
415 | Changes to squid-4.9 (05 Nov 2019): |
| 416 | ||
| 417 | - Bug 4978: eCAP crash after using MyHost().newRequest() | |
| 418 | - Bug 4970: excessive gnutls_certificate_credentials debug msgs | |
| 419 | - Bug 4969: GCC-9 build failure: stringop-truncation | |
| 420 | - Bug 4966: Lower cache_peer hostname | |
| 421 | - Bug 4918: Crashes when using OpenSSL prior to v1.0.2 | |
| 422 | - TLS: Fix parsing of certificate validator responses | |
| 423 | - TLS: Fix parsing of TLS messages that span multiple records | |
| 424 | - TLS: Fix on_unsupported_protocol tunnel action | |
| 425 | - TLS: Fix expiration of self-signed generated certs to be 3 years | |
| 426 | - HTTP: Ignore malformed Host header in intercept and reverse proxy mode | |
| 427 | - HTTP: RFC 7230: server MUST reject messages with BWS after field-name | |
| 428 | - HTTP: Fix URN response handling | |
| 429 | - HTTP: Hash Digest noncedata | |
| 430 | - Update URI parser to use SBuf parsing APIs | |
| 431 | - Prevent truncation for large origin-relative domains | |
| 432 | - Fix several rock cache_dir corruption issues | |
| 433 | - Debug detail validation errors for loaded-from-file certificate chains | |
| 434 | - smblib: Improve SMB server name maintenance | |
| 435 | - cachemgr.cgi: Add validation for hostname parameter | |
| 436 | - ... and several compile issues | |
| 437 | - ... and some documentation updates | |
| 438 | ||
| b339d00c AJ |
439 | Changes to squid-4.8 (09 Jul 2019): |
| 440 | ||
| 441 | - Bug 4957: Multiple XSS issues in cachemgr.cgi | |
| 442 | - Bug 4953: to_localhost does not include :: | |
| 443 | - Bug 4937: cachemgr.cgi: unallocated memory access | |
| 444 | - Bug 4936: terminating c-strings beyond BASE64_DECODE_LENGTH | |
| 445 | - Bug 4889: Ignore ECONNABORTED in accept(2) | |
| 446 | - Bug 4842: Memory leak when http_reply_access uses external_acl | |
| 447 | - TLS: Fix tls-min-version= being ignored | |
| 448 | - TLS: Add the NO_TLSv1_3 option to available tls-options values | |
| 449 | - HTTP: RFC 7230 forbids generation of userinfo subcomponent of https URL | |
| 450 | - HTTP: Remove userinfo support from old protocols | |
| 451 | - HTTP: Fix Digest auth parameter parsing | |
| 452 | - HTTP: Send Connection:close with the known-last request on a connection | |
| 453 | - HTTP: Fix handling of tiny invalid responses | |
| 454 | - Replace uudecode with libnettle base64 decoder | |
| 455 | - Update HttpHeader::getAuth to SBuf | |
| 456 | - ... and some compile issues | |
| 457 | ||
| b3cc78d3 AJ |
458 | Changes to squid-4.7 (06 May 2019): |
| 459 | ||
| 460 | - Bug 4942: --with-filedescriptors does not do anything | |
| 461 | - Bug 4928: Cannot convert non-IPv4 to IPv4 | |
| 462 | - Bug 4823: assertion failed: "lowestOffset () <= target_offset" | |
| 463 | - Bug 4796: comm.cc !isOpen(conn->fd) assertion when rotating logs | |
| 464 | - Fix squidclient authentication to origin servers | |
| 465 | - Fix stack-based buffer-overflow when parsing SNMP messages | |
| 466 | - Add support for buffer-size= to UDP logging | |
| 467 | - TLS: When using OpenSSL, trust intermediate CAs from trusted store | |
| 468 | ||
| b339d00c | 469 | Changes to squid-4.6 (19 Feb 2019): |
| 2e11c9c2 AJ |
470 | |
| 471 | - Bug 4915: Detect IPv6 loopback binding errors | |
| 472 | - Bug 4914: Do not call setsid() in --foreground mode | |
| 473 | - Bug 4875 pt2: GCC-8 compile errors with -O3 optimization | |
| 474 | - Bug 4856: Exit when GoIntoBackground() fork() call fails | |
| 475 | - basic_ldap_auth: Return BH on internal errors; polished messages | |
| 476 | - Fix BodyPipe/Sink memory leaks associated with auto-consumption | |
| 477 | - Fix OpenSSL builds that define OPENSSL_NO_ENGINE | |
| 478 | - Fix several cases of rock cache corruption | |
| 479 | - Add Georgian (ka) language translation | |
| 480 | ||
| 6f405e99 AJ |
481 | Changes to squid-4.5 (01 Jan 2019): |
| 482 | ||
| 483 | - Bug 4253: ssl_bump prevents access to some web contents | |
| 484 | - TLS: add %>handshake logformat code | |
| 485 | - Redesign forward_max_tries to count TCP connection attempts | |
| 486 | - Fix client_connection_mark ACL handling of clientless transactions | |
| 487 | - Fix netdb exchange with a TLS cache_peer | |
| 488 | - Update netdb when tunneling requests | |
| 489 | - Use pkg-config for detecting libxml2 | |
| 490 | - ... and some documentation updates | |
| 491 | - ... and some code compile fixes | |
| 492 | ||
| 493 | Changes to squid-4.4 (28 Oct 2018): | |
| 011c7156 AJ |
494 | |
| 495 | - Bug 4893: Malformed %>ru URIs for CONNECT requests | |
| 496 | - Fix %USER_CA_CERT_xx and %USER_CERT_xx crashes | |
| 497 | - SSL: support compilation with minimal OpenSSL | |
| 498 | - SSL: certificate fields injection via %D in ERR_SECURE_CONNECT_FAIL | |
| 499 | - Fix netdb not saving to disk | |
| 500 | - Fix memory leak when parsing SNMP packet | |
| 501 | - ... and some compile issues | |
| 502 | ||
| bc535d91 AJ |
503 | Changes to squid-4.3 (01 Oct 2018): |
| 504 | ||
| 505 | - Bug 4885: Excessive memory usage when running out of descriptors | |
| 506 | - Bug 4877: Add missing text about external_acl_type %DATA changes | |
| 507 | - Bug 4875 pt1: GCC-8 compile errors with -O3 optimization | |
| 508 | - Bug 4716: Blank lines in cachemgr.conf are not skipped | |
| 509 | - Bug 4691: balance_on_multiple_ip config option docs | |
| 510 | - basic_pop3_auth: fix startup errors | |
| 511 | - langpack: Add missing dialect aliases | |
| 512 | - Fix range_offset_limit debugging | |
| 513 | - Fix icc build errors | |
| 514 | - Update systemd dependencies in squid.service | |
| 515 | ||
| 2c7246f7 AJ |
516 | Changes to squid-4.2 (04 Aug 2018): |
| 517 | ||
| 518 | - Regression fix: support for https_port clientca= option | |
| 519 | - Regression Bug 4870: milliseconds logformats prepend 0s instead of spaces | |
| 520 | - Bug 4861: HTTPMSGLOCK missing pointer safety | |
| 521 | - Bug 4843 pt3: GCC-8 fixes and refactoring | |
| 522 | - HTTP: Do not update stored headers on 304 responses | |
| 523 | - Fix segmentation fault on -k parse | |
| 524 | - Fix %>ru logging of huge URLs | |
| 525 | - ... and several performance optimizations | |
| 526 | - ... and some documentation updates | |
| 527 | - ... and all fixes from 3.5.28 | |
| 528 | ||
| 3cd71470 AJ |
529 | Changes to squid-4.1 (02 Jul 2018): |
| 530 | ||
| 531 | - Bug 4223: fixed retries of failed re-forwardable transactions | |
| 532 | - Bug 4791: Build failure on MacOS | |
| 533 | - Fix --with-netfilter-conntrack error message | |
| 534 | - ... and many documentation updates | |
| 535 | ||
| b5391492 AJ |
536 | Changes to squid-4.0.25 (11 Jun 2018): |
| 537 | ||
| 538 | - Regression Bug 4855: querying private entries for HTCP/ICP | |
| 539 | - Regression Bug 4852: deny_info %R macro not being expanded | |
| 540 | - Regression Bug 4847: proxy_auth ACL -i/+i flags not working | |
| 541 | - Regression Bug 4831: filter chain certificates for validity when loading | |
| 542 | - Regression fix: Transient reader locking broken in 4.0.24 | |
| 543 | - Bug 4845: NegotiateSsl crash on aborting transaction | |
| 544 | - Bug 4843 pt1: ext_edirectory_userip_acl refactoring for GCC-8 | |
| 545 | - Bug 4843 pt2: squidclient refactoring for GCC-8 | |
| 546 | - Bug 4829: IPC shared memory leaks when disker queue overflows | |
| 547 | - Bug 4828: Use feature detection for IPFilter API/ABI checks | |
| 548 | - Bug 4816: update negotiate_kerberos_auth helper protocol to v3.4 | |
| 549 | - Bug 4811: supply AccessLogEntry (ALE) for more fast ACL checks | |
| 550 | - Bug 4707: purge tool does not obey --sysconfdir= build option | |
| 551 | - Bug 4171: checking for log_file_daemon despite disabling logging | |
| 552 | - Bug 4042: ext_kerberos_ldap_group: add -P principal option | |
| 553 | - TLS: avoid "ssl_crtd" assertions on reconfiguration | |
| 554 | - Add timestamps to (most) FATAL messages | |
| 555 | - Add "--kid role-ID" command line option | |
| 556 | - ... and many documentation updates | |
| 557 | ||
| 2db9989c AJ |
558 | Changes to squid-4.0.24 (07 Mar 2018): |
| 559 | ||
| 560 | - Bug 4822: Build failure (-Wformat) where time_t is not long int | |
| 561 | - Bug 4505: SMP caches sometimes do not purge entries | |
| 562 | - TLS: GnuTLS implementation for listening ports and client connections | |
| 563 | - TPROXY: Fix clientside_mark and client port logging | |
| 564 | - Native FTP: Fix "Cannot assign requested address" with TPROXY | |
| 565 | - SSL-Bump: Fix authentication with types other than Basic | |
| 566 | - ... and many small compile and stability fixes | |
| 567 | - ... and some documentation fixes | |
| 568 | ||
| f1dfef29 | 569 | Changes to squid-4.0.23 (19 Jan 2018): |
| 570 | ||
| 571 | - Bug 4715: security_file_certgen: Remove -g and -n options docs | |
| 572 | - Bug 4679: User names not sent to url_rewrite_program | |
| 573 | - Bug 4631: security_file_certgen helper without disk cache | |
| 574 | - Bug 3911: clang -fsanitize warnings | |
| 575 | - Bug 2378: Duplicates in selected peer destinations | |
| 576 | - Nettle v3.4 support | |
| 577 | - Fix Squid FTP server dying because of an unhandled exception | |
| 578 | - Automatically revive hopeless kids on reconfigure and after a timeout | |
| 579 | - Fix %<Hs, %<pt, %<tt, %<bs calculation bugs for error responses | |
| 580 | - ... and many documentation updates | |
| 581 | - ... and some stability fixes | |
| 582 | ||
| 96e628ec | 583 | Changes to squid-4.0.22 (07 Dec 2017): |
| 584 | ||
| 585 | - Regression fix: Relay peer CONNECT error status line and headers to clients | |
| 586 | - Bug 4767: SMP breaks IPv6 SNMP and cache manager queries | |
| 587 | - Bug 4718: support filling raw buffer space of shared SBufs | |
| 588 | - Bug 4648: object revalidation for HTTPS scheme | |
| 589 | - Bug 4616: store_client.cc:92: "mem" assertion | |
| 590 | - Bug 2821: ignore Content-Range in non-206 responses | |
| 591 | - HTCP: Ignore packets with invalid URI | |
| 592 | - TLS: Validate the shortest certificate chain | |
| 593 | - TLS: Add checks for OpenSSL 1.1.0f API changes | |
| 594 | - TLS: Fix reporting of validation errors for downloaded intermediate certs | |
| 595 | - TLS: Fix SSL certificate cache refresh and collision handling | |
| 596 | - Fix backwards compatibility for Squid-3.5 external_acl_type formats | |
| 597 | - Fix invalid mime icon URLs in cache | |
| 598 | - Do not die silently when dying early | |
| 599 | - Docs: update translation files | |
| 600 | ||
| b008ed2e AJ |
601 | Changes to squid-4.0.21 (02 Jul 2017): |
| 602 | ||
| 603 | - Bug 4730: segfault while processing internal HTTP requests | |
| 604 | - Bug 4492: Chunk extension parser is too pedantic | |
| 605 | - Bug 1961: Redesign urlParse() API | |
| 606 | - TLS: recognise tls:: namespace on logformat tokens | |
| 607 | - SSL-Bump: tproxy does not spoof spliced connections | |
| 608 | - security_file_certgen: collapse queued requests | |
| 609 | - Add a basic apparmour profile | |
| 610 | - Add transaction_initiator ACL for detecting various unusual transactions | |
| 611 | - Add ssl::server_name options to control matching logic | |
| 612 | - Support for --long-acl-options | |
| 613 | - Do not die silently when dying via std::terminate() | |
| 614 | - Fix option --foreground to implement expected behavior | |
| 615 | - Translations: update .po and .pot to latest texts | |
| 616 | - ... and some documentation updates | |
| 617 | - ... and many code cleanup and stability fixes | |
| 618 | - ... and all fixes from 3.5.27 | |
| 619 | ||
| ef396425 AJ |
620 | Changes to squid-4.0.20 (01 Jun 2017): |
| 621 | ||
| 96e628ec | 622 | - Bug 4692: SslBump breaks intercepted IPv6 connections |
| 623 | - Bug 4682: ignoring http_access deny when client-first bumping mode is used | |
| 624 | - Bug 4662: build errors with LibreSSL 2.4.4 | |
| 625 | - Bug 4659: sslproxy_foreign_intermediate_certs does not work | |
| 626 | - Bug 4321: ssl_bump terminate does not terminate at step1 | |
| ef396425 AJ |
627 | - Add 'has' ACL |
| 628 | - Do not forward HTTP requests to dead idle peers | |
| 629 | - Do not unconditionally revive dead peers after a DNS refresh | |
| 630 | - Make PID file check/creation atomic to avoid associated race conditions | |
| 631 | - Count failures and use peer-specific connect timeouts when tunneling | |
| 632 | - SSL-Bump: Fix crashes when server-first bumping mode is used with openSSL-1.1.0 | |
| 633 | - eCAP: Fix empty header handling in Ecap::HeaderRep::hasAny() | |
| 634 | - SSL-Bump: Second adaptation missing for CONNECTs | |
| 635 | - ext_session_acl: cope with new logformat inputs | |
| 636 | - ... and some documentation updates | |
| 637 | - ... and some code stability fixes | |
| b008ed2e | 638 | - ... and all fixes from 3.5.26 |
| ef396425 | 639 | |
| 7b84ebcc AJ |
640 | Changes to squid-4.0.19 (02 Apr 2017): |
| 641 | ||
| 642 | - Bug 4674: delay_parameters for class 3 and 4 assertion failed | |
| 643 | - Bug 4671: GCC 7 compile errors | |
| 644 | - Bug 4663: GCC 5+ compile errors with optimization level -O3 | |
| 645 | - Bug 4657: delay IDENT until after PROXY protocol handling | |
| 646 | - Bug 4610: cleanup of BerkleyDB related checks | |
| 647 | - squidclient: Fix missing error handling on PUT | |
| 648 | - digest_ldap_auth: Add -r option to clamp the realm to a fixed value | |
| 649 | - TLS: initial GnuTLS support for encrypted server connections | |
| 650 | - Fix appending Http::HdrType::VIA code | |
| 651 | - Fix URI scheme case-sensitivity treatment | |
| 652 | - Fix two read-ahead problems related to delay pools (or lack thereof) | |
| 653 | - Detail swapfile header inconsistencies | |
| 654 | - ... and several build fixes | |
| 655 | - ... and many code polishing updates | |
| 656 | - ... and all fixes from 3.5.25 | |
| 657 | ||
| 8527bed1 AJ |
658 | Changes to squid-4.0.18 (06 Feb 2017): |
| 659 | ||
| 660 | - Bug 4661: compile error 'warning: _XPG4_2 redefined' with GCC on Solaris 10 | |
| 661 | - Bug 4636: assertion 'byteCount > 0 && byteCount <= inBuf.length()' | |
| 662 | - Bug 4610 partial: compile errors on Solaris 11.3 with Oracle Studio 12.5 | |
| 663 | - Bug 4599: support OpenSSL 1.1 | |
| 664 | - squidclient: link GnuTLS library debugs to -v level display | |
| 665 | - Fix GCC6: unused local variable 'weInitiatedThisClosure' | |
| 666 | - ... and some code polishing | |
| 667 | - ... and some copyright updates | |
| 668 | - ... and all fixes from 3.5.24 | |
| 669 | ||
| a2eb97b4 | 670 | Changes to squid-4.0.17 (16 Dec 2016): |
| 6f4a12cf AJ |
671 | |
| 672 | - Bug 4630: user credentials cache cleanup not re-scheduled | |
| 673 | - Bug 4610 partial: compile errors on Solaris 11.3 with Oracle Studio 12.5 | |
| 674 | - Bug 4599 partial: initial support for OpenSSL v1.1 | |
| 675 | - TLS: Support tunneling of bumped non-HTTP traffic | |
| 676 | - ... and many code polishing and performance updates | |
| 677 | - ... and some documentation updates | |
| 678 | - ... and some fixes from 3.5.23 | |
| 679 | ||
| 6276f56c AJ |
680 | Changes to squid-4.0.16 (30 Oct 2016): |
| 681 | ||
| 682 | - Avoid segfaults when lacking the server name for certificate validator | |
| 683 | - HTTP: initial support for Cache-Control:immutable | |
| 684 | - Fix ssl::server_name ACL | |
| 685 | - ... and many code polishing updates | |
| 686 | - ... and some fixes from 3.5.23 | |
| 687 | ||
| d710ff25 AJ |
688 | Changes to squid-4.0.15 (09 Oct 2016): |
| 689 | ||
| 690 | - Regression fix crash on reconfigure with TOS/DiffServ/MARK configured | |
| 691 | - Bug 4610: compile errors on Solaris 11.3 with Oracle Studio 12.5 | |
| 692 | - Bug 4581: Secure ICAP segfault in checkForMissingCertificates | |
| 693 | - Bug 4578: changes required to install squid.service | |
| 694 | - Fix crash on shutdown while cleaning up idle ICAP connections | |
| 695 | - Fix memory leak of Downloader-related objects | |
| 696 | - HTTP/1.1: handle syntactically valid requests with unsupported HTTP versions | |
| 697 | - Log TCP client port for error:transaction-end-before-headers and such | |
| 698 | - ... and many portability and build fixes | |
| 699 | - ... and some documentation updates | |
| 700 | - ... and all fixes from 3.5.22 | |
| 701 | ||
| f6791433 AJ |
702 | Changes to squid-4.0.14 (08 Sep 2016): |
| 703 | ||
| 704 | - Regression Bug 4570: crash after rev.14755 | |
| 705 | - Regression Bug 4561: Replace use of default move operators with explicit implementation | |
| 706 | - Bug 4503: Do not access-log SslBump-faked CONNECTs with _ABORTED suffixes | |
| 707 | - Bug 4404: Do not access-log chunked non-persistent responses with _ABORTED suffix | |
| 708 | - Fix crashes on shutdown while cleaning up idle ICAP connections | |
| 709 | - Fix logformat unable to configure codes with /-escape | |
| 710 | - HTTP: MUST respond with 414 (URI Too Long) when request-target exceeds limits | |
| 711 | - HTTP: validate Content-Length header values | |
| 712 | - Make Squid death due to overloaded helpers optional | |
| 713 | - Better support for unknown URL schemes | |
| 714 | - Do not log error:transaction-end-before-headers after invalid requests | |
| 715 | - ... and many portability and build fixes | |
| 716 | - ... and some documentation updates | |
| d710ff25 | 717 | - ... and all fixes from 3.5.21 |
| f6791433 | 718 | |
| 7566fb7e AJ |
719 | Changes to squid-4.0.13 (05 Aug 2016): |
| 720 | ||
| 721 | - Regression Bug 4540: revert r14720 buffer update | |
| 722 | - Bug 4555: Minor improvements to error pages CSS | |
| 723 | - Bug 4551: fix exceptions in new chunked decoder | |
| 724 | - Bug 4311: support collapse for internal revalidation requests (SMP-unaware caches) | |
| 725 | - Fix Certificate Validator buffer-overflow crashes Squid | |
| 726 | - Fix some failed transactions not being logged | |
| 727 | - Fix segfault via Ftp::Client::readControlReply(). | |
| 728 | - basic_db_auth: add support for unsalted SHA1 passwords | |
| 729 | - kerberos_ldap_group: add support for SSL/TLS connection to an LDAP server | |
| 730 | - TLS: Add missing 'tls' option for cache_peer | |
| 731 | - TLS: Do not hang when 'connector' fails | |
| 732 | - TLS: Add support for fetching missing certificates | |
| 733 | - Remove XSTD_USE_LIBLTDL, which has not been needed in a long while | |
| 734 | - ... and many code polishing updates | |
| 735 | - ... and some documentation updates | |
| 736 | ||
| 267a742e AJ |
737 | Changes to squid-4.0.12 (01 Jul 2016): |
| 738 | ||
| 739 | - Regression Fix: shell issues with require_smblib definition | |
| 740 | - Regression Bug 4532: pid_filename not working as documented | |
| 741 | - Regression Bug 4504: Too many WARNING: Ignoring error setting CA certificate locations | |
| 742 | - Bug 4516: security_file_certgen man page update | |
| 743 | - Bug 4446: undefined reference to 'libecap::Name::Name' | |
| 744 | - Bug 4376: clang cannot build Squid eCAP code | |
| 745 | - HTTP/1.1: Update all stored headers on 304 revalidation | |
| 746 | - TLS: Authority Key Identifier certificate extension | |
| 747 | - Add a script to find kid-specific cache.log lines | |
| 748 | - Cleanup cppunit detection and use | |
| 749 | - ... and several performance improvements | |
| 750 | - ... and some unit test updates | |
| 751 | - ... and all fixes from 3.5.20 | |
| 752 | ||
| c17f835b AJ |
753 | Changes to squid-4.0.11 (09 Jun 2016): |
| 754 | ||
| 755 | - Bug 4517: error: comparison between signed and unsigned integer | |
| 756 | - Bug 4492: chunked parser needs to accept BWS after chunk size | |
| 757 | - HTTP/1.1: allow chunking the last HTTP response on a connection | |
| 758 | - HTTP/1.1: unfold mime header blocks | |
| 759 | - TLS: fast SNI peek | |
| 760 | - TLS: check for SSL_CIPHER_get_id() support required in adjustSSL() | |
| 761 | - TLS: never enable OPENSSL_HELLO_OVERWRITE_HACK automatically | |
| 762 | - squidclient: improve shell-escape support in -H option | |
| 763 | - Do not allow low-level debugging to hide important/critical messages | |
| 764 | - Replace new/delete operators using modern C++ rules | |
| 765 | - Remove ie_refresh configuration option | |
| 766 | - Deprecating SMB LanMan helpers | |
| 767 | - Mark refresh-waiting transactions with REFRESH | |
| 768 | - ... and some code cleanup and polishing | |
| 769 | ||
| 25e7b074 AJ |
770 | Changes to squid-4.0.10 (06 May 2016): |
| 771 | ||
| 772 | - Accumulate fewer unknown-size responses to avoid overwhelming disks. | |
| 773 | - Fix shared memory corruption when storing multi-slot (>32KB) shm misses. | |
| 774 | - ... and some documentation and code cleanup | |
| 775 | - ... and all fixes from 3.5.18 | |
| 776 | ||
| 2dae5986 AJ |
777 | Changes to squid-4.0.9 (20 Apr 2016): |
| 778 | ||
| 25e7b074 | 779 | - Bug 4405: assertion failed: comm.cc:554: "Comm::IsConnOpen(conn)" |
| 2dae5986 AJ |
780 | - Add a new error page token for unquoted external ACL messages. |
| 781 | - Stop parsing response prefix after discovering an "HTTP/0.9" response. | |
| 782 | - ... and some documentation updates | |
| 783 | - ... and some code polishing | |
| 784 | - ... and all fixes from 3.5.17 | |
| 785 | ||
| b1e01a62 AJ |
786 | Changes to squid-4.0.8 (02 Apr 2016): |
| 787 | ||
| 788 | - Bug 4459: FHS compliance: move netdb.state and ssl_db to /var/cache/squid | |
| 789 | - Bug 4458: Behaviour change with external ACL arguments | |
| 790 | - Bug 4450: wait() related cleanup | |
| 791 | - Bug 4438: SIGSEGV in memFreeString() destructing SBuf globals on shutdown/restart | |
| 792 | - Bug 4312: Support disabling collapsed forwarding SMP cooperation | |
| 793 | - Bug 3826: SMP compatibility with systemd and --foreground option | |
| 794 | - Bug 1979: Add ACL-driven server_pconn_for_nonretriable squid.conf directive | |
| 795 | - Bug 7 (partial): Update cached entries on 304 responses | |
| 796 | - Add reply_header_add directive | |
| 797 | - HTTP/1.1: Do not prohibit updating Last-Modified on 304 responses | |
| 798 | - Fix memory leaks of lastAclData and AccessLogentry::url | |
| 799 | - Fix clang -Winconsistent-missing-override warning | |
| 800 | - Tests: update test suite for GnuTLS | |
| 801 | - ... and some documentation updates | |
| 802 | - ... and some code cleanup and polishing | |
| 97f9388a | 803 | - ... and all fixes from squid 3.5.16 |
| b1e01a62 | 804 | |
| 81bf66f8 AJ |
805 | Changes to squid-4.0.7 (23 Feb 2016): |
| 806 | ||
| 807 | - Regression Fix: external_acl parameters separated by %20 instead of space | |
| 808 | - Bug 4432: assertion failed: store.cc:1919: "isEmpty()" | |
| 809 | - Bug 4111: leave_suid() does not properly handle error codes returned by setuid | |
| 810 | - Fix propagation of response status line parsing error details | |
| 811 | - Fix memory leak when the cache of sslcrtvalidator_program is disabled via ttl=0 | |
| 812 | - ... and some code SourceLayout project cleaning | |
| 813 | - ... and all fixes from squid 3.5.15 | |
| 814 | ||
| 4e071e97 AJ |
815 | Changes to squid-4.0.6 (16 Feb 2016): |
| 816 | ||
| 817 | - Regression Bug 4436: Fix DEFAULT_SSL_CRTD | |
| 818 | - Fix "dial: Ssl::PeerConnector::sslCrtvdHandleReply threw exception: callback != NULL" | |
| 4e071e97 AJ |
819 | - ... and some documentation updates |
| 820 | - ... and all fixes from squid 3.5.14 | |
| 821 | ||
| ff87fda5 AJ |
822 | Changes to squid-4.0.5 (09 Feb 2016): |
| 823 | ||
| 824 | - Regression Bug 4429: http(s)_port options= error message missing characters | |
| 825 | - Regression Bug 4410: 4.0.4 compile error in basic_ncsa_auth | |
| 826 | - Regression Bug 4403: helper compile errors after 4.0.4 rev.14454 | |
| 827 | - Regression Bug 4401: compile error on Solaris | |
| 828 | - Regression Fix: TLS/SSL flags parsing | |
| 829 | - Regression Fix: cert validadator always disabled in 4.x | |
| 830 | - Regression Fix: Name-only note ACL stopped matching after 4.0.4 rev.14465 (note -m) | |
| 831 | - Regression Fix: external_acl problems after 4.0.1 rev.14351 | |
| 832 | - Bug 4409 (partial): compile error when two Heimdal libraries are installed | |
| 833 | - Bug 4005: Dynamic certificate cache exceeds dynamic_cert_mem_cache_size | |
| 834 | - SMP: Fix cleanup of a shared memory segment in an unusual configuration | |
| 835 | - SSL-Bump: Fix step3 splicing. | |
| 836 | - Add connections_encrypted ACL | |
| 837 | - Make %<a and %<p details available to [eCAP] RESPMOD services | |
| 838 | - Rename cert_valid.pl to security_fake_certverify | |
| 839 | - Rename ssl_crtd helper to security_file_certgen | |
| 840 | - ... and a lot of code SourceLayout project cleaning | |
| 841 | - ... and some documentation updates | |
| 842 | - ... and all fixes from squid 3.5.13 up to rev.13979 | |
| 843 | ||
| 0461fde7 AJ |
844 | Changes to squid-4.0.4 (06 Jan 2016): |
| 845 | ||
| 78121f9a AJ |
846 | - Regression Bug 4393: compile fails on OS X |
| 847 | - Bug 4392: assertion CbcPointer.h:159: 'c' via tunnelServerClosed or tunnelClientClosed | |
| 0461fde7 AJ |
848 | - Support use of Kerberos credentials cache instead of keytab |
| 849 | - Support logging of TLS Cryptography Parameters | |
| 850 | - Support substring matching in Note ACL | |
| 851 | - ... and some code cleanup and polishing | |
| 852 | - ... and all fixes from squid 3.5.13 | |
| 853 | ||
| bf7891f2 AJ |
854 | Changes to squid-4.0.3 (28 Nov 2015): |
| 855 | ||
| 856 | - Bug 4372: missing template files | |
| 857 | - Bug 4371: compile errors: no such file or directory: DiskIO/*/*DiskIOModule.o | |
| 858 | - Bug 4368: A simpler and more robust HTTP request line parser | |
| 859 | - Fix compile erorr on clang undefined reference to '__atomic_load_8' | |
| 860 | - ext_kerberos_ldap_group_acl: Add missing workarounds for Heimdal Kerberos | |
| 861 | - ext_ldap_group_acl: Allow unlimited LDAP search filter | |
| 862 | - ext_unix_group_acl: Support -r parameter to strip @REALM from usernames | |
| 863 | - ... and much code cleanup and polishing | |
| 0461fde7 | 864 | - ... and all fixes from squid 3.5.12 |
| bf7891f2 | 865 | |
| 0b475d3f AJ |
866 | Changes to squid-4.0.2 (01 Nov 2015): |
| 867 | ||
| 868 | - Regression Bug 4351: compile errors when authentication modules disabled | |
| 869 | - Regression fix: HTTP/1.1 Transfer-Encoding:chunked parsing | |
| 870 | - Bug 4359: assertion failure 'Comm::IsConnOpen(conn)' within ConnStateData::requestTimeout | |
| 871 | - Bug 4356: segmentation fault using proxy_auth ACL | |
| 872 | - Bug 4352: compile errors in OS X 10.11 | |
| 873 | - Bug 4021: ext_user_regex does exact match | |
| 874 | - Bug 3574: avoid crashes, prohibit reconfiguration during shutdown | |
| 875 | - Support re-assigning delay pools based on HTTP reply details | |
| 876 | - ... and all fixes from squid 3.5.11 | |
| 877 | ||
| 1243ec71 AJ |
878 | Changes to squid-4.0.1 (14 Oct 2015): |
| 879 | ||
| 880 | - Bug 4329: GCC 5.2 no known conversion for argument | |
| 881 | - Bug 4292: negotiate_wrapper: Unreleased Resources | |
| 882 | - Bug 4269: ignore-must-revalidate broken | |
| 883 | - Bug 4190: assertion 'hash_remove_link' from Auth::User::cacheCleanup | |
| 884 | - Bug 3920: Splay::remove() reference counting inconsistent | |
| 885 | - Bug 3069: CONNECT method bytes sent logging | |
| 886 | - Bug 2741 partial: libsecurity API for GnuTLS support | |
| 887 | - Bug 1961 partial: redesign of URL handling | |
| 888 | - Fix crash when parsing invalid squid.conf | |
| 889 | - Fix eCAP: Return 'unknown body size' for bodies with unknown body sizes | |
| 890 | - Remove unused OS detection: Sun, SysV, Ultrix, BSDi | |
| 891 | - Remove cache_peer_domain directive | |
| 892 | - RFC 6176 compliance: Remove SSLv2 support | |
| 893 | - HTTP/1.1: Remove refresh_pattern ignore-auth and ignore-must-revalidate | |
| 894 | - Remove GCC 2.x and 3.x detection and support | |
| 895 | - C++11 compiler support is now mandatory | |
| 896 | - Enable flexible transport protocol | |
| 897 | - Enable long (--foo) command line parameters on squid binary | |
| 898 | - Add per-rule refresh_pattern matching statistics | |
| 899 | - Replace sslversion=N with tls-min-version=1.N | |
| 900 | - Replace sslproxy_* directives with tls_outgoing_options | |
| 901 | - Replace GNU atomics and related hacks with C++11 std::atomic | |
| 902 | - Replace external_acl_type format %macros with logformat codes | |
| 1243ec71 AJ |
903 | - Support Secure ICAP services |
| 904 | - Support rotate=N option on access_log | |
| 905 | - Support bypass for non-HTTP intercepted traffic (on_unsupported_protocol) | |
| 906 | - Support lifetime timeout for persistent connections (pconn_lifetime) | |
| 907 | - Support timeout for URL-rewrite helper lookups (url_rewrite_timeout) | |
| 908 | - Support logging fast things (nanosecond log resolution) | |
| 909 | - Support ICAP/eCAP adaptation for 100-continue responses | |
| 910 | - Support configurable helper queue size, with consistent defaults | |
| 911 | and better overflow handling. | |
| 912 | - Support named service PID file by default (pid_filename) | |
| 913 | - url_lfs_rewrite: Add URL-rewriter based on local file existence | |
| 914 | - negotiate_kerberos_auth: output group= kv-pair | |
| 915 | - helper-mux: add man(8) page | |
| 916 | - purge: convert README to man(1) page | |
| 917 | - basic_msnt_multi_domain_auth: Superceeded by basic_smb_lm_auth | |
| 918 | - basic_sspi_auth: fix MinGW compile errors | |
| 919 | - negotiate_sspi_auth: fix various build errors | |
| 920 | - Crypto-NG: libnettle Base64 algorithm support | |
| 921 | - Parser-NG: HTTP Parser structural redesign | |
| 922 | - libltdl: copyright updated to LGPL version 2.1 | |
| 923 | - ... and several performance optimizations | |
| 924 | - ... and many documentation changes | |
| 925 | - ... and much code cleanup and polishing | |
| 926 | ||
| 1c8fc2a2 AJ |
927 | Changes to squid-3.5.28 (15 Jul 2018): |
| 928 | ||
| 929 | - SQUID-2018:1: crash processing SSL-Bumped traffic containing ESI | |
| 930 | - SQUID-2018:2: crash handling responses to internally generated requests | |
| 931 | - SQUID-2018:3 / CVE-2018-1172: crash in ESI Response processing | |
| 932 | - Bug 4861: HTTPMSGLOCK missing pointer safety | |
| 933 | - Bug 4829: IPC shared memory leaks when disker queue overflows | |
| 934 | - Bug 4767: SMP breaks IPv6 SNMP and cache manager queries | |
| 935 | - Bug 2821: Ignore Content-Range in non-206 responses | |
| 936 | - HTCP: Ignore HTCP packets with invalid URI | |
| 937 | - SSL-Bump: fix authentication with schemes other than Basic | |
| 938 | - TPROXY: Fix clientside_mark and client port logging | |
| 939 | - Fix "Cannot assign requested address" for to-origin TPROXY FTP data | |
| 940 | - Fix --with-netfilter-conntrack error message | |
| 941 | - Validate mime icon URL before allocating store entries | |
| 942 | - ... and many documentation changes | |
| 943 | ||
| b1268cb4 | 944 | Changes to squid-3.5.27 (20 Aug 2017): |
| 945 | ||
| 946 | - Regression Bug #4112: ssl_engine does not accept cryptodev | |
| 947 | - Bug 4687: Wrong names of components in man page, section SEE ALSO | |
| 948 | - Bug 4671: various GCC 7 compile errors | |
| 949 | - Bug 4464: Reduce "!Comm::MonitorsRead(serverConnection->fd)" assertions | |
| 950 | - Bug 2833: Collapse internal revalidation requests (SMP-unaware caches) | |
| 951 | - Bug 2833: Do not respond with HTTP/304 to unconditional requests | |
| 952 | - Fix message packing error handling in mgr and snmp SMP Forwarders | |
| 953 | - Fix mgr query handoff from the original recipient to Coordinator. | |
| 954 | - ... and some documentation updates | |
| 955 | ||
| ef396425 AJ |
956 | Changes to squid-3.5.26 (01 Jun 2017): |
| 957 | ||
| 958 | - Bug 4711: SubjectAlternativeNames is missing in some generated certificates | |
| 959 | - Bug 4695: squidpurge: GCC 7 build errors | |
| 960 | - Bug 4682: ignoring http_access deny when client-first bumping mode is used | |
| 961 | - Bug 4682: Fix ssl_bump "bump" action documentation | |
| 962 | - Bug 4653: %st lies about tunneled traffic volumes | |
| 963 | - Bug 4589: ssl_crtd: returning zero on failure | |
| 964 | - Bug 3772: message from FTP server gets mangled | |
| 965 | - Bug 3102: FTP directory listing drops fist character of file names | |
| 966 | - Add OpenSSL library details to -v output | |
| b1268cb4 | 967 | - ... and some documentation updates |
| ef396425 | 968 | |
| 7b84ebcc AJ |
969 | Changes to squid-3.5.25 (02 Apr 2017): |
| 970 | ||
| 971 | - Bug 4688: various typo error(s) in man page(s) | |
| 972 | - Bug 4508: Host forgery stalls intercepted being-spliced connections | |
| 973 | - Native FTP relay: NAT and TPROXY interception fixes | |
| 974 | - Fix missing CRLF on FTP timeout ABORT commands | |
| 975 | - TLS: Bump client on errors encountered before ssl_bump evaluation | |
| 976 | - ext_kerberos_ldap_group_acl: fix unused value warnings | |
| 977 | - Fix crash when configuring with invalid delay_parameters restore value. | |
| 978 | - Check that -k argument is provided before trying to use it. | |
| 979 | - ... and some build fixes | |
| 980 | ||
| 6c12d87e AJ |
981 | Changes to squid-3.5.24 (28 Jan 2017): |
| 982 | ||
| 983 | - Regression Bug 3940: Make 'cache deny' do what is documented | |
| 984 | - TLS: Fix SSLv2 records bumping despite a matching step2 peek rule | |
| 985 | - TLS: Mitigate DoS attacks that use client-initiated SSL/TLS renegotiation | |
| 986 | - Fix "Source and destination overlap in memcpy" Valgrind errors | |
| 987 | - Reduce crashes due to unexpected ClientHttpRequest termination | |
| 988 | - Update External ACL helpers error handling and caching | |
| 989 | - Detect HTTP header ACL issues | |
| 990 | - ... and some documentation fixes | |
| 991 | ||
| a2eb97b4 | 992 | Changes to squid-3.5.23 (16 Dec 2016): |
| 6f4a12cf AJ |
993 | |
| 994 | - Bug 4627: fix generate-host-certificates and dynamic_cert_mem_cache_size docs | |
| 995 | - Bug 4620: NetBSD build error with --enable-ipf-transparent | |
| 996 | - Bug 4567: Strange IPv6 shown in access.log | |
| 997 | - Bug 4406: SIGSEV in TunnelStateData::handleConnectResponse() during reconfigure and restart | |
| 998 | - Bug 4174 partial: fix Write.cc:41 "!ccb->active()" assertion. | |
| 999 | - Bug 4169: HIT marked as MISS when If-None-Match does not match | |
| 1000 | - Bug 4007: Hang on DNS query with dead-end CNAME | |
| 1001 | - Bug 4004 partial: Fix segfault via Ftp::Client::readControlReply | |
| 1002 | - Bug 3940 partial: hostHeaderVerify failures MISS when they should be HIT | |
| 1003 | - Bug 3533: Cache still valid after HTTP/1.1 303 See Other | |
| 1004 | - Bug 3379: Combination of If-Match and a Cache Hit result in TCP Connection Failure | |
| 1005 | - Bug 3290: authenticate_ttl not working for digest authentication | |
| 1006 | - Bug 2258: bypassing cache but not destroying cache entry | |
| 1007 | - HTTP/1.1: make Vary:* objects cacheable | |
| 1008 | - HTTP/1.1: Add registered codes entry for new 103 (Early Hints) status code | |
| 1009 | - Support IPv6 NAT with PF for NetBSD and FreeBSD | |
| 1010 | - TLS: Make key= before cert= an error instead of quietly hiding the issue | |
| 1011 | - ... and some debug updates | |
| 1012 | - ... and some build fixes | |
| 1013 | - ... and several documentation updates | |
| 1014 | ||
| d710ff25 AJ |
1015 | Changes to squid-3.5.22 (09 Oct 2016): |
| 1016 | ||
| 1017 | - Bug 4594: build failure with clang 3.9 | |
| 1018 | - Bug 4471: revalidation does not work when expired cached object lacks Last-Modified | |
| 1019 | - Bug 4302 pt2: IPv6 support for IPFilter v5 transparent interception | |
| 1020 | - Bug 4228: ./configure bug/typo in r14394 | |
| 1021 | - Bug 3819: "fd >= 0" assertion in file_write() during reconfiguration | |
| 1022 | - Bug 2833: Collapse internal revalidation requests (SMP-unaware caches) | |
| 1023 | - Fix logged request size (%http::>st) and other size-related %codes | |
| 1024 | - Fix some memory leaks from putenv() | |
| 1025 | - Fix memory leaks from url_rewrite_extras and store_id_extras on reconfigure/shutdown | |
| 1026 | - Fix segfault crash when debugging section 4 at level 9 | |
| 1027 | - HTTP: MUST ignore a [revalidation] response with an older Date header | |
| 1028 | ||
| f6791433 AJ |
1029 | Changes to squid-3.5.21 (08 Sep 2016): |
| 1030 | ||
| 1031 | - Bug 4563: duplicate code in httpMakeVaryMark | |
| 1032 | - Bug 4542: authentication credentials IP TTL updated incorrectly | |
| 1033 | - Bug 4534: assertion failure in xcalloc when using many cache_dir | |
| 1034 | - Bug 4428: mal-formed Cache-Control:stale-if-error header | |
| 1035 | - Bug 3025: Proxy-Authenticate problem using ICAP server | |
| 1036 | - Fix segfault via Ftp::Client::readControlReply() | |
| 1037 | - Fix SSL-Bump failure results in SEGFAULT | |
| 1038 | - HTTP/1.1: MUST always revalidate Cache-Control:no-cache responses | |
| 1039 | - HTTP/1.1: do not allow Proxy-Connection to override Connection header | |
| 1040 | - SSL: CN wildcard must only match a single domain component [fragment] | |
| 1041 | ||
| 267a742e AJ |
1042 | Changes to squid-3.5.20 (01 Jul 2016): |
| 1043 | ||
| 1044 | - Bug 4523: smblib compile fails on NetBSD | |
| 1045 | - Bug 4485: off-by-one out-of-bounds Parser::Tokenizer::int64() read errors | |
| 1046 | - Bug 3579: assertion failed 'MemPools[type]' from dst_as ACL | |
| 1047 | - Fix icons loading speed | |
| 1048 | - Fix OpenSSL detection on FreeBSD | |
| 1049 | - Fix assertion failed: Write.cc:38: 'fd_table[conn->fd].flags.open' | |
| 1050 | - Fix SEGFAULT parsing malformed adaptation service configuration | |
| 1051 | - Fix ConnStateData::In::maybeMakeSpaceAvailable() logic | |
| 1052 | - Do not override user defined -std option | |
| 1053 | - Do not allow low-level debugging to hide important/critical messages | |
| 1054 | - Do not make bogus recvmsg(2) calls when closing UDS sockets | |
| 1055 | - Support unified EUI format code in external_acl_type | |
| 1056 | ||
| 1057 | Changes to squid-3.5.19 (09 May 2016): | |
| 1058 | ||
| 1059 | - Regression Bug 4515: interception proxy hangs | |
| 1060 | ||
| 25e7b074 AJ |
1061 | Changes to squid-3.5.18 (06 May 2016): |
| 1062 | ||
| 1063 | - Bug 4510: stale comment about 32KB limit on shared memory cache entries | |
| 1064 | - Bug 4509: EUI compile error on NetBSD | |
| 1065 | - Bug 4501: HTTP/1.1: normalize Host header | |
| 1066 | - Bug 4498: URL-unescape the login-info after extraction from URI | |
| 1067 | - Bug 4455: SegFault from ESIInclude::Start | |
| 1068 | - Prevent Squid forcing -b 2048 into the arguments for sslcrtd_program | |
| 1069 | - Fix TLS/SSL server handshake alert handling | |
| 1070 | ||
| 2dae5986 AJ |
1071 | Changes to squid-3.5.17 (20 Apr 2016): |
| 1072 | ||
| 1073 | - Regression Bug 4480: logformat [.width_max] | |
| 1074 | - Regression Bug 4481: varyEvaluateMatch: Oops. Not a Vary match on second attempt | |
| 1075 | - Bug 4495: Unknown SSL option SSL_OP_NO_TICKET | |
| 1076 | - Bug 4493: theObject->sharedMemorySize() == theSegment.size() exception | |
| 1077 | - Bug 4483: ./configure garbles -Og option in CFLAGS | |
| 1078 | - Bug 4482: Solaris GCC 5.2 warning in src/ip/Intercept.cc | |
| 1079 | - Bug 4468: NotNode (!acl) naming: Terminate the name before strncat(name). | |
| 1080 | - Bug 4465: Header forgery detection leads to crash | |
| 1081 | - Bug 2460 partial: workaround deferred reads on shutdown and restart | |
| 1082 | - cachemgr.cgi: use dynamic MemBuf for internal content generation | |
| 1083 | - ESI: Fix several element construction issues | |
| 1084 | - TLS: Fix Handshake Error: ccs received early | |
| 1085 | - TLS: Add chained and signing cert to peek-then-bumped connections | |
| 1086 | - Fix some startup/shutdown crashes | |
| 1087 | ||
| b1e01a62 AJ |
1088 | Changes to squid-3.5.16 (02 Apr 2016): |
| 1089 | ||
| 1090 | - Bug 4476: Removed duplicated #include lines | |
| 1091 | - Bug 4452: squid -z segfaults with ufs | |
| 1092 | - Bug 4447:FwdState.cc:447 "serverConnection() == conn" assertion | |
| 1093 | - Bug 4423: adding stdio: prefix to cache_log directive produces FATAL error | |
| 1094 | - Bug 4409: compile error when two Heimdal libraries are installed | |
| 1095 | - Bug 2831: Cache-control: max-age not sent on TCP_IMS_HIT/304 | |
| 1096 | - pinger: Fix buffer overflow in Icmp6::Recv | |
| 1097 | - pinger: Fix select(2) to actually use max_fd | |
| 1098 | - pinger: drop capabilities on Linux | |
| 1099 | - Fix memory leak of HttpRequest objects | |
| 1100 | - Fix memory leak when the cache of sslcrtvalidator_program is disabled via ttl=0 | |
| 1101 | - Fix assertion failed: Write.cc:41: "!ccb->active()" | |
| 1102 | - Fix crash on shutdown while cleaning up idle ICAP connections | |
| 1103 | - RFC 7725: Add registry entry for 451 status text | |
| 1104 | - ... and some build issues | |
| 1105 | ||
| 81bf66f8 AJ |
1106 | Changes to squid-3.5.15 (23 Feb 2016): |
| 1107 | ||
| 1108 | - Bug 3870: assertion failed: String.cc: 'len_ + len <65536' in ESI::CustomParser | |
| 1109 | - Fix multiple assertion on String overflows | |
| 1110 | - Fix unit test errors on MacOS | |
| 1111 | - Better handling of huge response headers. Fewer incorrect "Bug #3279" messages. | |
| 1112 | - Log noise reduction for eCAP | |
| 1113 | ||
| 4e071e97 AJ |
1114 | Changes to squid-3.5.14 (16 Feb 2016): |
| 1115 | ||
| 1116 | - Bug 4437: Fix Segfault on Certain SSL Handshake Errors | |
| 1117 | - Bug 4431: C code is not compiled with CFLAGS | |
| 1118 | - Bug 4418: FlexibleArray compile error with GCC 6 | |
| 1119 | - Bug 4378: assertion failed: DestinationIp.cc:60: | |
| 1120 | 'checklist->conn() && checklist->conn()->clientConnection != NULL' | |
| 1121 | - Fix invalid FTP connection handling on blocked content | |
| 1122 | - Fix handling of shared memory left over by Squid crashes or bugs | |
| 1123 | - Fix mgr:config report 'qos_flows mark' output | |
| 1124 | - Fix compile error in CPU affinity | |
| 404063c5 | 1125 | - Fix %un logging external ACL username |
| 4e071e97 | 1126 | - Avoid more certificate validation memory leaks |
| 404063c5 | 1127 | - ... and some documentation updates |
| 4e071e97 | 1128 | |
| 0461fde7 AJ |
1129 | Changes to squid-3.5.13 (06 Jan 2016): |
| 1130 | ||
| 1131 | - Bug 4397: DragonFly BSD, POSIX shared memory is implemented as filepath | |
| 1132 | - Bug 4387: Kerberos build errors on Solaris | |
| 1133 | - TLS: Support Ephemeral Elliptic Curve Diffie-Hellman (EECDH) key exchange | |
| 1134 | - TLS: Complete certificate chains using external intermediate certificates | |
| 1135 | - Avoid memory leaks when an X.509 certificate validator is used with SslBump | |
| 1136 | - Fix connection retry and fallback after failed server TLS connections | |
| 1137 | - Fix GnuTLS detection via pkg-config | |
| 1138 | - Fix startup crash with a misconfigured (too-small) shared memory cache | |
| 1139 | - ... and some documentation updates | |
| 1140 | ||
| bf7891f2 AJ |
1141 | Changes to squid-3.5.12 (28 Nov 2015): |
| 1142 | ||
| 1143 | - Bug 4374: refresh_pattern config parser (%) | |
| 1144 | - Bug 4373: assertion 'calloutContext->redirect_state == REDIRECT_NONE' | |
| 1145 | - Bug 4228: links with krb5 libs despite --without options | |
| 1146 | - Fix SSL_get_certificate() problem detection | |
| 1147 | - Fix TLS handshake problem during Renegotiation | |
| 1148 | - Fix cache_peer forceddomain= in CONNECT | |
| 1149 | - Fix status code-based HTTP reason phrase for eCAP-generated messages | |
| 1150 | - Fix build errors in cpuafinity.cc | |
| 1151 | - ... and several documentation updates | |
| 1152 | ||
| 0b475d3f AJ |
1153 | Changes to squid-3.5.11 (01 Nov 2015): |
| 1154 | ||
| 1155 | - Bug 3574: crashes on reconfigure and startup | |
| 1156 | - Bug 4347: compile errors with LibreSSL 2.3 | |
| 1157 | - Bug 4281: copy-paste typos in src/tools.cc | |
| 1158 | - Bug 4279: No response from proxy for FTP-download of non-existing file | |
| 1159 | - Bug 4188: Bumping intercepted SSL connections does not work on Solaris | |
| 1160 | - Fix incorrect authentication headers on cache digest requests | |
| 1161 | - Fix connection stats, including %<lp, missing for persistent connections | |
| 1162 | - Fix invalid memory access issues in SBuf | |
| 1163 | - Avoid errors when parsing manager ACL in old squid.conf | |
| 1164 | ||
| 574e0f53 AJ |
1165 | Changes to squid-3.5.10 (01 Oct 2015): |
| 1166 | ||
| 1167 | - Regression Fix cache_peer login=PASS(THRU) after CVE-2015-5400 | |
| 1168 | - Regression Bug 4326: base64 binary encoder rejects data beginning with nil byte | |
| 1169 | - Bug 4323: Netfilter broken cross-includes with Linux 4.2 | |
| 1170 | - Bug 4328: %un format code does not work for external ACLs in credentials-fetching rules | |
| 1171 | - Bug 4208: more than one port in wccp2_service_info line causes error | |
| 1243ec71 | 1172 | - Bug 4303: PeerConnector.cc:743 "!callback" assertion. |
| 574e0f53 AJ |
1173 | - Bug 4330: Do not use SSL_METHOD::put_cipher_by_char to determine size of SSL hello ciphers |
| 1174 | - Relicense ntlm_fake_auth.pl to GPLv2+ | |
| 1175 | - Relicense smb_lm auth helper to GPLv2+ | |
| 1176 | - Relicense SSPI helper to GPLv2+ | |
| 1177 | - ... and several minor performance optimizations | |
| 1178 | ||
| 3de58ac0 AJ |
1179 | Changes to squid-3.5.9 (17 Sep 2015): |
| 1180 | ||
| 1181 | - Regression Bug 3618: ntlm_smb_lm_auth rejects correct passwords | |
| 1182 | - Bug 4309: incorrect extensions detection in SSL Hello messages | |
| 1183 | - Bug 4309: crash during Skype login | |
| 1184 | - Bug 4284: missing sanity checks for malloc | |
| 1185 | - Regression Fix: CONNECT request debugging 11,2 traces | |
| 1186 | - Regression Fix: Quieten UFS cache maintenance skipped warnings | |
| 1187 | - TLS: Support SNI on generated CONNECT after peek | |
| 1188 | - ... and some documentation updates | |
| 1189 | ||
| 4fff8fc1 AJ |
1190 | Changes to squid-3.5.8 (02 Sep 2015): |
| 1191 | ||
| 1192 | - Regression Bug 4306: build portability fix in Kerberos helpers | |
| 1193 | - Bug 4302: IPFilter v5 transparent interception | |
| 1194 | - Bug 4301: compile errors with IPFilter interception | |
| 1195 | - Bug 4285 partial: %us is not supported in access.log | |
| 1196 | - Bug 4278: Docs: typo in the refresh_pattern freshness algorithm | |
| 1197 | - Bug 4242: compile errors with eCAP using clang-3.6 | |
| 1198 | - Bug 3696: crash when client delay pools are activated | |
| 1199 | - Bug 3553: cache_swap_high ignored and maxCapacity used instead | |
| 1200 | - Regression Fix: FtpServer.cc:1024: "reply != NULL" assertion | |
| 1201 | - Fix ignore of impossible SSL bumping actions, as intended and documented | |
| 1202 | - Fix memory leak in Surrogate-Capability header detection | |
| 1203 | - Fix truncated body length when RESPMOD service aborts | |
| 1204 | - Reject non-chunked HTTP messages with conflicting Content-Length values | |
| 1205 | - Support splice for SSLv3 and TLSv1 sessions that start with an SSLv2 Hello | |
| 1206 | - ... and several portability and compile fixes | |
| 1207 | - ... and several documentation updates | |
| 1208 | ||
| 4df5649e AJ |
1209 | Changes to squid-3.5.7 (01 Aug 2015): |
| 1210 | ||
| c52a4693 | 1211 | - Bug 4293: wrong SNI sent to server after URL-rewrite |
| 4df5649e AJ |
1212 | - Bug 4251: incorrect instance name for memory segments in /dev/shm |
| 1213 | - Bug 4227: invalid key in AuthUserHashPointer causing assertation failure | |
| 1214 | - Bug 3345: support %un (any available user name) format code for external ACLs. | |
| ab5bc97e | 1215 | - basic_smb_auth: Fix several old issues identified by Debian users |
| 4df5649e AJ |
1216 | - Support ssl-bump splicing to origin cache_peer |
| 1217 | - Fix SSL errors relayed using invalid certificates | |
| 1218 | - Fix crash in TcpAccepter with profiler enabled | |
| 1219 | - Fix some cases of ssl_crtd SSL certificate DB corruption | |
| 1220 | - Fix performance regression in SBuf::chop operations | |
| 1221 | - Improve handling of client connections on shutdown | |
| 1222 | - Handle exceptions during squid.conf parse | |
| 1223 | - Make pod2man an optional dependency | |
| 1224 | - ... and polishing for several cache.log notification messages | |
| 1225 | - ... and all fixes from squid 3.4.14 | |
| 1226 | ||
| ab248038 AJ |
1227 | Changes to squid-3.5.6 (03 Jul 2015): |
| 1228 | ||
| 1229 | - Bug 4274: ssl_crtd.8 not being installed | |
| 1230 | - Bug 4193: memory leak on FTP listings | |
| 1231 | - Bug 4183: segfault when freeing https_port clientca on reconfigure or exit | |
| 1232 | - Bug 3875: bad mimeLoadIconFile error handling | |
| 1233 | - Bug 3483: assertion failed store.cc:1866: 'isEmpty()' | |
| 1234 | - Bug 3329: pinned server connection is not closed properly | |
| 1235 | - TLS: Disable client-initiated renegotiation | |
| 1236 | - ext_edirectory_userip_acl: fix uninitialized variable | |
| 1237 | - Support custom OIDs in *_cert ACLs | |
| 1238 | - Fix CONNECT failover to IPv4 after trying broken IPv6 servers | |
| 1239 | - Use relative-URL in errorpage.css for SN.png | |
| 1240 | - Do not blindly forward cache peer CONNECT responses | |
| 1241 | - Fix assertion String.cc:221: "str" | |
| 1242 | - Fix assertion comm.cc:759: "Comm::IsConnOpen(conn)" in ConnStateData::getSslContextDone | |
| 1243 | - Translations: add Spanish US dialect alias | |
| 1244 | ||
| c75a7d0a AJ |
1245 | Changes to squid-3.5.5 (28 May 2015): |
| 1246 | ||
| 1247 | - Regression Bug 4132: short_icon_urls with global_internal_static on | |
| 1248 | - Bug 4238: assertion Read.cc:205: "params.data == data" | |
| 1249 | - Bug 4236: SSL negotiation error of 'success' | |
| 1250 | - Bug 3930: assertion 'connIsUsable(http->getConn())' | |
| 1251 | - Fix assertion MemBuf.cc:380: "new_cap > (size_t) capacity" in SSL I/O buffer | |
| 1252 | - Fix assertion errorpage.cc:600: "entry->isEmpty()" | |
| 1253 | - Fix comm_connect_addr on failures returns Comm:OK | |
| 1254 | - Fix missing external ACL helper notes | |
| 1255 | - Fix "Not enough space to hold server hello message" error message | |
| 1256 | - Fix segmentation fault inside Adaptation::Icap::Xaction::swanSong | |
| 1257 | - Prevent unused ssl_crtd helpers being run | |
| 1258 | - ... and some code cleanup and portability updates | |
| 1259 | - ... and several documentation updates | |
| 1260 | ||
| 88e192b1 AJ |
1261 | Changes to squid-3.5.4 (01 May 2015): |
| 1262 | ||
| 1263 | - Bug 4234: comm_connect_addr uses errno incorrectly | |
| 1264 | - Bug 4231: fd_open() not correctly handling UDS socket descriptions | |
| 1265 | - Bug 4226: digest_edirectory_auth: found but cannot be built | |
| 1266 | - Bug 4198: assertion failed: client_side.h:364: "sslServerBump == srvBump" | |
| 1267 | - Bug 3775: Disable HTTP/1.1 pipeline feature for pinned connections | |
| 1268 | - Fix require-proxy-header preventing HTTPS proxying and ssl-bump | |
| 1269 | - Fix Negotiate/Kerberos authentication request size exceeds output buffer size | |
| 1270 | - Fix SQUID_X509_V_ERR_DOMAIN_MISMATCH errors while accessing sites with valid certificates | |
| 1271 | - Add server_name ACL matching server name(s) obtained from various sources | |
| 1272 | - Add Kerberos support for MAC OS X 10.x | |
| 1273 | - Support for resuming TLS sessions | |
| 1274 | - ... and some portability and compile fixes | |
| 1275 | - ... and several documentation updates | |
| 1276 | - ... and all fixes from squid 3.4.13 | |
| 1277 | ||
| 548362ff AJ |
1278 | Changes to squid-3.5.3 (28 Mar 2015): |
| 1279 | ||
| 1280 | - Regression Bug 4213: negotiate_kerberos_auth: freeing non-dynamic memory | |
| 1281 | - Regression Bug 4206: Incorrect connection close on expect:100-continue | |
| 1282 | - Bug 4204: ./configure does not abort when required helpers cannot be built | |
| 1283 | - Bug 3805: support shared memory on MacOS X in Mem::IPC::Segment | |
| 1284 | - Bug 2907: high CPU usage on CONNECT when using delay pools | |
| 1285 | - basic_getpwnam_auth: fail authentication on crypt() failures | |
| 1286 | - basic_nis_auth: fail authentication on crypt() failures | |
| 1287 | - ext_kerberos_ldap_group_acl: Heimdal support improvements | |
| 1288 | - ext_wbinfo_group_acl: Perl 5.20 support | |
| 1289 | - ... and several compile issues | |
| 1290 | ||
| 4d3be924 AJ |
1291 | Changes to squid-3.5.2 (18 Feb 2015): |
| 1292 | ||
| 1293 | - Regression Bug 4176: Digest auth too many helper lookups | |
| 1294 | - Regression Bug 4180: not-fully-initialized data member in ACLUserData | |
| 1295 | - Bug 4172: Solaris broken krb5-config | |
| 1296 | - Bug 4073: Cygwin compile errors | |
| 1297 | - Bug 3919: remove several never-true / never-false comparisons | |
| 1298 | - HTTPS: Add missing root CAs when validating chains that passed internal checks | |
| 1299 | - Fix some cbdataFree related memory leaks | |
| 1300 | - Quieten CBDATA 'leak' messages | |
| 1301 | - Set SNI information in transparent bumping mode | |
| 1302 | - negotiate_kerberos_auth: fix krb5.conf backward compatibility | |
| 1303 | - Fix memory leaks in cachemgr.cgi URL parser | |
| 1304 | - Fix sslproxy_options in peek-and-splice mode | |
| 1305 | - ... and fix several portability and build issues | |
| 1306 | - ... and some documentation updates | |
| 1307 | - ... and all fixes from squid 3.4.11 | |
| 1308 | ||
| aac5b91d AJ |
1309 | Changes to squid-3.5.1 (13 Jan 2015): |
| 1310 | ||
| 1311 | - Fix handling of invalid SSL server certificates when splicing connections | |
| 1312 | - basic_smb_lm_auth: Simplified MSNT basic auth helper | |
| 1313 | - squidclient: Fix -A and -P options | |
| 1314 | - ... and several portability fixes | |
| 1315 | - ... and all fixes from squid 3.4.11 | |
| 1316 | - ... and a lot of documentation updates | |
| 1317 | ||
| cf62b886 AJ |
1318 | Changes to squid-3.5.0.4 (21 Dec 2014): |
| 1319 | ||
| 1320 | - Bug 3826: pt 2: Provide a systemd .service file for Squid | |
| 1321 | - Support http_access denials of SslBump "peeked" connections. | |
| 1322 | - Fix DONT_VERIFY_DOMAIN ssl flag | |
| 1323 | - Fix peek-and-splice mode: certificate validation for domain mismatched errors | |
| 1324 | - negotiate_kerberos_auth: MEMORY keytab and replay cache support | |
| 1325 | - ... and some documentation updates | |
| 1326 | - ... and a large amount of code polishing (non-logic changes) | |
| 1327 | ||
| 4666bb8d AJ |
1328 | Changes to squid-3.5.0.3 (09 Dec 2014): |
| 1329 | ||
| 1330 | - Bug 4146: workaround SSL Bump crash on Linux | |
| 1331 | - Bug 4135: Support \-escaped characters in regex patterns | |
| 1332 | - Bug 4131: SIGSEGV at store.cc:962 content_length > store_maxobjsize | |
| 1333 | - Fix delay_parameters parsing | |
| 1334 | - HTTP/2: handle 'PRI' method found in HTTP/1.x traffic | |
| 1335 | - ... and all changes from squid 3.4.10 | |
| 1336 | - ... and a lot of documentation updates | |
| 1337 | ||
| bf611e3a AJ |
1338 | Changes to squid-3.5.0.2 (31 Oct 2014): |
| 1339 | ||
| 1340 | - Fix FTP socket opening during reconfigure | |
| 1341 | - ... and all changes from 3.4.9 | |
| 1342 | - ... and some build errors in rarely used code | |
| 1343 | - ... and several documentation updates | |
| 1344 | ||
| e0dbeeb6 AJ |
1345 | Changes to squid-3.5.0.1 (17 Oct 2014): |
| 1346 | ||
| 1347 | - Port from 2.7: redirector and logging urlgroup feature | |
| 1348 | - Bug 4093: source-maintenance.sh bad perl -i option | |
| 1349 | - Bug 3608: per-service name for workers UDS sockets | |
| 1350 | - Bug 2554: 32-bit wrap in AUFS counters | |
| 1351 | - Bug 1961 pt1: URL handling redesign | |
| 1352 | - Bug 1202 pt1: documentation for refresh_pattern algorithms | |
| 1353 | - Update Squid boilerplate copyright/license | |
| 1354 | - Update the http(s)_port directives protocol= parameter | |
| 1355 | - Update forward_max_tries to permit 25 server paths | |
| 1356 | - Update Kerberos library detection and build options | |
| 1357 | - Support ACLs on ftp_epsv directive | |
| 1358 | - Support >32KB objects in cache_dir rock storage | |
| 1359 | - Support client connection annotation by helpers via clt_conn_tag=TAG | |
| 1360 | - Support native FTP Relay | |
| 1361 | - Support libgnugss Kerberos library | |
| 1362 | - Support libecap v1.0 | |
| 1363 | - Support SSL Peek and Splice feature | |
| 1364 | - Support receiving PROXY protocol version 1 and 2 | |
| 1365 | - Replace --enable-ssl build option with --with-openssl | |
| 1366 | - Enable -n service name command line option for all Squid builds | |
| 1367 | - Enable ICAP client by default | |
| 1368 | - Fix configuration file parsing bugs, related to quoted strings | |
| 1369 | - Fix Windows MinGW build errors | |
| 1370 | - Fix multiple TCP outgoing TOS/DiffServ bugs | |
| 1371 | - Fix Cygwin /etc/resolv.conf parsing | |
| 1372 | - Fix crash when sending %ssl::cert_subject to external ACL w/o certificate | |
| 1373 | - Fix crash reading malformed config files | |
| 1374 | - Send selected SSL version and cipher to the certificate validation helper | |
| 1375 | - Validate server certificates without bumping | |
| 1376 | - Add zero-copy string buffer support | |
| 1377 | - Add automated squid.conf parser testing with squid -k parse | |
| 1378 | - Add adaptation_service ACL | |
| 1379 | - Add logformat code %tS to log transaction start time | |
| 1380 | - Add logformat code %>rd to log client URL domain name | |
| 1381 | - Add key_extras to proxy authentication | |
| 1382 | - Add url_rewrite_extras and store_id_extras directives | |
| 1383 | - Add send_hit and store_miss directives | |
| 1384 | - Add collapsed_forwarding directive | |
| 1385 | - Add sslproxy_cert_sign_hash directive | |
| 1386 | - Add SMP SSL session cache | |
| 1387 | - Add cache_peer standby connections | |
| 1388 | - Add helper ext_delayer_acl | |
| 1389 | - Add TCP_TUNNEL log code for CONNECT tunnels which are not SSL-bumped | |
| 1390 | - Add BUILDCXX and BUILDCXXFLAGS configure options for cross-compile | |
| 1391 | - Remove COSS storage in favour of Rock storage | |
| 1392 | - Remove dnsserver and external DNS helper API in favour of mDNS | |
| 1393 | - Remove broken mallinfo() accounting and memory tracing | |
| 1394 | - Remove hierarchy_stoplist in favour of always_direct | |
| 1395 | - Deprecate tag ACL type in favour of note ACL type | |
| 1396 | - Deprecate urlgroup feature in favour of note ACL type | |
| 1397 | - HTTP/1.1: method names are case-sensitive | |
| 1398 | - HTTP/1.1: register new headers from RFC 723x | |
| 1399 | - squidclient: polish and update help display | |
| 1400 | - squidclient: support TLS with GnuTLS 3.1.5+ | |
| 1401 | - squidclient: support verbosity levels | |
| 1402 | - squidclient: --ping mode module support | |
| 1403 | - url_fake_rewrite: support concurrency | |
| 1404 | - storeid_file_rewrite: support concurrency | |
| 1405 | - digest_file_auth: support concurrency | |
| 1406 | - digest_edirectory_auth: support concurrency | |
| 1407 | - digest_ldap_auth: support concurrency | |
| 1408 | - ... and many error page translation updates | |
| 1409 | - ... and much code cleanup and polishing | |
| 1410 | ||
| 4df5649e AJ |
1411 | Changes to squid-3.4.14 (01 Aug 2015): |
| 1412 | ||
| 1413 | - Do not blindly forward cache peer CONNECT responses (CVE-2015-5400) | |
| 1414 | ||
| 88e192b1 AJ |
1415 | Changes to squid-3.4.13 (01 May 2015): |
| 1416 | ||
| 1417 | - Bug 4212: ssl_crtd crashes with corrupt database | |
| 1418 | - ... and some documentation updates | |
| 1419 | - ... and all fixes from squid 3.3.14 | |
| 1420 | ||
| 4d3be924 AJ |
1421 | Changes to squid-3.4.12 (18 Feb 2015): |
| 1422 | ||
| 1423 | - Bug 4066: Digest auth nonce indefinite rollover | |
| 1424 | - Bug 3997: Excessive NTLM or Negotiate auth helper annotations | |
| 1425 | - Fix several crashes when debugging enabled | |
| 1426 | - Fix silent SSL/TLS failure on split-stack operating systems | |
| 1427 | - HTTP/1.1: Stop emitting (Proxy-)Authentication-Info for Negotiate | |
| 1428 | - HTTPS: Add TLS/SSL option NO_TICKET to http[s]_port | |
| 1429 | - Remove dst ACL dependency on HTTP request message existence | |
| 1430 | - Set cap_net_admin when Squid sets TOS/Diffserv packet values | |
| 1431 | - ... and some documentation updates | |
| 1432 | ||
| aac5b91d AJ |
1433 | Changes to squid-3.4.11 (13 Jan 2015): |
| 1434 | ||
| 1435 | - Bug 4164: SEGFAULT when %W formating code used in errorpages | |
| 1436 | - Bug 4057: Avoid on-exit crashes when adaptation is enabled. | |
| 1437 | - Bug 3760: squidclient ignores --disable-ipv6 | |
| 1438 | - Bug 3754: configure doesnt detect IPFilter 5.1.2 system headers | |
| 1439 | - Bug 3664: ssl_crtd fails to build on OpenSolaris/OpenIndiana/Solaris 11 | |
| 1440 | - cachemgr.cgi: memory leak in request parser | |
| 1441 | - Deleting first fs left psstate->servers pointing to uninitialized memory | |
| 1442 | - ... and some build issues | |
| 1443 | ||
| 4666bb8d AJ |
1444 | Changes to squid-3.4.10 (09 Dec 2014): |
| 1445 | ||
| 1446 | - Bug 4148: external_acl_type header format does not accept the new libformat syntax | |
| 1447 | - Bug 4145: squid_endian.h compile errors with OpenBSD 5.6 | |
| 1448 | - Bug 4033: Rebuild corrupted ssl_db/size file | |
| 1449 | - Bug 3902: Docs: external_acl_type cache hash key | |
| 1450 | - Fix segmentation fault in ACL urlpath_regex | |
| 1451 | - Fix bootstrap.sh dependency on SPONSORS.list | |
| 1452 | - Alternate-Protocol is a hop-by-hop header | |
| 1453 | - HTTP/2: Support 421 (Misdirected Request) status code | |
| 1454 | ||
| bf611e3a AJ |
1455 | Changes to squid-3.4.9 (31 Oct 2014): |
| 1456 | ||
| 1457 | - Regression fix: ext_kerberos_ldap_group_acl typo in 3.4.7 update | |
| 1458 | - Bug 4102: sslbump cert contains only a dot character in key usage extension | |
| 1459 | - Bug 4093: source-maintenance.sh errors and warnings due to wrong tools/options | |
| 1460 | - Bug 4088: memory leak in external_acl_type helper with cache=0 or ttl=0 | |
| 1461 | - Bug 4024: Bad host/IP ::1 when using IPv4-only environment | |
| 1462 | - Bug 3803: ident leaks memory on failure | |
| 1463 | - kerberos_ldap_group/cert_tool: Remove ksh dependency | |
| 1464 | - ... and some automated code style updates | |
| 1465 | - ... and some documentation updates | |
| 1466 | ||
| bd6c316a AJ |
1467 | Changes to squid-3.4.8 (15 Sep 2014): |
| 1468 | ||
| 1469 | - Fix off by one in SNMP subsystem | |
| 1470 | - pinger: Fix various ICMP handling issues | |
| 1471 | ||
| abc809ce AJ |
1472 | Changes to squid-3.4.7 (28 Aug 2014): |
| 1473 | ||
| 1474 | - Regression Fix: Kerberos LDAP authorizing groups with principle subdomain | |
| 1475 | - Bug 4080: worker hangs when client identd is not responding | |
| 1476 | - Bug 3966: Add KeyEncipherment when ssl-bump substitues RSA for EC | |
| 1477 | - HTTP/1.1: Ignore Range headers with unidentifiable byte-range values | |
| 1478 | - SSL-bump: Use v3 for fake certificate if we add _any_ certificate extension | |
| 1479 | - Enable compile-time override for MAXTCPLISTENPORTS | |
| 1480 | - ntlm_sspi_auth: Fix various build errors | |
| 1481 | - negotiate_wrapper: Fix build issues with non-portable vfork() | |
| 1482 | - negotiate_sspi_auth: Portability fixes for MinGW | |
| 1483 | - ext_lm_group_acl: Portability fixes for MinGW | |
| 1484 | - ... and several minor memory leaks | |
| 1485 | ||
| 7f089ae4 AJ |
1486 | Changes to squid-3.4.6 (25 Jun 2014): |
| 1487 | ||
| 1488 | - Regression: segmentation fault logging with %tg format specifier | |
| 1489 | - Bug 4065: round-robin neighbor selection with unequal weights | |
| 1490 | - Bug 4056: assertion MemPools[type] from netdbExchangeStart() | |
| 1491 | - Bug 4050: segmentation fault in CommSelectEngine::checkEvents on helper response | |
| 1492 | - Fix segmentation fault setting up server SSL connnection | |
| 1493 | - Fix hanging Non-HTTPS connections on SSL-bump enabled port | |
| 1494 | - Fix Cache Manager actions listed more than once | |
| 1495 | - ... and many minor memory leaks | |
| 1496 | - ... and several portability build issues | |
| 1497 | - ... and some documentation updates | |
| 1498 | ||
| 51a22544 AJ |
1499 | Changes to squid-3.4.5 (02 May 2014): |
| 1500 | ||
| 1501 | - Regression Bug 4051: inverted test on CONNECT payload existence | |
| 1502 | - Regression Fix: order dependency between cache_dir and maximum_object_size | |
| 1503 | - Fix logformat %note display | |
| 1504 | - Resolve 'dying from an unhandled exception: c' | |
| 1505 | ||
| 445d8733 AJ |
1506 | Changes to squid-3.4.4.2 (23 Apr 2014): |
| 1507 | ||
| 51a22544 | 1508 | - version bump for packaging re-build with altered toolchain |
| 445d8733 | 1509 | |
| e6b41a35 AJ |
1510 | Changes to squid-3.4.4.1 (23 Apr 2014): |
| 1511 | ||
| 1512 | - Regression Bug 4019: Cache digest exchange segmentation fault | |
| 1513 | - Regression Bug 3982: EUI logging and helpers show blank MAC address | |
| 1514 | - Bug 4047: Support Android builds | |
| 1515 | - Bug 4043: Remove XMALLOC_TRACE and references to sbrk(2) | |
| 1516 | - Bug 4041: Missing files in compat/Makefile.am | |
| 1517 | - Bug 4014: Build failure with --disable-optimizations --disable-auth | |
| 1518 | - Bug 3986: (partial) assertion due to incorrect error page buffer size | |
| 1519 | - Bug 3955: Solaris EUI-48 lookup leaks FDs | |
| 1520 | - Bug 3371: CONNECT with data sent at once loses data | |
| 1521 | - C++11: Upgrade auto-detection to use the formal -std=c++11 | |
| 1522 | - Crypto-NG: libnettle MD5 algorithm support | |
| 1523 | - SSL-Bump: Fix Basic auth caching on bumped connections | |
| 1524 | - Store-ID: Fix request URI when forwarding requests to peers | |
| 1525 | - ... and fix several other build errors | |
| 1526 | - ... and some documentation updates | |
| 1527 | ||
| d3b930ff AJ |
1528 | Changes to squid-3.4.4 (09 Mar 2014): |
| 1529 | ||
| 1530 | - Bug 4029: intercepted HTTPS requests bypass caching checks | |
| 1531 | - Bug 4001: remove use of strsep() | |
| 1532 | - Bug 3186 and 3628: Digest authentication always sending stale=false for nonce | |
| 1533 | - Fix stalled concurrent rock store reads | |
| 1534 | - Fix helper ID number assignment | |
| 1535 | - Fix build failures from CMSG related definitions | |
| 1536 | - Fix build failures from libcompat unsafe.h protections | |
| 1537 | - Copyright: Relicense helpers by Treehouse Networks Ltd. | |
| 1538 | - ... and all bug fixes from 3.3.12 | |
| 1539 | ||
| a01166da AJ |
1540 | Changes to squid-3.4.3 (02 Feb 2014): |
| 1541 | ||
| 1542 | - Bug 4008: HttpHeader warnOnError should be an int not a bool | |
| 1543 | - Bug 4002: clang 3.4 unable to compile | |
| 1544 | - Bug 3996: Malformed DNS reply leads to crash | |
| 1545 | - Bug 3995: compile error on CentOS 5 with GCC 4.1.2 | |
| 1546 | - Bug 3975: atomic detection cross-compilation failure | |
| 1547 | - Bug 3971: "cannot aggregate mgr:client_list: cmd->profile != NULL" in SMP mode | |
| 1548 | - Bug 3954: compile failure in CpuAffinity.cc | |
| 1549 | - Bug 3927: tests/testRock fatal.cc required | |
| 1550 | - Fix memory leak in peer Cache Digest exchange | |
| 1551 | - Fix external_acl_type async loop failures | |
| 1552 | - Fix destination IP address cycling | |
| 1553 | - ... and a few polishing changes | |
| 1554 | ||
| 441842f0 AJ |
1555 | Changes to squid-3.4.2 (30 Dec 2013): |
| 1556 | ||
| 1557 | - Regression Bug 3980: FATAL ERROR due to max_user_ip -s option | |
| 1558 | - Regression Fix: \-unescaping in quoted strings from helpers | |
| 1559 | - Regression Fix: URL helper API bypassing on URL containing '=' character | |
| 1560 | - Bug 3985: 60s limit introduced by balance_on_multiple_ip breaks bad IP recovery | |
| 1561 | - Bug 3806: Caching responses with Vary header | |
| 1562 | - Bug 3498: FTP PUT assertion | |
| 1563 | - WCCPv2: Fix assertion 'Cannot convert non-IPv4 to IPv4' on FreeBSD | |
| 1564 | - Enable concurrency by default for SSL certificate validator | |
| 1565 | - ... and fix several build errors | |
| 1566 | ||
| 12f64d19 AJ |
1567 | Changes to squid-3.4.1 (09 Dec 2013): |
| 1568 | ||
| 1569 | - Bug 3935: Invalid pointer dereference when peeking at origin server certificate | |
| 1570 | - Bug 3589: intercepted and ICAP modified request using a cache_peer | |
| 1571 | - ... and several portability fixes | |
| 1572 | - ... and some documentation updates | |
| 1573 | ||
| 277afc6e AJ |
1574 | Changes to squid-3.4.0.3 (01 Dec 2013): |
| 1575 | ||
| 1576 | - Bug 3941: Release notes error | |
| 1577 | - Receive annotations from authentication and external ACL helpers | |
| 1578 | - basic_nis_auth: Improved portability | |
| 1579 | - ... and several documentation updates | |
| 1580 | - ... and all bug fixes from 3.3.9, 3.3.10, 3.3.11 | |
| 1581 | ||
| 2d011f52 | 1582 | Changes to squid-3.4.0.2 (03 Oct 2013): |
| ae2b6fc9 AJ |
1583 | |
| 1584 | - Regression Bug 3891: squid.conf parser errors in 3.4.0.1 | |
| 1585 | - Regression Fix: re-disable MinGW C++11 support | |
| 1586 | - Bug 3914: partial: make squidclient tool build cleanly with -Wconversion | |
| 1587 | - Fix memory leak in refresh_pattern parsing | |
| 1588 | - negotiate_kerberos_auth: upgrade to present group= keys | |
| 1589 | - Handle NTLM helper returning OK without user= value | |
| 1590 | - Add dns_multicast_local to control mDNS operation | |
| 1591 | - Add --disable-arch-native build option | |
| 1592 | - Display Build-Info in cache manager info report | |
| 1593 | - ... and all changes from squid 3.3.9 | |
| 1594 | - ... and some code and debug output polishing | |
| 1595 | ||
| 14561e1c | 1596 | Changes to squid-3.4.0.1 (29 Jul 2013): |
| 13db7eef AJ |
1597 | |
| 1598 | - Port from 2.7: StoreURL (renamed Store-ID) support | |
| 1599 | - Bug 3795: fix several mistakes in the MIB file | |
| 1600 | - Bug 3793: configure: improved helper detection | |
| 1601 | - Bug 3722: Invalid markup in Armenian hy ERR_ONLY_IF_CACHED_MISS | |
| 1602 | - Bug 3676: Support GCC 4.7 with -Wshadow option | |
| 1603 | - Bug 3643: NTLM helpers stuck in reserved state by Safari | |
| 1604 | - Bug 3389: Auto-reconnect for tcp access_log | |
| 1605 | - Bug 2066: squid does not do chdir() after chroot() | |
| 1606 | - Fix uninitialized fields in IcapLogEntry | |
| 1607 | - Fix a number of minor issues detected by Coverity Scan | |
| 1608 | - Fix some potential memory leaks detected by Coverity Scan | |
| 1609 | - Fix 64-bit support for Intel compiler suite (ICC) and other similar compilers | |
| 1610 | - Fix ACL matching algorithm to avoid repeating tests | |
| 1611 | - basic_pam_auth: Add -r option to strip NTLM/Negotiate domain from username | |
| 1612 | - squidpurge: fix META TLV parsing issues | |
| 1613 | - squid.conf: enforce all the directive and option names are lower-case | |
| 1614 | - Support EUI on HTTPS and FTP data connections | |
| 1615 | - Support OK/ERR/BH response codes from any helper | |
| 1616 | - Support No-lookup flag (-n) on DNS ACLs | |
| 1617 | - Support -march=native compiler optimization by default | |
| 1618 | - Support forwarding intercepted but not bumped connections to cache_peers | |
| 0bbaae54 | 1619 | - Support IPv6 NAT interception on Linux and some BSD |
| 13db7eef AJ |
1620 | - Deprecate log_icap and log_access configuration directives |
| 1621 | - HTTP/1.1: improved method invalidation and cacheability detection | |
| 1622 | - HTTP/1.1: support length configuration for pipeline_prefetch queue | |
| 1623 | - Improved TPROXY support for OpenBSD and FreeBSD | |
| 0bbaae54 | 1624 | - Add storeid_file_rewrite helper to perform Store-ID rewrites from a rules file |
| 13db7eef AJ |
1625 | - Add all-of and any-of ACL types for grouping sets of ACL tests |
| 1626 | - Add note directive for transaction annotations | |
| 1627 | - Add %note log format for transaction annotation logging | |
| 1628 | - Add note ACL type for matching annotated transactions with by annotation name or value | |
| 1629 | - Add kv-pair support to URL-rewrite/redirector interface | |
| 1630 | - Add SSL server certificate validator interface, helper and result cache | |
| 1631 | - Add SSL server certificate fingerprint ACL type | |
| 1632 | - Add spoof_client_ip access control | |
| 1633 | - Add pt-bz (Belize Portuguese) dialect to translations | |
| 1634 | - ... and many Windows portability changes (still incomplete) | |
| 1635 | - ... and many documentation changes | |
| 1636 | - ... and much code cleanup and polishing | |
| 988a7fba | 1637 | |
| 88e192b1 AJ |
1638 | Changes to squid-3.3.14 (01 May 2015): |
| 1639 | ||
| 1640 | - Bug 4093: source-maintenance.sh errors and warnings due to wrong tools/options | |
| 1641 | - ... and some documentation updates | |
| 1642 | - ... and all fixes from squid 3.2.14 | |
| 1643 | ||
| abc809ce AJ |
1644 | Changes to squid-3.3.13 (28 Aug 2014): |
| 1645 | ||
| 1646 | - Fix segmentation fault setting up server SSL connnection | |
| 1647 | - HTTP/1.1: Ignore Range headers with unidentifiable byte-range values | |
| 1648 | ||
| d3b930ff AJ |
1649 | Changes to squid-3.3.12 (09 Mar 2014): |
| 1650 | ||
| 1651 | - Regression Bug 3769: client_netmask not evaluated since Comm redesign | |
| 1652 | - Bug 4026: Fix SSL and adaptation_access handling of aborted connections | |
| 1653 | - Bug 3969: Fix credentials caching for Digest authentication | |
| 1654 | - Bug 3806: Caching responses with Vary header | |
| 1655 | - Fix umask default on crash report generated email | |
| 1656 | - Fix pthread library detection on FreeBSD 10 | |
| 1657 | - Avoid assertions on Range requests that trigger Squid-generated errors. | |
| 1658 | ||
| 277afc6e AJ |
1659 | Changes to squid-3.3.11 (01 Dec 2013): |
| 1660 | ||
| 1661 | - Regression Bug 3936: error-details.txt parse error with OpenSSL since 3.3.9 | |
| 1662 | - Bug 3972: Segfault when getting the deny_info page ID after a reconfigure | |
| 1663 | - Bug 3970: max_filedescriptors disabled due to missing setrlimit | |
| 1664 | - Bug 3967: ipc/Kid.cc compilation failure: 'time' was not declared in this scope | |
| 1665 | - Bug 3960: DEAD cache_peer are not revived | |
| 1666 | - Bug 3956: xstrndup: tried to dup a NULL pointer | |
| 1667 | - Bug 3906: Filedescriptor leaks in SNMP | |
| 1668 | - Bug 3782: Digest authentication not obeying nonce_max_count | |
| 1669 | - HTTP/1.1: Make header parser obey relaxed_header_parser | |
| 1670 | - HTTP/1.1: Re-compute Range response content offset after an FTP response was adapted | |
| 1671 | - SMP: Replace blocking sleep(3) and close UDS socket on failures | |
| 1672 | - Windows: fix several compile errors | |
| 1673 | ||
| c663cc36 AJ |
1674 | Changes to squid-3.3.10 (03 Nov 2013): |
| 1675 | ||
| 1676 | - Bug 3929: request_header_add not working for tunnel requests | |
| 1677 | - Bug 3923: cbdata and undefined behavior due to dynamic runtime enumeration | |
| 1678 | - Bug 3918: Self Test Failures on Mac OS X 10.8 | |
| 1679 | - Bug 3887: tcp_outgoing_tos not working for IPv6 | |
| 1680 | - Bug 3836: Fix issues with automake 1.13+ and make check | |
| 1681 | - Bug 3480: StoreEntry::kickProducer() segfaults in store_client::copy() | |
| 1682 | - Fix pinning hierarchy log information | |
| 1683 | - Fix close idle client connections associated with closed idle pinned connections. | |
| 1684 | - Fix cbdata 'error: expression result unused' errors | |
| 1685 | - Avoid "hot idle": A series of rapid select() calls with zero timeout. | |
| 1686 | - Append Connection:close to OPTIONS requests when icap_persistent_connections is off | |
| 1687 | - ntlm_fake_auth: pass DOMAIN data to Squid in original case | |
| 1688 | - kerberos_ldap_group: fix LDAP string duplication | |
| 1689 | - Use IPv6 localhost nameserver on DNS configuration errors | |
| 1690 | - Add cache_miss_revalidate | |
| 1691 | - ... and several portability improvements | |
| 1692 | ||
| db01c30c AJ |
1693 | Changes to squid-3.3.9 (11 Sep 2013): |
| 1694 | ||
| 1695 | - Regression Bug 3077: off-by-one error in Digest header decoding | |
| 1696 | - Bug 3895: fix acl_uses_indirect_client and cache_peer_access | |
| 1697 | - Bug 3879: assertion failed ConnStateData::validatePinnedConnection | |
| 1698 | - Bug 3863: myportname acl causes segmentation fault | |
| 1699 | - Bug 3849: Duplicate certificate sent when using https_port | |
| 1700 | - Bug 2287: Better fix for unsupported HTTP version handling | |
| 1701 | - Bug 2112: Reload into If-None-Match | |
| 1702 | - Fix several assert with side effects in ICAP/eCAP response handling | |
| 1703 | - Fix myportname ACL on ICAP/eCAP transactions | |
| 1704 | - Fix external ACL user:pass detail logging after adaptation | |
| 1705 | - Fix SMP mgr:info report 'Largest file desc currently in use' | |
| 1706 | - Handle infinite certificate validation loops caused by OpenSSL Bug 3090. | |
| 1707 | - Improved compatibility with gcc 4.8, clang and icc | |
| 1708 | - Show number of available filedescriptors when reserved FD changes | |
| 1709 | - Sync with newest OpenSSL error codes | |
| 1710 | - Register Http2-Settings header | |
| 1711 | - ... and many Windows portability fixes | |
| 1712 | ||
| 8dbafb10 AJ |
1713 | Changes to squid-3.3.8 (13 Jul 2013): |
| 1714 | ||
| 1715 | - Bug 3869: assertion failed: MemBuf.cc:272: size < capacity | |
| 1716 | - Improved handling of port values in Host: header validation | |
| 1717 | ||
| 2fea9d2b AJ |
1718 | Changes to squid-3.3.7 (11 Jul 2013): |
| 1719 | ||
| 1720 | - Bug 3297: Fix openSSL related build failures | |
| 1721 | - Fix build on FreeBSD 9.x platform with clang | |
| 1722 | - Protect against buffer overrun in DNS query generation | |
| 1723 | ||
| 1a39473b AJ |
1724 | Changes to squid-3.3.6 (01 Jul 2013): |
| 1725 | ||
| 1726 | - Bug 3854: pt1: compile errors on AIX | |
| 1727 | - Bug 3802: Fix wrong check inside Format::Format::assemble | |
| 13db7eef | 1728 | - Bug 3762: remove bogus WARNING in cache.log |
| 1a39473b AJ |
1729 | - Bug 3717: assertion failed with dstdom_regex with IP based URL |
| 1730 | - Bug 1991: kqueue causes SSL to hang | |
| 1731 | - Ask for SSL key password when started with -N but without sslpassword_program | |
| 1732 | - Make sure %<tt includes all [failed] connection attempts | |
| 1733 | - Support HTTP reply ACLs in icap_log and log_icap | |
| 1734 | - Fix incorrect external_acl_type codes | |
| 1735 | - Fix ICAP logging request headers and segmentation faults | |
| 1736 | - ... and some documentation polish | |
| 1737 | ||
| 9c7aeeb8 AJ |
1738 | Changes to squid-3.3.5 (20 May 2013): |
| 1739 | ||
| 1740 | - Bug 3851: Delay Pool class 5 tag:levels displayed incorrectly in cache manager | |
| 1741 | - Bug 3845: http_port tcpkeepalive= option fails parsing | |
| 1742 | - Bug 3840: assertion failed 'sde' in UFS cache loading | |
| 1743 | - Bug 3836: make check failures with automake-1.13 | |
| 1744 | - Bug 3827: Remove AccessLogEntry::cache.authuser | |
| 1745 | - Bug 3816 pt2: SSL_get_certificate call inside Ssl::verifySslCertificate crashes | |
| 1746 | - Bug 3780: cachemgr.cgi: output problem in HTTP Header Statistics | |
| 1747 | - Bug 3759: OpenSSL compilation error on stock Fedora17, RHEL, CentOS 6 systems | |
| 1748 | - Bug 3744: squid terminated: FATAL: Bungled (null) line 3: sslproxy_cert_sign signTrusted all | |
| 1749 | - Port from 2.6: external acl %ACL and %DATA tags | |
| 1750 | - Update copyright on SN.png | |
| 1751 | - ... and several minor memory leaks | |
| 1752 | - ... and some documentation polish | |
| 1753 | ||
| 988a7fba AJ |
1754 | Changes to squid-3.3.4 (27 Apr 2013): |
| 1755 | ||
| 1756 | - Bug 3831: basic_ncsa_auth Blowfish and SHA support | |
| 1757 | - Bug 3816: SSL_get_certificate call inside Ssl::verifySslCertificate crashes | |
| 1758 | - Bug 3794: MacOS: workaround compiler errors and case-insensitivity | |
| 1759 | - Bug 3781: Proxy Authentication not sent to cache_peer | |
| 1760 | - Bug 3720 pt1: SourceLayout: shuffle fd_table definition into fde.h | |
| 1761 | - Bug 3720 pt2: Add missing include in /dev/poll I/O module | |
| 1762 | - Bug 3674: Improve compiler detection, better support warnings-as-errors on clang | |
| 1763 | - Add support for TPROXY on BSD | |
| 1764 | - Fix SSL Bump bypass for intercepted traffic | |
| 1765 | - Fix memory leaks in ConnStateData pinning | |
| 1766 | - Fix external_acl.cc "inBackground" assertion on queue overloads | |
| 1767 | - CacheMgr: fix missing column separator in helper stats | |
| 1768 | - OpenBSD: libpthreads requires OpenBSD 5.2 or later | |
| 1769 | - ... and lots of documentation updates | |
| 1770 | - ... and all changes from squid 3.2.10 | |
| 1771 | ||
| 40c973aa AJ |
1772 | Changes to squid-3.3.3 (12 Mar 2013): |
| 1773 | ||
| 1774 | - Bug 3720: Add missing include in /dev/poll I/O module (pt2) | |
| 1775 | - ... and all changes from squid 3.2.9 | |
| 1776 | ||
| d4dc9eea AJ |
1777 | Changes to squid-3.3.2 (02 Mar 2013): |
| 1778 | ||
| 1779 | - Bug 3781: Proxy Authentication not sent to cache_peer | |
| 1780 | - Bug 3794: MacOS: workaround compiler errors | |
| 1781 | - Bug 3720: Compile error in Solaris /OpenIndiana | |
| 1782 | - ... and all changes from squid 3.2.8 | |
| 1783 | ||
| 21744e8b AJ |
1784 | Changes to squid-3.3.1 (09 Feb 2013): |
| 1785 | ||
| 1786 | - Bug 3726: build errors with --disable-ssl | |
| 1787 | - Propigate pinned connection persistency and closures to the client. | |
| 1788 | - Mimic SSL certificate Key Usage and Basic Constraints | |
| 1789 | - Fix segmentation fault on missing squid.conf values | |
| 1790 | - ext_sql_session_acl: Fix hex decoding on UID | |
| 1791 | - ... and some code polish | |
| 1792 | - ... and a lot of documentation polish | |
| 1793 | - ... and all changes from squid 3.2.7 | |
| 1794 | ||
| 56eea3f2 AJ |
1795 | Changes to squid-3.3.0.3 (09 Jan 2013): |
| 1796 | ||
| 1797 | - Bug 3729: 32-bit overflow in parsing 64-bit configuration values | |
| 1798 | - Bug 3728: Improve debug for cache_dir | |
| 1799 | - Additional fixes for CVE-2012-5643 / SQUID:2012-1 | |
| 1800 | - kerberos_ldap_group: support multiple groups in squid.conf ACL definition | |
| 1801 | - kqueue: update status from experimental to fully available net I/O method | |
| 1802 | - ... and many memory leaks and potential bugs detected by Coverity Scan | |
| 1803 | ||
| bd4920ca AJ |
1804 | Changes to squid-3.3.0.2 (03 Dec 2012): |
| 1805 | ||
| 1806 | - Support matching empty header field values using req_header and rep_header | |
| 1807 | - ... and some minor code polish and input vaidations | |
| 1808 | - ... and all changes from squid 3.2.4 | |
| 1809 | ||
| 362d74b6 AJ |
1810 | Changes to squid-3.3.0.1 (21 Oct 2012): |
| 1811 | ||
| 1812 | - Bug 3610: Add peername_regex ACL | |
| 1813 | - Bug 3239: rename myip/myport as localip/localport | |
| 1814 | - Bug 3130: helpers are crashing too rapidly | |
| 1815 | - Add log_db_daemon SQL Database Logging Daemon | |
| 1816 | - Add ext_time_quota_acl helper managing sessions by bandwidth usage | |
| 1817 | - Add request_header_add option | |
| 1818 | - Support C++11 features where possible | |
| 1819 | - Support bump-ssl-server-first | |
| 1820 | - Support mimic SSL server certificates | |
| 1821 | - Remove --enable-ntlm-fail-open | |
| 1822 | - Fix TLS/SSL Options does not apply to the dynamically generated certificates | |
| 1823 | - Fix SslBump stuck after error | |
| 1824 | - Polish: display ACL enumeration text in debugs | |
| 1825 | - ... and many portability fixes for MacOS X, Windows and others | |
| 1826 | - ... and many compile error fixes | |
| 1827 | - ... and a very large amount of code polish for faster compilation | |
| 1828 | ||
| 88e192b1 AJ |
1829 | Changes to squid-3.2.14 (01 May 2015): |
| 1830 | ||
| 1831 | - Fix 'access_log none' to prevent following logs being used | |
| 1832 | - Fix X509 server certificate domain matching | |
| 1833 | - ... some documentation updates | |
| 1834 | ||
| 8dbafb10 AJ |
1835 | Changes to squid-3.2.13 (13 Jul 2013): |
| 1836 | ||
| 1837 | - Bug 3869: assertion failed: MemBuf.cc:272: size < capacity | |
| 1838 | - Improved handling of port values in Host: header validation | |
| 1839 | ||
| 2fea9d2b AJ |
1840 | Changes to squid-3.2.12 (11 Jul 2013): |
| 1841 | ||
| 1842 | - Protect against buffer overrun in DNS query generation | |
| 1843 | - Avoid !closing assertions when helpers call comm_read during reconfigure. | |
| 1844 | - Fix several minor memory leaks during reconfigure | |
| 1845 | - Remove origin_tries limiter on forwarding and permit large max_forward_tries values | |
| 1846 | ||
| 80c1bddb AJ |
1847 | Changes to squid-3.2.11 (30 Apr 2013): |
| 1848 | ||
| 1849 | - Regression Bug 3839: build error: src/tools.h: No such file or directory | |
| 1850 | - Update copyright on SN.png | |
| 1851 | ||
| 988a7fba AJ |
1852 | Changes to squid-3.2.10 (27 Apr 2013): |
| 1853 | ||
| 1854 | - Bug 3833: squidclient: Option '-k' is not present in man(1) page | |
| 1855 | - Bug 3825: basic_ncsa_auth: segfaulting with glibc-2.17 | |
| 1856 | - Bug 3822: Locate LDAP and SASL headers for BSD support | |
| 1857 | - Bug 3817: Memory leak in SSL cert validate for alt_name peer certs | |
| 1858 | - Bug 3774: 'squid -k reconfigure' drops rock cache | |
| 1859 | - Bug 3565: Resuming postponed accept kills Squid | |
| 1860 | - HTTP/1.1: partial support for no-cache and private controls with parameters | |
| 1861 | - ssl_crtd: fix helpers dying during startup on ARM | |
| 1862 | - GNU Hurd: define MAP_NORESERVE as no-op when missing | |
| 1863 | - BSD: fix enter_suid/leave_suid build errors in ip/Intercept.cc | |
| 1864 | ||
| 40c973aa AJ |
1865 | Changes to squid-3.2.9 (12 Mar 2013): |
| 1866 | ||
| 1867 | - Regression fix: Accept-Language header parse | |
| 1868 | - Bug 3673: Silence 'Failed to select source' messages | |
| 1869 | - Fix authentication headers sent on peer digest requests | |
| 1870 | - Fix build error on Solaris, OpenIndiana, Omnios | |
| 1871 | ||
| d4dc9eea AJ |
1872 | Changes to squid-3.2.8 (02 Mar 2013): |
| 1873 | ||
| 1874 | - Bug 3767: tcp_outgoing_tos/mark ACLs do not obey acl_uses_indirect_client | |
| 1875 | - Bug 3763: diskd Error: no filename in shm buffer | |
| 1876 | - Bug 3752: objects that cannot be cached in memory are not cached on disk | |
| 1877 | - Bug 3753: Removes the domain from the cache_peer server pconn key | |
| 1878 | - Bug 3749: IDENT lookup using wrong ports to identify the user | |
| 1879 | - Bug 3723: tcp_outgoing_tos/mark broken for CONNECT requests | |
| 1880 | - Bug 3686: cache_dir max-size default fails | |
| 1881 | - Bug 3515: crash in FtpStateData::ftpTimeout | |
| 1882 | - Bug 3329: Quieten orphan Comm::Connection messages | |
| 1883 | - Make squid -z for cache_dir rock preserve the rock DB | |
| 1884 | - Fixed several server connect problems | |
| 02824360 AJ |
1885 | - ... and some build issues on Solaris, OpenIndiana, MacOS X |
| 1886 | - ... and some documentation and debugs polishing | |
| d4dc9eea | 1887 | |
| 54ccbeea AJ |
1888 | Changes to squid-3.2.7 (01 Feb 2013): |
| 1889 | ||
| 1890 | - Bug 3736: Floating point exception due to divide by zero | |
| 1891 | - Bug 3735: raw-IPv6 domain URLs crash if IPv6-disabled | |
| 1892 | - Bug 3732: Fix ConnOpener IPv6 awareness | |
| 1893 | - Bug 3729: 32-bit overflow in parsing 64-bit configuration values | |
| 1894 | - Bug 3728: Improve debug for cache_dir | |
| 1895 | - Bug 3687: unhandled exception: c when using interception and peers | |
| 1896 | - Bug 3678: external acl grace period causes acl lookup failures | |
| 1897 | - Bug 3567: Memory leak handling malformed requests | |
| 1898 | - Bug 3111: Mid-term fix for the forward.cc "err" assertion | |
| 1899 | - Support OpenSSL NO_Compression optio | |
| 1900 | - Fix IPv6 enabled pinger on split-stack or IPv6-disabled systems | |
| 1901 | - Fix "address.GetPort() != 0" assertion for helpers | |
| 1902 | - ... and several minor memory leaks | |
| 1903 | - ... and some cache.log message polishing | |
| 1904 | ||
| 56eea3f2 AJ |
1905 | Changes to squid-3.2.6 (09 Jan 2013): |
| 1906 | ||
| 1907 | - Regression Bug 3731: TOS setsockopt() requires int value | |
| 1908 | - Regression Bug 3712: Rotating logs overwrites the previous log | |
| 1909 | - Bug 3727: LLVM compile errors in kerberos_ldap_group | |
| 1910 | - Bug 3650: Negotiate auth missing challenge token | |
| 1911 | - Additional fixes for CVE-2012-5643 / SQUID:2012-1 | |
| 1912 | ||
| eeb80d48 AJ |
1913 | Changes to squid-3.2.5 (10 Dec 2012): |
| 1914 | ||
| 1915 | - Bug 3698: Add missing include of errno.h | |
| 1916 | ||
| bd4920ca AJ |
1917 | Changes to squid-3.2.4 (03 Dec 2012): |
| 1918 | ||
| 1919 | - Ported: urllogin ACL from squid 2.7 | |
| 1920 | - Bug 3688: Lots of Orphan Comm:Connections to ICAP server | |
| 1921 | - Bug 3677: Port un-pinning logic changes from squid 3.3 | |
| 1922 | - Bug 3405: ssl_crtd crashes failing to remove certificate | |
| 1923 | - ... and major bugs fixed in squid 3.1.22 | |
| 1924 | - Fix accept_filter on Linux | |
| 1925 | - Remove 'Bungled' warning on missing component directives | |
| 1926 | - ... and many buffer and memory leak issues in the bundled helpers | |
| 1927 | - ... and a small amount of code polishing | |
| 1928 | ||
| 362d74b6 AJ |
1929 | Changes to squid-3.2.3 (21 Oct 2012): |
| 1930 | ||
| 1931 | - Regression: SMP crashes on startup with workers > 1 | |
| 1932 | - Bug 3655: pinning failure breaks NTLM and Negotiate authentication | |
| 1933 | - SMP: Allow a UFS cache_dir entry to coexist with a shared memory cache entry | |
| 1934 | - HTTP/1.1: honour Cache-Control before Pragma:no-cache | |
| 1935 | - HTTP/1.1: Cache-Control compliance upgrade | |
| 1936 | - Remove obsoleted refresh_pattern ignore-no-cache option | |
| 1937 | - Fix IPv6 enabled squidclient | |
| 1938 | - ... and several compile fixes | |
| 1939 | ||
| 1940 | Changes to squid-3.2.2 (06 Oct 2012): | |
| a18ad4b5 AJ |
1941 | |
| 1942 | - Regression: Make login=PASS send no credentials when none available | |
| 1943 | - Regression: Handle dstdomain duplicates and overlapping names better | |
| 1944 | - Bug 3661: Segmentation fault when using more than 1 worker | |
| 1945 | - Bug 3660: ACLFilledChecklist::fd set with wrong fd for sslproxy_cert_error | |
| 1946 | - Bug 3658: ERR_ZERO_SIZE_OBJECT propagates out even after successful retry | |
| 1947 | - Bug 3648: polish String class files | |
| 1948 | - Bug 3647: parsing hier_code acl fails | |
| 1949 | - Bug 3626: forwarding loops on intercepted traffic | |
| 1950 | - Bug 3616: retrieve client connection for ACL checks from the related HttpRequest object | |
| 1951 | - Bug 3609: several RADIUS helper improvements | |
| 1952 | - Bug 3605: memory leak in Negotiate authentication | |
| 1953 | - Fix small memory leak in src ACL parse | |
| 1954 | - Fix maximum_single_addr_tries upgrade | |
| 1955 | - Fix chunked encoding on responses carrying a Content-Range header. | |
| 1956 | - Do not reuse persistent connections for PUTs to avoid ERR_ZERO_SIZE_OBJECT | |
| 1957 | - ... and several compile errors | |
| 1958 | ||
| c72a2049 AJ |
1959 | Changes to squid-3.2.1 (15 Aug 2012): |
| 1960 | ||
| 1961 | - Bug 3605: memory leak in peer selection | |
| 1962 | - Bug 3478: better default handling without -DSTRICT_ORIGINAL_DST | |
| 1963 | - ... and some documentation updates | |
| 1964 | ||
| a9eec4aa AJ |
1965 | Changes to squid-3.2.0.19 (02 Aug 2012): |
| 1966 | ||
| 1967 | - Regression Bug 3580: IDENT request makes squid crash | |
| 1968 | - Regression Bug 3577: File Descriptors not properly closed | |
| 1969 | - Regression Bug 3478: Allow peer selection and connection auth on intercepted traffic | |
| 1970 | - Regression Fix: Restore memory caching ability | |
| 1971 | - Bug 3556 Workaround: epoll assertion failed: comm.cc:1093: isOpen(fd) | |
| 1972 | - Bug 3551: store_rebuild.cc:116: "store_errors == 0" assertion | |
| 1973 | - Bug 3525: Do not resend nibbled PUTs and avoid "mustAutoConsume" assertion. | |
| 1974 | - Avoid bogus "Disk space over limit" warnings when rebuidling dirty ufs index | |
| 1975 | - Support custom headers in [request|reply]_header_* manglers | |
| 1976 | - ... and much code polishing | |
| 1977 | ||
| 5cc53d80 | 1978 | Changes to squid-3.2.0.18 (29 Jun 2012): |
| f787354b AJ |
1979 | |
| 1980 | - Bug 3576: ICY streams being Transfer-Encoding:chunked | |
| 1981 | - Bug 3537: statistics histogram leaks memory | |
| 1982 | - Bug 3526: digest authentication crash | |
| 1983 | - Bug 3484: Docs: sslproxy_cert_error example flawed | |
| 1984 | - Bug 3462: Delay Pools and ICAP | |
| 1985 | - Bug 3405: ssl_crtd crashes failing to remove certificate | |
| 1986 | - Bug 3380: Mac OSX compile errors with CMSG_SPACE | |
| 1987 | - Bug 3258: Requests hang when Host forgery verify fails | |
| 1988 | - Bug 3186: Digest auth caches failed state without revalidating | |
| 1989 | - Bug 2976: ERR_INVALID_URL for transparently captured requests when reconfiguring | |
| 1990 | - Bug 2885: AIX: check and set required compiler flags | |
| 1991 | - Fix ssl_crtd compile issues with libsslutil | |
| 1992 | - Fix build with GCC 4.7 (and probably other C++11 compilers). | |
| 1993 | - Fix double-escape of %R on deny_info redirect responses | |
| 1994 | - Support status 308 Permanent Redirect | |
| 1995 | - Support for TLSv1.1 and TLSv1.2 options and methods | |
| 1996 | - Support passing external_acl_type credentials on ICAP | |
| 1997 | - Language Updates: fr, hy, pt_BR | |
| 1998 | - ... and many compile issues on Windows | |
| 1999 | - ... and some minor code polish | |
| 2000 | ||
| 5cc53d80 | 2001 | Changes to squid-3.2.0.17 (12 Apr 2012): |
| f949585d AJ |
2002 | |
| 2003 | - Bug 3527: EUI compile errors on Mac OS X 10.5.8 PPC | |
| 2004 | - Bug 3509: kQueue compile error | |
| 2005 | - Bug 3505: crash in CbcPointer<Comm::ConnOpener> constructor | |
| 2006 | - Bug 3441: Part 3: Replace corrupted v1 swap.state with new v2 format. | |
| 2007 | - Bug 3397: do not mark connection as opened until after SYN-ACK | |
| 2008 | - Bug 3193: NTLM decoder truncating strings | |
| 2009 | - Windows FD handling polish and some fixes | |
| 2010 | - Solaris 9/10 various build fixes | |
| 2011 | - ... and some more code polish | |
| 2012 | ||
| 5cc53d80 | 2013 | Changes to squid-3.2.0.16 (07 Mar 2012): |
| 488e6901 AJ |
2014 | |
| 2015 | - Bug 3508: Correct DNS timeout handling. | |
| 2016 | - Bug 3503: DNS PTR queries timeout due to wrong QIDs. | |
| 2017 | - Bug 3497: Bad ssl_crtd db size file causes infinite loop | |
| 2018 | - Bug 3490: part 1: SegFault opening FTP active data connections | |
| 2019 | - Bug 3490: Crash writing Apache Common and Referer/Useragent logs | |
| c5426f8f | 2020 | - Bug 3458: Icon Serving (squid-internal-static) Broken |
| 488e6901 AJ |
2021 | - Bug 3457: Display TLS error details in ERR_SECURE_CONNECT_FAIL |
| 2022 | - Bug 3381: 32-bit overflow assertion in StatHist | |
| 2023 | - Bug 3324: loadFromFile: parse error while reading template file | |
| 2024 | - Support sslpassword_program for ssl-bump HTTP ports | |
| 2025 | - Support CoAP protocol coap:// and coaps:// URL schemes in HTTP requests | |
| 2026 | - Retry requests that failed due to a persistent connection race | |
| 2027 | - Log '-' on requests with no Referer or User-Agent headers | |
| 2028 | - ... and several fixes related to in-transit object performance | |
| 2029 | - ... and some structural design changes for portability | |
| 2030 | ||
| 5cc53d80 | 2031 | Changes to squid-3.2.0.15 (06 Feb 2012): |
| f9329b54 AJ |
2032 | |
| 2033 | - Bug 3472: segfault with the message 'urlParse: URL too large' | |
| 2034 | - Bug 3471: segfault when %la formating code used | |
| 2035 | - Bug 3449: part 3: shm_open can fail with a mangled path | |
| 2036 | - Bug 3449: part 4: shm_open failed (fixing memory_cache_shared defaults) | |
| 2037 | - Bug 3448: 204 response problem in adaptation chains | |
| 2038 | - Bug 3447: assertion failed: CommCalls.h:150: "dp" | |
| 2039 | - Bug 3461: build regression in IPFilter NAT | |
| 2040 | - Bug 3413: raise cbdata lock limits | |
| 2041 | - Bug 3391: forwarded_for log functionality broken | |
| 2042 | - Bug 3268: Squid cannot do anything else during ufs/diskd rebuild | |
| 2043 | - Bug 3268: remove wrong 'Ready to serve requests.' message | |
| 2044 | - Bug 2519: ssl_bump + Authentication (LDAP Digest) issues | |
| 2045 | - Disable OpenSSL SSL/TLS bug workarounds by default | |
| 2046 | - Send DNS A and AAAA queries in parallel | |
| 2047 | - Cache Manager migration support | |
| 2048 | - Allow service of internal requests over reverse-proxy ports | |
| 2049 | - Fix trimMemory for unswappable objects | |
| 2050 | - ... and several build and polish fixes | |
| 2051 | ||
| 902bc38b AJ |
2052 | Changes to squid-3.2.0.14 (12 Dec 2011): |
| 2053 | ||
| 2054 | - Bug 3433: Segfault closing SNMP | |
| 2055 | - Bug 3420: Request body consumption races and !theConsumer exception. | |
| 2056 | - Bug 3406: SSL Log Error in debug | |
| 2057 | - Bug 3383: store.cc:1631: "new_status != IN_MEMORY" assertion | |
| 2058 | - Bug 3383: unhandled exception: theGroupBSize > 0 | |
| 2059 | - Bug 3377: assertion failed: store.cc:885: "store_status == STORE_PENDING" | |
| 2060 | - Bug 3367: fix inverted check on host_strict_verify | |
| 2061 | - Bug 3366: assertion comm.cc:1276: isOpen(fd) via CompositePoolNode::kickReads | |
| 2062 | - Bug 3364: SNMP Orphans | |
| 2063 | - Bug 3301: ERR_DNS_FAIL never shown | |
| 2064 | - Bug 3150: do not start useless unlinkd | |
| 2065 | - ext_session_acl: version 1.2 | |
| 2066 | - Add adaptation_meta option | |
| 2067 | - Add a mask on the qos_flows miss configuration value | |
| 2068 | - Support intermediate CA in ssl-bump traffic certificates | |
| 2069 | - Support SSL certificate failure details on error page | |
| 2070 | - Fix flags for NAT intercept and TPROXY not set correctly | |
| 2071 | - Fix fastCheck() default result on multi-line actions | |
| 2072 | - Fix missing SMP shared memory statistics | |
| 2073 | - Fix Comm::Write closing() assertion when retrying a failed UDP DNS query | |
| 2074 | - ... and several other TCP and SMP support behaviour fixes | |
| 2075 | - ... and many code polishing cleanups and fixed build errors | |
| 2076 | - ... and several documentation polishings | |
| 2077 | ||
| 8fe9e0a2 AJ |
2078 | Changes to squid-3.2.0.13 (14 Oct 2011): |
| 2079 | ||
| 2080 | - Regression Bug 3363: never_direct always 'unable to forward this request at this time' | |
| 2081 | - Regression Bug 3351: FTP timeout causing "store_status == STORE_PENDING" assertion | |
| 2082 | - Regression Bug 3336: reconfigure assertion 'hlp->childs.n_running > 0' | |
| 2083 | - Regression fix: always_direct/never_direct failures | |
| 2084 | - Regression fix: stop an SSL header file being included after --disable-ssl | |
| 2085 | - Regression fix: parse HTTP list headers with embedded 8-bit characters | |
| 2086 | - Bug 3355: configure setting --with-swapdir ignored | |
| 2087 | - Bug 3325: option to selectively enable strict host verify checks | |
| 2088 | - Bug 3337: HTTP status 200 is not accepted for deny_info | |
| 2089 | - Bug 3077: '\' in url query strings cause Digest authentication to fail | |
| 2090 | - Support SMP worker shared memory cache | |
| 2091 | - Support SMP worker shared disk cache (rock) | |
| 2092 | - ext_session_acl: version 1.1 | |
| 2093 | - Fix Host verify: do not pinn destination IP if URL re-write has been done | |
| 2094 | - Fix IPF interception | |
| 2095 | - Fix ssl_crtd "Cannot add certificate to db" when updating expired cert | |
| 2096 | - Fix ssl_crtd CertificateDB locking scheme | |
| 2097 | - ... and all changes from 3.1.16 | |
| 2098 | - ... and many compile and polishing fixes | |
| 2099 | ||
| f96fd18d AJ |
2100 | Changes to squid-3.2.0.12 (17 Sep 2011): |
| 2101 | ||
| 2102 | - Regression Bug 3335: ICAP service is down | |
| 2103 | - Regression Bug 3322: adapt:: and icap:: format codes do not parse | |
| 2104 | - Regression Bug 3303: Support for non-English usernames in log files | |
| 2105 | - Regression Bug 3259: assertion failed: Connection.cc:29: 'fd<0' after REVIVED PARENT | |
| 2106 | - Regression: %I shows hostname on SSL error page | |
| 2107 | - Regression: FTP outgoing port always 'in use' on PASV connections | |
| 2108 | - Bug 3337: (partial) status 200 is not accepted for deny_info | |
| 2109 | - Bug 3319: Inconsistencies in error messages | |
| 2110 | - Bug 3281: pconn in-use while closing assertion | |
| 2111 | - Bug 3243: Fix cases: raw-IPv6, case variant FQDN, internal request | |
| 2112 | - Fixed max-stale check. Entities not exceeding max-stale were marked as stale | |
| 2113 | - Adjust format code %la for intercepted connections | |
| 2114 | - Log ICAP_ERR_GONE ICAP transaction outcome when ICAP initiator disappears early | |
| 2115 | - Send RST packet when closing an ICAP connection after a transaction error | |
| 2116 | - Support maximum field width for string access.log fields | |
| 2117 | ||
| 2284b7f7 AJ |
2118 | Changes to squid-3.2.0.11 (28 Aug 2011): |
| 2119 | ||
| 2120 | - Bug 3243: CVE-2009-0801 Bypass of browser same-origin access control | |
| 2121 | - Host: authority validation of intercepted destination IP | |
| 2122 | - Host: authority validation of request URL | |
| 2123 | - Host: authority validation of CONNECT tunnel destination | |
| 2124 | - Preserve client destination IP in intercepted communication | |
| 2125 | - Regression Bug 3316: Failed to connect to nameserver using TCP | |
| 2126 | - Regression Bug 3311: segmentation fault in getMyPort() with only intercept port set | |
| 2127 | - Regression Bug 3310: %<pt translates as %<p | |
| 2128 | - Regression Bug 3301: ERR_DNS_FAIL never shown (partial) | |
| 2129 | - Regression Bug 3288: %<la and %<lp not displaying | |
| 2130 | - Bug 3289: cache manager parameters not parsed without password | |
| 2131 | - Bug 2279: Log Format options to log server source IP and port | |
| 2132 | - Bug 3211: ssl_crtd start even if no ssl-bump port is configured | |
| 2133 | - Bug 3138: squidclient mgr:objects/mgr:vm_objects never ends | |
| 2134 | - Bug 3118: ecap_enable on forces icap_enable on | |
| 2135 | - Bug 3107: ncsa_auth DES silently truncates passwords to 8 bytes | |
| 2136 | - Default to vhost for accelerator mode (reverse proxy) | |
| 2137 | - Display HTTP protocol syntax at section 11 level 2 | |
| 2138 | - Support for using custom keys in CARP parents | |
| 2139 | - Optimize regular expression ACLs | |
| 2140 | - ... and a lot of code portability fixes | |
| 2141 | - ... and all bugs and polish changes from 3.1.15 | |
| 2142 | ||
| 3ff024ec AJ |
2143 | Changes to squid-3.2.0.10 (24 Jul 2011): |
| 2144 | ||
| 2145 | - Port from 2.7: act-as-origin for reverse proxy ports | |
| 2146 | - Regression fix: broken --disable-ipv6 | |
| 2147 | - Regression fix: negative cacheing on unknown or -1 expiry timestamp | |
| 2148 | - Regression fix: vhost and defaultsite causing vport to be ignored | |
| 2149 | - Regression fix: several errors in persistent connection handling | |
| 2150 | - Regression Bug 3280: allow max-size unset and min-size=N for large objects | |
| 2151 | - Regression Bug 3245: reconfigure assertion in MemPools[type] | |
| 2152 | - Regression Bug 3274: assertion failed: CommCalls.h:144: "dp" | |
| 2153 | - Regression Bug 3273: assertion comm.cc:775: Comm::IsConnOpen(conn) | |
| 2154 | - Regression Bug 3269: cache.log applyQueryParams messages | |
| 2155 | - Regression Bug 3264: Segmentation Fault in src/ipc/Strand.cc(54) receive: 3 | |
| 2156 | - Regression Bug 3246: assertion client_side.cc:1407 connIsUsable(http->getConn()) | |
| 2157 | - Bug 3267: workers IPC mount points disobey --localstatedir | |
| 2158 | - Bug 3248: login=NEGOTIATE sends wrong auth header to origin peers | |
| 2159 | - Bug 3247: Domain from URL Stripped when going through peers | |
| 2160 | - Bug 3244: wrong port for peer relayed requests | |
| 2161 | - Bug 3195: kerberos_ldap_group will not build without kerberos | |
| 2162 | - Bug 2862: add http(s):// support to cache manager | |
| 2163 | - kerberos_ldap_group: several fixes to -S option | |
| 2164 | - ssl_crtd: Add man(8) file | |
| 2165 | - ... and several pieces of code cleanup and polishing. | |
| 2166 | - ... and most bug fixes and updates from 3.1.14 and 3.1.15 | |
| 2167 | ||
| 6d44d1e9 AJ |
2168 | Changes to squid-3.2.0.9 (18 Jun 2011): |
| 2169 | ||
| 2170 | - Bug 3159: delay pools --disable-auth compile problems | |
| 2171 | - HTTP/1.1: Support multiline quoted-string header fields | |
| 2172 | - HTTP/1.1: Send 505 Unsupported Version on mangled version codes | |
| 2173 | - Support configurable and translated SSL error details messages | |
| 2174 | - Add log format codes for split client/server views of HTTP request line | |
| 2175 | - Major upgrade of TCP connection handling | |
| 2176 | - Support split-stack IPv6 to servers | |
| 2177 | - Support persistent connections with tcp_outgoing_address/tcp_outgoing_tos | |
| 2178 | - Optimized persistent connection handling | |
| 2179 | - Optimized FTP data connection handling | |
| 2180 | - Optimized TCP failure recovery | |
| 2181 | - ... and all bug fixes and updates from 3.1.12.3 | |
| 2182 | - ... and many code polish, documentation and translation cleanups | |
| 2183 | ||
| 65f2789a AJ |
2184 | Changes to squid-3.2.0.8 (30 May 2011): |
| 2185 | ||
| 2186 | - Bug 3214: "helperHandleRead: unexpected read from ssl_crtd" errors. | |
| 2187 | - Bug 3043: Properly detect Iphlpapi.h on windows | |
| 2188 | - Bug 2055: Honor ICAP Max-Connections | |
| 2189 | - Fix NTLM/Negotiate reply auth PASSTHRU to peers | |
| 2190 | - Support SSL SNI to origin servers | |
| 2191 | - Add %EXT_LOG and %EXT_TAG external_acl_type format options | |
| 2192 | - Add %b tag for proxy listening port display in error pages | |
| 2193 | - Optimize base64 encoding/decoding | |
| 2194 | - Require libcap before enabling netfilter MARK support | |
| 2195 | - Require libtool 2.2 | |
| 2196 | - Bundle pkg.m4 from pkg-config 0.25 for OS without pkg-config | |
| 2197 | - ... and all bug fixes and updates from 3.1.12.2 | |
| 2198 | - ... and some documentation and code polishing | |
| 2199 | ||
| 065f7779 AJ |
2200 | Changes to squid-3.2.0.7 (19 Apr 2011): |
| 2201 | ||
| 2202 | - Regression fix: NTLM and Negotiate auth assertion "RefCountCount() == 2" | |
| 2203 | - Regression fix: icons/ FHS compliance | |
| 2204 | - Regression fix: Startup aborts with URL error when --disable-htcp | |
| 2205 | - Bug 3192: comm.cc:216: "fd_table[fd].halfClosedReader != NULL" | |
| 2206 | - Add negotiate_wrapper_auth version 1.0.1 | |
| 2207 | - Fixed %dt logging in the presence of REQMOD | |
| 2208 | - Fixed chunked request forwarding in ICAP REQMOD presence | |
| 2209 | - ... all bug fixes and updates from 3.1.12.1 | |
| 2210 | - ... many code polishings and display cleanups | |
| 2211 | ||
| 7d9ce496 AJ |
2212 | Changes to squid-3.2.0.6 (04 Apr 2011): |
| 2213 | ||
| 2214 | - Regression fix: upgrade existing icons | |
| 61beade2 | 2215 | - Regression fix: do not crash when accessing an SSL certificate with errors |
| 7d9ce496 AJ |
2216 | - Regression fix: prevent stdio log module segfaults on rotate |
| 2217 | - Regression fix: shutdown properly even if a worker process crashes on exit | |
| 2218 | - Regression Bug 3159: (partial fix) ICAP and --disable-auth compile problems | |
| 2219 | - Bug 3170: "Unsupported or unconfigured/inactive proxy-auth scheme" on shutdown | |
| 2220 | - Bug 3105: malformed Proxy-Authorization leaks memory | |
| 2221 | - Bug 3007: CONNECT to cache_peer returns 000 status code | |
| 2222 | - Bug 2885: Compile errors on AIX | |
| 2223 | - Support parameterized Cache Manager queries | |
| 2224 | - Support libecap v0.2.0; fixed eCAP body handling and logging | |
| 2225 | - Support dynamic adaptation plans that cover multiple vectoring points | |
| 2226 | - Support %D details for documented OpenSSL errors | |
| 2227 | - Support logging of all transactions including those with uncertain status or no sent response | |
| 2228 | - Updrate negotiate_kerberos_auth to version 3.0.4sq | |
| 2229 | - Update ext_kerberos_ldap_group_acl to version 1.3.0sq | |
| 2230 | - Update ext_edirectory_userip_acl to version 2.1 | |
| 2231 | - Convert dns_timeout and dns_retransmit_interval directives to use millisecond resolution | |
| 2232 | - Change the default dns_timeout value from 2 minutes to 30 seconds | |
| 2233 | - Fix TCP log stream flushing on every line | |
| 2234 | - ... all bug fixes and updates from 3.1.12 | |
| 2235 | - ... a great many compiler portability fixes | |
| 2236 | - ... many code polishings and display cleanups | |
| 2237 | ||
| 850ff99f AJ |
2238 | Changes to squid-3.2.0.5 (12 Feb 2011): |
| 2239 | ||
| 2240 | - Regression Fix: profiler should not be built by default | |
| 2241 | - Regression Bug 3081: assertion failed: AsyncCallQueue | |
| 2242 | - Regression Bug 2948: Requests for FTP active downloads cause failed assertion | |
| 2243 | - Bug 3089: FTP command output overrides directory listing | |
| 2244 | - Bug 2870: --disable-auth does not work | |
| 2245 | - Bug 2586: multiple memory leaks during reconfigure | |
| 2246 | - Bug 2581: FTP directory listing sometimes fails | |
| 2247 | - Port from 2.7: maximum staleness limits | |
| 2248 | - HTTP/1.1: Support RFC 5861 Cache-Control: stale-if-error option | |
| 2249 | - HTTP/1.1: Support configurable status codes for deny_info | |
| 2250 | - Support upcoming "fresh message creation" eCAP API | |
| 2251 | - Aggregate SNMP responses when using SMP with multiple workers | |
| 2252 | - Several more Solaris, Windows and ICC support fixes | |
| 2253 | - ... all bug fixes and updates from 3.1.11 | |
| 2254 | - ... and more code cleanup shufflings | |
| 2255 | - ... and several documentation updates | |
| 2256 | ||
| 834d2128 AJ |
2257 | Changes to squid-3.2.0.4 (22 Dec 2010): |
| 2258 | ||
| 2259 | - Port 2.x: cache_dir min-size setting | |
| 2260 | - Bug 3059: Crash on digest auth headers with unknown nonce | |
| 2261 | - Fix cachemgr reported HTTP/ICP requests/messages per minute when multiple workers used | |
| 2262 | - Fix cachemgr mem-pools reporting | |
| 2263 | - Add Dynamic SSL certificate generation | |
| 2264 | - Add useragent, referer, combined built-in log formats | |
| 2265 | - Obsolete log_fqdn directive | |
| 2266 | - Obsolete useragent/referer/forward_log directives | |
| 2267 | - HTTP/1.1: Send 1.1 on CONNECT responses | |
| 2268 | - Updated Kerberos support for newer GSSAPI releases | |
| 2269 | - Improve handling of adapted body delivery failures in REQMOD request satisfaction mode | |
| 2270 | - Improve handling of early eCAP transaction failures | |
| 2271 | - Various ext_edirectory_acl fixes | |
| 2272 | - ... all bug and feature fixes included in 3.1.10 release | |
| 2273 | - ... and a lot of code and documentation polishing | |
| 2274 | ||
| 1664edf4 | 2275 | Changes to squid-3.2.0.3 (07 Nov 2010): |
| b40d9a33 AJ |
2276 | |
| 2277 | - Regression fix: SMP broke ICP outgoing IP lookup if no udp_outgoing_addr set | |
| 2278 | - Regression fix: ESI processing of Surrogate filter | |
| 1664edf4 | 2279 | - Bug 3091: bypassed ICAP errors are not counted as service failures |
| b40d9a33 | 2280 | - Bug 3048: "commio_has_callback(fd, IOCB_READ, ccb)" assertion. |
| 1664edf4 | 2281 | - Bug 3038: Detatch libmisc from libcompat |
| b40d9a33 AJ |
2282 | - Bug 3028: Permit wbinfo_group.pl to authenticate Kerberos users with NT domain |
| 2283 | - Bug 3002: store initialization (-z) does not work with SMP configs | |
| 2284 | - Bug 2999: v2.0 of ext_edirectory_userip_acl | |
| 2285 | - Bug 2785: DNS needs to set EDNS options advertising Squid capabilities | |
| 2286 | - Bug 595: Add %err_code and %err_detail logformat codes for transaction failures | |
| 2287 | - HTTP/1.1: support If-Match and If-None-Match requests | |
| 2288 | - HTTP/1.1: forward 1xx control messages to clients that support them | |
| 2289 | - HTTP/1.1: send Age:0 header even if it may break IE5 | |
| 2290 | - HTTP/1.1: dechunk incoming requests and chunk outgoing requests | |
| 2291 | - HTTP/1.1: entry is stale if request has max-age=0 | |
| 2292 | - HTTP/1.1: harden quoted-string parser | |
| 2293 | - Add --enable-build-info for extra "squid -v" display | |
| 2294 | - Add --with-swapdir=PATH to override default /var/cache/squid | |
| 2295 | - Add cpu_affinity_map directive to bind workers to CPU cores | |
| 2296 | - Add Netfilter MARK support for QoS | |
| 2297 | - Add upgrade process for obsolete options | |
| 2298 | - Add support for RFC 2965 Set-Cookie2 / Cookie2 headers | |
| 2299 | - Add support for client send bandwidth limits (a.k.a., quota or delay pool) | |
| 2300 | - Fixes Eui48 support on OpenBSD | |
| 2301 | - Fixes cache manager support with SMP configs | |
| 2302 | - ... several documentation updates | |
| 2303 | - ... all bug and feature fixes included in 3.1.9 release. | |
| 2304 | - ... many more code polishes and leak removals | |
| 2305 | ||
| dee6a922 AJ |
2306 | Changes to squid-3.2.0.2 (04 Sep 2010): |
| 2307 | ||
| 2308 | - Bug 3015: assertion failed: comm.cc:143: "ccb->active()" | |
| 2309 | - Support rotating logs from cachemgr and squidclient | |
| 2310 | - Support Kerberos authentication in squidclient | |
| 2311 | - Add manual page for negotiate_kerberos_auth | |
| 2312 | - Add helper ext_kerberos_ldap_group_acl to lookup Kerberos/NTLM group via LDAP | |
| 2313 | - Add tool 'purge' for management of UFS/AUFS/DiskD caches (experimental) | |
| 2314 | - Added log options %http::<bs and %icap::<bs | |
| 2315 | - Collapse HTCP cache_peer options into one setting | |
| 2316 | - Improved request smuggling attack detection. Tolerating valid benign HTTP | |
| 2317 | - ... and several HTTP/1.1 compliance improvements | |
| 2318 | - ... and all improvements in 3.1.7 and 3.1.8 | |
| 2319 | ||
| 6be4a9a8 AJ |
2320 | Changes to squid-3.2.0.1 (03 Aug 2010): |
| 2321 | ||
| 2322 | - Port from 2.7: Logging infrastructure updates | |
| 2323 | - Port from 2.7: Unique sequence number per log line | |
| 2324 | - Port from 2.6: STORE_META_OBJSIZE swapout storage type | |
| 2325 | - Bug 2792: tcp_outgoing_addr does not work with TPROXY | |
| 2326 | - Bug 2631: refresh_pattern store-stale option | |
| 2327 | - Bug 2305: Multiple leaks and assertion crashes in authentication | |
| 2328 | - Bug 1239: Much needed ACL type random | |
| 2329 | - Bug 7: (partial): Migrate on-disk objects to cache_mem on hit/refresh and update | |
| 2330 | - Support full Surrogate/1.0 protocol extensions to HTTP for reverse-proxies | |
| 2331 | - Support SMP for essential non-caching functionality | |
| 2332 | - Support logging over TCP | |
| 2333 | - Support Solaris 10 pthreads (experimental) | |
| 2334 | - Support Kerberos login to peers | |
| 2335 | - Support EUI / MAC in more environments | |
| 2336 | - Support format tags in deny_info URLs | |
| 2337 | - Support running helpers on-demand instead of all at startup | |
| 2338 | - Support fully transparent login=PASSTHRU of authentication headers to peers | |
| 2339 | - Support multi-lingual localised FTP directory listings | |
| 2340 | - Support TPROXYv4 spoofing of X-Forwarded-For client address | |
| 2341 | - Support ICAP 206 Partial Content extension | |
| 2342 | - Append the _ABORTED or _TIMEDOUT suffixes to the action access.log field | |
| 2343 | - Add ACL support to range_offset_limit | |
| 2344 | - Add helpers for url_rewrite | |
| 2345 | - Add helper multiplexer for concurrency emulation with legacy helpers | |
| 2346 | - Add Perl library which facilitates parsing access logfile entries. | |
| 2347 | - Add a simple script to summarise traffic use per user | |
| 2348 | - Add templates for captive portal proxy configuration instructions | |
| 2349 | - Add logging of the local TCP port used by transactions with HTTP servers | |
| 2350 | - Update mswin_check_ad_group to version 2.0 | |
| 2351 | - Update squid_kerb_auth helper to version 3.0.2 | |
| 2352 | - Remove double-language error page hack (replaced by locale auto-negotiation) | |
| 2353 | - Remove TPROXYv2 support (replaced by TPROXYv4) | |
| 2354 | - Remove no_check.pl NTLM helper (replaced by ntlm_fake_auth) | |
| 2355 | - Re-work ./configure script for smarter auto-detect and early error checks | |
| 2356 | - Auto-enable all features by default | |
| 2357 | - Workaround com_err.h C++ brokenness triggered by OpenSSL includes | |
| 2358 | - Helpers naming scheme | |
| 2359 | - Add support for write timeouts | |
| 2360 | - Modify icap_service_failure_limit option to forget old ICAP errors | |
| 2361 | - Updated man(8) manuals including several additions and translations | |
| 2362 | - ... and a great many code cleanups | |
| 2363 | - ... and a great many testing improvements | |
| 2364 | - ... and many documentation updates | |
| 2365 | ||
| 56eea3f2 AJ |
2366 | Changes to squid-3.1.23 (09 Jan 2013): |
| 2367 | ||
| 2368 | - Additional fixes for CVE-2012-5643 / SQUID:2012-1 | |
| 2369 | ||
| bd4920ca AJ |
2370 | Changes to squid-3.1.22 (03 Dec 2012): |
| 2371 | ||
| 2372 | - Bug 3685: Squid hangs in Delay Pools ClassCBucket::update | |
| 2373 | - Bug 3659: read_timeout problem with HTTPS | |
| 2374 | - Bug 3654: Fix IPv6 enabled squidclient | |
| 2375 | - Bug 3189: AIO thread race on pipe() initialization | |
| 2376 | - cachemgr.cgi: Memory Leaks and DoS Vulnerability | |
| 2377 | ||
| 4c73ceb8 AJ |
2378 | Changes to squid-3.1.21 (23 Sep 2012): |
| 2379 | ||
| 2380 | - Bug 3622: peerClearRRStart scheduling multiple events | |
| 2381 | - Bug 3615: configure check for default max number of FDs is broken | |
| 2382 | - Bug 3607: --enable-auth documented default action incorrect | |
| 2383 | - Bug 3593: socket failure: Address family not supported by protocol | |
| 2384 | - Bug 3584: Detection of setresuid() is broken | |
| 2385 | - Bug 3568: Consolidate external_acl_type config dumping and add missing %% | |
| 2386 | - Bug 3564: eCAP not supporting CoAP URI schemes | |
| 2387 | - Bug 3484: Docs: sslproxy_cert_error example flawed | |
| 2388 | - Bug 3462: Delay Pools and ICAP | |
| 2389 | - Bug 3133: better fix: Memory leak handling requests for sites that don't exist | |
| 2390 | - Bug 2976: ERR_INVALID_URL for transparently captured requests when reconfiguring | |
| 2391 | - Silence IOS 15.1 unknown capabilities messages. | |
| 2392 | - Account for Store disk client quota when bandwidth-limiting the server. | |
| 2393 | - ... and several documentation fixes | |
| 2394 | - ... and several compile fixes | |
| 2395 | ||
| 5cc53d80 | 2396 | Changes to squid-3.1.20 (08 Jun 2012): |
| dd8d2619 AJ |
2397 | |
| 2398 | - Regression Bug 3545: FreeBSD dnsserver segfaults | |
| 2399 | - Regression Bug 3504: clientside_tos fails to mark traffic | |
| 2400 | - Bug 3539: CONNECT server connection not closed correctly on errors | |
| 2401 | - Bug 3502: client timeout uses server-side read_timeout, not request_timeout | |
| 2402 | - Bug 3466: Adaptation stuck on last single-byte body piece | |
| 2403 | - Bug 3463: dnsserver fails to compile | |
| 2404 | - Bug 3439: correct external_acl_type documented default for ipv4/ipv6 option | |
| 2405 | - Bug 3390: Proxy auth data visible to scripts | |
| 2406 | - Bug 3263: ssl_crtd: undefined references to squid_curtime | |
| 2407 | - Bug 3233: Invalid URL accepted with url host is white spaces | |
| 2408 | - Bug 3133: Memory leak handling requests for sites that don't exist | |
| 2409 | - Bug 3074: Improper URL handling with empty path (RFC 3986) | |
| 2410 | - Bug 3013: segmentation fault on shutdown commSetCloseOnExec at comm.cc:1889 | |
| 2411 | - Regression: snmp/udp address directives not resolving hostname | |
| 2412 | - Better helper-to-Squid buffer size management. | |
| 2413 | - Support CoAP over HTTP (coap:// and coaps:// URLs) | |
| 2414 | - Support for 3.2 error template codes | |
| 2415 | ||
| 5cc53d80 | 2416 | Changes to squid-3.1.19 (06 Feb 2012): |
| f9329b54 AJ |
2417 | |
| 2418 | - Regression Bug 3441: part 2: Prevent further cache size corruption of swap.state | |
| 2419 | - Bug 3473: erase last uses of obsolete auth_user_hash_pointer | |
| 2420 | - Bug 3470: GCC 4.7 | |
| 2421 | - Bug 3442: assertion failed: external_acl.cc:908: ch->auth_user_request != NULL | |
| 2422 | - Bug 3441: part 1: Minimize cache size corruption by malformed swap.state | |
| 2423 | - Bug 3440: compile error in Adaptation | |
| 2424 | - Bug 3420: Request body consumption races and !theConsumer exception | |
| 2425 | - Bug 3370: external ACL sometimes skipping | |
| 2426 | - Bug 3085: Crash when parsing esi:include | |
| 2427 | - HTTP/1.1: do not add 110 and 111 Warnings to revalidated responses | |
| 2428 | - Fix SSL library dependency fixes | |
| 2429 | ||
| 339383cc AJ |
2430 | Changes to squid-3.1.18 (03 Dec 2011): |
| 2431 | ||
| 2432 | - Regression: compile error in FTP | |
| 2433 | ||
| c218b24d AJ |
2434 | Changes to squid-3.1.17 (03 Dec 2011): |
| 2435 | ||
| 2436 | - Bug 3432: Crash logging FTP errors | |
| 2437 | - Bug 3428: Active FTP data channel accepted twice | |
| 2438 | - Bug 3423: access violation in URL parser | |
| 2439 | - Bug 3422: Buffer overflow in recv-announce | |
| 2440 | - Bug 3412: External ACL Uses Invalid Cache Entry | |
| 2441 | - Bug 3408: Wrong header length leads to EFAULTs when creating UFS swap.log.new | |
| 2442 | - Bug 3398: persistent server connection closed after PUT/DELETE | |
| 2443 | - Bug 3299: dnsserver: various undefined references | |
| 2444 | - Bug 3077: '\' in url query strings cause Digest authentication to fail | |
| 2445 | - Bug 2910: MemBuf may grow beyond max_capacity | |
| 2446 | - Bug 2619: Excessive RAM growth due to unlimited adapted body data consumption | |
| 2447 | - Bug 1243: Build overrides configured AR setting | |
| 2448 | - Avoid crashes when processing bad X509 common names (CN). | |
| 2449 | - Support %% in external ACL format | |
| 2450 | - ... and several other compile error fixes | |
| 2451 | - ... and several documentation fixes | |
| 2452 | ||
| 8fe9e0a2 AJ |
2453 | Changes to squid-3.1.16 (14 Oct 2011): |
| 2454 | ||
| 2455 | - Bug 3373: invalid URL in ERR_CACHE_ACCESS_DENIED | |
| 2456 | - Bug 3368: Unhandled exceptions are not logged (workaround) | |
| 2457 | - Bug 3326: miss_access incorrect default | |
| 2458 | - Bug 3320: miss_access description confusing | |
| 2459 | - Bug 3241: squid_kerb_auth cross compilation fix | |
| 2460 | - Bug 3237: seq fault in free() from rfc1035RRDestroy | |
| 2461 | - Bug 3190: Large HTTP POST stuck after early ICAP 400 error response | |
| 2462 | - db_auth: display available DSN drivers on connect error | |
| 2463 | - Updated OpenSSL 1.0.0 version checks | |
| 2464 | - ... and several documentation fixes | |
| 2465 | ||
| 2f954743 AJ |
2466 | Changes to squid-3.1.15 (28 Aug 2011): |
| 2467 | ||
| 2468 | - Regression fix: vhost and defaultsite causing vport to be ignored | |
| 2284b7f7 | 2469 | - Regression Bug 3295: broken escaping in rfc1738_do_escape |
| 2f954743 AJ |
2470 | - Bug #3232: fails to compile with OpenSSL v1.0.0 |
| 2471 | - Bug #3222: cache_peer name is not logging on CONNECT | |
| 2472 | - Bug #3131: fd_table[fd].closing() assert from ConnStateData::noteMoreBodySpaceAvailable() | |
| 2473 | - Bug #3217: "!fd_table[fd].closing()" from ServerStateData::noteMoreBodySpaceAvailable | |
| 2474 | - Bug #3213: https sites (CONNECT) not open when using NTLM | |
| 2475 | - Bug #3114: Memory leak in SSL certificate verify code | |
| 2476 | - Bug #3107: ncsa_auth DES silently truncates passwords to 8 bytes | |
| 2477 | - Bug #2662: cf_gen failure when cross compiling | |
| 2478 | - Bug #2655: passing wrong the username to the url_rewrite_program | |
| 2479 | - Bug #2495: ignore whitespace prefix on config lines | |
| 2480 | - Bug #2051: 'default' cache_peer option does not match documentation | |
| 2481 | - Bug #1842: Optimize order of tests in peerWouldBePinged() and peerHTTPOkay() | |
| 2482 | - Bug #1791: timestampsSet does not validate Date: if server sends very old date | |
| 2483 | - Correct parsing of large Gopher indexes | |
| 2484 | - Enable negative cacheing on unknown or -1 expiry timestamp | |
| 2284b7f7 | 2485 | - Remove hierarchy_stoplist default value |
| 2f954743 AJ |
2486 | - Migrate cf_gen tool from C-style to C++ |
| 2487 | - ... and several documentation and compiler warning fixes | |
| 2488 | ||
| 04f5e27a AJ |
2489 | Changes to squid-3.1.14 (04 Jul 2011): |
| 2490 | ||
| 2491 | - Regression Bug 3261: Could not create a DNS socket and exit | |
| 2492 | ||
| e074e5be AJ |
2493 | Changes to squid-3.1.13 (01 Jul 2011): |
| 2494 | ||
| 2495 | - Regression Bug 3239: problems with myip/myport upgrade | |
| 2496 | - Bug 3153: hung ICAP RESPMOD transactions | |
| 2497 | - Update ssl_crtd to use 'OK' status inline with other helpers | |
| 2498 | ||
| 6d44d1e9 AJ |
2499 | Changes to squid-3.1.12.3 (18 Jun 2011): |
| 2500 | ||
| 2501 | - Bug 3236: Port of %oa, %<lp and %<lp and %<la log format options | |
| 2502 | - Bug 3214: unexpected read from ssl_crtd | |
| 2503 | - Bug 3153: Prevent ICAP RESPMOD transactions getting stuck with the adapted body | |
| 2504 | - Fix RADIUS helper resource leak | |
| 2505 | - Fix segfault parsing digest auth realm | |
| 2506 | - Fix segfault in parse_eol() | |
| 2507 | - Fixed bypass of SSL certificate validation errors | |
| 2508 | - Warn about myip/myport problems on interception proxies | |
| 2509 | - Polish: display easily grepped config lines on -k parse | |
| 2510 | - Fix squidclient -V option and allow non-HTTP protocols to be tested | |
| 2511 | ||
| 65f2789a AJ |
2512 | Changes to squid-3.1.12.2 (30 May 2011): |
| 2513 | ||
| 2514 | - Bug 3226: Tags from external ACLs do not correctly expire | |
| 2515 | - Bug 3215: Malformed IPv6 DNS reverse lookup | |
| 2516 | - Bug 3209: ssl-bumped requests forwarded unencrypted to the parent proxies/caches | |
| 2517 | - Bug 3205: SSL-bump starts then hangs | |
| 2518 | - Bug 3178: gcc-4.6 complains unused variables | |
| 2519 | - Bug 3122: Unknown record type in WCCPv2 Packet (6) | |
| 2520 | - Bug 2965 (partial): Compile errors on MinGW | |
| 2521 | - Fix to only ssl-bump CONNECT requests if they are about to be tunneled | |
| 2522 | - Fix cache manager display of -i/+i in regex ACL config display | |
| 2523 | - Fix cache manager display of cache_peer options userhash and sourcehash | |
| 2524 | - Fix URL re-writer loosing many transaction details | |
| 2525 | - Fix always-true comparison in ICAP for some 32-bit platforms | |
| 2526 | - Support for 'slow' group ACLs in ssl_bump access control | |
| 2527 | - Support OpenSSL 1.0.0 built without SSLv2 | |
| 2528 | - Support GCC 4.6 and binutils-gold | |
| 2529 | - Add CSS id attribute to BODY tag of generated error pages. | |
| 2530 | - Display WARNING and ERROR when max_filedescriptors has failed | |
| 2531 | ||
| 065f7779 AJ |
2532 | Changes to squid-3.1.12.1 (19 Apr 2011): |
| 2533 | ||
| 2534 | - Port from 3.2: Dynamic SSL Certificate generation | |
| 2535 | - Bug 3194: selinux may prevent ntlm_smb_lm_auth from using /tmp | |
| 2536 | - Bug 3185: 3.1.11 fails to compile on OpenBSD 4.8 and 4.9 | |
| 2537 | - Bug 3183: Invalid URL accepted with url host part of only '@' | |
| 2538 | - Display ERROR in cache.log for invalid configured paths | |
| 2539 | - Cache Manager: send User-Agent header from cachemgr.cgi | |
| 2540 | - ... and many portability compile fixes for non-GCC systems. | |
| 2541 | ||
| 7d9ce496 AJ |
2542 | Changes to squid-3.1.12 (04 Apr 2011): |
| 2543 | ||
| 2544 | - Regression fix: Use bigger buffer for server reads. | |
| 2545 | - Regression fix: Add reply_header_replace directive for ability lost since 2.7 | |
| 2546 | - Bug 3181: /dev/poll fails to build on Solaris with GCC 4.5.0 | |
| 2547 | - Bug 3177: assertion failed: comm.cc:1583: "fd >= 0" | |
| 2548 | - Bug 3175: IPv6 PTR lookup crashes on raw-IP URLs when IPv6 disabled | |
| 2549 | - Bug 3173: Assertion bodyPipe!=NULL on SslBump CONNECT response writing failure | |
| 2550 | - Bug 3164: Total memory info display 32-bit overflows | |
| 2551 | - Bug 3155: Werror is hard-coded in libTrie build | |
| 2552 | - Bug 3151: squid_kerb_auth: use autoconf LIBS instead of FLAGS for library linkage | |
| f787354b | 2553 | - Bug 2976: invalid URL on intercepted requests during reconfigure (workaround) |
| 7d9ce496 AJ |
2554 | - Bug 2720: comment in same line as cache/mem_replacement_policy causes error |
| 2555 | - Bug 2621: Provide request headers to RESPMOD when using cache_peer. | |
| 2556 | - Bug 2330: AuthUser objects are never unlocked | |
| 2557 | - Prevent CONNECT request relaying to origin servers | |
| 2558 | - squidclient HTTP/1.1 compliance updates (Pragma and User-Agent headers) | |
| 2559 | - squidclient: send Cache Manager password using -w | |
| 2560 | - eCAP: give full Request-URI to adapters | |
| 2561 | - ... and several debug and error display cleanups | |
| 2562 | ||
| d88ad4db AJ |
2563 | Changes to squid-3.1.11 (08 Feb 2011): |
| 2564 | ||
| 2565 | - Bug 3149: not caching eCAP adapted body | |
| 2566 | - Bug 3144: redirector program blocks while reading STDIN | |
| 2567 | - Bug 3140: memory leak in error page generation | |
| 2568 | - Bug 3137: RADIUS auth helper does not send identifier to RADIUS server | |
| 2569 | - Bug 3115: logging segfaults if access_log is set to a directory | |
| 2570 | - Bug 2968: Show the Vary: headers information in cachemgr objects report | |
| 2571 | - Bug 2959: remove SAMBAPREFIX dependency | |
| 2572 | - Bug 2868: icc doesn't like string literal in assert checks | |
| 2573 | - HTTP/1.1: Send 307 status on deny_info redirection | |
| 2574 | - HTTP/1.1: Support POST/PUT with no body | |
| 2575 | - HTTP/1.1: Allow persistent connections for Mozilla/3.0 User-Agents | |
| 2576 | - Support RFC 5861 Cache-Control: stale-if-error option | |
| 2577 | - Add ftp_eprt directive to disable EPRT extensions in FTP | |
| 2578 | - Fix external_acl_type grace=0 to obey TTL | |
| 2579 | - Fix IP/FQDN cache accounting to avoid idle caches on busy servers | |
| 2580 | - Prevent pipeline_prefetch misconfigurations breaking NTLM/Negotiate auth | |
| 2581 | - ... and some documentation updates and corrections | |
| 2582 | - ... and some portability and stability fixes | |
| 2583 | ||
| 834d2128 AJ |
2584 | Changes to squid-3.1.10 (22 Dec 2010): |
| 2585 | ||
| 2586 | - Bug 3121: memory leak in DigestAuth: AuthUser object is locked twice | |
| 2587 | - Bug 3113: Consuming too much memory when uploading files | |
| 2588 | - Bug 3110: 'reply_body_max_size none' does not work with x-forwarded-for | |
| 2589 | - Bug 3096: Consuming too much memory when delaying traffic | |
| 2590 | - Bug 3091: Bypassed ICAP errors are not counted as service failures | |
| 2591 | - Bug 3090: Polish FTP login error handing | |
| 2592 | - Bug 3068: cache_dir capacity and usage overflows | |
| 2593 | - Bug 3028: Permit wbinfo_group.pl to authenticate Kerberos users with NT domain | |
| 2594 | - Bug 427: HTTP Compliance: Support If-Match and If-None-Match requests | |
| 2595 | - Fix memory leak in adaptation_access | |
| 2596 | - Fix /dev/poll and poll() selection priority | |
| 2597 | - Fix PREFIX/var/run creation during install | |
| 2598 | - Fix cachemgr http_port config report display | |
| 2599 | - Add upgrade help process for obsolete options | |
| 2600 | - Accept RFC 2965 Set-Cookie2 / Cookie2 headers as 'known' | |
| 2601 | - HTTP/1.1: entry is stale if request has max-age=0 | |
| 2602 | - HTTP/1.1: do not forward TRACE with Max-Forwards: 0 after REQMOD | |
| 2603 | - Toolchain update to support newer auto-tools | |
| 2604 | - ... and updated error page translations | |
| 2605 | - ... and updated documentation | |
| 2606 | - ... and some code optimization/simplification polish | |
| 2607 | ||
| e2f4c66a AJ |
2608 | Changes to squid-3.1.9 (25 Oct 2010): |
| 2609 | ||
| 2610 | - Bug 3088: dnsserver is segfaulting | |
| 2611 | - Bug 3084: IPv6 without Host: header in request causes connection to hang | |
| 2612 | - Bug 3082: Typo in error message | |
| 2613 | - Bug 3073: tunnelStateFree memory leak of host member | |
| 2614 | - Bug 3058: errorSend and ICY leak MemBuf object | |
| 2615 | - Bug 3057: 64-bit Solaris 9 Squid unable to determine peer IP and port | |
| 2616 | - Bug 3056: comm.cc "!fd_table[fd].closing()" assertion crash when a helper dies | |
| 2617 | - Bug 3053: cache version 1 LFS support detection broken | |
| 2618 | - Bug 3051: integer display overflow | |
| 2619 | - Bug 3040: Lower-case domain entries from hosts and resolv.conf files | |
| 2620 | - Bug 3036: adaptation_access acls cannot see myportname | |
| 2621 | - Bug 3023: url_rewrite_program silently fails to rewrite on broken URLs | |
| 2622 | - Bug 2964: Prevent memory leaks when ICAP transactions fail | |
| 2623 | - Bug 2808: getRoundRobinParent not handling weights correctly | |
| 2624 | - Bug 2793: memory statistics sometimes display wrong | |
| 2625 | - Bug 2356: Port from 2.7: Solaris /dev/poll event ports support | |
| 2626 | - Bug 2311: crashes with ICAP RESPMOD for HTTP body size greater than 100kb | |
| 2627 | - Ensure /var/cache or jail equivalent exists on install | |
| 2628 | - HTTP/1.1: delete Warnings that have warning-date different from Date | |
| 2629 | - HTTP/1.1: do not remove ETag header from partial responses | |
| 2630 | - HTTP/1.1: make date parser stricter to better handle malformed Expires | |
| 2631 | - HTTP/1.1: improve age calculation | |
| 2632 | - HTTP/1.1: reply with a 504 error if required validation fails | |
| 2633 | - HTTP/1.1: add appropriate Warnings if serving a stale hit | |
| 2634 | - HTTP/1.1: support requests with Cache-Control: min-fresh | |
| 2635 | - HTTP/1.1: do not cache replies to requests with Cache-Control: no-store | |
| 2636 | - squidclient: Display IP(s) connected to in verbose (-v) display | |
| 2637 | - Fixes several issues with ICAP persistent connections | |
| 2638 | - Fixes small leaks in Netdb, DNS, ICAP, ICY, HTTPS | |
| 2639 | - ... and some cosmetic polishing | |
| 2640 | ||
| dee6a922 AJ |
2641 | Changes to squid-3.1.8 (04 Sep 2010): |
| 2642 | ||
| 2643 | - Bug 3033: incorrect information regarding TOS | |
| 2644 | - Bug 3020: Segmentation fault: nameservers[vc->ns].vc = NULL | |
| 2645 | - Bug 3005,2972: Locate LTDL headers correctly (again) | |
| 2646 | - Bug 2872: leaking file descriptors | |
| 2647 | - Bug 2583: pure virtual method called | |
| 2648 | - Hardened DNS client against packet queue attacks | |
| 2649 | - Hardened HTTP request-line parser | |
| 2650 | - Several HTTP/1.1 support improvements | |
| 2651 | - Improved cross-compile support | |
| 2652 | - .. and several internal pointer safety fixes | |
| 2653 | ||
| c3fe2798 | 2654 | Changes to squid-3.1.7 (23 Aug 2010): |
| 161ec538 | 2655 | |
| c3fe2798 | 2656 | - Regression Bug 3021: Large DNS reply causes crash |
| 161ec538 | 2657 | - Regression Bug 3011: ICAP, HTTPS, cache_peer probe IPv4-only port fixes |
| c3fe2798 | 2658 | - Regression Bug 2997: visible_hostname directive no longer matches docs |
| 161ec538 AJ |
2659 | - Bug 3012: deprecate sslBump and support ssl-bump spelling in http_port |
| 2660 | - Bug 3006: handle IPV6_V6ONLY definition missing | |
| 2661 | - Bug 3004: Solaris 9 SunStudio 12 build failure | |
| 2662 | - Bug 3003: inconsistent concepts in documentation of cache_dir | |
| 2663 | - Bug 3001: dnsserver link issues | |
| 2664 | - HTTP/1.1: default keep-alive for 1.1 clients (bug 3016) | |
| 2665 | - HTTP/1.1: Improved Range header field validation | |
| 2666 | - HTTP/1.1: Forward multiple unknown Cache-Control directives | |
| 2667 | - HTTP/1.1: Stop sending Proxy-Connection header | |
| 2668 | - Fix 32-bit wrap in refresh_pattern min/max values | |
| 2669 | - ... and several documentation corrections. | |
| 2670 | ||
| aa844a33 AJ |
2671 | Changes to squid-3.1.6 (02 Aug 2010): |
| 2672 | ||
| 2673 | - Bug 2994, 2995: IPv4-only regressions | |
| 2674 | - Bug 2991: Wrong parameters to fcntl() in commSetCloseOnExec() | |
| 2675 | - Bug 2975: chunked requests not supported after regular ones | |
| 2676 | - Fix: 32-bit overflow in reported bytes received from next hop | |
| 2677 | - Fix Libtool build regressions | |
| 2678 | - Limited split-stack IPv6 support. | |
| 2679 | - squid_db_auth support MD5 encrypted passwords | |
| 2680 | ||
| f41d79ba AJ |
2681 | Changes to squid-3.1.5.1 (28 Jul 2010): |
| 2682 | ||
| 2683 | - Update Libtool to 2.2. | |
| 2684 | - Bug 2985: search scope for digest_ldap_auth didn't work | |
| 2685 | - Bug 2972: LTDL 2.2.6b compile errors | |
| 2686 | - Bug 2963: Stop ignoring --with-valgrind-debug failures | |
| 2687 | - Bug 2885: AIX support: several fixes | |
| 2688 | - Bug 2651: crash handling NULL write callback | |
| 2689 | - Fixed several memory leaks related to Range requests | |
| 2690 | - Fixed Joomla DB auth handling | |
| 2691 | - Fixed SASL helper build checks | |
| 2692 | - Fixed several IPv6 portability problems | |
| 2693 | - Updated error page translations | |
| 2694 | ||
| 88aa2b05 | 2695 | Changes to squid-3.1.5 (02 Jul 2010): |
| 0e87db68 | 2696 | |
| 88aa2b05 AJ |
2697 | - Bug 2967: raw-IPv6 address URL with append_domain broken |
| 2698 | - Bug 2950: HTTP responses with no Date, L-M or Expires can now be cached | |
| 2699 | - Bug 2943: ICAP tokens not logged when using multiple access | |
| 2700 | - Bug 2937: Fails to detect chunked encoding if not given in all lower case | |
| 2701 | - Bug 2903: does not send indirect X-Client-Ip in ICAP respmod | |
| 7e6cdc23 | 2702 | - Fix free memory corruption and off-by-one error when comparing SNMP OIDs |
| 88aa2b05 AJ |
2703 | - Port from 2.7: max_filedescriptor config option |
| 2704 | - Fix persistent_connection_after_error is meant to be on by default | |
| 2705 | - ... and several build errors. | |
| 0e87db68 | 2706 | |
| 2d94c829 AJ |
2707 | Changes to squid-3.1.4 (30 May 2010): |
| 2708 | ||
| 2709 | - Bug 2933: Verification of the max. port number for WCCP2 dynamic service | |
| 2710 | - Bug 2924: RADIUS helper compile issues | |
| 2711 | - Bug 2922: Fix assertion failed: HttpHeader.cc: "Headers[id].stat.aliveCount" | |
| 2712 | - Bug 2919: tcp_outgoing_address ACLs not obeying acl_uses_indirect_client | |
| 2713 | - Bug 2896: Fix assertion failed: comm.cc:2063: "!fd_table[fd].closing()" | |
| 2714 | - Bug 2879: pt2: 3.0 regression in headers end finding | |
| 2715 | - Bug 2877: pt2: only output zero-size warning on reverse-proxy requests | |
| 2716 | - Bug 2876: FD_SETSIZE override not working on all linux distributions | |
| 2717 | - Bug 2810: common log format generates 2 lines of syslog | |
| 2718 | - Bug 2789: Optimize unlimited memory pools, and correctly handle limits over 2GB | |
| 2719 | - Bug 2753: Fall back on IPv4 if IPv6 is not present | |
| 2720 | - Bug 2697: Adaptation leaks and extra requests after reconfiguration | |
| 2721 | - Bug 2633: Fix Ecap::HeaderRep::value(name) fails when there is no named header field | |
| 2722 | - Change LDAP helpers to default to LDAP version 3 if available | |
| 2723 | - Add Joomla and Salted Hash support to squid_db_auth helper | |
| 2724 | - Fixed IpAddress port printing for ports higher than 9999 | |
| 2725 | - Disable chunked memory pooling by default. | |
| 2726 | - ... and several build errors. | |
| 2727 | ||
| 6808dbda AJ |
2728 | Changes to squid-3.1.3 (02 May 2010): |
| 2729 | ||
| 7e6cdc23 | 2730 | - Remove: Advertise 1.1 on replies to clients (broken chunked handling) |
| 6808dbda AJ |
2731 | - Fix tag ACL type not working |
| 2732 | ||
| ca959baa AJ |
2733 | Changes to squid-3.1.2 (01 May 2010): |
| 2734 | ||
| 2735 | - Bug 2913: Fix DB auth warning in new perl version | |
| 2736 | - Bug 2904: Prevent automake creating incomplete files | |
| 2737 | - Bug 2899: Regression: Restore lost rfc1738_unescape() data type | |
| 2738 | - Bug 2895: Regression: TPROXY2 compile errors | |
| 2739 | - Bug 2879: Regression: headers end-finding | |
| 2740 | - Bug 2874: Accept literal IPv6 address in icap_service URL | |
| 2741 | - Bug 2860: Regression: WCCPv1 handshake | |
| 2742 | - Bug 2848: Pass TCP_RST to client on early disconnect | |
| 2743 | - Debian Bug 578047: Correct behaviour of --enable-ipv6 | |
| 7e6cdc23 AJ |
2744 | - HTTP/1.1: Advertise 1.1 on requests to servers |
| 2745 | - HTTP/1.1: Advertise 1.1 on replies to clients | |
| ca959baa AJ |
2746 | - AIX / UNIX build fixes |
| 2747 | - Cygwin build fixes | |
| 2748 | - squidclient: -k option to test connection keep-alive or close | |
| 2749 | - Improved helper build for wider compatibility | |
| 2750 | - Ensure the PID file directory exists on install | |
| 2751 | ||
| 2ec34bd3 AJ |
2752 | Changes to squid-3.1.1 (29 Mar 2010): |
| 2753 | ||
| 2754 | - Bug 2873: undefined symbol | |
| 2755 | - Bug 2827: assertion in authentication | |
| 2756 | - Remove ufsdump binary from default builds | |
| 2757 | - Remove pinger from default startups | |
| 2758 | - ... and several documentation updates. | |
| 2759 | ||
| e09692bd AJ |
2760 | Changes to squid-3.1.0.18 (14 Mar 2010): |
| 2761 | ||
| 2762 | - Regression Fix: IPv4-mapped prefix, broken in 3.1.0.16 | |
| 2763 | - Bug 2869: Remove unused external reference | |
| 2764 | - Bug 2866: Support OpenSSL 1.0 | |
| 2765 | - Bug 2813: Random unix_group crash at startup | |
| 2766 | - Send HTTP1.1 compliant 417 responses | |
| 2767 | - Associate external acl message with the request | |
| 2768 | - Various Digest parser fixes | |
| 2769 | - ... and all bug fixes from 3.0 up to 3.0.STABLE25 | |
| 2770 | ||
| 365d894c AJ |
2771 | Changes to squid-3.1.0.17 (24 Feb 2010): |
| 2772 | ||
| 2773 | - Regression Fix: Non-English error page UTF encoding | |
| 2774 | - Bug 2616: reduce IdleConnList::removeFD messages | |
| 2775 | - Bug 1843: multicast-siblings cache_peer option | |
| 2776 | - Port from 2.7: X509 certificate alias-domain handling | |
| 2777 | - Add adapted_http_access option | |
| 2778 | - NTLMv2 support for fake NTLM helper | |
| 2779 | ||
| 011dea45 AJ |
2780 | Changes to squid-3.1.0.16 (01 Feb 2010): |
| 2781 | ||
| 2782 | - Regression Fix: Make Squid abort on all config parse failures. | |
| 2783 | - Regression Bug 2811: SNMP client/peer table OID numbering | |
| 2784 | - Bug 2851: Connection pinning fails when using a peer | |
| 2785 | - Bug 2850: Mismatch in hier_code enum / hier_strings array | |
| 2786 | - Bug 2731: Add follow_x_forwarded_for support to ICAP | |
| 2787 | - Bug 2730: Regressions in follow_x_forwarded_for since Squid-2 | |
| 2788 | - Bug 2706: Set timestamps during ICAP request satisfaction. | |
| 2789 | - Bug 2553: X-Forwarded-For with IPv6 address not handled correctly | |
| 2790 | - Fix: WCCPv1 not connecting to router correctly | |
| 2791 | - Remove obsolete RunCache/RunAccel scripts. | |
| 2792 | - Add client_ip_max_connections | |
| 2793 | - Add the http::>ha format code and make http::>h log original request headers | |
| 2794 | - ... and all bug fixes from 3.0 up to 3.0.STABLE22 | |
| 2795 | - ... and many more minor build and display annoyances. | |
| 2796 | ||
| ba641958 AJ |
2797 | Changes to squid-3.1.0.15 (23 Nov 2009): |
| 2798 | ||
| 2799 | - Regression Fix: myip ACL not accepted in config | |
| 2800 | - Bug 2795: acl arp lookups including port | |
| 2801 | - Bug 2794: ESI parsing fails on FreeBSD | |
| 2802 | - Bug 2778: fix linking issues using SunCC | |
| 2803 | - Bug 2724: eCAP build failure unless ICAP enabled | |
| 2804 | - Bug 2628: Correct default PID location to PREFIX/var/run/squid.pid | |
| 2805 | - Bug 2617: Performance degradation during processing list of dstdomain ACL's | |
| 2806 | - Bug 2374: Support ICY / ICEcast / SHOUTcast streaming protocol. | |
| 2807 | - Fix: 64-bit filesize issue in squidclient POST of large files | |
| 2808 | - Fix: send correct Connection: header on intercepted replies | |
| 2809 | - Support libtool 2.x | |
| 2810 | - ESI libraries libexpat and libxml2 now optional | |
| 2811 | - ESI support default enabled | |
| 2812 | - Bump libcap minimum requirement to libcap 2.09+ | |
| 2813 | - ARP / MAC support fixes for IPv6-mode | |
| 2814 | - Add outstanding IPv6 settings to squid.conf (localnet, localhost) | |
| 2815 | - ... and many additions to the background testing structure | |
| 2816 | - ... and very many minor build and code cleanups for non-GCC compilers. | |
| 2817 | ||
| 8f37469c AJ |
2818 | Changes to squid-3.1.0.14 (27 Sep 2009): |
| 2819 | ||
| 2820 | - Bug 2777: Various build issues on OpenSolaris | |
| 2821 | - Bug 2773: Segfault in RFC2069 Digest authentication | |
| 2822 | - Bug 2747: Compile errors on Solaris 10 | |
| 2823 | - Bug 2735: Incomplete -fhuge-objects detection | |
| 2824 | - Bug 2722: Fix http_port accel combined with CONNECT | |
| 2825 | - Bug 2718: FTP sends EPSV2 on IPv4 connection | |
| 2826 | - Bug 2648: stateful helpers stuck in reserved | |
| 2827 | - Bug 2570: wccp2 "Here I Am" announcements not sent in memory-ony mode | |
| 2828 | - Bug 2510: digest_ldap_auth uses incorrect logic with TLS | |
| 2829 | - Bug 2483: bind() called before connect() | |
| 2830 | - Bug 2215: config file line length limit (extended to 2 KB) | |
| 2831 | - Support Accept-Language: * wildcard | |
| 2832 | - Support autoconf 2.64 | |
| 2833 | - Support TPROXY for IPv6 traffic (requires kernel support) | |
| 2834 | - Support TPROXY cache cluster behind WCCPv2 | |
| 2835 | - Correct ESI support to work in multi-mode Squid | |
| 2836 | - Add 0.0.0.0 as an to_localhost address | |
| 2837 | - DiskIO detection fixes and use optimal IO in default build. | |
| 2838 | - Correct peer connect-fail-limit default of 10 | |
| 2839 | - Prevent squidclient sending two Accept: headers | |
| 2840 | - ... all bug fixes from 3.0.STABLE19 | |
| 2841 | - ... and many more documentation fixes | |
| 2842 | ||
| f49a1c9e AJ |
2843 | Changes to squid-3.1.0.13 (04 Aug 2009): |
| 2844 | ||
| 2845 | - Bug 2723 regression: enable PURGE requests if PURGE method ACL is present. | |
| 2846 | - Fix one more internal profiler error | |
| 2847 | - Language Updates: Italian, Russian | |
| 2848 | - Language Updates: Add many more aliases | |
| 2849 | - Add Copyright document for errors/ content | |
| 2850 | - ... all bug fixes from 3.0.STABLE18 | |
| 2851 | - ... and several code polishing cleanups | |
| 2852 | ||
| e7b1c518 AJ |
2853 | Changes to squid-3.1.0.12 (27 Jul 2009): |
| 2854 | ||
| 2855 | - Bug 2716: Chunked request Signed/Unsigned build error | |
| 2856 | - Bug 2674: Remove limit on HTTP headers read. | |
| 2857 | - Bug 2620: Invalid HTTP response codes causes segfault | |
| 2858 | - Fix FTP EPSV negotiation parser. | |
| 2859 | - Fix Via string when leak checking is enabled (valgrind etc) | |
| 2860 | - ... and several documentation and testing additions | |
| 2861 | ||
| 0b8d12da AJ |
2862 | Changes to squid-3.1.0.11 (19 Jul 2009): |
| 2863 | ||
| 2864 | - Bug 2087: Support adaptation sets and chains | |
| 2865 | - Bug 2459: dns error message broken when error handling delayed | |
| 2866 | - Support ICAP Retry | |
| 2867 | - Support ICAP retries based on the ICAP responses status code | |
| 2868 | - Support logging ICAP | |
| 2869 | - Support logging total DNS wait time | |
| 2870 | - Support logging response times of adaptation transactions | |
| 2871 | - General logging enhancements | |
| 2872 | - Dynamically form chains based on ICAP X-Next-Services header | |
| 2873 | - Support cross-transactional ICAP header exchange | |
| 2874 | - ... and much adaptation polish and improvements | |
| 2875 | ||
| ce460dc8 AJ |
2876 | Changes to squid-3.1.0.10 (18 Jul 2009): |
| 2877 | ||
| 2878 | - Bug 2680: Regression Crash after rotate with no helpers running | |
| 2879 | - Bug 2695: Regression in WCCPv2 L2 mask assignment | |
| 2880 | - Bug 2707: Regression in FTP anonymous auth | |
| 2881 | - Bug 422, 2706: RFC 2616 Date header requirements | |
| 2882 | - Bug 1087: ESI processor not quoting attributes correctly. | |
| 2883 | - Bug 1338: File prefetches aborted despite range_offset | |
| 287dcde6 | 2884 | - Bug 2080: wbinfo_group.pl - false positive under certain conditions |
| ce460dc8 | 2885 | - Bug 2092: select loop 32-bit call counter overflows |
| 287dcde6 | 2886 | - Bug 2127: delay pools class 4 crashes with ntlm auth |
| ce460dc8 AJ |
2887 | - Bug 2611: document fast/slow acl types |
| 2888 | - Bug 2614: Potential loss of adapted body data from eCAP adapters | |
| 2889 | - Bug 2658: Missing TextException copy constructor | |
| 2890 | - Bug 2659: String length overflows on append, leading to segfaults | |
| 2891 | - Bug 2699: Build failure NTLM smb_lm helper | |
| 2892 | - Bug 2709: TRANSLATIONS not installed | |
| 2893 | - Bug 2710: squid_kerb_auth non-terminated string | |
| 2894 | - Delay pools 64-bit buckets and IPv6-polish | |
| 2895 | - Break forwarding loops for "transparent" or "intercept" http_ports. | |
| 2896 | - Add --disable-translation option to detatch .po from error negotiation | |
| 2897 | - Add squidclient man(1) page | |
| 2898 | - Add localhost to default permitted networks | |
| 2899 | - http_port allow-direct option to allow direct forwarding in accelerator mode | |
| 2900 | - ... and many testing infrastructure updates | |
| 2901 | ||
| 5df6d596 AJ |
2902 | Changes to squid-3.1.0.9 (26 Jun 2009): |
| 2903 | ||
| 2904 | - Bug 2682: Add ftp_epsv control to disable EPSV support. | |
| 2905 | - Bug 2665: Detach automake system from using -I. | |
| 2906 | - Bug 2395: FTP auth errors not displayed | |
| 2907 | - ... also several changes and bugs closed in 3.0.STABLE16 | |
| 2908 | - Port from 2.7: Show local address on listening sockets | |
| 2909 | - Add "tag" type acl matching tags set by external acl helpers. | |
| 2910 | - Adds Language alias linker/installer/upgrade scripts | |
| 2911 | - Support for GCC 4.4 | |
| 2912 | - Fix false NAT lookup errors on Linux | |
| 2913 | - Fix many Windows port issues | |
| 2914 | - Fix squid_kerb_auth helepr install location | |
| 2915 | - Better detection of IPv6 stack types | |
| 2916 | - Updates Licensing information for Squid 3.1 | |
| 2917 | - ... and many packaging portability build and install issues | |
| 2918 | ||
| a7b15245 AJ |
2919 | Changes to squid-3.1.0.8 (24 May 2009): |
| 2920 | ||
| 2921 | - Bug 2656: Pinger dies with general protection fault | |
| 2922 | - Bug 2650: configure requires epoll_ctl in libepoll when --enable-epoll used | |
| 2923 | - Bug 2648: Authentificator processes deferring and don't shutdown. | |
| 2924 | - Bug 2645: allow squid to ignore must-revalidate | |
| 2925 | - Bug 2644: auth scheme initialization is broken | |
| 2926 | - Bug 2632: Make number of reforwarding tries configurable | |
| 2927 | - Bug 2628: --with-pidfile=PATH option to override DEFAULT_PID_FILE | |
| 2928 | - Bug 2627: HTCP Logging | |
| 2929 | - Bug 2615: Call libecap::adapter::Service::start() when finalizing config. | |
| 2930 | - Bug 2589: SNMP returning no data - wrong oid decoded | |
| 2931 | - Bug 2571: Squid with IPv6 fails to start on kernel without IPv6 | |
| 2932 | - Bug 2559: Problem parsing /0 and /0.0.0.0 | |
| 2933 | - Bug 2404: WCCP in mask mode is broken | |
| 2934 | - ... also all bugs closed by 3.0.STABLE14, 3.0.STABLE15, 3.0.STABLE16-RC1 | |
| 2935 | - Complete Interception multiple NAT support | |
| 2936 | - Add Content-Disposition to the known headers list. | |
| 2937 | - Make PEER_TCP_MAGIC_COUNT configurable | |
| 2938 | - Fix pinger install location | |
| 2939 | - Enable TPROXY v4 spoofing of CONNECT requests | |
| 2940 | - ... and much documentation and code polishing | |
| 2941 | ||
| e1e28561 AJ |
2942 | Changes to squid-3.1.0.7 (08 Apr 2009): |
| 2943 | ||
| 2944 | - Fix: several issues with ident | |
| 2945 | - Add several language translations | |
| 2946 | - Upgrade code testing infrastructure | |
| 2947 | - Migrate much code to build as internal libraries | |
| 2948 | - Support gcc 4.4 | |
| 2949 | - Support doxygen 1.5.8 | |
| 2950 | - ... and much code polish to make things read easier | |
| 2951 | ||
| 727cb127 AJ |
2952 | Changes to squid-3.1.0.6 (01 Mar 2009): |
| 2953 | ||
| e1e28561 | 2954 | - Regression Fix: Support HTTP/0.9 in accelerator mode |
| 727cb127 AJ |
2955 | - Bug 2601: Hack. Convert IPv4 netmasks to CIDR in IPv6-enabled mode |
| 2956 | - Bug 2593: Compile errors on Solaris 10 | |
| 2957 | - Bug 2591: adaptation_access does not work | |
| 2958 | - Bug 2588: coredump in rDNS lookup | |
| 2959 | - Bug 2526: default ALLOW when no list specified. | |
| 2960 | - Bug 2287: Send a 505 on requests with unsupported HTTP versions | |
| 2961 | - Bug 419: Hop by Hop headers MUST NOT be forwarded | |
| 2962 | - Fix external_acl_type handling of SSL certificate details | |
| 2963 | - Obsolete: dependency on nss_common.h and nss.h | |
| 2964 | - Support libtool2 | |
| 2965 | - ... and various documentation and code polish | |
| 2966 | ||
| f636c996 AJ |
2967 | Changes to squid-3.1.0.5 (03 Feb 2009): |
| 2968 | ||
| 2969 | - Bug 2583: Fixed issue in content adaptation | |
| 2970 | - Bug 2576: Make translate target obey --disable-auto-locale | |
| 2971 | - Bug 2571: Add DNS failover to use IPv4-only listen when IPv6 fails. | |
| 2972 | - Bug 2563: 99+% CPU Usage on FTP URL | |
| 2973 | - Bug 2505, 2524, 2558: fixed several issues on connection handling | |
| 2974 | - Fix several issues in request parsing | |
| 2975 | - Fix memory leak from logformat parsing | |
| 2976 | - Fix various ESI build errors | |
| 2977 | - Make configure tests use C++ instead of C | |
| 2978 | - Drop special localhost conversion RFC violation. | |
| 2979 | - Add Language: Arabic | |
| 2980 | - ... and various documentation and code polish | |
| 2981 | ||
| 2982 | Changes to squid-3.1.0.4 (23 Jan 2009): | |
| 2983 | ||
| 2984 | - Regression Fix: Bug 2558: rollback bug 2395 fix. | |
| 2985 | - Bug 2555: Fixes to SNMP-MIB | |
| 2986 | - Bug 2550: assertion comm.cc:350 !fd_table[fd].closing() | |
| 2987 | - Bug 2547,2548: OSX compile errors (duplicate symbols and IPv6) | |
| 2988 | - Bug 2508: comm.cc:2035 assertion fd_table[fd].closing() | |
| 2989 | - Bug 2330: allow keep-alive+chunked; don't add max-age for no-cache | |
| 2990 | - Polish ZPH configuration interface | |
| 2991 | - Several Language Conversions to new auto-negotiate | |
| 2992 | - Port from 2.7: squidclient -V and -j options for HTTP/1.1 and 0.9 testing | |
| 2993 | - Fix: Pconn not being used when they should. | |
| 2994 | - Fix: Fix pinger immediate shutdowns | |
| 2995 | - Fix: Untangle CacheManager reports from log_fqdn | |
| 2996 | - ... and all bugs fixed for 3.0.STABLE12 | |
| 2997 | - ... and many code polish and optimization fixes. | |
| 2998 | ||
| 2999 | Changes to squid-3.1.0.3 (5 Dec 2008): | |
| 3000 | ||
| 3001 | - Regression Fix: StoreIOBuffer patch removed. | |
| 3002 | - Regression Fix: build issues with 3.1.0.2 bundle | |
| 3003 | - Security Bug 2526: default ALLOW when no list specified | |
| 3004 | - Bug 2525: encoding error on error pages | |
| 3005 | - Bug 2424: slow file descriptor leak | |
| 3006 | - Bug 2527: ICAP compile error on g++ 4.3.2 | |
| 3007 | - Bug 2523: bad assertion left in from debug | |
| 3008 | - Bug 2395: FTP Auth errors and others not displayed | |
| 3009 | - Update squid_kerb_auth to 1.0.5 | |
| 3010 | with better Squid integration. | |
| 3011 | - Fix cache_peer forcedomainname= option | |
| 3012 | - ... and many other minor fixes | |
| 3013 | ||
| 5e80e4ee AJ |
3014 | Changes to squid-3.1.0.2 (9 Nov 2008): |
| 3015 | ||
| 3016 | - Bug 2516: error page templates not properly installed | |
| 3017 | - Bug 2500: Solaris build issues | |
| 3018 | - Fixes FreeBSD build issues | |
| 3019 | - Release Notes completed | |
| 3020 | - Languages: new Russian, Japanese, Chinese, and general updates | |
| 3021 | - ... and other minor fixes | |
| 70c5dfb2 | 3022 | |
| af4cd9a0 AJ |
3023 | Changes to squid-3.1.0.1 (27 Oct 2008): |
| 3024 | ||
| 3025 | - Bundled ntlm_auth helper renamed (see Release Notes before changing anything) | |
| 7a6e2ecc AJ |
3026 | - peername ACL added for matching against a named peer destination |
| 3027 | - configure option --with-logdir= added to select log files location | |
| 3028 | - squid_kerb_auth helper updated to 1.0.3 release | |
| 3029 | - Bug #740: allow external acl's to use reply headers in format | |
| 3030 | - Bug #2379: obsolete dns_testnames option | |
| 3031 | - Code test infrastructure expanded to configuration testing | |
| 3032 | - Policy changes to negative_ttl, cache deny QUERY, refresh_pattern | |
| af4cd9a0 | 3033 | to bring their defaults up to RFC 2616 requirements. |
| 7a6e2ecc AJ |
3034 | - Large increase in RFC 2616 standard compliance (ongoing) |
| 3035 | - squid.conf cleanups for minimal config | |
| 3036 | - Connection Pinning ported from 2.6 for NTLM passthru authentication | |
| 3037 | - eCAP internal adaptation module support | |
| af4cd9a0 | 3038 | - Localization and CSS display control of error pages |
| 7a6e2ecc AJ |
3039 | - Added semi-automatic documentation of source code |
| 3040 | - Added TE chunked encoding decoder to workaround broken HTTP/1.1 servers | |
| 3041 | - HTCP improvements ported from 2.7 adding HTCP CLR requests | |
| 70c5dfb2 | 3042 | - IPv6 (Internet Protocol version 6) support |
| 3043 | - ICMPv6 (Internet Control Message Protocol version 6) support | |
| f1233d8c | 3044 | - FTP agent now supports EPSV/EPRT commands |
| 70c5dfb2 | 3045 | - DNS internal resolver now supports AAAA and CNAME records |
| 3046 | - SNMP peer and client tables now support IPv6 | |
| 3047 | - SNMP peer table supports named peers with multiple entries per IP | |
| 4aa8e49c | 3048 | - SslBump: Squid-in-the-middle decryption and encryption of straight |
| 3049 | CONNECT and transparently redirected SSL traffic, using configurable | |
| 3050 | client- and server-side certificates. While decrypted, the traffic | |
| 7a6e2ecc | 3051 | can be inspected using ICAP. |
| af4cd9a0 | 3052 | - TPROXY version 4.1 support |
| a13b3732 | 3053 | - IPFW and Netfilter interception methods may now both be built in one binary. |
| f1233d8c AJ |
3054 | - ZPH Quality of Service patch now integrated |
| 3055 | - Null store now fully obsoleted and removed | |
| 3056 | - Unknown request methods all supported | |
| 3057 | - Follow_x_forwarder_for ported from 2.6 | |
| 7a6e2ecc | 3058 | - Bug #2223: Follow XFF extensions added |
| af4cd9a0 | 3059 | - ... and many code and documentation cleanups |
| 7a6e2ecc | 3060 | |
| 2f954743 AJ |
3061 | Changes to squid-3.0.STABLE26 (28 Aug 2011): |
| 3062 | ||
| 3063 | - Regression: header_replace for reply headers | |
| 3064 | - Bug 3183: Invalid URL accepted with url host part of only '@'. | |
| 3065 | - Bug 3107: ncsa_auth DES silently truncates passwords to 8 bytes | |
| 3066 | - Bug 3056: comm.cc "!fd_table[fd].closing()" assertion from helperServerFree | |
| 3067 | - Bug 2991: Wrong parameters to fcntl() in commSetCloseOnExec() | |
| 3068 | - Bug 2933: Verification of the max. port number for WCCP2 dynamic service | |
| 3069 | - Bug 2922: Fix assertion failed: HttpHeader.cc: "Headers[id].stat.aliveCount" | |
| 3070 | - Regression Bug 2899: Restore lost rfc1738_unescape() data type | |
| 3071 | - Regression Bug 2879: headers end finding | |
| 3072 | - Bug 2876: FD_SETSIZE override not working on all linux distributions | |
| 3073 | - Check for NULL and empty strings before calling str*cmp(). | |
| 3074 | - Correct parsing of large Gopher indexes | |
| 3075 | ||
| 1a10a7e5 AJ |
3076 | Changes to squid-3.0.STABLE25 (14 Mar 2010): |
| 3077 | ||
| 3078 | - Bug 2845: Rework the http digest auth parser | |
| 3079 | - Bug 2787: unknown/unexpected status code messages | |
| 3080 | - Bug 2507: squid_ldap_group: Strip Domain name separated by + | |
| 3081 | - Bug 2367: stale=true on digest requests with unknown nonce | |
| 3082 | - ... and several other minor corrections | |
| 3083 | ||
| 6add0585 AJ |
3084 | Changes to squid-3.0.STABLE24 (13 Feb 2010): |
| 3085 | ||
| 3086 | - Bug 2858: Segment violation in HTCP | |
| 3087 | - Updated refresh pattern for dynamic pages | |
| 3088 | ||
| bcd1f03d AJ |
3089 | Changes to squid-3.0.STABLE23 (02 Feb 2010): |
| 3090 | ||
| 3091 | - Bug 2856: removing assert() required for 3.0 patch for SQUID-2010:1 | |
| 3092 | - Regression Fix: Build error in Kerberos helper after library removal. | |
| 3093 | ||
| 61544616 AJ |
3094 | Changes to squid-3.0.STABLE22 (01 Feb 2010): |
| 3095 | ||
| 3096 | - Regression Fix: Make Squid abort on all config parse failures. | |
| 3097 | - Bug 2787: Reduce unexpected http status to non-critical warnings. | |
| 3098 | - Bug 2496: Downloading some variants in full before relaying | |
| 3099 | - Bug 2452: Add upper limit to external_acl_type entries. | |
| 3100 | - Removed optional kerberos/spnegohelp/ library due to licensing issues | |
| 3101 | - Add client_ip_max_connections | |
| 3102 | - Handle DNS header-only packets as invalid. | |
| 3103 | ||
| 06d0f369 AJ |
3104 | Changes to squid-3.0.STABLE21 (22 Dec 2009): |
| 3105 | ||
| 3106 | - Bug 2830: Clarify where NULL byte is in headers. | |
| 3107 | - Bug 2778: Linking issues using SunCC | |
| 3108 | - Bug 2395: FTP errors not displayed | |
| 3109 | - Bug 2155: Assertion failures on malformed Content-Range response headers | |
| 3110 | - Fix parsing and a few bugs in ACL time type | |
| 3111 | - Fix RFC keep-alive compliance on intercepted replies | |
| 3112 | - Improved security hardening on %nn parser | |
| 3113 | - Replace several GCC-specific code snippets. | |
| 3114 | ||
| 91228e4e AJ |
3115 | Changes to squid-3.0.STABLE20 (29 Oct 2009): |
| 3116 | ||
| 3117 | - Bug 2794: ESI parsing on FreeBSD | |
| 3118 | - Bug 2791: assertion failed: MemBuf.cc:400: new_cap > (size_t) capacity | |
| 3119 | - Bug 2779: Support GNU/kFreeBSD | |
| 3120 | - Bug 2773: Segfault in RFC2069 Digest authantication | |
| 3121 | - Bug 2768: squid_ldap_group argument parsing error | |
| 3122 | - Bug 2761: Gopher and double HTTP response header | |
| 3123 | - Bug 2735: Incomplete -fhuge-objects detection | |
| 3124 | - Bug 2722: prevent CONNECT via http_port with accel | |
| 3125 | - Bug 2624: Invalid response for IMS request | |
| 3126 | - Bug 2510: digest_ldap_auth TLS support | |
| 3127 | - Correct LINUX_CAPABILITY actions on non-Linux | |
| 3128 | ||
| 98df01e3 AJ |
3129 | Changes to squid-3.0.STABLE19 (06 Sep 2009): |
| 3130 | ||
| 3131 | - Bug 2745: Invalid Response error on small reads | |
| 3132 | - Bug 2739: DNS resolver option ndots can't be parsed from resolv.conf | |
| 3133 | - Bug 2734: some compile errors on Solaris | |
| 3134 | - Bug 2648: stateful helpers stuck in reserved if client disconnects while helper busy | |
| 3135 | - Bug 2541: Hang in 100% CPU loop while extacting header details using a delimiter other than comma | |
| 3136 | - Bug 2362: Remove support for deferred state in stateful helpers | |
| 3137 | - Add 0.0.0.0 as a to_localhost address | |
| 3138 | - Docs: Improve chroot directive documentation slightly | |
| 3139 | - Fixup libxml2 include magics, was failing when a configure cache was used | |
| 3140 | - ... and some minor testing improvements. | |
| 3141 | ||
| b7a1ea6b AJ |
3142 | Changes to squid-3.0.STABLE18 (04 Aug 2009): |
| 3143 | ||
| 3144 | - Bug 2728: regression: assertion failed: !eof | |
| 3145 | - Bug 2732: reply_body_max_size smaller than error page loops | |
| 3146 | infinitely until out of memory | |
| 3147 | - Bug 2725: pconn failure if domain or client_address are unset | |
| 3148 | - Bug 2648: reserved helpers not shut down after reconfigure/rotate | |
| 3149 | - Bug 2462: make check should tell when cppunit is missing | |
| 3150 | - Remove excess messages about headers < minimum size | |
| 3151 | - Support Libtool 2.2.6 | |
| 3152 | ||
| e7b1c518 | 3153 | Changes to squid-3.0.STABLE17 (27 Jul 2009): |
| 68c19036 AJ |
3154 | |
| 3155 | - Bug 2680 regression: Crash after rotate with no helpers running | |
| 3156 | - Bug 2710: squid_kerb_auth non-terminated string | |
| 3157 | - Bug 2679: strsep and strtoll detection failure | |
| 3158 | - Bug 2674: Remove limit on HTTP headers read. | |
| 3159 | - Bug 2659: String length overflows on append, leading to segfaults | |
| 3160 | - Bug 2620: Invalid HTTP response codes causes segfault | |
| 3161 | - Bug 2080: wbinfo_group.pl - false positive under certain conditions | |
| 3162 | - Bug 1087: ESI processor not quoting attributes correctly. | |
| 3163 | - Fix: issue with AUFS/UFS/DiskD writing objects to disk cache | |
| 3164 | - Several small build issues with previous release. | |
| 3165 | ||
| 950b7d55 AJ |
3166 | Changes to squid-3.0.STABLE16 (15 Jun 2009): |
| 3167 | ||
| 3168 | - Bug 2672: cacheMemMaxSize 32-bit overflow during snmpwalk | |
| 3169 | - Bug 2481: Don't set expires: now in generated error responses | |
| 3170 | - Bug 2387: The calculation of the number of hash buckets correctly | |
| 3171 | - Fix infinite loop in MSNT auth helper | |
| 3172 | - Fix FD_SETSIZE on FreeBSD | |
| 3173 | - Fix stripping NT domain in squid_ldap_group | |
| 3174 | - Fix RADIUS auth helper build | |
| 3175 | - Add Translate: and Unless-Modified-Since: headers to known list | |
| 3176 | - Make fakeauth handle NTLMv2 better | |
| 3177 | - Better Kerberos support detection | |
| 3178 | - Several Widows port fixes | |
| 3179 | ||
| 6e4fa9b4 AJ |
3180 | Changes to squid-3.0.STABLE16-RC1 (16 May 2009): |
| 3181 | ||
| 950b7d55 | 3182 | - Bug 1148: Ported from 3.1: Chunked Transfer Encoding |
| 6e4fa9b4 AJ |
3183 | - Bug 2648: NTLM helpers not shutting down when deferred |
| 3184 | ||
| 79200081 AJ |
3185 | Changes to squid-3.0.STABLE15 (06 May 2009): |
| 3186 | ||
| 3187 | - Regression Bug 2635: Incorrect Max-Forwards header type | |
| 3188 | - Bug 2652: 'Success' error on CONNECT requests | |
| 3189 | - Bug 2625: IDENT receiving errors | |
| 3190 | - Bug 2610: ipfilter support detection | |
| 3191 | - Bug 2578: FTP download resume failure | |
| 3192 | - Bug 2536: %H on HTTPS error pages | |
| 3193 | - Bug 2491: assertion "age >= 0" | |
| 3194 | - Bug 2276: too many NTLM helpers running | |
| 3195 | - Endian system and compiler fixes provided by the NetBSD project | |
| 3196 | - documentation fixes provided by the Debian project | |
| 3197 | ||
| 6c2e5932 AJ |
3198 | Changes to squid-3.0.STABLE14 (11 Apr 2009): |
| 3199 | ||
| 3200 | - Regression Fix: HTTP/0.9 in accelerator mode | |
| 3201 | - Bug 1232: cache_dir parameter limited to only 63 entries | |
| 3202 | - Bug 1868: support HTTP 207 status | |
| 3203 | - Bug 2518: assertion failure on restart/reconfigure | |
| 3204 | - Bug 2588: coredump in rDNS lookup | |
| 3205 | - Bug 2595: Out of bounds memory write in squid_kerb_auth | |
| 3206 | - Bug 2599: Idempotent start | |
| 3207 | - Bug 2605: Prevent setsid() on helpers in daemon mode | |
| 3208 | - Fix external_acl_type option parsing | |
| 3209 | - Fix delay pools counters on FTP | |
| 3210 | - Fix several issues with ident (some remain) | |
| 3211 | - Fix performance issues with persistent connections | |
| 3212 | - Fix performance issues with delay pools | |
| 3213 | - Fix forwarding of OPTIONS requests | |
| 3214 | - Add support for HTTP 1.1 Content-Disposition header | |
| 3215 | - Add support for Windows 7, Windows Server 2008 R2 and later | |
| 3216 | - ... and many small documentation updates | |
| 3217 | ||
| f636c996 AJ |
3218 | Changes to squid-3.0.STABLE13 (03 Feb 2009): |
| 3219 | ||
| 3220 | - Fix several issues in request parsing | |
| 3221 | - Fix memory leak from logformat parsing | |
| 3222 | - Fix various ESI build errors | |
| 3223 | - ... and some documentation updates | |
| 3224 | ||
| 3225 | Changes to squid-3.0.STABLE12 (21 Jan 2009): | |
| 3226 | ||
| 3227 | - Bug 2533: Solaris (sparc) 64-bit build breaks with gcc/g++ | |
| 3228 | - Bug 2542: ICAP filters break download resume | |
| 3229 | - Bug 2556: HTCP fails without icp_port | |
| 3230 | - Bug 2564: logformat '%tl' field not working as advertised | |
| 3231 | - Port from 3.1: TestBed basic build consistency checks | |
| 3232 | - Policy: Change half_closed_clients default to off | |
| 3233 | - Policy: Removed -V command line option, deprecated by 2.6 | |
| 3234 | - ... and several other minor code cleanups | |
| 3235 | ||
| 3236 | Changes to squid-3.0.STABLE11 (24 Dec 2008): | |
| 3237 | ||
| 3238 | - Bug 2424: filedescriptors being left unnecessary opened | |
| 3239 | - Bug 2545: fault passing ICAP filtered traffic to peers | |
| 3240 | - Bug 2227: Sefgaults in MemBuf::reset during idnsSendQuery | |
| 3241 | - ... and some minor admin and debug cleanups. | |
| 3242 | ||
| 3243 | Changes to squid-3.0.STABLE11-RC1 (3 Dec 2008): | |
| 3244 | ||
| 3245 | - Removes patch causing cache of bad objects | |
| 3246 | - Bug 2526: bad security default in ACLChecklist | |
| 3247 | - Fixes regression: access.log request size tag | |
| 3248 | - Fixes cache_peer forceddomainname=X option | |
| 3249 | - ... and many minor documentation cleanups | |
| 3250 | ||
| 7a6e2ecc AJ |
3251 | Changes to squid-3.0.STABLE10 (14 Oct 2008): |
| 3252 | ||
| 3253 | - Bug 2391: Regression: bad assert in forwarding | |
| 3254 | - Bug 2447: Segfault on failed TCP DNS query | |
| 3255 | - Bug 2393: DNS requests getting stuck in idns queue | |
| 3256 | - Bug 2433: FTP PUT gives bad gateway | |
| 3257 | - Bug 2465: Limited DragonflyBSD support | |
| 3258 | - ... and other minor bugs and documentation | |
| 3259 | ||
| 3260 | Changes to squid-3.0.STABLE9 (9 Sep 2008): | |
| 3261 | ||
| 3262 | - Policy Enforcement: COSS is unusable in 3.0 | |
| 3263 | - Port from 3.1: Language Pack compatibility | |
| 3264 | - Port from 2.6: Windows Support Notes | |
| 3265 | - Fix several minor regressions: | |
| 3266 | HTCP stats reporting | |
| 3267 | cachemgr delay pool config | |
| 3268 | CARP build error | |
| 3269 | - Bug 2340: uudecode dependency for icons removed | |
| 3270 | - Bug 2352: no_check.pl ntlm challenge fix | |
| 3271 | - Bug 2426: buffer increase for kerberos auth fields | |
| 3272 | - Bug 2427: squid_ldap_group codes fix | |
| 3273 | - Bug 2437: peer name now shown in access.log | |
| 3274 | - Add sane display of unsupported method errors | |
| 3275 | - ... and various other code cleanups | |
| 3276 | ||
| 3277 | Changes to squid-3.0.STABLE8 (18 Jul 2008): | |
| 3278 | ||
| 3279 | - Port from 2.6: Support for cachemgr sub-actions | |
| 3280 | - Port from 2.6: userhash peer selection method | |
| 3281 | - Port from 2.6: sourcehash peer selection method | |
| 3282 | - Bug 2376: round-robin balancing fixes | |
| 3283 | - Bug 2388: acl documentation cleanup | |
| 3284 | - Bug 2365: cachemgr.cgi HTML output encoding | |
| 3285 | - Bug 2301: Regression: Log format size options | |
| 3286 | - Bug 2396: Correct the opening of PF device file. | |
| 3287 | - Bug 2400: ICAP accept mechanism | |
| 3288 | - Bug 2411: Regression: fakeauth_auth crashes | |
| 3289 | - Many fixes to the Windows support (not complete yet). | |
| 3290 | - Boost error pages HTML standards. | |
| 3291 | - Fixes several issues on 64-bit systems | |
| 3292 | - Fixes several issues on older or stricter compilers | |
| 3293 | - Linux-2.6.24/2.6.25 netfilter_ipv4.h __u32 workaround | |
| 3294 | - Update Release Notes: 'all' ACL is built-in since 3.0.STABLE1 | |
| 3295 | ||
| 3296 | Changes to squid-3.0.STABLE7 (22 Jun 2008): | |
| 3297 | ||
| 3298 | - Fix several ASN issues | |
| 3299 | - Fix SNMP reporting of counters | |
| 3300 | - Fix round-robin algorithms | |
| 3301 | - GCC 4.3 support | |
| 3302 | - Netfilter v1.4.0 bug workaround | |
| 3303 | - Bugs 2350 and 2323: memory issues | |
| 3304 | - Bugs 2384, 951, 1566: ESI assertions | |
| 3305 | - Various minor debug and documentation cleanups | |
| f1233d8c AJ |
3306 | |
| 3307 | Changes to squid-3.0.STABLE6 (20 May 2008): | |
| 3308 | ||
| 3309 | - Bug 2254: umask Feature from 2.6 added | |
| 3310 | - cachemgr.cgi default config file added | |
| 3311 | - Several authentication bug fixes | |
| 3312 | - Improved Windows Support | |
| 3313 | - better DNS lookup methods for unqualified hostames | |
| 3314 | - better support for 64-bit environments | |
| 3315 | - Bug 2332: Crash when tunnelling | |
| 3316 | - Removed the advertisement clause from BSD licenses | |
| 3317 | according to the GPLv2+ changes in BSD | |
| 3318 | - ... and other bugs and minor cleanups | |
| 3319 | ||
| 3320 | Changes to squid-3.0.STABLE5 (28 Apr 2008): | |
| 3321 | ||
| 3322 | - Support for resolv.conf 'domain' option | |
| 3323 | - Improved URI support, including | |
| 3324 | longer URI up to 8192 bytes accepted | |
| 3325 | better handling of intercepted URI | |
| 3326 | better port for non-FQDN URI lookups | |
| 3327 | - Improved logging, including | |
| 3328 | Bug 3210 fixed: incorrect timestamp format in earlier 3.0 releases. | |
| 3329 | Fixed 'log_ip_on_direct' option behaviour | |
| 3330 | - Support for profiling on x86 64-bit systems | |
| 3331 | - .. and other bugs and minor code cleanups. | |
| 3332 | ||
| 3333 | Changes to squid-3.0.STABLE4 (2 Apr 2008): | |
| 3334 | ||
| 3335 | - Bug 2288: compile error slipped into STABLE3. | |
| 3336 | ||
| 3337 | Changes to squid-3.0.STABLE3 (31 Mar 2008): | |
| 3338 | ||
| 3339 | - Improved HTTP 1.1 support. | |
| 3340 | - Improved MacOSX (Leopard) support | |
| 3341 | - Bug 2206: Proxy-Authentication regression in STABLE2. | |
| 3342 | - Strip Domain from NTLM usernames for use in class 4 Delay Pools | |
| 3343 | - ... and other bugs and minor code cleanup | |
| 3344 | ||
| 3345 | Changes to squid-3.0.STABLE2 (1 Mar 2008): | |
| 3346 | ||
| 3347 | - Add myportname ACL for matching the accepting port name (see release notes) | |
| 3348 | - Add include directive for squid.conf (see release notes) | |
| 3349 | - Add ability to strip kerberos realm from usernames during Auth | |
| 3350 | - License cleanup to comply with GPLv2 or later | |
| 3351 | - Updated Error Pages and Translations | |
| 3352 | - Updated configuration examples | |
| 3353 | - Updated valgrind support for valgrind-3.3.0 | |
| 3354 | - Improved support for Windows and MacOS X Leopard | |
| 3355 | - Improved support for files larger than 2GB | |
| 3356 | - Improved support for CARP arrays and WCCPv2 | |
| 3357 | - Improved cachmgr, SNMP, and log reporting | |
| 3358 | - ... and as usual Many bug fixes since STABLE 1 | |
| 70c5dfb2 | 3359 | |
| 284237d4 | 3360 | Changes to squid-3.0.STABLE1 (13 Dec 2007): |
| 3ff01c3e | 3361 | |
| 3362 | - Major rewrite translating the code to C++, originally based on | |
| 3363 | Squid-2.5.STABLE1 | |
| 3364 | - Internal client streams concept for content adaptation | |
| 3365 | - ICAP (Internet Content Adaptation Protocol) client support | |
| 3366 | - ESI (Edge Side Includes) support added | |
| 284237d4 | 3367 | - Improved support for files larger than 2GB. |
| 3ff01c3e | 3368 | - And a lot more. Most features from Squid-2.6 is supported, but not |
| 3369 | all. See the release notes for details. | |
| 3370 | ||
| 9ae33c59 AJ |
3371 | |
| 3372 | Squid-2 ChangeLog of versions fully ported to Squid-3 follows. | |
| 3373 | ||
| 3374 | Changes to squid-2.6.STABLE22 (19 October 2008) | |
| 3375 | ||
| 3376 | - Bug #2396: Correct the opening of the PF device file. | |
| 3377 | - Make --with-large-files and --with-build-envirnment=default play | |
| 3378 | nice together | |
| 3379 | - Workaround for Linux-2.6.24 & 2.6.25 netfiler_ipv4.h include header | |
| 3380 | __u32 problem | |
| 3381 | - Make dns_nameserver work when using --disable-internal-dns on glibc | |
| 3382 | based systems | |
| 3383 | - Bug #2426: Increase negotiate auth token buffer size | |
| 3384 | - Bug #2427: squid_ldap_group -h reports the old % codes for -f | |
| 3385 | - Bug #2477: swap.state permission issues if crashing during "squid -k | |
| 3386 | reconfigure" | |
| 3387 | - Windows port: Fix build error using latest MinGW runtime. | |
| 3388 | ||
| 3389 | ||
| 3390 | ||
| 3ff01c3e | 3391 | Older ChangeLog follows. The sections relating to Squid-2.6 is not entirely |
| 3392 | authorative for this release and mirrored here for reference only. | |
| f1233d8c | 3393 | |
| 467c94d1 | 3394 | - CARP now plays well with the other peering algorithms, |
| 3395 | and support for CARP peerings is compiled by default. Can be | |
| 3396 | disabled by --disable-carp | |
| 1741cbad | 3397 | - Configuration file can be read from an external program |
| 3398 | or preprocessor. See squid.8 man page. | |
| 52f772de | 3399 | - http_port is now optional, allowing for SSL only operation |
| 4ca261f2 | 3400 | - Satellite and other high latency peering relations enhancements |
| 3401 | (Robert Cohren) | |
| a9245686 | 3402 | - Nuked num32 types, and made type detection more robust by the |
| 3403 | use of typedefs rather than #defines. | |
| b5fb34f1 | 3404 | - the mailto links on Squid's ERR pages now contain data about the |
| 3405 | occurred error by default, so that the email will contain this data in | |
| 3406 | its body. This feature can be disabled via the email_err_data directive. | |
| 9ae33c59 | 3407 | (Clemens L?ser) |
| c8f4eac4 | 3408 | - COSS now uses a file called stripe and the path in squid.conf is the |
| 3409 | directory this is placed in. Additionally squid -z will create the | |
| 3410 | COSS swapfile. | |
| 14f5b6c3 | 3411 | - WCCPv2 support, including mask assignment support |
| 5401aa8d | 3412 | - HTCP support for access control and the CRL operation for |
| 3413 | purgeing of cache content | |
| 14f5b6c3 | 3414 | - ICAP related fixes |
| 3415 | - Windows-related fixes, including Vista and Longhorn identification | |
| 3416 | - Client-side parsing and some string use optimisations | |
| 3417 | - Lots of off-by-one and memory leaks in corner cases have been fixed | |
| 3418 | thanks to valgrind | |
| 3419 | - Improved high-resolution profiling | |
| 3420 | - Windows overlapped-IO and thread support added to the Async IO disk code | |
| 3421 | - Improvements for handling large DNS replies | |
| a7c8cce0 | 3422 | |
| 3ff01c3e | 3423 | Changes to squid-2.6.STABLE15 (31 Aug 2007) |
| 3424 | ||
| 3425 | - The select() I/O loop got broken by the /dev/poll addition | |
| 3426 | (2.6.STABLE14) | |
| 3427 | - Bug #2017: Fails to work around broken servers sending just the HTTP | |
| 3428 | headers | |
| 3429 | - Bug #2023: Compile error with old GCC 2.x or other ANSI-C compilers | |
| 3430 | before C99 | |
| 3431 | - squid.conf.default updated and reorganised in more sensible groups | |
| 3432 | - correct and document the syslog access_log format | |
| 3433 | - Armenian error pages translation | |
| 3434 | - digest_ldap_helper usage help updated | |
| 3435 | - Bug #1560: ftpSendPasv: getsockname(-1,..): (9) Bad file descriptor | |
| 3436 | - Improve delay pools in low traffic environment by checking timeouts | |
| 3437 | at a steady 1 second interval even when there is not much activity | |
| 3438 | - Don't request authentication on transparently intercepted | |
| 3439 | connections | |
| 3440 | - Cleanup linux capabilities for tproxy | |
| 3441 | - Bug #2003: 'via' config directive doesn't affect response headers | |
| 3442 | - Bug #1902: Adds Numeric Hit and invalid request counters to IP Cache | |
| 3443 | - Add missing $|=1 to squid_db_auth | |
| 3444 | - Bug #2050: Persistent connection dropped if cache has no | |
| 3445 | Content-Length | |
| 3446 | - Verify the URL on memory cache hits | |
| 3447 | - Bug #2057: NTLM stop work in messengers after upgrade to 2.6.STABLE14 | |
| 3448 | - Bug #1972: Squid sets peers to down state when they are in fact | |
| 3449 | working. | |
| 3450 | - potential segmentation fault in storeLocateVary() | |
| 3451 | - Bug #2066: chdir after chroot | |
| 3452 | - Windows port: Fix compiler warnings when building Squid as | |
| 3453 | application (not Windows service mode) | |
| 3454 | - Spelling correction of received | |
| 3455 | ||
| 3456 | Changes to squid-2.6.STABLE14 (15 Jul 2007) | |
| 3457 | ||
| 3458 | - squid.conf.default cleanup to have options in their proper sections. | |
| 3459 | - documentation correction in the refresh_pattern ignore-auth option | |
| 3460 | - URI-escaping not uses the recommended upper-case hex codes | |
| 3461 | - refresh_pattern min-age 0 correted to really mean 0, and not 1 second | |
| 3462 | - Always use xisxxxx() Squid defined macros instead of ctype | |
| 3463 | functions. | |
| 3464 | - Kerberos SPNEGO/Negotiate helper for the negotiate scheme | |
| 3465 | - Database basic auth helper using Perl DBI to connect to most SQL DBs | |
| 3466 | - Solaris /dev/poll network I/O support | |
| 3467 | - configure fixes to make cross compilation somewhat easier | |
| 3468 | - Removed incorrect -a reference from http_port documentation | |
| 3469 | - Bug #1900: Double "squid -k shutdown" makes Squid restart again | |
| 3470 | - Bug #1968: Squid hangs occasionally when using DNS search paths | |
| 3471 | - Novell eDirectory digest auth helper (digest_edir_auth) | |
| 3472 | - Bug #1130: min-size option for cache_dir | |
| 3473 | - POP3 basic auth helper querying a POP3 server | |
| 3474 | - Cosmetic squid_ldap_auth fixes from Squid-3 | |
| 3475 | - Bug #1085: Add no-wrap to cache manager HTML tables | |
| 3476 | - Automatically restart if number of available filedescriptors becomes | |
| 3477 | alarmingly low, preventing a situation where Squid would otherwise | |
| 3478 | permanently stop processing requests. | |
| 3479 | - Bug #2010: snmp_core.cc:828: warning: array subscript is above | |
| 3480 | array bounds | |
| 3481 | - Deal better with forwarding loops | |
| 3482 | ||
| 3483 | Changes to squid-2.6.STABLE13 (11 May 2007) | |
| 3484 | ||
| 3485 | - Make sure reply headers gets sent even if there is no body available | |
| 3486 | yet, fixing RealMedia streaming over HTTP issues. | |
| 3487 | - Undo an accidental name change of storeUnregisterAbort. | |
| 3488 | - Kill an ancient malplaced storeUnregisterAbort call from ftp.c | |
| 3489 | - Bug #1814: SSL memory leak on persistent SSL connections | |
| 3490 | - Don't log ECONNREFUSED/ECONNABORTED accept failures in cache.log | |
| 3491 | - Cosmetic fix: added missing newline in WCCPv2 configuration dump. | |
| 3492 | - Ukrainan error messages | |
| 3493 | - Convert various error pages from DOS to UNIX text format | |
| 3494 | - Bug #1820: COSS assertion failure t->length == MD5_DIGEST_CHARS | |
| 3495 | - Clarify the max-conn=n cache_peer option syntax slightly | |
| 3496 | - Bug #1892: COSS segfault on shutdown | |
| 3497 | - Windows port: fix undefined ECONNABORTED | |
| 3498 | - Make refreshIsCachable handle ETag as a cache validator, not | |
| 3499 | only last-modified | |
| 3500 | - in_port_t is not portable, use unsigned short instead | |
| 3501 | - Fix fs / auth / snmp dependencies | |
| 3502 | - Portability: statfs() may reqire #include <sys/statfs.h> | |
| 3503 | ||
| 3504 | Changes to squid-2.6.STABLE12 (20 Mar 2007) | |
| 3505 | ||
| 3506 | - Assertion error on TRACE | |
| 3507 | ||
| 3508 | Changes to squid-2.6.STABLE11 (17 Mar 2007) | |
| 3509 | ||
| 3510 | - Bug #1915: assertion failed: client_side.c:4055: "buf != NULL || | |
| 3511 | !conn->body.request" | |
| 3512 | - Handle garbage helper responses better in concurrent protocol format | |
| 3513 | - Fix kqueue when overflowing the changes queue | |
| 3514 | - Make sure the child worker process commits suicide if it could | |
| 3515 | not start up | |
| 3516 | - Don't log short responses at debug level 1 | |
| 3517 | - Fix bswap16 & bwsap32 error on NetBSD | |
| 3518 | - Fix collapsed_forwarding for non-GET requests | |
| 3519 | ||
| 3520 | Changes to squid-2.6.STABLE10 (4 Mar 2007) | |
| 3521 | ||
| 3522 | - Upgrade HTTP/0.9 responses to our HTTP version (HTTP/1.0) | |
| 3523 | - various diskd bugfixes | |
| 3524 | - In the access.log hierarchy field log the unique peer name | |
| 3525 | instead of the host name | |
| 3526 | - unlinkdClose() should be called after (not before) storeDirSync() | |
| 3527 | - CLEAN_BUF_SZ was defined, but never used anywhere | |
| 3528 | - logging HTTP-request size | |
| 3529 | - Fix icmp pinger communication on FreeBSD and other not supporing | |
| 3530 | large dgram AF_UNIX sockets | |
| 3531 | - Release objects on swapin failure | |
| 3532 | - Bug #1787: Objects stuck in cache if origin server clock in future | |
| 3533 | - Bug #1420: 302 responses with an Expires header is always cached | |
| 3534 | - Primitive support for HTTP/1.1 chunked encoding, working around | |
| 3535 | broken servers | |
| 3536 | - Clean up relations between TCP probing and DNS checks of peers with | |
| 3537 | no known addresses. | |
| 3538 | - Fix a minor HTML coding error in ftp directory listings with // in | |
| 3539 | the path | |
| 3540 | - Bug #1875, #1420. Cleanup of refresh logics when dealing with | |
| 3541 | non-refreshable content | |
| 3542 | - Gopher cleanups and bugfixes | |
| 3543 | - Negotiate authentication fixed again. Broken since STABLE7 by the | |
| 3544 | patch for Bug #1792. | |
| 3545 | - Bug #1892: COSS tries to shut down the same directory twice on exit | |
| 3546 | - Bug #1908: store*DirRebuildFromSwapLog() ignores some SWAP_LOG_DEL | |
| 3547 | entries | |
| 3548 | - Added support for Subversion HTTP request methods MKACTIVITY, | |
| 3549 | CHECKOUT and MERGE. | |
| 3550 | ||
| 3551 | Changes to squid-2.6.STABLE9 (24 Jan 2007) | |
| 3552 | ||
| 3553 | - Bug #1878: If-Modified-Since broken in 2.6.STABLE8 | |
| 3554 | - Bug #1877 diskd bug in storeDiskdIOCallback() | |
| 3555 | ||
| 3556 | Changes to squid-2.6.STABLE8 (21 Jan 2007) | |
| 3557 | ||
| 3558 | - Bug #1873: authenticateNTLMFixErrorHeader: state 4. | |
| 3559 | - Document the https_port vhost option, useful in combination with | |
| 3560 | a wildcard certificate | |
| 3561 | - Document the existence of connection pinning / forwarding of NTLM | |
| 3562 | auth and a few other features overlooked in the release notes. | |
| 3563 | - Spelling correction of the ssl cache_peer option | |
| 3564 | - Add back the optional "accel" http_port option. Makes accelerator | |
| 3565 | mode configurations easier to read. | |
| 3566 | - Bug #1872: Date parsing error causing objects to get unexpectedly | |
| 3567 | cached. | |
| 3568 | - Cleanup to have the access.log tags autogenerated from enums.h | |
| 3569 | - Bug #1783: STALE: Entry's timestamp greater than check time. Clock | |
| 3570 | going backwards? | |
| 3571 | - Don't update object timestamps on a failed revalidation. | |
| 3572 | - Fix how ftp://user@host URLs is rendered when Squid is built with | |
| 3573 | leak checking enabled | |
| 3574 | ||
| 3575 | Changes to squid-2.6.STABLE7 (13 Jan 2007) | |
| 3576 | ||
| 3577 | - Windows port: Fix intermittent build error using Visual Studio | |
| 3578 | - Add missing tproxy info from the dump of http port configuration | |
| 3579 | - Bug #1853: Support for ARP ACL on NetBSD | |
| 3580 | - clientNatLookup(): fix wrong function name in debug messages | |
| 3581 | - Convert ncsa_auth man page from DOS to Unix text format. | |
| 3582 | - Bug #1858: digest_ldap_auth had some remains of old hash format | |
| 3583 | - Correct the select_loops counter when using select(). Was counted twice | |
| 3584 | - Clarify the http_port vhost option a bit | |
| 3585 | - Fix cache-control: max-stale without value or bad value | |
| 3586 | - Bug #1857: Segmentation fault on certain types of ftp:// requests | |
| 3587 | - Bug #1848: external_acl crashes with an infinite loop under high load | |
| 3588 | - Bug #1792: max_user_ip not working with NTLM authentication | |
| 3589 | - Bug #1865: deny_info redirection with authentication related acls | |
| 3590 | - Small example on how to use the squid_session helper | |
| 3591 | - Bug #1863: cache_peer monitorurl, monitorsize and monitorinterval not working properly | |
| 3592 | - Clarify the transparent http_port option a bit more | |
| 3593 | - Bug #1828: squid.conf docutemtation error for proxy_auth digest | |
| 3594 | - Bug #1867: squid.pid isn't removed on shutdown | |
| 3595 | ||
| 3596 | Changes to squid-2.6.STABLE6 (12 Dec 2006) | |
| 3597 | ||
| 3598 | - Bug #1817: Assertion failure assert(buflen >= copy_sz) in htcp.c htcpBuildAuth() | |
| 3599 | - Add client source port logformat tag >p | |
| 3600 | - Cleanup of transparent & accelerator mode request parsing to untangle the firewall dependencies a bit | |
| 3601 | - Bug #1799: Harmless 1 byte buffer overflow on long host names in /etc/hosts | |
| 3602 | - automake no longer recommends mkinstalldirs. Removed. | |
| 3603 | - Only use crypt() if it's available, allowing ncsa_auth to be built | |
| 3604 | on platofms without crypt() support. | |
| 3605 | - Windows port documentation updates | |
| 3606 | - Bug #1818: Assertion failure assert(e->swap_dirn >= 0) in fs/coss/store_dir_coss.c storeCoss_DeleteStoreEntry | |
| 3607 | - Bug #1117: assertion failed: aufs/store_dir_aufs.c:642: "rb->flags.need_to_validate" | |
| 3608 | - Remove extra newline in redirect message sent by deny_info http://... aclname | |
| 3609 | - Bug #1805: assertion failed: StatHist.c:195: "D[i] >= 0" | |
| 3610 | - Clarify the external_acl_type helper format specification and some defaults | |
| 3611 | - Add support for the weight= parameter to round-robin peers | |
| 3612 | - Bug #1832: Error building squid-2.6.STABLE5 using --enable-truncate | |
| 3613 | - Convert snmpDebugOid to use a temporary String object instead of strcat | |
| 3614 | - Document that proxy_auth also accepts -i for case-insensitive operation | |
| 3615 | - Remove malloc/free of temporary buffer in time parsing routines. | |
| 3616 | - Reduce memory allocator pressure by not continually allocating client-side read buffers | |
| 3617 | - Accept large dates >2^31 on 64-bit platformst. Seen for example in the Google logo. | |
| 3618 | - Convert the connStateData->chr single link list to a normal dlink_list for clarity. | |
| 3619 | - Bug #1584: Unable to register with multiple WCCP2 routers | |
| 3620 | - Fix the WCCPv2 mask assignment code to not crash as the value assignments are built. | |
| 3621 | - Bug #439: Multicast ICP peering is unstable and considers most peers dead | |
| 3622 | - Bug #1801: NTLM authentication ends up in a loop if the server responds with a retriable error | |
| 3623 | - Bug #1839: Cosmetic debug message cleanup in peerHandleHtcpReply. | |
| 3624 | - Bug #1840: Disable digest and netdb queries to multicast peers | |
| 3625 | - Bug #1641: assertion failed: stmem.c:149: "size > 0" while processing certain Vary objects | |
| 3626 | - Fix build errors when using latest MinGW Windows environment | |
| 3627 | ||
| 3628 | Changes to squid-2.6.STABLE5 (3 Now 2006) | |
| 3629 | ||
| 3630 | - Bug #1776: 2.6.STABLE4 aufs fails to compile if coss isn't enabled | |
| 3631 | - COSS improvements and cleanups | |
| 3632 | - SNMP linking issue resolved, enabling SNMP support to be build in all platforms | |
| 3633 | - Bug #1784: access_log syslog results in blanks syslog lines between every entry | |
| 3634 | - Bug #1719: Incorrect error message on invalid cache_peer specifications | |
| 3635 | - Bug #1785: Memory leak in handling of negatively cached objects | |
| 3636 | - Bug #1780: Incorrect Vary processing in combination with collapsed_forwarding | |
| 3637 | - Bug #1782: Memory leak in ncsa_auth on password changes | |
| 3638 | - Suppress some annoying coss startup messages raising the debug level to 2. | |
| 3639 | - Clarify the external_acl_helper concurrency= change. | |
| 3640 | - aioDone() could be called twice from aufs and from coss (when using AIOPS) during shutdown. | |
| 3641 | - Bug #1794: Accept 00:00-24:00 as a valid time specification even if redundand and the same as 00:00-23:59 | |
| 3642 | - Bug #1795: Theoretical memory leak in storeSetPublicKey | |
| 3643 | - Removing port 563 from the default SSL_ports and Safe_ports ACLs | |
| 3644 | - Bug #1724: Automatically enable Linux Netfilter support with --enable-linux-tproxy. | |
| 3645 | - Bug #1800: squid -k reconfigure crash when using req/rep_header acls | |
| 3646 | - Clarify the select/poll/kqueue/epoll configure --enable/disable options | |
| 3647 | - Bug #1779: Delay pools fairness when multiple connections compete for bandwidth | |
| 3648 | - Bug #1802: Crash on exit in certain conditions where cache.log is not writeable | |
| 3649 | - Bug #1796: Assertion error HttpHeader.c:914: "str" | |
| 3650 | - Bug #1790: Crash on wccp2 + mask assignement + standard wccp service | |
| 3651 | - Silence harmless gcc compile warning. | |
| 3652 | - Clean up poll memory on shutdown | |
| 3653 | - Ported select, poll and win32 to new comm event framework | |
| 3654 | - Windows port: Correctly identify Windows Vista and Windows Server Longhorn | |
| 3655 | - Added a basic comm_select_simple comm loop only requiring minimal POSIX compliance. | |
| 3656 | - Safeguard from kb_t counter overflows on 32-bit platforms | |
| 3657 | ||
| 3658 | Changes to squid-2.6.STABLE4 (23 Sep 2006) | |
| 3659 | ||
| 3660 | - Bug #1736: Missing Italian translation of ERR_TOO_BIG error page | |
| 3661 | - Windows port enhancement: added native exception handler with signal emulation | |
| 3662 | - Fix the %un log_format tag again. Got broken in 2.6.STABLE2 | |
| 3663 | - Fix Squid crash when using %a in ERR_INVALID_REQ and ERR_INVALID_URL error messages. | |
| 3664 | - Bug #212: variable %i always 0.0.0.0 in many error pages | |
| 3665 | - Bug #1708: Ports in ACL accepts characters and out of range | |
| 3666 | - Bug #1706: Squid time acl accepts invalid time range. | |
| 3667 | - Fix another harmless fake_auth compiler warning on gcc 4.1.1 x86 | |
| 3668 | - Fix an harmless snmp_core.c compiler warning on gcc 4.1.1 x86 | |
| 3669 | - Bug #1744: squid-2.6.STABLE3 - fakeauth_auth crashing on certain requests | |
| 3670 | - Bug #1746: Harmless off by one overrun in ncsa_auth md5 password validation | |
| 3671 | - Bug #1598: start_announce cannot be disabled | |
| 3672 | - Periodically flush cache.log to disk when "buffered_logs on" is set | |
| 3673 | - Numerous COSS improvements and fixes | |
| 3674 | - Windows port: merge of MinGW support | |
| 3675 | - Windows port: Merged Windows threads support into aufs | |
| 3676 | - Bug #1759: Windows port cachemgr.cgi attempts to write to file system root directory | |
| 3677 | - Numerous portability fixes | |
| 3678 | - Various minor statistics cleanup on 64-bit hosts with more than 4GB of memory | |
| 3679 | - Bug #1758: HEAD on ftp:// URLs always returned 200 OK. | |
| 3680 | - Bug #1760: FTP related memory leak | |
| 3681 | - Bug #1770: WCCP2 weighted assignment | |
| 3682 | - Bug #1768: Redundant DNS PTR lookups | |
| 3683 | - Bug #1696: Add support for wccpv2 mask assignment | |
| 3684 | - Bug #1774: ncsa_auth support for cramfs timestamps | |
| 3685 | - Bug #1769: near-hit and filedescriptor usage missing in SNMP MIB | |
| 3686 | - Bug #1725: cache_peer login=PASS documentation somewhat confusing | |
| 3687 | - Bug #1590: Silence those ETag loop warnings | |
| 3688 | - Bug #1740: Squid crashes on certain malformed HTTP responses | |
| 3689 | - Bug #1699: assertion failed: authenticate.c:836: "auth_user_request != NULL" | |
| 3690 | - Improve error reporting on unexpected CONNECT requests in accelerator mode | |
| 3691 | - Cosmetic change to increase cache.log detail level on invalid requests | |
| 3692 | - Bug #1229: http_port and other directives accept invalid ports | |
| 3693 | - Reject http_port specifications using both transparent and accelerator options | |
| 3694 | - Cosmetic cleanup to not dump stacktraces on configuration errors | |
| 3695 | ||
| 3696 | ||
| 3697 | Changes to squid-2.6.STABLE3 (18 Aug 2006) | |
| 3698 | ||
| 3699 | - Bug #1577: assertion failed "fm->max_n_files <= (1 << 24)" on | |
| 3700 | very large cache_dir. Limit number of objects stored to slightly | |
| 3701 | less to avoid this. | |
| 3702 | - Bug #1705: Correct error message on invalid time weekday specification | |
| 3703 | - Don't attempt to guess netmask in src/dst acl specifications | |
| 3704 | if none was provided. Assume it's an IP even if it ends in 0 | |
| 3705 | - Bug #1665: log_format %ue, %us tags for external or ssl user id | |
| 3706 | - Bug #1707: delay pools often ignored the set limit | |
| 3707 | - Bug #1716: Support for recent OpenSSL 0.9.7 versions | |
| 3708 | (0.9.8 always worked) | |
| 3709 | - COSS fixes and performance improvements | |
| 3710 | - Memory leak when reading configuration files with overlapping | |
| 3711 | ACL data where squid -k parse complains. | |
| 3712 | - Memory leak related to pinned connections | |
| 3713 | - Show include acls unexpanded in cachemgr configuration dumps | |
| 3714 | - Fixed WARNING defer handler for HTTP Socket does not call commDeferFD | |
| 3715 | - Bug #1304: Downloads may hang when using the cache_dir max-size option | |
| 3716 | - Optimization of network I/O | |
| 3717 | - Bug #1730: make problem with --enable-follow-x-forwarded-for on Solaris | |
| 3718 | - Fixed a memory leak on certain invalid requests | |
| 3719 | - Bug #1733: ERR_CANNOT_FORWARD Portuguese translation update | |
| 3720 | - Bug #582: ntlm fake_auth not handles non-ascii login names | |
| 3721 | - New startup message indicating the type of event loop used | |
| 3722 | - Bug #1602: TCP fallback on truncated DNS responses | |
| 3723 | - Bug #1667: assertion failed: store.c:1081: "e->store_status == STORE_PENDING" | |
| 3724 | - Bug #1723: cachemgr now works in accelerator mode | |
| 3725 | ||
| 3726 | Changes to squid-2.6.STABLE2 (31 Jul 2006) | |
| 3727 | ||
| 3728 | - WCCP2 doesn't update statCounter.syscalls.sock.sendtos counter. | |
| 3729 | - Releasenotes Table of contents should use relative links without | |
| 3730 | filename. | |
| 3731 | - Reject HTTP/0.9 formatted CONNECT requests. | |
| 3732 | - Cosmetic cleanup to use safe_free instead of xfree + manual | |
| 3733 | assign to NULL | |
| 3734 | - Bug #1650: transparent interception "Unable to forward this | |
| 3735 | request at this time" | |
| 3736 | - Bug #1658: Memory corruption when using client-side SSL certificates | |
| 3737 | - Add storeRecycle; a storeIO method to delete a StoreEntry w/out | |
| 3738 | deleting the underlying object. | |
| 3739 | - Many COSS fixes and new coss data dumper utility for diagnostics | |
| 3740 | - Bug #1669: SEGV in storeAddVaryReadOld | |
| 3741 | - Many fixes in debug sections and spelling of debug messages | |
| 3742 | - Don't keep client connection persistent if there was a mismatch in | |
| 3743 | the response size. | |
| 3744 | - Move eventCleanup debug messages to debug level 2 (was 0) | |
| 3745 | - Add the missing concurrency parameters to basic and digest auth | |
| 3746 | schemes | |
| 3747 | - Bug #1670: assertion failure: i->prefix_size > 0 in client_side.c:2509 | |
| 3748 | - Log SSL user id in the custom log User name format (%un) | |
| 3749 | - Bug #1653: Username info not logged into Cachemgr active_requests | |
| 3750 | statistics | |
| 3751 | - Added to the redirectors interface the support for SSL client | |
| 3752 | certificate | |
| 3753 | - squid.conf.default cleanup to remove references to old options | |
| 3754 | - Fix many filedescriptors in combination with TPROXY | |
| 3755 | - Fix connection pinning in transparently intercepted connections | |
| 3756 | - Bug #1679: LDFLAGS not honored in some programs. | |
| 3757 | - Minor cleanup of port numbers in transparent interception or | |
| 3758 | vhost + vport | |
| 3759 | - Bug #1671: transparent interception fails with FreeBSD ipfw or | |
| 3760 | Linux-2.2 ipchains | |
| 3761 | - Bug #1660: Accept-Encoding related memory corruption | |
| 3762 | - Bug #1651: Odd results if url_rewriter defined multiple times | |
| 3763 | - Bug #1655: Squid does not produce coredumps under linux when | |
| 3764 | started as root | |
| 3765 | - Bug #1673: cache digests not served to other caches | |
| 3766 | - Cleanup of Linux capability code used by tproxy | |
| 3767 | - Bug #1684: xstrdup: tried to dup a NULL pointer! | |
| 3768 | - Bug #1668: unchecked vsnprintf() return code could lead to log | |
| 3769 | corruption | |
| 3770 | - Bug #1688: Assertion failure in HttpHeader.c in some header_access | |
| 3771 | configurations | |
| 3772 | - Cygwin support fir --disable-internal-dns | |
| 3773 | - Silence those annoying sslReadServer: Connection reset by peer | |
| 3774 | errors. | |
| 3775 | - Bug #1693: persistent connections broken in transparent | |
| 3776 | interception mode | |
| 3777 | - Bug #1691: multicast peering issues | |
| 3778 | - Bug #1696: Correct WCCP2 processing of router capability info | |
| 3779 | segments | |
| 3780 | - Bug #1694: Assertion failure in mgr:config if using | |
| 3781 | access_log_format %<h | |
| 3782 | - Bug #1677: Duplicate etags in the If-None-Match header | |
| 3783 | - Bug #1665: access_log_format codes for login names from external | |
| 3784 | acl or ssl | |
| 3785 | - Bug #1681: All ntlmauthenticator processes are busy | |
| 3786 | - Added ARP acl support for OpenBSD and ARP fixes for Windows | |
| 3787 | - Bug #1700: WCCP fails on FreeBSD (Unable to disconnect WCCP out | |
| 3788 | socket) | |
| 3789 | - WCCP2 correct dampening of assign buckets when there it lots of | |
| 3790 | changes | |
| 3791 | - minimum_expiry_time to tune the magic 60 seconds limit of what | |
| 3792 | is considered cachable when the object doesn't have any cache | |
| 3793 | validators. | |
| 3794 | - Bug #1703: wrong path to diskd helper corrected, and config | |
| 3795 | parser extended to trap incorrect paths early | |
| 3796 | - Bug #1703: COSS failed to initialize async-io threads | |
| 3797 | - Bug #1703: should abort if diskd helper exits unexpectedly | |
| 3798 | - Bug #1702: Warn if acl name is too long | |
| 3799 | - Bug #1685: Crashes or other odd results after storeSwapMetaUnpack: errors | |
| 3800 | - wccp2_rebuild_wait directive to delay registering with WCCP until the | |
| 3801 | - Bug #1662: Infinite loop in external acl with grace period if the | |
| 3802 | same http_access line had multiple external acls | |
| 3803 | ||
| 3804 | Changes to squid-2.6.STABLE1 (1 Jul 2006) | |
| 3805 | ||
| 3806 | - New --enable-default-hostsfile configure option | |
| 3807 | - Added username info to active_requests cachemgr stats | |
| 3808 | - Modified squid MIB to incorporate squid.conf visible_hostname | |
| 3809 | - Added multi-line capability in squid.conf | |
| 3810 | - Added new httpd_suppress_version_string configuration directive | |
| 3811 | - WCCPv2 support | |
| 3812 | - Negotiate authentication scheme support | |
| 3813 | - NTLM authentication scheme rewritten | |
| 3814 | - Customizable access log formats | |
| 3815 | - Selective access logging | |
| 3816 | - Access logging via syslog | |
| 3817 | - Reverse proxy enhancements, with new cache_peer based forwarding | |
| 3818 | model. | |
| 3819 | - LDAP based Digest helper (Note: not true LDAP integration, just using | |
| 3820 | LDAP for storage of the Digest hashes) | |
| 3821 | - Improved helper communication protocol | |
| 3822 | - External ACL improvements. %PATH, log=, grace=, and more.. | |
| 3823 | - Improved SSL support with hardware offload, client certificate | |
| 3824 | support (primitive), chained certificates and numerous bug fixes | |
| 3825 | - DNS lookups now use the search path from /etc/resolv.conf or | |
| 3826 | the Windows registry | |
| 3827 | - Linux epoll support | |
| 3828 | - collapsed forwarding to optimize reverse proxies or other | |
| 3829 | setups having very many clients going to the same URL | |
| 3830 | - New improved COSS implementation | |
| 3831 | - Optional support for blank passwords | |
| 3832 | - The old and obsolete Samba-2.2.X winbind helpers have been removed | |
| 3833 | - external acls now uses the simplified URL-escaped protol "3.0" by | |
| 3834 | default. | |
| 3835 | - Linux TPROXY support | |
| 3836 | - Support for proxying of Microsoft Integrated Login by adding | |
| 3837 | support for the deviations from the HTTP protocol required | |
| 3838 | to support these authentication mechanisms | |
| 3839 | - Added the capability to run as a Windows service under Cygwin | |
| 3840 | - CARP now plays well with the other peering algorithms | |
| 3841 | - read_ahead_gap option to read ahead more than 16KB of the reply | |
| 3842 | - check_hostnames and allow_underscore squid.conf options | |
| 3843 | - http_port is now optional, allowing for SSL only operation | |
| 3844 | - Full ETag/Vary support, caching responses which varies with | |
| 3845 | request details (browser, language etc). | |
| 3846 | - umask now defaults to 027 to protect the content of cache and | |
| 3847 | log files from local users | |
| 3848 | - HTCP support for access control and the CRL operation for | |
| 3849 | purgeing of cache content | |
| 3850 | - Optionally follow X-Forwarded-For headers to determine the original | |
| 3851 | client IP behind sedond level proxies | |
| 3852 | - FreeBSD kqueue support | |
| 3853 | ||
| 3854 | Changes to squid-2.5.STABLE14 (20 May 2006) | |
| 3855 | - [Minor] icons not displayed when visible_hostname is a | |
| 3856 | short hostname (without domain). (Bug #1532) | |
| 3857 | - [Medium] Memleak in HTCP client code (default disabled) | |
| 3858 | (Bug #1553) | |
| 3859 | - [Major] memory leak in ident processing (Bug #1557) | |
| 3860 | - [Medium] Memory leak in header processing related to external_acl | |
| 3861 | header detail format tag (Bug #1564) | |
| 3862 | ||
| 3863 | Changes to squid-2.5.STABLE13 (12 Mar 2006) | |
| 3864 | - [Minor] Fails to compile on Solaris and some other platforms | |
| 3865 | with undefined reference to setenv (Bug #1435) | |
| 3866 | - [Cosmetic] Added WebDAV REPORT method to know HTTP methods list | |
| 3867 | - [Minor] Squid ntlm_auth (not the Samba provided one) giving | |
| 3868 | odd results if --enable-ntlm-fail-open is used (Bug #1022) | |
| 3869 | - [Minor] wbinfo_group.pl doesn't work with Samba 3.0.21 and later | |
| 3870 | (Bug #1472) | |
| 3871 | - [Minor] Squid crash when asyncio function counters url accessed | |
| 3872 | from Cachemgr CGI (Bug #1464) | |
| 3873 | - [Cosmetic] Linux compile warning about prctl called with too few | |
| 3874 | arguments (Bug #1483) | |
| 3875 | - [Minor] Wrong timezone declaration for 64 bit Irix (Bug #1479) | |
| 3876 | - [Minor] Some 206 responses logged incorrectly (Bug #1511) | |
| 3877 | - [Minor] Issues in processing ranges on objects >2GB (Bug #437) | |
| 3878 | - [Cosmetic] Segmentation fault on empty proxy_auth ACLs (Bug #1414) | |
| 3879 | - [Minor] Ident access lists don't work in delay_access statements | |
| 3880 | (Bug #1428) | |
| 3881 | - [Minor] Some clients support NTLM even if not initially negotiating | |
| 3882 | persistent connections (Bug #1447) | |
| 3883 | - [Medium] 504 Gateway Time-out on FTP uploads (Bug #1459) | |
| 3884 | - [Medium] delay pools given too much bandwidht after "-k reconfigure" | |
| 3885 | (Bug #1481) | |
| 3886 | - [Cosmetic] New persistent_connection_after_error configuration | |
| 3887 | directive (Bug #1482) | |
| 3888 | - [Cosmetic] Hangs at 100% CPU if /dev/null is not accessible (Bug | |
| 3889 | #1484) | |
| 3890 | - [Minor] Fails to compile on Fedora Core 5 test 2 x86_64 (Bug #1492) | |
| 3891 | - [Cosmetic] Typo in ftp.c (Bug #1507) | |
| 3892 | - [Cosmetic] Error in FTP listings of files with -> in their name | |
| 3893 | (Bug #1508) | |
| 3894 | - [Cosmetic] With Squid-2.5 there is no more the DUPLICATE IP logging | |
| 3895 | in cache.log (Bug #779) | |
| 3896 | - [Minor] Fails to process long host names (Bug #1434) | |
| 3897 | - [Cosmetic] Azerbaijani errors translation (Bug #1454) | |
| 3898 | - [Cosmetic] misleading error message message for bad/unresolveable | |
| 3899 | cache_peer name (Bug #1504) | |
| 3900 | - [Cosmetic] confusing statistics on stateful helpers (NTLM auth) | |
| 3901 | (Bug #1506) | |
| 3902 | - [Major] connstate memory leak (Bug #1522) | |
| 3903 | ||
| 3904 | Changes to squid-2.5.STABLE12 (22 Oct 2005) | |
| 3905 | ||
| 3906 | - [Major] Error introduced in 2.5.STABLE11 causing truncated responses | |
| 3907 | when using delay pools (Bug #1405) | |
| 3908 | - [Cosmetic] Document that tcp_outgoing_* works badly in combination | |
| 3909 | with server_persistent_connections (Bug #454) | |
| 3910 | - [Cosmetic] Add additinal tracing to squid_ldap_auth making | |
| 3911 | diagnostics easier on squid_ldap_auth configuration errors | |
| 3912 | (Bug #1395) | |
| 3913 | - [Minor] $HOME not set when started as root (Bug #1401) | |
| 3914 | - [Minor] httpd_accel_single_host breaks in combination with | |
| 3915 | server_persistent_connections (Bug #1402) | |
| 3916 | - [Cosmetic] Setting CACHE_HTTP_PORT to configure was only partially | |
| 3917 | implemented, effectively ignored. (Bug #1403) | |
| 3918 | - [Minor] CNAME based DNS addresses could get cached for longer | |
| 3919 | than intended (Bug #1404) | |
| 3920 | - [Minor] Incorrect handling of squid-internal-dynamic/netdb exchanges | |
| 3921 | in transparently intercepting proxies (Bug #1410). | |
| 3922 | - [Minor] Cache revalidations on HEAD requests causing poor cache | |
| 3923 | hit ratio (Bug #1411). | |
| 3924 | - [Minor] Not possible to send 302 redirects via a redirector in | |
| 3925 | response to CONNECT requests (bug #1412) | |
| 3926 | - [Minor] Incorrect handling of Set-Cookie on cache refreshes (Bug | |
| 3927 | #1419) | |
| 3928 | - [Major] Segmentation fault crash in rfc1738_do_escape (Bug #1426) | |
| 3929 | - [Minor] Delay pools class 3 fails on clients in network 255 | |
| 3930 | (Bug #1431) | |
| 3931 | ||
| 3932 | Changes to squid-2.5.STABLE11 (22 Sep 2005) | |
| 3933 | ||
| 3934 | - [Minor] Workaround for servers sending double content-length headers | |
| 3935 | (Bug #1305) | |
| 3936 | - [Cosmetic] Updated Spanish error messages by Nicolas Ruiz | |
| 3937 | - [Cosmetic] Date header corrected on internal objects (icons etc) | |
| 3938 | (Bug #1275) | |
| 3939 | - [Minor] squid -k fails in combination with chroot after patch for | |
| 3940 | bug 1157 (Bug #1307) | |
| 3941 | - [Cosmetic] Segmentation fault if compiled with | |
| 3942 | --enable-ipf-transparent but denied access to the NAT device. | |
| 3943 | (Bug #1313) | |
| 3944 | - [Minor] httpd_accel_signle_host incompatible with redireection | |
| 3945 | (Bug #1314) | |
| 3946 | - [Minor] squid -k reconfigure internal corruption if the type of | |
| 3947 | a cache_dir is changed (Bug #1308) | |
| 3948 | - [Minor] SNMP GETNEXT fails if the given OID is outside the Squid MIB | |
| 3949 | (Bug #1317) | |
| 3950 | - [Minor] Title in FTP listings somewhat messed up after previous | |
| 3951 | patch for bug 1220 (Bug #1220) | |
| 3952 | - [Minor] FTP listings uses "BASE HREF" much more than it needs to, | |
| 3953 | confusing authentication. (Bug #1204) | |
| 3954 | - [Minor] winfo_group.pl only looked for the first group if multiple | |
| 3955 | groups were defined in the same acl. (Bug #1333) | |
| 3956 | - [Cosmetic] Compiler warnings on some 64-bit platforms (Bug #1316) | |
| 3957 | - [Cosmetic] Removed some debug output from wb_ntlm_atuh (Bug #518) | |
| 3958 | - [Cosmetic] The new --with-build-environment=... option doesn't work | |
| 3959 | - [Cosmetic] New 'mail_program' configuration option in squid.conf | |
| 3960 | - [Minor] Fails to compile with ip-filter and ARP support on Solaris | |
| 3961 | x86 (Bug #199) | |
| 3962 | - [Major] Segmentation fault in sslConnectTimeout (Bug #1355) | |
| 3963 | - [Medium] assertion failed in StatHist.c:93 (Bug #1325) | |
| 3964 | - [Minor] More chroot_dir and squid -k reconfigure issues (Bug #1331) | |
| 3965 | - [Cosmetic] Invalid URLs in error messages when failing to connect | |
| 3966 | to peer, and a few other inconsistent error messages (Bug #1342) | |
| 3967 | - [Cosmetic] Fails to compile with glibc -D_FORTIFY_SOURCE=2 | |
| 3968 | (Bug #1344) | |
| 3969 | - [Minor] Some odd FTP servers respond with 250 where 226 is expected | |
| 3970 | (Bug #1348) | |
| 3971 | - [Cosmetic] Greek translation of error messages (Bug #1351) | |
| 3972 | - [Major] Assertion failed store_status == STORE_PENDING (Bug #1368) | |
| 3973 | - [Minor] squid_ldap_auth -U does not work (Bug #1370) | |
| 3974 | - [Minor] SNMP cacheClientTable fails on "long" IP addresses | |
| 3975 | (Bug #1375) | |
| 3976 | - [Minor] Solaris Sparc + IP-Filter compile error (Bug #1374) | |
| 3977 | - [Minor] E-mail sent when cache dies is blocked from many antispam | |
| 3978 | rules (Bug #1380) | |
| 3979 | - [Minor] LDAP helpers does not work with TLS (-Z option) (Bug #1389) | |
| 3980 | - [Cosmetic] Incorrect store dir selection debug message on objects | |
| 3981 | larger than 2Gigabyte (Bug #1343) | |
| 3982 | - [Cosmetic] header_id enum misused as an signed integer (Bug #1343) | |
| 3983 | - [Cosmetic] Allow leaving core dumps when started as root (Bug #1335) | |
| 3984 | - [Medium] Clients could bypass delay_pool settings by faking a cache | |
| 3985 | hit request (Bug #500) | |
| 3986 | - [Minor] IP-Filter 4.X support (Bug #1378) | |
| 3987 | - [Medium] Odd results on pipelined CONNECT requests | |
| 3988 | - [Major] Squid crashing with "FATAL: Incorrect scheme in auth header" | |
| 3989 | when using NTLM authentication. | |
| 3990 | - [Cosmetic] Odd results when pipeline_prefetch is combined with NTLM | |
| 3991 | authentication (bug #1396) | |
| 3992 | - [Minor] invalid host was processed as IP 255.255.255.255 in dst acl | |
| 3993 | (Bug #1394) | |
| 3994 | - [Cosmetic] New --with-maxfd=N configure option to override build | |
| 3995 | time filedescriptor limit test | |
| 3996 | - [Minor] Added support for Windows code name "Longhorn" on Cygwin. | |
| 3997 | ||
| 3998 | Changes to squid-2.5.STABLE10 (17 May 2005) | |
| 3999 | ||
| 4000 | - [Minor Security] Fix race condition in relation to old Netscape | |
| 4001 | Set-Cookie specifications | |
| 4002 | - [Minor] Fails to parse D.J. Bernstein's FTP EPLF ftp listing | |
| 4003 | format and PASV resposes (Bug #1252) | |
| 4004 | - [Medium] BASE HREF missing on ftp directory URLs without / | |
| 4005 | (Bug #1253) | |
| 4006 | - [Minor security] confusing http_access results on configuration | |
| 4007 | error (Bug #1255) | |
| 4008 | - [Cosmetic] More robust Date parser (Bug #321) | |
| 4009 | - [Minor] reload_with_ims fails to refresh negatively cached objects | |
| 4010 | (Bug #1159) | |
| 4011 | - [Cosmetic] delay_access description clarification (Bug #1245) | |
| 4012 | - [Cosmetic] Check for integer overflow in size specifications in | |
| 4013 | squid.conf (Bug #1247) | |
| 4014 | - [Cosmetic] bzero is a non-standard function not available on all | |
| 4015 | platforms (Bug #1256) | |
| 4016 | - [Cosmetic] Compiler warnings if pid_t is not an int (Bug #1257) | |
| 4017 | - [Cosmetic] Incorrect use of ctype functions (Bug #1259) | |
| 4018 | - [Cosmetic] Defer digest fetch if the peer is not allowed to be used | |
| 4019 | (Bug #1261) | |
| 4020 | - [Minor] Duplicate content-length headers logged incorrectly or | |
| 4021 | not cleaned up properly (Bug #1262) | |
| 4022 | - [Cosmetic] Extend relaxed_header_parser to work around "excess | |
| 4023 | data from" errors from many major web servers. (Bug #1265) | |
| 4024 | - [Minor] Add HTTP headers to a netdb error messages | |
| 4025 | - [Minor] Multiple minor aufs issues (Bug #671) | |
| 4026 | - [Minor] Basic authentication fails with very long logins or | |
| 4027 | password (Bug #1171) | |
| 4028 | - [Minor] CONNECT requests truncated if client side disconnects first | |
| 4029 | (Bug #1269) | |
| 4030 | - [Minor] --disable-hostname-checks configure option did not work | |
| 4031 | - [Cosmetic] LDAP helpers adjusted to compile with SUN LDAP SDK | |
| 4032 | - [Cosmetic] aufs warning about open event filedescriptors on shutdown | |
| 4033 | - [Medium] Failed to process requests for files larger than 2GB in size | |
| 4034 | - [Cosmetic] rename() related cleanup | |
| 4035 | - [Cosmetic] New cachemgr pending_objects and client_objects actions | |
| 4036 | - [Cosmetic] external acls requiring authentication did not request | |
| 4037 | new credentials on access denials like proxy_auth does. | |
| 4038 | - [Cosmetic] Syslog facility now configurable via command line options. | |
| 4039 | - [Cosmetic] New %a error page template code expanding into the | |
| 4040 | authenticated user name. (Bug #798) | |
| 4041 | - [Minor] IP-Filter 4.0 support in --enable-ipf-transparent | |
| 4042 | - [Minor] Support interception of multiple ports | |
| 4043 | - [Cosmetic] Allow "squid -k ..." to run even if the local hostname | |
| 4044 | can not be determined (Bug #1196) | |
| 4045 | - [Cosmetic] Configuration file parser now handles DOS/Windows formatted | |
| 4046 | configuration files with CRLF lineendings proper. | |
| 4047 | - [Minor] Unrecognized Cache-Control directives now forwarded properly | |
| 4048 | (Bug #414) | |
| 4049 | - [Minor] Authentication helpers now returns useable information | |
| 4050 | in the %m error page macro on failed authentication (Bug #1223) | |
| 4051 | - [Minor] pid file management corrected in chroot use (Bug #1157) | |
| 4052 | - [Minor Security] Fix for CVE-1999-0710: cachemgr malicouse use. | |
| 4053 | cachemgr.cgi now reads a config file telling which proxy servers | |
| 4054 | it can administer. | |
| 4055 | - [Minor] aufs statistics improvements | |
| 4056 | - [Minor] SNMP bugfixes and support for SNMPv2(c) (Bug #1288, #1299) | |
| 4057 | - [Minor] ARP acl documentation and cachemgr config dump corrections | |
| 4058 | - [Minor] dstdomain/dstdom_regex acls now allow matching of numeric | |
| 4059 | hostnames in addition to the reverse lookup of the domain name. | |
| 4060 | - [Security] Internal DNS client hardened against spoofing | |
| 4061 | ||
| 4062 | Changes to squid-2.5.STABLE9 (24 Feb 2005) | |
| 4063 | ||
| 4064 | - [Medium] Don't retry requests on 403 errors (Bug #1210) | |
| 4065 | - [Minor] Ignore invalid FQDN DNS responses (Bug #1222) | |
| 4066 | - [Minor] cache_peer related memory leaks on reconfigure (Bug #1246) | |
| 4067 | - [Cosmetic] Adjusted to build cleanly with GCC-4 (Bug #1211) | |
| 4068 | - [Minor] relaxed_header_parser extended to work around even more | |
| 4069 | broken web servers (Bug #1242) | |
| 4070 | - [Minor] FTP gatewaying URLs cleaned up slightly, mainly to work | |
| 4071 | better with Mozilla but also to improve security slightly on | |
| 4072 | non-anonymous FTP. | |
| 4073 | - [Minor] High characters allowed un-encoded in FTP and Gopher | |
| 4074 | listings to allow the user-agent to display data in non-iso8859-1 | |
| 4075 | charsets. (Bug #1220) | |
| 4076 | - [Cosmetic] format fixes to silence compiler warnings on many | |
| 4077 | platforms. | |
| 4078 | - [Major] Assertion failures on certain odd DNS responses (Bug #1234) | |
| 4079 | ||
| 4080 | Changes to squid-2.5.STABLE8 (11 Feb 2005) | |
| 4081 | ||
| 4082 | - [Minor] 100% CPU usage on half-closed PUT/POST requests (Bug #354, | |
| 4083 | #1096) | |
| 4084 | - [Cosmetic] Document -v (protocol version) option to LDAP helpers | |
| 4085 | - [Minor] The new req_header and resp_header acls segfaults | |
| 4086 | immediately on parse of squid.conf (Bug #961) | |
| 4087 | - [Minor] Failure to shut down busy helpers on -k rotate/reconfigure | |
| 4088 | (Bug #1118) | |
| 4089 | - [Minor] Don't use O_NONBLOCK on disk files. (Bug #1102) | |
| 4090 | - [Minor] Squid fails to close TCP connection after blank HTTP | |
| 4091 | response (Bug #1116) | |
| 4092 | - [Minor security] Random error messages in response to malformed | |
| 4093 | host name (Bug #1143) | |
| 4094 | - [Minor] PURGE should not be able to delete internal objects | |
| 4095 | (Bug #1112) | |
| 4096 | - [Minor] httpd_accel_port 0 (virtual) not working correctly (Bug | |
| 4097 | #1121) | |
| 4098 | - [Minor] cachemgr vm_objects segfault (Bug #1149) | |
| 4099 | - [Minor security] Confusing results on empty acl declarations (Bug | |
| 4100 | #1166) | |
| 4101 | - [Minor] Don't close all "other" filedescriptors on startup (Bug | |
| 4102 | #1177) | |
| 4103 | - [Minor] fakeauth_auth memory leak and NULL pointer access (Bug | |
| 4104 | #1183) | |
| 4105 | - [Security] buffer overflow bug in gopherToHTML() (Bug #1189) | |
| 4106 | - [Medium security] Denial of service with forged WCCP messages | |
| 4107 | (Bug #1190) | |
| 4108 | - [Minor] DNS related memory leak on certain malformed DNS responses | |
| 4109 | (Bug #1197) | |
| 4110 | - [Minor] Internal DNS sometimes truncates host names in reverse | |
| 4111 | (PTR) lookups (Bug #1136) | |
| 4112 | - [Minor Security] Add sanity checks on LDAP user names (Bug #1187) | |
| 4113 | - [Security] Harden Squid against HTTP request smuggling attacks | |
| 4114 | - [Minor] Icon URLs fails in non-anonymous FTP directory listings is | |
| 4115 | short_icon_urls is on (Bug #1203) | |
| 4116 | - [Security] Harden Squid against HTTP response splitting attacks | |
| 4117 | (Bug #1200) | |
| 4118 | - [Medium security] Buffer overflow in WCCP recvfrom() call | |
| 4119 | (Bug #1217) | |
| 4120 | - [Security] Properly handle oversized reply headers (Bug #1216) | |
| 4121 | - [Minor] LDAP helpers search fixed to properly ask for no attributes | |
| 4122 | - [Minor] A sporadic segmentation fault when using ntlm authentication | |
| 4123 | fixed (Bug #1127) | |
| 4124 | - [Major] Segmentation fault on failed PUT/POST requests (Bug #1224) | |
| 4125 | - [Medium] Persistent connection mismatch on failed PUT/POST request | |
| 4126 | (Bug #1122) | |
| 4127 | - [Minor] WCCP easily disturbed by forged packets (Bug #1225) | |
| 4128 | - [Minor] Password management in ftp:// gatewaying improved (Bug #1226) | |
| 4129 | - [Major] HTTP reply data corruption in certain situations involving | |
| 4130 | reply headers split over multiple packets (Bug #1233) | |
| 4131 | ||
| 4132 | Changes to squid-2.5.STABLE7 (11 Oct 2004) | |
| 4133 | ||
| 4134 | - [Medium] No objects cached in ufs cache_dir type in some | |
| 4135 | configurations. Issue introduced in 2.5.STABLE6 by the patch for | |
| 4136 | Bug #676. (Bug #1011) | |
| 4137 | - [Minor] LDAP helpers update to correct LDAP connection management | |
| 4138 | and add support for literal password compare instead of binding | |
| 4139 | - [Minor] A large number of queued DNS lookups for the same domain | |
| 4140 | (Bug #852) | |
| 4141 | - [Cosmetic] request_header_max_size configuration partly ignored | |
| 4142 | (Bug #899) | |
| 4143 | - [Minor] Partial hit results in TCP_HIT, not TCP_MISS. (Bug #1001) | |
| 4144 | - [Cosmetic] HEAD requests may return stale information | |
| 4145 | (Bug #1012) | |
| 4146 | - [Cosmetic] Warn if cache_dir ufs can not create files. (Bug #918) | |
| 4147 | - [Minor] case insensitive authentication (Bug #431) | |
| 4148 | - [Cosmetic] Add delay pools information to active_requests. (Bug | |
| 4149 | #882) | |
| 4150 | - [Minor] Apparent memory leak in client_db (Bug #833) | |
| 4151 | - [Minor] NTLM authentication truncated causing failures. (Bug | |
| 4152 | #1016) | |
| 4153 | - [Cosmetic] Grammatical corrections in squid.conf.default | |
| 4154 | - [Cosmetic] Unknown %X errorpage codes incorrectly quoted. (Bug | |
| 4155 | #1030) | |
| 4156 | - [Medium] Segfaults and other strange crashes when using heap | |
| 4157 | policies. (Bug #1009) | |
| 4158 | - [Minor] Supplementary group memberships not set (Bug #1021) | |
| 4159 | - [Cosmetic] ERR_TOO_BIG Portuguese translation | |
| 4160 | - [Minor] external_acl does not handle newlines (Bug #1038) | |
| 4161 | - [Major] NTLM authentication denial of service when using msnt_auth | |
| 4162 | or fake_auth (Bug #1045) | |
| 4163 | - [Medium] Memory leaks when using NTLM authentication without | |
| 4164 | challenge reuse. (Bug #994) | |
| 4165 | - [Minor] Temporary NTLM memory leak with challenge reuse enabled | |
| 4166 | (Bug #910) | |
| 4167 | - [Minor] assertion failed: "n_ufs_dirs <= | |
| 4168 | Config.cacheSwap.n_configured". (Bug #1053) | |
| 4169 | - [Minor] Segfault in authenticateDigestHandleReply. (Bug #1031) | |
| 4170 | - [Minor] acl time fails to parse multiple time specifications | |
| 4171 | (Bug #1060) | |
| 4172 | - [Minor] cachemgr config dumps mixed up Range and Request-Range | |
| 4173 | headers in http_header_access & replace directives. (Bug #1056) | |
| 4174 | - [Minor] Content-Disposition added as a well known header (Bug #961) | |
| 4175 | - [Cosmetic] Don't warn about arp acls not being supported on FreeBSD | |
| 4176 | (Bug #1074) | |
| 4177 | - [Cosmetic] Limit internal send/receive buffer sizes (Bug #1075) | |
| 4178 | - [Medium] New acl types to match arbitrary HTTP headers. In addition | |
| 4179 | the http_header_access & replace directives now support arbitrary | |
| 4180 | headers and not only the well known ones. (Bug #961) | |
| 4181 | - [Cosmetic] ncsa_auth now accepts Window formatted password files | |
| 4182 | (Bug #1078) | |
| 4183 | - [Cosmetic] Support the --program-prefix/suffix options or other | |
| 4184 | configure program name transforms (Bug #1019) | |
| 4185 | - [Minor] Fix race condition in CONNECT and also handle aborts of | |
| 4186 | CONNECT requests in a more graceful manner. (Bug #859) | |
| 4187 | - [Minor] New balance_on_multiple_ip directive to work around certain | |
| 4188 | broken load balancers and optimized ipcache on reload requests | |
| 4189 | (Bug #1058) | |
| 4190 | - [Medium] New reply_header_max_size directive | |
| 4191 | (Bug #874) | |
| 4192 | - [Minor] Suspected instability on aborted PUT/POST requests | |
| 4193 | (Bug #1089) | |
| 4194 | - [Security] SNMP Denial of Service fix (CAN-2004-0918) | |
| 4195 | ||
| 4196 | Changes to squid-2.5.STABLE6 (9 Jul 2004) | |
| 4197 | ||
| 4198 | - Bug #937: NTLM assertion error "srv->flags.reserved" | |
| 4199 | - Bug #935: squid_ldap_auth can be confused by the use of reserved | |
| 4200 | characters | |
| 4201 | - Helper queue warnings imprecise on the number of helpers required | |
| 4202 | - squid_ldap_auth TLS mode works correctly again | |
| 4203 | - Bug #940, #305: pkg-config support for finding correct OpenSSL | |
| 4204 | compile flags | |
| 4205 | - Bug #426: "Vary: *" is ignored | |
| 4206 | - 100% CPU usage on Linux-2.2 | |
| 4207 | - Version number should not include -CVS if autoconf is run | |
| 4208 | - Bug #947: deny_info redirection with requested URL escaped wrongly | |
| 4209 | - Bug #495: CONNECT timeout should produce a 504 or 503 | |
| 4210 | - Bug #956: cache_swap_log documentation referred to swap.state by | |
| 4211 | it's old swap.log name | |
| 4212 | - ntlm/auth_ntlm.c(683): warning #187: use of "=" where "==" may | |
| 4213 | have been intended | |
| 4214 | - Bug #962: rfc1035NameUnpack: Assertion (*off) < sz failed | |
| 4215 | - Bug #954: Segment violation when using a blank user name in digest | |
| 4216 | authentication | |
| 4217 | - Bug #943: assertion failed: errorpage.c:292: "mem->inmem_hi == 0" | |
| 4218 | - Spelling corrections in configure and squid.conf.default | |
| 4219 | - The meaning of ERR in digest helper protocol clarified in the | |
| 4220 | squid.conf documentation | |
| 4221 | - Bug #950: Spelling error in Turkish ERR_DNS_FAIL | |
| 4222 | - Bug #616: Negative cached 404 replies with VARY header never matched | |
| 4223 | - Bug #968: range_offset_limit -1 KB rejected as invalid syntax | |
| 4224 | due to a shortcoming in the fix to bug #817 | |
| 4225 | - Bug #570: Very large cache_mem values reported wrongly in cache.log | |
| 4226 | - Bug #676: store_dir_select_algorithm least-load doesn't work for | |
| 4227 | ufs cache_dir type | |
| 4228 | - Bug #946: cacheCurrentUnlinkRequests should be a counter, not gauge | |
| 4229 | - Bug #948: Show client ip in cache.log debug output | |
| 4230 | - Bug #960: compilation issue on OpenBSD/m88k | |
| 4231 | - Bug #969: FTP directory listing HTML DOCTYPE misread by some tools | |
| 4232 | - Bug #991: dns_servers should default to localhost if no resolv.conf | |
| 4233 | - Bug #717: msnt_auth documentation update | |
| 4234 | - Bug #753: Segfault in memBufVPrintf on certain architectures | |
| 4235 | requiring va_copy | |
| 4236 | - Bug #941: Negative size in access.log on long running CONNECT | |
| 4237 | requests | |
| 4238 | - Bug #972: Segmentation fault after "Likely proxy abuse detected" | |
| 4239 | - Bug #981: sasl_auth updated to work with SALS2 | |
| 4240 | - Overflow bug in Squid's ntlm_auth helper used for transparent NTLM | |
| 4241 | authentication to a NT domain without using Samba. | |
| 4242 | ||
| 4243 | Changes to squid-2.5.STABLE5 (1 Mar 2004): | |
| 4244 | ||
| 4245 | - cache.log message on "squid -k reconfigure" was slightly confusing, | |
| 4246 | claiming Squid restarted when it just reread the configuration. | |
| 4247 | - Bug #787: digest auth never detects password changes | |
| 4248 | - Bug #789: login with space confuses redirector helpers | |
| 4249 | - Bug #791: FQDNcache discards negative responses when using | |
| 4250 | internal DNS | |
| 4251 | - pam_auth fails on Solaris when using pam_authtok_get. Persistent | |
| 4252 | PAM connections are unsafe and now disabled by default. | |
| 4253 | - auth_param documentation clarifications and added default realm | |
| 4254 | values making only the helper program a required attribute | |
| 4255 | - Bug #795: German ERR_DNS_FAIL correction | |
| 4256 | - Bug #803: Lithuanian error messages update | |
| 4257 | - Bug #806: Segfault if failing to load error page | |
| 4258 | - Bug #812: Mozilla/Netscape plugins mime type defined (.xpi) | |
| 4259 | - Bug #817: maximum_object_size too large causes squid not to cache | |
| 4260 | - Bug #824: 100% CPU loop if external_acl combined with separate | |
| 4261 | authentication acl in the same http_access line | |
| 4262 | - squid_ldap_group updated to version 2.12 with support for ldaps:// | |
| 4263 | (LDAPv2 over SSL) and a numer of other improvements. | |
| 4264 | - Bug #799: positive_dns_ttl ignored when using internal DNS. | |
| 4265 | - Bug #690: Incorrect html on empty Gopher responses | |
| 4266 | - Bug #729: --enable-arp-acl may give warning about net/route.h | |
| 4267 | - Bug #14: attempts to establish connection may look like syn flood | |
| 4268 | attack if the contacted server is refusing connections | |
| 4269 | - errorpage README files included in the distribution again showing | |
| 4270 | who contributed which translation | |
| 4271 | - Bug #848: connect_timeout connect_timeout ends up twice the length. | |
| 4272 | forward_timeout option added to address this. | |
| 4273 | - Bug #849: DNS log error messages should report the failed query | |
| 4274 | - Bug #851: DNS retransmits too often | |
| 4275 | - Bug #862: Very frequently repeated POST requests may cause a | |
| 4276 | filedescriptor shortage due to persitent connections building up | |
| 4277 | - Bug #853: Sporatic segmentation faults on aborted FTP PUT requests | |
| 4278 | - Bug #571: Need to limit use of persistent connections when | |
| 4279 | filedescriptor usage is high | |
| 4280 | - Bug #856: FTP/Gopher Icon URLs are unneededly complex and often | |
| 4281 | does not work properly | |
| 4282 | - Bug #860: redirector_access does not handle "slow" acls such as | |
| 4283 | "dst" or "external" requiring a external lookup. | |
| 4284 | - Bug #865: Persistent connection usage too high after sudden burst | |
| 4285 | of traffic. | |
| 4286 | - Bug #867: cache_peer max-conn=.. option does not work | |
| 4287 | - Bug #868: refuses to start if pid_filename none is specified | |
| 4288 | - Bug #887: LDAP helper -Z (TLS) option does not work | |
| 4289 | - Bug #877: Squid doesn't follow telnet protocol on FTP control | |
| 4290 | connections | |
| 4291 | - Bug #908: Random auth popups and account lockouts when using ntlm | |
| 4292 | - Support for NTLM_NEGOTIATE exchanges with ntlm helpers | |
| 4293 | - Bug #585: cache_peer_access fails with NTLM authentication | |
| 4294 | - Bug #592: always/never_direct fails with NTLM authentication | |
| 4295 | - wbinfo_group update for Samba-3 | |
| 4296 | - Bug #892: helpers/ntlm_auth/SMB/ fails to compile on FreeBSD 5.0 | |
| 4297 | - Bug #924: miss_access restricts internal and cachemgr requests | |
| 4298 | even if these are local | |
| 4299 | - Bug #925: auth headers send by squidclient are mildly malformed | |
| 4300 | - Bug #922: miss_access and delay_access and several other | |
| 4301 | authentication related bug fixes. | |
| 4302 | - Bug #909: Added ARP acl support for FreeBSD | |
| 4303 | - Bug #926: deny_info with http_reply_access or miss_access | |
| 4304 | - Bug #872: reply_body_max_size problems when using NTLM auth | |
| 4305 | - Bug #825: random segmentation faults when using digest auth | |
| 4306 | - Bug #910: Partial fix for temporary memory leaks when using NTLM | |
| 4307 | auth. There is still problems if challenge reuse is enabled. | |
| 4308 | - ftp://anonymous@host/ now accepted without requiring a password | |
| 4309 | - Bug #594: several mime type updates (ftp:// related) | |
| 4310 | - url_regex enhanced to allow matching of %00 | |
| 4311 | ||
| 4312 | Changes to squid-2.5.STABLE4 (15 Sep 2003): | |
| 4313 | ||
| 4314 | - Lithuanian error messages added to the distribution | |
| 4315 | - Bug #660: segfauld if more than one custom deny_info line | |
| 4316 | - cache_dir disd documentation cleanup | |
| 4317 | - check open of /dev/null to avoid 100% CPU loop in badly | |
| 4318 | configured chroot environments | |
| 4319 | - documentation update on uri_whitespace to refer to the correct RFC | |
| 4320 | - Bug #655: icmpRecv: recv: (11) Resource temporarily unavailable | |
| 4321 | - Bug #683: external_acl does not wait for ident lookups to complete | |
| 4322 | - aufs: Fix a minor use-after-free problem which could cause the | |
| 4323 | count of opening filedescriptors to grow larger than it should | |
| 4324 | - Syntax changes to make GCC-3.3 accept Squid without complaints | |
| 4325 | - Warning if CARP server defined in incorrect load factor order | |
| 4326 | - neighbor_type_domain documentation update | |
| 4327 | - http_header_access now works when using cache peers | |
| 4328 | - high_memory_warning now uses sbrk as fallback mechanism on | |
| 4329 | platforms where neither mallinfo or mstats are available. | |
| 4330 | - hosts_file now handles comments at the end of lines correcly | |
| 4331 | - storeCheckCachable() Stats corrected for release_request and | |
| 4332 | wrong_content_length. | |
| 4333 | - cachePeerPingsSent MIB type corrected | |
| 4334 | - unused minimum_retry_timeout directive removed | |
| 4335 | - Bug #702: ERR_TO_BIG spanish translation | |
| 4336 | - Bug #705: Memory leak on deny_info TCP_RESET | |
| 4337 | - Code cleanup to fix compile error in httpHeaderDelById | |
| 4338 | - Bug #699: Host header now forwarded exactly where it was in the | |
| 4339 | original request to work around certain broken firewalls or | |
| 4340 | load balancers which fail if this header is too far into the | |
| 4341 | request headers. | |
| 4342 | - Bug #704: Memory leak on reply_body_max_size | |
| 4343 | - Bug #686: requests denied due to http_reply_access are now | |
| 4344 | logged with TCP_DENIED (instead of TCP_MISS, etc). | |
| 4345 | - Bug #708: ie_refresh now sends no-cache to have the reload | |
| 4346 | request propagate properly in cache meshes | |
| 4347 | - Bug #700: Crashes related to ftpTimeout: timeout in SENT_PASV state | |
| 4348 | - Bug #709: cbdata.c:186: "c->valid" assertion due to peer | |
| 4349 | digest not found | |
| 4350 | - Bug #710: round-robin cache_dir selection incorrectly | |
| 4351 | compares max-size. | |
| 4352 | - Statistics corrections in HTTP header statitics | |
| 4353 | - QUICKSTART cleanups | |
| 4354 | - Bug #715: statCounter.syscalls.disk counters treated | |
| 4355 | inconsistently. Now increment the counters in AUFS | |
| 4356 | functions and for unlinkd. | |
| 4357 | - Improvements to the (experimental) COSS storage scheme. | |
| 4358 | - Bug #721: User name field in access.log sometimes blank | |
| 4359 | - Bug #94: assertion failed: http.c: "-1 == cfd || | |
| 4360 | FD_SOCKET == fd_table[cfd].type" | |
| 4361 | - Bug #716: assertion failed: client_side.c:1478: "size > 0" | |
| 4362 | - Bug #732: aufs calculates number of threads and limits wrongly | |
| 4363 | - Bug #663: Username not logged into access.log in case of /407 | |
| 4364 | - Bug #267: Form POSTing troubles with NTLM authentication | |
| 4365 | and occationally in differen other error conditions. | |
| 4366 | - Bug #736: ICP dynamic timeout algorithm ignores multicast. | |
| 4367 | - Bug #733: No explicit error message when ncsa_auth can't access | |
| 4368 | passwd file | |
| 4369 | - Bug #267, #757: POST with NTLM stops after persistent connection | |
| 4370 | timeout | |
| 4371 | - Bug #742: Wrong status code on access denials if delay_access | |
| 4372 | is used. Most notably 407 instead of 403 could be returned. | |
| 4373 | - Bug #763: segfault if using ntlm in http_reply_access | |
| 4374 | - Bug #638: assertion error if using proxy_auth in delay_access | |
| 4375 | - Bug #756: segmentation fault if using ntlm proxy_auth in delay_access | |
| 4376 | - The issue of reply_body_max_size limiting the size of error | |
| 4377 | messages no longer applies. | |
| 4378 | - external_acl_type concurrency= option renamed to children= to | |
| 4379 | prepare for Squid-3 upgrades. Old syntax still accepted for the | |
| 4380 | duration of the Squid-2.5 release. | |
| 4381 | - number of filedescriptors rounded down to an even multiple of 64 | |
| 4382 | to work around issues in certain libc implementations. | |
| 4383 | - winbind helpers less noisy in cache.log on restarts/shutdown. | |
| 4384 | - Squid now automatically restarts helpers if too many of them | |
| 4385 | have crashed. | |
| 4386 | ||
| 4387 | Changes to squid-2.5.STABLE3 (25 May 2003): | |
| 4388 | ||
| 4389 | - Bug #573: Occational false negatives in external acl lookups | |
| 4390 | - Bug #577: assertion failed: cbdata.c:224: "c->y == c" when | |
| 4391 | external_acl helpers crashes | |
| 4392 | - Bug #590: Squid may hang or behave oddly on shutdown while | |
| 4393 | requests is being processed. | |
| 4394 | - Bug #590: external acl lookups does not deal well with queue | |
| 4395 | overload | |
| 4396 | - cache_effective_user documentation update | |
| 4397 | - cache_peer documentation update for htcp and carp | |
| 4398 | - Bug #600: The example header_access paranoid setting is | |
| 4399 | missing WWW-Authenticate | |
| 4400 | - Bug #605: Segmentation fault in idnsGrokReply() on certain | |
| 4401 | platforms | |
| 4402 | - Fixes to build properly on AIX 5 | |
| 4403 | - Bug #574: wb_group updated to version 1.1 to make group names | |
| 4404 | case insensitive and correct a segfault issue in the helper | |
| 4405 | - SNMP mib updates to make cacheNumObjCount, | |
| 4406 | cacheCurrentUnlinkRequests, cacheCurrentSwapSize and cacheClients | |
| 4407 | correctly report as gauges (was reporting as counters). | |
| 4408 | - Woraround for --enable-ssl Kerberos issue on RedHat 9 | |
| 4409 | - Bug #579: Close and repopen log files on "squid -k reconfigure" | |
| 4410 | - Bug #598: squid_ldap_auth could segfault if LDAP server is | |
| 4411 | unavailable | |
| 4412 | - Bug #609,#612: msntauth helper fixes in dealing with large | |
| 4413 | or non-existing allow/deny user files. | |
| 4414 | - Bug #620: acl ident REQUIRED matches even if the ident lookup fails | |
| 4415 | - Bug #432: reply_body_max_size fails with ident or proxy_auth acls | |
| 4416 | and also fails to block large objects where the content-length | |
| 4417 | is not known | |
| 4418 | - Bug #606: Basic auth looping and gets stuck at high CPU usage when | |
| 4419 | multiple proxy_auth ACLs combined in one line and login fails. | |
| 4420 | - squid_ldap_auth updated with support for TLS and SSL | |
| 4421 | - Bug #623: segfault if using negated external acls in certain | |
| 4422 | configurations involving other acls later on the same http_access | |
| 4423 | line. | |
| 4424 | - Bug #622: wb_group helper update to version 1.2 to ass support for | |
| 4425 | Domain-Qualified groups refering to groups in a specific domain | |
| 4426 | - Bug #596: logic error in poll() error management | |
| 4427 | - Bug #597: logic errors in error management | |
| 4428 | - Bug #591: segmentation fault in authentication on "squid -k debug" | |
| 4429 | - Bug #587: smb_auth fails on complex logins involving domain names | |
| 4430 | or other odd characters | |
| 4431 | - Bug #558, #587: smb_auth.pl fails on complex logins involving | |
| 4432 | domain names or other odd characters | |
| 4433 | - Bug #643: external_acl fails with ttl=0 due to a change introduced | |
| 4434 | by the patch for Bug #553 in 2.5.STABLE2. | |
| 4435 | - Bug #630: minor issues in digest authantication causing random | |
| 4436 | authentication failures and incompability with many mainstream | |
| 4437 | browser digest implementations due to browser qop bugs. To deal | |
| 4438 | with those broken browser nonce_stricness now defaults to off, | |
| 4439 | and two new digest options have been added (check_nonce_count | |
| 4440 | and post_workaround) to allow workarounds to other quite bad | |
| 4441 | browser bugs if needed. | |
| 4442 | - Bug #644: digest authentication fails on requests with one | |
| 4443 | or more comma in the requested URL | |
| 4444 | - Bug #648: deny_info TCP_RESET not working. The fix for this also | |
| 4445 | adds the ability to send redirects. | |
| 4446 | ||
| 4447 | Changes to squid-2.5.STABLE2 (Mars 17, 2003): | |
| 4448 | ||
| 4449 | - Contrib files added back to the distribution | |
| 4450 | - Several compiler warnings fixed when using --disable-ident or | |
| 4451 | --disable-http-violations | |
| 4452 | - authentication can now be used in most access controls, but | |
| 4453 | must in most cases first be enforced in http_access to force | |
| 4454 | the user to authenticate. | |
| 4455 | - cleanups in the developer bootstrap.sh process when preparing | |
| 4456 | the sources. | |
| 4457 | - several squid.conf.default documentation updated to correctly | |
| 4458 | refer to the current names when refering to other directives | |
| 4459 | - authenticate_ip_ttl documentation updates | |
| 4460 | - several assertion faults and segmentation violations corrected | |
| 4461 | - the RunCache/RunAccel and squid.rc scripts updated to refer to | |
| 4462 | the squid binary in sbin rather than the old bin location. | |
| 4463 | - squid_ldap_auth command line processing fixes when specifying | |
| 4464 | the LDAP server last on the line instead of -h option | |
| 4465 | - aufs data corruption bugfix | |
| 4466 | - aufs performance improvement for low traffic systems | |
| 4467 | - aufs stability improvements | |
| 4468 | - external_acl corrected to properly deal with quoted strings | |
| 4469 | - WCCPv1 bugfix to make sure the router accepts the hash assignments | |
| 4470 | - "Total accounted memory" now correctly reported in cachemgr | |
| 4471 | - several small memory leaks (mostly reconfigure related) | |
| 4472 | - new squid.conf option to allow GET/HEAD requests with a request | |
| 4473 | entity | |
| 4474 | - "make uninstall" no longer removes squid.conf | |
| 4475 | - cachemgr.cgi now uses POST to avoid having the cachemgr password | |
| 4476 | logged in the web server logs | |
| 4477 | - authentication schemes which are known to not be proxyable are now | |
| 4478 | filtered out from forwarded server replies to avoid that the clients | |
| 4479 | tries to use such schemes when we know for a fact it won't work | |
| 4480 | - spelling corrections in various error messages | |
| 4481 | - now possible to define acl values with spaces in them | |
| 4482 | by using the "include file" feature | |
| 4483 | - squid_ldap_group updated to 2.10 to fix compilation issues with | |
| 4484 | recent (and older) OpenLDAP libraries and to make the helper deal | |
| 4485 | correctly with true LDAP groups by first looking up the user DN. | |
| 4486 | - Some internal code cleanups | |
| 4487 | - now verifies that programs etc exists iside the chroot directory | |
| 4488 | when using chroot_dir. No longer neccesary to set up a split view | |
| 4489 | environment where the same paths works both inside the chroot and | |
| 4490 | outside just to convince Squid that the files is actually there.. | |
| 4491 | - improved memory usage reporting | |
| 4492 | - --disable-hostname-checks configure option | |
| 4493 | - no longer ignores double dots in host names. Any hostname with | |
| 4494 | double dots is now rejected as invalid. | |
| 4495 | - log_mime_hdrs no longer logs garbage if very long headers | |
| 4496 | are seen. | |
| 4497 | - 'select_fds_hist' object added to cachemgr 'histogram' output | |
| 4498 | - pid file now unlinked when squid has really shut down, not | |
| 4499 | immediately when the shutdown request is received. This allows | |
| 4500 | the pid file to be monitored to determine when Squid has shut down | |
| 4501 | properly | |
| 4502 | - correct authentication scheme setups on some platforms or compilers | |
| 4503 | - several squid.conf.default documentation updates to remove references | |
| 4504 | to renamed or replaced directives by changing them to their current | |
| 4505 | names. | |
| 4506 | - the SSL reverse proxy support updated to allow building with | |
| 4507 | OpenSSL 0.9.7 and and later. | |
| 4508 | - Corrected a minor performance problem while processing HEAD replies | |
| 4509 | from various broken web servers not sending a correct HTTP reply | |
| 4510 | - time acls can now specify multiple times in the same acl name, like | |
| 4511 | most other acl types. | |
| 4512 | - winbind helpers updated to match Samba-2.2.7a and should | |
| 4513 | work with Samba-2.2.6 or later (required). For compability with | |
| 4514 | older Samba versions A new configure option --with-samba-sources=... | |
| 4515 | has been added to allow you to specify which Samba version the | |
| 4516 | helpers should be built for if different than the above versions. | |
| 4517 | - Squid MIB definition syntax correction to work better with newer | |
| 4518 | (and older) SNMP tools. | |
| 4519 | - Fixed access.log format when logging "error:invalid-HTTP-ident" on | |
| 4520 | requests where parsing the HTTP identifier (HTTP/1.0) failed. | |
| 4521 | - "make distclean" no longer removes the icons, this avoids the | |
| 4522 | dependency on "uudecode" to rebuild Squid after "make distclean" | |
| 4523 | - User name returned by external acl lookups (external_acl_type) | |
| 4524 | is now available as "ident" in later acl checks in addition to | |
| 4525 | the logging in access.log. | |
| 4526 | - Incorrect behaviour of Digest authentication partly corrected - it | |
| 4527 | will not handle sessions, but will always enforce password | |
| 4528 | correctness.. (patch submitted by Sean Burford). | |
| 4529 | - Issue with persistent connections and PUT/POST request corrected | |
| 4530 | ||
| 4531 | Changes to squid-2.5.STABLE1 (September 25, 2002): | |
| ddf1c0c4 | 4532 | |
| 94439e4e | 4533 | - Major rewrite of proxy authentication to support other schemes |
| 4534 | than basic. First in the line is NTLM support but others can | |
| a2794549 | 4535 | easily be added (minimal digest is present). See Programmers Guide. |
| 6437ac71 | 4536 | (Robert Collins & Francesco Chemolli) |
| 94439e4e | 4537 | - Reworked how request bodies are passed down to the protocols. |
| 4538 | Now all client side processing is inside client_side.c, and | |
| 4539 | the pass and pump modules is no longer used. | |
| 3ff01c3e | 4540 | used by Squid. |
| 722a4b40 | 4541 | - Optimized searching in proxy_auth and ident ACL types. Squid should |
| 4542 | now handle large access lists a lot more efficiently. | |
| 05fbbc17 | 4543 | (Francesco Chemolli) |
| e396d395 | 4544 | - Fixed forwarding/peer loop detection code (Brian Degenhardt) - |
| 4545 | now a peer is ignored if it turns out to be us, rather than | |
| 4546 | committing suicide | |
| 1224d740 | 4547 | - Changed the internal URL code to obey appendDomain for internal |
| 4548 | objects if it needs appending. This fixes weirdnesses where | |
| 4549 | a machine can think it is "foo.bar.com", and "foo" is requested. | |
| 4550 | (Brian Degenhardt) | |
| a2794549 | 4551 | - Added the use of Automake to create the Makefile.in's in the squid |
| 4552 | source tree. This will allow libtool in the future, and immediately | |
| 4553 | allows better dependency tracking - with or without gcc - as well | |
| 4554 | as the dist-all and distcheck targets for developers which respectively | |
| 4555 | build a tar.gz and a tar.bz2 distribution, and check that what will be | |
| 4556 | distributed builds. | |
| d6827718 | 4557 | - Added TOS and source address selection based on ACLs, |
| 4558 | written by Roger Venning. This allows administrators to set | |
| 4559 | the TOS precedence bits and/or the source IP from a set of | |
| 4560 | available IPs based upon some ACLs, generally to map different | |
| 4561 | users to different outgoing links and traffic profiles. | |
| 50821507 | 4562 | - Added 'max-conn' option to 'cache_peer' |
| 4563 | - Added SSL gatewaying support, allowing Squid to act as a SSL server | |
| 4564 | in accelerator setups. | |
| 4e2c57a0 | 4565 | - SASL authentication helper by Ian Castle |
| 6474667e | 4566 | - msntauth updated to v2.0.3 |
| 3e4057db | 4567 | - no_cache now applies to cache hits as well as cache misses |
| 810118ab | 4568 | - the Gopher client in Squid has been significantly improved |
| 05463204 | 4569 | - Squid now sanity checks FTP data connections to ensure the |
| 6474667e | 4570 | connection is from the requested server. Can be disabled if |
| 05463204 | 4571 | needed by turning off the ftp_sanitycheck option. |
| 98858605 | 4572 | - external acl support. A mechanism where flexible ACL checks |
| 4573 | can be driven by external helpers. See the external_acl_type | |
| 4574 | and acl external directives. | |
| 3e4057db | 4575 | - Countless other small things and fixes |
| 2d8d56b0 | 4576 | - HTML pages generated by Squid or CacheMgr as well as the |
| 4577 | ERR documents now contain a doctype declaration so that | |
| 22567bb5 | 4578 | browsers know which HTML specification the document uses. |
| 2d8d56b0 | 4579 | In addition to that they have a new look (background-color, font) |
| 4580 | and are valid according to the HTML standards at www.w3.org. | |
| 3ff01c3e | 4581 | (Clemens L ser) |
| 9bbd1655 | 4582 | - Login and password send to Basic auth helpers is now URL escaped |
| 4583 | to allow for spaces and other "odd" characters in logins and | |
| 4584 | passwords | |
| c90fbf46 | 4585 | - Proxy Authentication is no longer blindly forwarded to peer |
| 4586 | caches if not used locally. If forwarding of proxy authentication | |
| 4587 | is desired then it must now be configured with the login=PASS | |
| 4588 | cache_peer option. | |
| 6474667e | 4589 | - Responses with Vary: in the header are now cached by squid. |
| 1239cfea | 4590 | (Henrik Nordstrom). |
| 3ff01c3e | 4591 | - Removed unused 'siteselect_timeout' directive. |
| c5bc64d3 | 4592 | |
| dde94193 | 4593 | Changes to Squid-2.4.STABLE7 (July 2, 2002): |
| 4594 | ||
| 4595 | - Squid now drops any requests using transfer-encoding. | |
| 4596 | Squid is a HTTP/1.0 proxy and as such do not support | |
| 4597 | the use of transfer-encoding. | |
| 4598 | - The MSNT auth helper has been updated to v2.0.3+fixes for | |
| 4599 | buffer overflow security issues found in this helper. | |
| 4600 | - A security issue in how Squid forwards proxy authentication | |
| 4601 | credentials has been fixed | |
| 4602 | - Minor changes to support Apple MAC OS X and some other platforms | |
| 4603 | more easily. | |
| 4604 | - The client -T option has been implemented | |
| 4605 | - HTCP related bugfixes in "squid -k reconfigure" | |
| 4606 | - Several bugfixes and cleanup of the Gopher client, both | |
| 4607 | to correct some security issues and to make Squid properly | |
| 4608 | render certain Gopher menus. | |
| 4609 | - FTP data channels are now sanity checked to match the address of | |
| 4610 | the requested FTP server. This to prevent theft or injection of | |
| 4611 | data. See the new ftp_sanitycheck directive if this is not desired. | |
| 4612 | - Security fixes in how Squid parses FTP directory listings into HTML | |
| 4613 | ||
| c5bc64d3 | 4614 | Changes to Squid-2.4.STABLE6 (March 19, 2002): |
| 4615 | ||
| 722a4b40 | 4616 | - The patch for 2.4.STABLE5 was insufficiently tested and |
| c5bc64d3 | 4617 | introduced a bug that causes frequent assertions when |
| 4618 | handling DNS PTR answers. | |
| 4619 | ||
| 4620 | Changes to Squid-2.4.STABLE5 (March 15, 2002): | |
| 4621 | ||
| 4622 | - Fixed an array bounds bug in lib/rfc1035.c. This bug | |
| 4623 | could allow a malicious DNS server to send bogus replies | |
| 4624 | and corrupt the heap memory. | |
| 4625 | ||
| 572b218d | 4626 | Changes to Squid-2.4.STABLE4 (Feb 19, 2002) |
| 08e8e4d0 | 4627 | |
| 722a4b40 | 4628 | - htcp_port 0 now properly disables htcp |
| 6474667e | 4629 | - Fixed problem with certain non-anonymous ftp:// style URL's |
| 08e8e4d0 | 4630 | - SNMP bugfixes including several memory leaks |
| 4631 | ||
| 4632 | Changes to Squid-2.4.STABLE3 (Nov 28, 2001): | |
| 4633 | ||
| 4634 | - Fixed bug #255: core dump on SSL/CONNECT if access denied by | |
| 4635 | miss_access | |
| 4636 | - Fixed bug #246: corrupt on-disk meta information preventing | |
| 4637 | rebuilds of lost swap.state files | |
| 4638 | - Fixed bug #243: squid_ldap_auth now supports spaces in passwords | |
| 4639 | - Fixed a coredump when creating FTP directories | |
| 4640 | - Fixed a compile time problem with statHistDump prototype mistmatch, | |
| 4641 | reported by some compilers | |
| 4642 | - Fixed a potential coredump situation on snmpwalk in certain | |
| 4643 | configurations | |
| 4644 | - Fixed bug #229: filedescriptor leakage in the "aufs" cache_dir | |
| 4645 | store implementation | |
| 4646 | - Serbian error message translations | |
| 4647 | ||
| 50821507 | 4648 | Changes to Squid-2.4.STABLE2 (Aug 24, 2001): |
| 4649 | ||
| 722a4b40 | 4650 | - Expanded configure's GCC optimization disabling check to |
| 50821507 | 4651 | include GCC 2.95.3 |
| 4652 | - avoid negative served_date in storeTimestampsSet(). | |
| 4653 | - Made 'diskd' pathnames more configurable | |
| 4654 | - Make sure squid parent dies if child is killed with | |
| 4655 | KILL signal | |
| 4656 | - Changed diskd offset args to off_t instead of int | |
| 4657 | - Fixed bugs #102, #101, #205: various problems with useragent | |
| 4658 | log files | |
| 4659 | - Fixed bug #116: Large Age: values still cause problems | |
| 4660 | - Fixed bug #119: Floating point exception in | |
| 4661 | storeDirUpdateSwapSize() | |
| 4662 | - Fixed bug #114: usernames not logged with | |
| 4663 | authenticate_ip_ttl_is_strict | |
| 722a4b40 | 4664 | - Fixed bug #115: squid eating up resources (eventAdd args) |
| 50821507 | 4665 | - Fixed bug #125: garbage HTCP requests cause assertion |
| 4666 | - Fixed bug #134: 'virtual port' support ignores | |
| 4667 | httpd_accel_port, causes a loop in httpd_accel mode | |
| 4668 | - Fixed bug #135: assertion failed: logfile.c:135: "lf->offset | |
| 4669 | <= lf->bufsz" | |
| 4670 | - Fixed bug #137: Ranges on misses are over-done | |
| 4671 | - Fixed bug #160: referer_log doesn't seem to work | |
| 4672 | - Fixed bug #162: some memory leaks (SNMP, delay_pools, | |
| 4673 | comm_dns_incoming histogram) | |
| 4674 | - Fixed bug #165: "Store Mem Buffer" leaks badly | |
| 4675 | - Fixed bug #172: Ident Based ACLs fail when applied to | |
| 4676 | cache_peer_access | |
| 4677 | - Fixed bug #177: LinuxPPC 2000 segfault bug due to varargs abuse | |
| 4678 | - Fixed bug #182: 'config' cachemgr option dumps core with | |
| 4679 | null storage | |
| 4680 | - Fixed bug #185: storeDiskdDirParseQ[12]() use wrong number | |
| 4681 | of args in debug/printf | |
| 4682 | - Fixed bug #187: bugs in lib/base64.c | |
| 4683 | - Fixed bug #184: storeDiskdShmGet() assertion; changed | |
| 4684 | diskd to use bitmap instead of linked list | |
| 4685 | - Fixed bug #194: Compilation fails on index() on some | |
| 722a4b40 | 4686 | non-BSD platforms |
| 50821507 | 4687 | - Fixed bug #197: refreshIsCachable() incorrectly checks |
| 4688 | entry->mem_obj->reply | |
| 4689 | - Fixed bug #215: NULL pointer access for proxy requests | |
| 4690 | in accel-only mode | |
| 4691 | ||
| 4692 | Changes to Squid-2.4.STABLE1 (Mar 20, 2001): | |
| 4693 | ||
| 4694 | - Fixed a bug in and cleaned up class 2/3 delay pools | |
| 4695 | incrementing. | |
| 4696 | - Fixed a coredump bug when using external dnsservers that | |
| 4697 | become overloaded. | |
| 4698 | - Fixed some NULL pointer bugs for NULL storage system | |
| 4699 | when reconfiguring. | |
| 4700 | - Fixed a bug with useragent logging that caused Squid to | |
| 4701 | think the logfile never got opened. | |
| 4702 | - Fixed a compiling bug with --disable-unlinkd. | |
| 4703 | - Changed src/squid.h to always use O_NONBLOCK on Solaris | |
| 4704 | if it is defined. | |
| 4705 | - Fixed a bug with signed/unsigned bitfield flag variables | |
| 4706 | that caused problems on Solaris. | |
| 4707 | - Fixed a bug in clientBuildReplyHeader() that could add | |
| 4708 | an Age: header with a negative value, causing an assertion | |
| 4709 | later. | |
| 4710 | - Fixed an SNMP reporting bug. cacheCurrentResFileDescrCnt | |
| 4711 | was returning the number of FDs in use, rather than | |
| 4712 | the number of reserved FDs. | |
| 4713 | - Added the 'pipeline_prefetch' configuration option. | |
| 4714 | - cache_dir syntax changed to use options instead of many | |
| 4715 | arguments. This means that the max_objsize argument now | |
| 4716 | is an optional option, and that the syntax for how to | |
| 722a4b40 | 4717 | specify the diskd magics is slightly different. |
| 50821507 | 4718 | - Various fixes for CYGWIN |
| 4719 | - Upgraded MSNT auth module to version 2.0. | |
| 4720 | - Fixed potential problems with HTML by making sure all | |
| 4721 | HTML output is properly encoded. | |
| 4722 | - Fixed a memory initialization problem with resource records in | |
| 4723 | lib/rfc1035.c. | |
| 4724 | - Rewrote date parsing in lib/rfc1123.c and made it a little | |
| 4725 | more lenient. | |
| 4726 | - Added Cache-control: max-stale support. | |
| 4727 | - Fixed 'range_offset_limit' again. The problem this time | |
| 4728 | is that client_side.c wouldn't set the we_dont_do_ranges | |
| 4729 | flag for normal cache misses. It was only being set for | |
| 4730 | requests that might have been hits, but we decided to | |
| 4731 | change to a miss. | |
| 4732 | - Added the Authenticate-Info and Proxy-Authenticate-Info | |
| 4733 | headers from RFC 2617. | |
| 4734 | - HTTP header lines longer than 64K could cause an assertion. | |
| 4735 | Now they get ignored. | |
| 4736 | - Fixed an IP address scanning bug that caused "123.foo.com" | |
| 4737 | to be interpreted as an IP address. | |
| 4738 | - Converted many structure allocations to use mem pools. | |
| 4739 | - Changed proxy authentication to strip leading whitespace | |
| 4740 | from usernames after decoding. | |
| 4741 | - Prevented NULL pointer access in aclMatchAcl(). Some | |
| 4742 | ACL types require checklist->request_t, but it won't be | |
| 4743 | available in some cases (like snmp_access). Warn the | |
| 4744 | admin that the ACL can't be checked and that we're denying | |
| 4745 | it. | |
| 4746 | - Allow zero-size disk caches. | |
| 4747 | - The actual filesystem blocksize is now used to account | |
| 4748 | for space overheads when calculating on-disk cache size. | |
| 4749 | - Made the maximum memory cache object size configurable. | |
| 4750 | - Added 'minimum_direct_rtt' configuration option. | |
| 4751 | - Added 'ie_refresh' configuration option, which is a hack | |
| 4752 | to turn IMS requests into no-cache requests. | |
| 58d1265f | 4753 | - Added support for netfilter in linux-2.4. This allows transparent |
| 4754 | proxy connections to function correctly in the absence of a Host: | |
| 4755 | header. This requires --enable-linux-netfilter to be passed through | |
| 4756 | to configure. (Evan Jones) | |
| 50821507 | 4757 | - Fixed a bug with clientAccessCheck() that allowed proxy |
| 4758 | requests in accel mode. | |
| 4759 | - Fixed a bug with 301/302 replies from redirectors. Now | |
| 4760 | we force them to be cache misses. | |
| 4761 | - Accommodated changes to the IP-Filter ioctl() interface | |
| 4762 | for intercepted connections. | |
| 4763 | - Fixed handling of client lifetime timeouts. | |
| 4764 | - Fixed a buffer overflow bug with internal DNS replies | |
| 4765 | by truncating received packets to 512 bytes, as per | |
| 4766 | RFC 1035. | |
| 4767 | - Added "forward.log" support, but its work in progress. | |
| 4768 | - Rewrote much of the IP and FQDN cache implementation. | |
| 4769 | This change gets rid of pending hits. | |
| 4770 | - Changed peerWouldBePinged() to return false if our | |
| 4771 | ICP/HTCP port is zero (i.e. disabled). | |
| 4772 | - Changed src/net_db.c to use src/logfile.c routines, | |
| 4773 | rather than stdio, because of solaris stdio filedescriptor | |
| 4774 | limits. | |
| 4775 | - Made netdbReloadState() more robust in case of corrupted | |
| 4776 | data. | |
| 4777 | - Rewrote some freshness/staleness functions in src/refresh.c, | |
| 4778 | partially inspired to support cache-control max-stale. | |
| 4779 | - Fixed status code logging for SSL/CONNECT requests. | |
| 4780 | - Added a hack to subtract cache digest network traffic | |
| 4781 | from statistics so that byte hit ratio stays positive | |
| 4782 | and more closely reflects what people expect it to be. | |
| 4783 | - Fixed a bug with storeCheckTooSmall() that caused | |
| 4784 | internal icons and cache digests to always be released. | |
| 4785 | - Added statfs(2) support for displaying actual filesystem | |
| 4786 | usage in the cache manager 'storedir' output. | |
| 4787 | - Changed status reporting for storage rebuilding. Now it | |
| 4788 | prints percentage complete instead of number of entries | |
| 4789 | parsed. | |
| 4790 | - Use mkstemp() rather than problem-prone tempnam(). | |
| 4791 | - Changed urlParse() to condense multiple dots in hostnames. | |
| 4792 | - Major rewrite of async-io (src/fs/aufs) to make it behave | |
| 4793 | a bit more sane with substantially less overhead. Some | |
| 4794 | tuning work still remains to make it perform optimal. | |
| 4795 | See the start of store_asyncufs.h for all the knobs. | |
| 4796 | - Fixed storage FS modules to use individual swap space | |
| 4797 | high/low values rather than the global ones. | |
| 4798 | - Fixed storage FS bugs with calling file_map_bit_reset() | |
| 4799 | before checking the bit value. Calling with an invalid | |
| 4800 | value caused memory corruption in random places. | |
| 4801 | - Prevent NULL pointer access in store_repl_lru.c for | |
| 4802 | entries that exist in the hash but not the LRU list. | |
| 4803 | ||
| cab24814 | 4804 | Changes to Squid-2.4.DEVEL4 (): |
| ad445e36 | 4805 | |
| ddf1c0c4 | 4806 | - Added --enable-auth-modules=... configure option |
| 83b381d5 | 4807 | - Improved ICP dead peer detection to also work when the workload |
| 4808 | is low | |
| a8c926ff | 4809 | - Improved TCP dead peer detection and recovery |
| 4810 | - Squid is now a bit more persistent in trying to find a alive | |
| 4811 | parent when never_direct is used. | |
| 4812 | - nonhierarchical_direct squid.conf directive to make non-ICP | |
| 4813 | peer selection behave a bit more like ICP selection with respect | |
| 4814 | to hierarchy. | |
| 4815 | - Bugfix where netdb selection could override never_direct | |
| 4816 | - ICP timeout selection now prefers to use parents only when | |
| 4817 | calculating the dynamic timeout to compensate for common RTT | |
| 4818 | differences between parents and siblings. | |
| c1fc651e | 4819 | - No longer starts to swap out objects which are known to be above |
| 4820 | the maximum allowed size. | |
| 987de783 | 4821 | - allow-miss cache_peer option disabling the use of "only-if-cached". |
| 4822 | Meant to be used in conjunction with icp_hit_stale. | |
| c8b40803 | 4823 | - Delay pools tuned to allow large initial pool values |
| 0343b99c | 4824 | - cachemgr filesystem space information changed to show useable space |
| 4825 | rather than raw space, and platform support somewhat extended. | |
| 890b0fa8 | 4826 | - Logs destination IP in the hierarchy log tag when going direct. |
| 4827 | (can be disabled by turning log_ip_on_direct off) | |
| ff21eb3e | 4828 | - Async-IO on linux now makes proper use of mutexes. This fixes some |
| 4829 | odd pthread segfaults on SMP Linux machines, at a slight performance | |
| 4830 | penalty. | |
| 722a4b40 | 4831 | - %s can now be used in cache_swap_log and will be substituted with |
| a80e50c7 | 4832 | the last path component of cache_dir. |
| 4d55827a | 4833 | - no_cache is now a full ACL check without, allowing most ACL types |
| 4834 | to be used. | |
| f1003989 | 4835 | - The CONNECT method now obeys miss_access requirements |
| 145cf928 | 4836 | - proxy_auth_regex and ident_regex ACL types |
| 3cdb7cd0 | 4837 | - Fixed a StoreEntry memory leak during "dirty" rebuild |
| 4838 | - Helper processes no longer hold unrelated filedescriptors open | |
| e40aa8da | 4839 | - Helpers are now restarted when the logs are rotated |
| afc1e43f | 4840 | - Negatively cached DNS entries are now purged on "reload". |
| 4841 | - PURGE now also purges the DNS cache | |
| 722a4b40 | 4842 | - HEAD on FTP objects no longer retrieves the whole object |
| aca95add | 4843 | - More cleanups of the dstdomain ACL type |
| 288c06ce | 4844 | - Squid no longer tries to do Range internally if it is not supported |
| 4845 | by the origin server. Doing so could cause bandwidth spikes and/or | |
| 4846 | negative hit ratio. | |
| 13c7936a | 4847 | - httpd_accel_single_host squid.conf directive |
| 82056f1e | 4848 | - "round-robin" cache_peer counters are reset every 5 minutes to |
| 4849 | compensate previously dead peers | |
| 4fe0e1d0 | 4850 | - DNS retransmit parameters |
| 858783c9 | 4851 | - Show all FTP server messages |
| 6b53c392 | 4852 | - squid.conf.default now indicates if a directive isn't enabled in |
| 4853 | the installed binary, and what configure option to use for enabling it | |
| 418cbe9f | 4854 | - Fixed a temporary memory leak on persistent POSTs |
| 304d289e | 4855 | - Fixed a temporary memory leak when the server response headers |
| 4856 | includes NULL characters | |
| ba2b31a8 | 4857 | - authenticate_ip_ttl_is_strict squid.conf option |
| 4858 | - req_mime_type ACL type | |
| afb87666 | 4859 | - A reworked storage system that supports storage directories in |
| 4860 | a more modular fashion. The object replacement and IO is now | |
| 4861 | responsibility of the storage directory, and not of the storage | |
| 4862 | manager. | |
| 722a4b40 | 4863 | - Fixed a bogus MD5 mismatch warning sometimes seen when using |
| e7407eb8 | 4864 | aufs or diskd stores |
| ce3d30fb | 4865 | - Added --enable-stacktraces configure option to set PRINT_STACK_TRACE, |
| 4866 | and extended support for this to Linux/GNU libc. | |
| af57a2e3 | 4867 | - Disabled the "request timeout" error message sent if the user agent |
| 4868 | did not provide a request in a timely manner after opening the | |
| 4869 | connection. Now the connection is silently closed. The error message | |
| 4870 | was confusing user agents utilizing persistent connections. | |
| cab24814 | 4871 | - Fixed configure --enable descriptions to match the arg names. |
| 4872 | - Eliminated compile warnings from auth_modules/MSNT code. | |
| 4873 | - Require first character of hostnames to be alphanumeric. | |
| 4874 | - Made ARP ACL work for Solaris. | |
| 4875 | - Removed storeClientListSearch(). | |
| 4876 | - Added counters to track diskd operation success and | |
| 4877 | failures. | |
| 4878 | - Fixed range_offset_limit. | |
| 4879 | - Added code to retry ServFail replies for internal DNS | |
| 4880 | lookups. | |
| 4881 | - Added referer header logging (Jens-S. Voeckler). | |
| 4882 | - Added "multi-domain-NTLM" authentication module, a Perl | |
| 4883 | script from Thomas Jarosch. | |
| 4884 | - Added configurable warning messages for high memory usage, | |
| 4885 | high response time, and high page faults. | |
| 4886 | - Made store dir selection algorithm configurable. | |
| 4887 | - Added support for admin-definable extension methods, | |
| 4888 | up to 20. | |
| 16689110 | 4889 | - Added 'maximum_object_size_in_memory' as a configuration option - |
| 4890 | this defines the watermark where objects transit from being true | |
| 4891 | hot objects to being in-transit objects in memory. It currently | |
| 4892 | defaults to 8 KB. | |
| 5cd41d0d | 4893 | - Change to the fqdn code which changes how pending DNS requests |
| 4894 | are treated as private and only become public once they are | |
| 4895 | completed. This can add extra load on DNS servers but prevents | |
| 4896 | all the pending clients blocking if one of the queries got | |
| 4897 | stuck. (Duane Wessels) | |
| 7e543177 | 4898 | - Converted more code to use MemPools, from Andres Kroonmaa. |
| 4899 | - Added more CYGWIN patches from Robert Collins. | |
| e7407eb8 | 4900 | |
| 4901 | Changes to Squid-2.4.DEVEL3 (): | |
| 4902 | ||
| 4903 | - Added Logfile module. | |
| 4904 | - Added DISKD stats via cachemgr. | |
| 4905 | - Added squid.conf options for DISKD magic constants. | |
| ad445e36 | 4906 | |
| e7407eb8 | 4907 | Changes to Squid-2.4.DEVEL2 (Feb 29, 2000): |
| ad445e36 | 4908 | |
| 4909 | Changes to Squid-2.4.DEVEL1 (): | |
| 4910 | ||
| 42b51993 | 4911 | Changes to Squid-2.3.STABLE4 (July 18, 2000): |
| 4912 | ||
| 4913 | - Fixed --localstatedir configure option (IKEDA Shigeru). | |
| 4914 | - Fixed IPFilter headers on OpenBSD (Nic Bellamy, Brad | |
| 4915 | Smith). | |
| 4916 | - Added pthread_sigmask() check to configure (Daniel | |
| 4917 | Ehrlich). | |
| 4918 | - Added CYGWIN patches from Robert Collins. | |
| 4919 | - Changed internal DNS lookups to retry queries that are | |
| 4920 | returned with RCODE 2 (ServFail). | |
| 4921 | - Added 'virtual port' support (Gregg Kellogg). If | |
| 4922 | 'httpd_accel_uses_host_header' is enabled, then we use | |
| 4923 | the port number from the Host header. Otherwise, when | |
| 4924 | 'httpd_accel_port' is set to "0" we use the port number | |
| 4925 | of the local end of the client socket. | |
| 4926 | - Fixed a typo in carp.c (Nikolaj Yourgandjiev). | |
| 4927 | - Made Squid accept GET requests that have a "content-length: | |
| 4928 | 0" header. | |
| 4929 | - Added a sanity check on the NHttpSockets[] array index | |
| 4930 | (Gregg Kellogg). | |
| 4931 | - Added a friendlier message when Squid can't find any DNS | |
| 4932 | nameserver addresses to use (Daniel Kiracofe). | |
| 4933 | - Added nonstandard WEBDAV methods: BMOVE, BDELETE, BPROPFIND | |
| 4934 | (Craig Whitmore). | |
| 4935 | - Added missing '%c' token replacement in error page | |
| 4936 | generation. | |
| 4937 | - Fixed a bug with 'minimum_object_size' that prevented | |
| 4938 | internal icons from being loaded. | |
| 4939 | - Fixed "extra semicolon" bug in storeExpiredReferenceAge() | |
| 4940 | that could prevent any objects from being replaced. | |
| 4941 | - Make sure that storeDirDiskFull() doesn't actually | |
| 4942 | *increase* the cache size. | |
| 4943 | - Changed a storeSwapMetaUnpack() assertion to a recoverable | |
| 4944 | error condition. | |
| 4945 | - Removed "wccpHereIam" event check that could cause Squid | |
| 4946 | to stop sending HERE_I_AM messages. | |
| 4947 | ||
| d20b1cd0 | 4948 | Changes to Squid-2.3.STABLE3 (May 15, 2000): |
| 4949 | ||
| 4950 | - Fixed malloc linking problems on Solaris. The configure | |
| 4951 | script incorrectly set options for dlmalloc. | |
| 4952 | - Added a configure check to remove compiler optimization | |
| 4953 | for GCC 2.95.x. | |
| 4954 | - Updated MSNT authenticator module. | |
| 4955 | - Updated Estonian error pages. | |
| 4956 | - Updated Japanese error pages. | |
| 4957 | - Fixed expires bug in httpReplyHdrCacheInit. It was | |
| 4958 | incorrectly setting expires based on max-age. It was using | |
| 4959 | the current time as a basis, instead of the response date. | |
| 4960 | - Fixed "USE_DNSSERVER" typos. | |
| 4961 | - Added a workaround for getpwnam() problems on Solaris. | |
| 4962 | getpwnam() could fail if there are fewer than 256 FDs | |
| 4963 | available. This causes root to own some disk files. | |
| 4964 | - Added an 'offline_toggle' option via the cache manager. | |
| 4965 | - Added a 'minimum_object_size' option. Files smaller than | |
| 4966 | this size are not stored. | |
| 4967 | - Added 'passive_ftp' option to disable passive FTP transfers. | |
| 4968 | - Added 'wccp_version' option because some Cisco IOS versions | |
| 4969 | require WCCP version 3. | |
| 4970 | - The 'client' program in ping mode (-g) now prints transfer | |
| 4971 | throughput. | |
| 4972 | - Fixed logging of proxy auth username for redirected | |
| 4973 | requests. | |
| 4974 | - Fixed bogus Age values for IMS requests. | |
| 4975 | - Fixed persistent connection timeout for client-side | |
| 4976 | connections. It was hard-coded to 15 seconds, now uses | |
| 4977 | the 'pconn_timeout' value. | |
| 4978 | - Fixed up httpAcceptDefer. It wasn't being used properly | |
| 4979 | and caused high CPU usage when Squid gets close to the FD | |
| 4980 | limit. | |
| 4981 | - Numerous delay_pools fixes and checks. | |
| 4982 | - Fixed SNMP coredumps from running snmpwalk. | |
| 4983 | - Added a check for errno == EPIPE in icmp.c when pinger uses | |
| 4984 | a Unix socket instead of a UDP socket. | |
| 4985 | - Fixed ACL checklist memory initialization bugs. | |
| 4986 | - Cleaned up the MIB file. Replaced contact information and | |
| 4987 | checked description fields. | |
| 4988 | - Removed LRU reference_age hard-coded upper limit. | |
| 4989 | - Fixed async I/O FD leak. | |
| 4990 | - Made getMyHostname() more robust. | |
| 4991 | - Fixed domain list matching bug. "x-foo.com" wasn't properly | |
| 4992 | compared to ".foo.com" and confused splay tree ordering. | |
| 4993 | - Added a check for whitespace in hostnames and optionally | |
| 4994 | strip whitespace if 'uri_whitespace' setting allows. | |
| 4995 | - Added status code and checking to ASN/whois queries. | |
| 4996 | ||
| 4997 | Changes to Squid-2.3.STABLE2 (Mar 2, 2000): | |
| 4998 | ||
| 4999 | - Changed Copyright text. | |
| 5000 | - Changed configure so that some IRIX-6.4 hacks apply to | |
| 5001 | all IRIX-6.* versions. | |
| 5002 | - Cleaned up HTML bugs in error pages. | |
| 5003 | - Told configure to check for netinet/if_ether.h, which | |
| 5004 | is used in ARP ACL code, but might not be required. | |
| 5005 | - Added "Cookie" to known HTTP headers so it can be | |
| 5006 | used in anonymizer configuration. | |
| 5007 | - Added optional TCP_REDIRECT log code for logging | |
| 5008 | of 301/302 responses returned by Squid. | |
| 5009 | - Added a check for a currently running Squid process. | |
| 5010 | If the pid file exists, and the pid is running, | |
| 5011 | Squid complains and refuses to start another instance. | |
| 5012 | - Changed async I/O scope to PTHREAD_SCOPE_PROCESS for | |
| 5013 | IRIX. | |
| 5014 | - Fixed a bug with the PURGE method. The purge enable | |
| 5015 | flag was not getting cleared during reconfigure. | |
| 5016 | Also required PURGE method to be used in http_access | |
| 5017 | list before enabling. | |
| 5018 | - Fixed async I/O assertions for file open errors. | |
| 5019 | - Fixed internal DNS assertion when unpacking truncated | |
| 5020 | messages. | |
| 5021 | - Fixed anonymize_headers bug that caused all headers | |
| 5022 | to be allowed after a reconfigure. | |
| 5023 | - Fixed an access denied bug for accelerator-only installations. | |
| 5024 | - Fixed internal DNS initialization so that it uses | |
| 5025 | 'dns_nameservers' settings in squid.conf if set. | |
| 5026 | - Fixed 'maxconn' ACL bug that caused it to work backwards | |
| 5027 | (Pedro Ribeiro). | |
| 5028 | - Fixed syslog bug for daemon mode on Linux. | |
| 5029 | - Fixed 'http_port' parsing bugs. | |
| 5030 | - Fixed internal DNS byte ordering bugs for PTR queries. | |
| 5031 | - Fixed internal DNS queue getting stuck during periods | |
| 5032 | of low activity (Henrik). | |
| 5033 | - Fixed byte ordering bugs for parsing EPLF FTP listings | |
| 5034 | on 64-bit systems. | |
| 5035 | - Fixed 'request_body_max_size' bug that caused all | |
| 5036 | POST, PUT requests to be denied if max size is set | |
| 5037 | to zero. | |
| 5038 | - Fixed 'redirector_access' bug when using 'myport' ACLs. | |
| 5039 | - Fixed CARP neighbor selection bugs for down peers. | |
| 5040 | - Added 'client_persistent_connections' and | |
| 5041 | 'server_persistent_connections' flags to disable persistent | |
| 5042 | connections for clients and servers. | |
| 5043 | - Fixed access logging bug that caused many requests to be | |
| 5044 | logged as TCP_MISS. | |
| 5045 | - Added some bounds checking to delay pools code. | |
| 5046 | ||
| ad445e36 | 5047 | Changes to Squid-2.3.STABLE1 (Jan 9, 2000): |
| 5048 | ||
| 5049 | - Updated PAM authentication module from Henrik Nordstrom. | |
| 5050 | - Updated Bulgarian error messages from Svetlin Simeonov. | |
| 5051 | - Changed ACL routines so that User-Agent (browser) string | |
| 5052 | is always taken from compiled HTTP request headers | |
| 5053 | instead of passed as an argument to aclCreateChecklist. | |
| 5054 | - Added a 'strip' option to the 'uri_whitesace' configuration | |
| 5055 | directive and made it the default behavior. Whitespace | |
| 5056 | found in URI's is now stripped out by default. | |
| 5057 | - Added chroot feature. The 'chroot_dir' config option enables | |
| 5058 | it and specifies the directory. | |
| 5059 | - Changed clientBuildReplyHeader so that the Age header is | |
| 5060 | added only for cache hits, and only when we can calculate | |
| 5061 | a valid, positive age value. | |
| 5062 | - Changed clientWriteComplete and clientGotNotEnough so | |
| 5063 | that they keep persistent connections open for more types | |
| 5064 | of replies that don't have bodies. | |
| 5065 | - Changed filemap.c routines to dynamically grow filemap | |
| 5066 | space as needed. | |
| 5067 | - Added a hack to ftp.c to deal with ftp.netscape.com, which | |
| 5068 | sometimes doesn't acknowledge PASV commands. | |
| 5069 | - Fixed FTP bug with ftpScheduleReadControlReply; there | |
| 5070 | was not always a timeout handler on the control socket | |
| 5071 | after the transfer completed. | |
| 5072 | - Fixed FTP filedescriptor leak from invalid PASV replies. | |
| 5073 | - Changed httpBuildRequestHeader so that it doesn't | |
| 5074 | copy the Host header from the client request. Instead | |
| 5075 | we should generate our own Host header which is known | |
| 5076 | to be correct. | |
| 5077 | - Changed storeTimestampsSet to adjust entry->timestamp | |
| 5078 | if the response includes an Age header. | |
| 5079 | - Removed size limit from storeKeyHashBuckets. | |
| 5080 | - Changed fwdConnectStart from a "heavy" to a "light" event. | |
| 5081 | - Fixed an 'anonymize_headers' bug that affects unknown | |
| 5082 | HTTP headers. With the bug, if you list a header that | |
| 5083 | Squid doesn't know about (such as "Charset"), it would | |
| 5084 | add HDR_OTHER to the allow/deny mask. This caused all | |
| 5085 | unknown headers to be allowed or denied (depending on | |
| 5086 | the scheme you use). Now, with the bug fixed, an unknown | |
| 5087 | header in the 'anonymize_headers' list is simply ignored. | |
| 5088 | ||
| 7e3ce7b9 | 5089 | Changes to Squid-2.3.DEVEL3 (): |
| 5090 | ||
| ad445e36 | 5091 | - Added MSNT auth module from Antonino Iannella. |
| 7e3ce7b9 | 5092 | - Added --enable-underscores configure option. This allows |
| 5093 | Squid to accept hostnames with underscores in them. Your | |
| 5094 | DNS resolver may still complain about them, however. | |
| 5095 | - Added --heap-replacement configure option. This enables | |
| 5096 | the alternative cache replacement policies, such as | |
| 5097 | GDSF, and LFUDA. | |
| 3ff01c3e | 5098 | - WCCP establishes and registers with the router faster. |
| 7e3ce7b9 | 5099 | - Added 'maxconn' acl type to limit the number of established |
| 5100 | connections from a single client IP address. Submitted | |
| 5101 | by Vadim Kolontsov. | |
| 5102 | - Close FTP data socket as soon as transfer completes | |
| 5103 | (Alexander V. Lukyanov). | |
| 5104 | - Fixed ftpReadPass() to not clobber ctrl.message when | |
| 5105 | the PASS command fails. | |
| 5106 | - Added a redirect.c patch so squidGuard is able to do | |
| 5107 | per-user access control (Antony T Curtis). | |
| 5108 | - discard the pumpMethod() function, and instead use the | |
| 5109 | fact that the request has a request entity (content-length | |
| 5110 | present) (Henrik). | |
| 5111 | - Reload the MIME icons at reconfigure time (Radu Greab). | |
| 5112 | - Updated Richard Huveneers' SMB authentication module to | |
| 5113 | his version 0.05 package. | |
| 5114 | - Fixed lib/heap.c::heap_delete() bug when deleting the | |
| 5115 | last node. | |
| 5116 | - Fixed an integer conversion bug in | |
| 5117 | lib/rfc1035.c::rfc1035AnswersUnpack(). | |
| 5118 | - Fixed lib/rfc1738 routines to encode reserved characters, | |
| 5119 | in addition to encoding the unsafe characters (Henrik). | |
| 5120 | - Changed the interface for splay compare and "walk" | |
| 5121 | functions to take a void pointer, instead of a splayNode | |
| 5122 | pointer (Henrik). | |
| 5123 | - Changed numerous HTTP parsing routines to use ssize_t | |
| 5124 | instead of size_t. This was done because size_t may be | |
| 5125 | signed or unsigned. When it is unsigned, gcc emits | |
| 5126 | numerous "comparison is always true" warnings. At least | |
| 5127 | we know ssize_t is always signed. | |
| 5128 | - Fixed src/HttpHeaderTools::httpHeaderHasConnDir() and | |
| 5129 | friends so that it properly handles multi-value lists. | |
| 5130 | - Added an "end" (ssize_t) parameter to | |
| 5131 | src/HttpReply::httpReplyParse() so that we know exactly | |
| 5132 | where to terminate the header buffer. | |
| 5133 | - Changed src/access_log.c::log_quote() so that it only | |
| 5134 | encodes whitespace characters, and not all URL-special | |
| 5135 | characters (Henrik). | |
| 5136 | - Added local port ACL type ("myport") (Henrik). | |
| 5137 | - Added maximum number of connections per client ("maxconn") | |
| 5138 | as an ACL type. | |
| 5139 | - Fixed proxy authentication username/password parsing to | |
| 5140 | be more robust (Henrik). | |
| 5141 | - Fixed ACL domain/host and domain/domain comparison | |
| 5142 | functions yet again. Eliminated duplicate code so that | |
| 5143 | only src/url.c::matchDomainName() contains this mysterious | |
| 5144 | code. | |
| 5145 | - Changed the 'http_port' option to accept an IP address | |
| 5146 | or hostname as well (Henrik). | |
| 5147 | - Removed 'tcp_incoming_addr' option. | |
| 5148 | - Added an access control list for the redirector | |
| 5149 | ('redirector_access'). Requests which match are sent to | |
| 5150 | the redirector. All requests. are redirected by default. | |
| 5151 | - Added the 'authenticate_ip_ttl' option. It specifies | |
| 5152 | how long a valid proxy authentication credential is | |
| 5153 | bound to a specific address. | |
| 5154 | - Added 280, 488, 591, and 777 to "Safe_ports" ACL. | |
| 5155 | - Removed the unused and highly questionable 'forward_snmpd_port' | |
| 5156 | option. | |
| 5157 | - Added an option to accept DNS messages from unknown nameservers. | |
| 5158 | This may be necessary if replies come from a different address | |
| 5159 | than queries are sent to. | |
| 5160 | - Added #includes for IP Filter files in netinet directory. | |
| 5161 | - Fixed a bug with retrying forwarded IMS requests (Henrik). | |
| 5162 | - Fixed a bug in src/client_side.c::clientInterpretRequestHeaders() | |
| 5163 | where we were checking a cache-control bit before getting the | |
| 5164 | mask from the HTTP headers (pallo@initio.no). | |
| 5165 | - Fixed a bug with "no_cache" access list. If not defined, | |
| 5166 | everything was uncachable by default. | |
| 5167 | - Fixed a bug with timed-out client-side HTTP connections. | |
| 5168 | We didn't cancel the read handler, which could lead to | |
| 5169 | "rwstate != NULL" warnings. | |
| 5170 | - Changed comm_open() to only call fdAdjustReserved() for | |
| 5171 | specific errors (ENFILE, EMFILE); | |
| 5172 | - Fixed NULL pointer bug in idnsParseResolvConf(). | |
| 5173 | - Split CACHE_DIGEST_HIT into CD_PARENT_HIT and CD_SIBLING_HIT. | |
| 5174 | - Added DELETE request method. | |
| 5175 | - Added RFC 2518 HTTP status codes. | |
| 5176 | - Fixed handling of URL passwords when we need to rewrite a | |
| 5177 | BASE HREF URL (Henrik). | |
| 5178 | - Fixed a bug with FTP requests where a request gets aborted, | |
| 5179 | but we try to complete it anyway. It would result in a | |
| 5180 | "store_status != STORE_PENDING" assertion. The solution | |
| 5181 | is to check for ENTRY_ABORTED before reading from | |
| 5182 | the control channel too. | |
| 5183 | - Changed FTP to retry a request if Squid fails to establish | |
| 5184 | a PASV data connection (Henrik). | |
| 5185 | - Fixed numerous HTCP memory leaks and an uninitialized memory | |
| 5186 | bug. | |
| 5187 | - Changed httpMaybeRemovePublic() with RFC 2518 and 2616 in | |
| 5188 | mind (Henrik). | |
| 5189 | - Minor fixes for Rhapsody systems. | |
| 5190 | - Define _XOPEN_SOURCE_EXTENDED in squid.h so that AIX systems | |
| 5191 | don't include varargs.h. | |
| 5192 | - Changed src/store_client.c::storeClientType() so that | |
| 5193 | an entry can have more than one STORE_MEM_CLIENT. | |
| 5194 | - Changed src/store_client.c::storeClientReadHeader() | |
| 5195 | to check swapfile metadata (Henrik). | |
| 5196 | - Changed src/url.c::urlCheckRequest() to return FALSE for | |
| 5197 | any "https://" URL. These should always be CONNECT | |
| 5198 | instead. If Squid gets an "https://" URL, it is a browser | |
| 5199 | bug. | |
| 5200 | - Added numerous squid.conf options for controlling cache | |
| 5201 | digests. Previously these were hard-coded in | |
| 5202 | src/store_digest.c. (Martin Hamilton) | |
| 5203 | - Added 'cache_peer' option called 'digest-url' that | |
| 5204 | lets you specify the URL for a peer's digest. | |
| 5205 | (Martin Hamilton) | |
| 5206 | - Added DELAY_POOLS hacks to scan "slow" connections in | |
| 5207 | a random order (David Luyer). | |
| 5208 | - ARP_ACL fixes from Damien Miller. Linux 2.2.x uses a | |
| 5209 | per-interface arp/neighbour cache, whereas 2.0.x uses a | |
| 5210 | unified cache. Under 2.2.x you are required to specify | |
| 5211 | a interface name when looking up ARP table entries with | |
| 5212 | SIOCGARP. | |
| 5213 | - If the process umask is not set (i.e. 0), then Squid | |
| 5214 | changes it to 007. | |
| 5215 | ||
| 9bc73deb | 5216 | Changes to Squid-2.3.DEVEL2 (): |
| 5217 | ||
| 5218 | - Added --enable-truncate configure option. | |
| 5219 | - Updated Czech error messages () | |
| 5220 | - Updated French error messages () | |
| 5221 | - Updated Spanish error messages () | |
| 5222 | - Added xrename() function for better debugging. | |
| 5223 | - Disallow empty ("") password in aclDecodeProxyAuth() | |
| 5224 | (BoB Miorelli). | |
| 5225 | - Fixed ACL SPLAY subdomain detection (again). | |
| 5226 | - Increased default 'request_body_max_size' from 100KB | |
| 5227 | to 1MB in cf.data.pre. | |
| 5228 | - Added 'content_length' member to request_t structure | |
| 5229 | so we don't have to use httpHdrGetInt() so often. | |
| 5230 | - Fixed repeatedly calling memDataInit() for every reconfigure. | |
| 5231 | - Cleaned up the case when fwdDispatch() cannot forward a | |
| 5232 | request. Error messages used to report "[no URL]". | |
| 5233 | - Added a check to return specific error messages for a | |
| 5234 | "store_digest" request when the digest entry doesn't exist | |
| 5235 | and we reach internalStart(). | |
| 5236 | - Changed the interface of storeSwapInStart() to avoid a bug | |
| 5237 | where we closed "sc->swapin_sio" but couldn't set the | |
| 5238 | pointer to NULL. | |
| 5239 | - Changed storeDirClean() so that the rate it gets called | |
| 5240 | depends on the number of objects deleted. | |
| 5241 | - Some WCCP fixes. | |
| 5242 | - Added 'hostname_aliases' option to detect internal requests | |
| 5243 | (cache digests) when a cache has more than one hostname | |
| 5244 | in use. | |
| 5245 | - Async I/O NUMTHREADS now configurable with --enable-async-io=N | |
| 5246 | (Henrik Nordstrom). | |
| 5247 | - Added queue length to async I/O cachemgr stats (Henrik Nordstrom). | |
| 5248 | - Added OPTIONS request method. | |
| 9bc73deb | 5249 | |
| eb824054 | 5250 | Changes to Squid-2.3.DEVEL1 (): |
| 5251 | ||
| 5252 | - Added WCCP support. This adds the 'wccp_router' squid.conf | |
| 5253 | option. | |
| 5254 | - Added internal DNS queries; Most installations can run | |
| 5255 | without the external dnsserver processes. | |
| 5256 | - Rewrote much of the code that stores cache objects on | |
| 5257 | disk. Developed a programming interface that should | |
| 5258 | allow new storage systems to be added easily. This still | |
| 5259 | is pretty ugly and needs a lot of work, however. | |
| 5260 | - Replaced async_io.c "tags" with callback data locks. | |
| 5261 | This probably breaks async IO in a bad way. | |
| 5262 | - Tried to write an Async IO disk storage module. | |
| 5263 | - Added code to replace the StoreEntry linked list with a | |
| 5264 | heap structure. This allows for different replacement | |
| 5265 | algorithms, instead of being stuck with LRU. This adds | |
| 5266 | the 'replacement_policy' squid.conf option. (John Dilley | |
| 5267 | et al). | |
| 5268 | - Fixed HTCP queries by actually checking for freshness | |
| 5269 | based on the HTCP header fields. | |
| 5270 | - Fixed passing of redirector command line arguments. | |
| 5271 | - Added 'request_header_max_size' squid.conf option. | |
| 5272 | - Added 'request_body_max_size' squid.conf option. | |
| 5273 | - Added 'reply_body_max_size' squid.conf option. | |
| 5274 | - Added 'peer_connect_timeout' squid.conf option. | |
| 5275 | - Added 'redirector_bypass' squid.conf option. | |
| 5276 | - Added RFC 2518 (WEBDAV) request methods. | |
| d20b1cd0 | 5277 | |
| 6b8e7481 | 5278 | Changes to Squid-2.2 (April 19, 1999): |
| b93549f6 | 5279 | |
| 98b093e7 | 5280 | - Removed all SNMP specific ACL code |
| 5281 | SNMP now uses generic squid ACL's | |
| 5282 | - Removed view-based access crontrol | |
| 00b7a8b6 | 5283 | - Cleaned up and simplified SNMP section of squid.conf |
| 98b093e7 | 5284 | - Changed the SNMP code to use a tree stucture. |
| 3ff01c3e | 5285 | - Added objects to MIB: |
| 00b7a8b6 | 5286 | Request Hit Ratio's |
| 5287 | Byte Hit Ratio's | |
| 5288 | Number of Clients | |
| 61d53e64 | 5289 | - Changed SNMP Agent to return object instances correctly. |
| b93549f6 | 5290 | - Added our own assert() macro so we can use debug() instead of |
| 5291 | printing to stderr. | |
| 5292 | - Added eventFreeMemory(). | |
| 5293 | - Fixed ipcCreate() bug when debug_log has FD <= 2. | |
| 5294 | - Changed watchChild() and related code in main.c so that | |
| 5295 | Squid can behave more like a proper daemon process. | |
| 5296 | - Added 'prefer_direct' option (enabled by default) so that | |
| 5297 | people can give parents higher preference than direct. | |
| 6703526b | 5298 | - Fixed ipc.c close() bug for async IO. On FreeBSD, |
| 5299 | comm_close() doesn't work for child processes when async IO is | |
| 5300 | used. | |
| 5301 | - Fixed setting the public key for large ``icons'' (Henrik | |
| 5302 | Nordstrom). | |
| 68f87dc5 | 5303 | - Rewrote peer digest module to fix memory leaks on reconfigure |
| 5304 | and clean the code. Increased "current" digest version to 5 | |
| 6474667e | 5305 | ("required" version is still 3). Revised "Peer Select" cache |
| 5306 | manager stats. | |
| 68f87dc5 | 5307 | - Added "-k parse" command line option: parses the config file |
| 5308 | but does not send a signal unlike other -k options. | |
| 1743c283 | 5309 | - Revamped storeAbort() calling. Only store_client.c has all |
| 5310 | the right information to determine if the request should | |
| 5311 | be aborted. Now client and server modules just storeUnregister | |
| d81e3f33 | 5312 | without ever needing to call storeAbort. |
| 96aeb95d | 5313 | - Small change of Squid output for FTP (Andrew Filonov, |
| 5314 | Henrik Nordstrom). | |
| 5315 | - clientGetsOldEntry() sends old entry if new request status | |
| 5316 | is in the 500-range (Henrik Nordstrom). | |
| 5317 | - Changed configure so it works with IRIX6.4 C compiler (broken?) | |
| 5318 | option -OPT:fast_io=ON. | |
| 5319 | - Fixed comm_connect_addr() non-blocking connections for | |
| 5320 | SONY NEWSOS (Makoto MATSUSHITA). | |
| 5321 | - Changed "#ifdef __STDC__" to "#if STDC_HEADERS" as recommended | |
| 5322 | by autoconf documentation. | |
| 5323 | - Fixed client-side cache-control max-age (Henrik Nordstrom). | |
| 5324 | - Added a new error page: ERR_SHUTTING_DOWN. fwdStart() returns | |
| 5325 | this error if it is called while squid is in the process of | |
| 5326 | shutting down. | |
| 5327 | - Added support for linuxthreads package under FreeBSD (Tony Finch). | |
| 5328 | - Fixed HP-UX StatHist.c assertions by making the "hbase_f" | |
| 5329 | functions non-static (Michael Pelletier). | |
| 5330 | - Fixed logging of authenticated usernames even if the | |
| 5331 | authorization is not cached (Dancer). | |
| 5332 | - Fixed pconnPush() bug that prevented holding on to | |
| 5333 | persistent connections (Manfred Bathelt). | |
| 2328711e | 5334 | - Pid file now rewritten on SIGHUP. |
| b4019ff7 | 5335 | - Numerous Ident changes: |
| 5336 | - Ident lookups will now be done on demand if you use the | |
| 5337 | 'ident' ACL type. | |
| 5338 | - The 'ident_lookup on|off' option has been replaced with | |
| 5339 | an access list, so you can do lookups only for some | |
| 5340 | client addresses. | |
| 5341 | - Added an 'ident_timeout' option to specifiy the amount | |
| 5342 | of time to wait for an ident lookup. | |
| 5343 | - Added a (local) hit rate to mempool metering. | |
| 5344 | - FTP Restarts (REST command) is now supported. | |
| 5345 | - Check for libintl.a on SCO3.2. | |
| 5346 | - Disable poll() on SCO3.2. | |
| 5347 | - Numerous Async IO enhancements from Henrik. | |
| 5348 | - Removed cache_mem_low and cache_mem_high options (Henrik | |
| 5349 | Nordstrom). | |
| 5350 | - Replaced 'persistent_client_posts' with 'broken_posts' access | |
| 5351 | list. | |
| 97474590 | 5352 | - Rewrote the anonymizer. |
| 5353 | - Removed the http_anonymizer option. | |
| 548b801c | 5354 | - Added the anonymize_headers option to allow individual |
| 5355 | referencing of headers for addition or removal. See | |
| 5356 | 'anonymize_headers' in squid.conf for additional | |
| 5357 | configuration. | |
| b3abf16c | 5358 | - Fixed config file parser's handing of optional directives. |
| 5359 | Some people might get new warnings about unknown config | |
| 5360 | directives. | |
| 548b801c | 5361 | - Added 'myip' ACL type. This is the local IP address for |
| 5362 | connected sockets (Luyer). | |
| 5363 | - Fixed parsing of FTP DOS directory listings with spaces | |
| 5364 | (Nordstrom). | |
| dd0b0295 | 5365 | - Numerous DELAY_POOL changes/fixes from David Luyer: |
| 5366 | - Makes no-delay neighbors for DELAY_POOLS work by | |
| 5367 | using a fd_set with the connections to no-delay | |
| 5368 | peers marked in it. | |
| 5369 | - Makes IP addresses ending in 0 and 255, and | |
| 5370 | network number 255, work with individual and | |
| 5371 | network delay pools (they were previously not | |
| 5372 | permitted, and documented as such). | |
| 5373 | - Massive overhaul of delay pools code - dynamically | |
| 5374 | allocated delay pools, as many as required. | |
| 5375 | - delayPoolsUpdate stops running if DELAY_POOLS is | |
| 5376 | configured but no delay pools are configured. | |
| 5377 | - Initial delay pool levels are now configurable | |
| 5378 | as a percentage of the maximum for the pool in | |
| 5379 | question (used to be all set to 1 second worth | |
| 5380 | of traffic). Pools are restored to this level | |
| 5381 | on reconfiguratoin. | |
| 242188c9 | 5382 | - Changed storeClientCopy to give a swap-in failure if |
| 5383 | the number of open disk FD's is above the 'max_open_disk_fds' | |
| 5384 | limit. Otherwise, a very loaded cache will end up with | |
| 5385 | all disk files open for reading, and none for writing. | |
| b6a2f15e | 5386 | - Added lib/inet_ntoa.c from BSD Unix for systems that have |
| 5387 | broken inet_ntoa(). (Erik Hofman). | |
| 5388 | - Added more specific FTP error messages for "permission | |
| 5389 | denied, "file not found," and "service unavailable." | |
| 5390 | (Tony Finch) | |
| 5391 | - Added xisspace(), xisdigit(), etc, macros to cast function | |
| 5392 | args and eliminate compiler warnings. | |
| 5393 | - Fixed case-sensitive comparisons of domain names (Henrik | |
| 5394 | Nordstrom). | |
| 5395 | - Added proxy-authentication to cachemgr.cgi's requests | |
| 5396 | (Henrik Nordstrom). | |
| 5397 | - Changed Squid to *truncate* rather than *unlink* purged | |
| 5398 | swap files. Can be reversed by undefining | |
| 5399 | USE_TRUNCATE_NOT_UNLINK in src/defines.h. | |
| 5400 | - Changed internal icon headers to use Cache-control | |
| 5401 | Max-age instead of Expires. | |
| 5402 | - Changed storeMaintainSwapSpace behavior to be adjusted | |
| 5403 | smoothly, instead of discretely, between store_swap_low | |
| 5404 | and store_swap_high. This includes the number of | |
| 5405 | objects to scan, number to remove, and time until the | |
| 5406 | next storeMaintainSwapSpace event. | |
| 5407 | - Fixed a quick_abort bug that incorrectly calculated | |
| 5408 | content lengths. | |
| 5409 | - Added getpwnam() auth module from Erik Hofman. | |
| 5410 | - Added 'coredump_dir' option. | |
| 5411 | - Fixed a peerDestroy() assertion that required peer->digest | |
| 5412 | to be NULL at the end of peerDestroy(). | |
| 5413 | - configure script now automatically enables dlmalloc for | |
| 5414 | Solaris/x86. | |
| 5415 | - configure enables poll() on linux 2.2 and later (Henrik). | |
| 5416 | - Icon files are now distributed in binary format, install | |
| 5417 | will not need to run 'sh' and 'uudecode'. | |
| 5418 | - Fixed some bugs with large responses (>READ_AHEAD_GAP) and | |
| 5419 | re-forwarding requests and ENTRY_FWD_HDR_WAIT. | |
| 5420 | fwdCheckDeferRead() will NOT defer reading if the | |
| 5421 | ENTRY_FWD_HDR_WAIT bit is set. | |
| 5422 | - Fixed a "F->flags.open" assertion for aborted FTP PUT's. | |
| 5423 | - Fixed a (double) cast problem that caused statAvgTick() | |
| 5424 | events to be added as fast as possible. | |
| 6b8e7481 | 5425 | - Changed httpPacked304Reply() to not include the Content-Length |
| 5426 | header for 304 replies that Squid generates. We used to | |
| 5427 | include the length of the cached object, and this broke | |
| 5428 | persistent connections. | |
| 5429 | ||
| 5430 | 2.2.STABLE2: | |
| 5431 | ||
| 5432 | - Fixed configure bug for statvfs() checks. Configure reports | |
| 5433 | "test: =: unary operator expected" or similar because an | |
| 5434 | unquoted variable is not defined. | |
| 5435 | - Fixed aclDestroyAcls() assertion because some ACL types | |
| 5436 | are not listed in the switch statement. Occurs for | |
| 5437 | srcdom_regex and dstdom_regex ACL types during reconfigure. | |
| 5438 | - Typo "applicatoin" in src/mime.conf | |
| 5439 | - The unlinkd daemon never saw the USE_TRUNCATE_NOT_UNLINK | |
| 5440 | #define because it didn't include squid.h. | |
| 5441 | - Fixed commRetryFD() when bind() fails. commRetryFD was | |
| 5442 | closing the filedescriptor, but it is the upper layer's | |
| 5443 | job to close it. | |
| 5444 | - Changed configure's "maximum number of filedescriptors" | |
| 5445 | detection to only use getrlimit() for Linux. On AIX, | |
| 5446 | getrlimit returns RLIM_INFINITY. | |
| 5447 | - Fixed snmpInit() nesting bug. | |
| 5448 | - Fixed a bug with peerGetSomeParent(). It was adding | |
| 5449 | a parent to the FwdServers list, regardless of the | |
| 5450 | ps->direct value. This could cause every request to | |
| 5451 | go to a parent even when always_direct is used. | |
| 5452 | - Changed fwdServerClosed() to rotate the "forward servers" | |
| 5453 | list when a connection establishment fails. Otherwise | |
| 5454 | it always kept trying to connect to the first server | |
| 5455 | int the list. | |
| b93549f6 | 5456 | |
| 2be4e260 | 5457 | 2.2.STABLE3: |
| 5458 | ||
| 5459 | - Fixed preprocessor problems for HP-UX in lib/safe_inet_addr.c. | |
| 5460 | - Avoid coredump in aclMatchAcl() if someone tries to use | |
| 5461 | proxy authentication with a non-HTTP request (e.g. icp_access). | |
| 5462 | - Moved 'ident_lookup_access' in squid.conf so it appears | |
| 5463 | after the ACL section. | |
| 5464 | - Fixed typo in squid.conf on "Config.Addrs.snmp_outgoing" | |
| 5465 | - Fixed a case in clientCacheHit() where we thought it | |
| 5466 | was a hit, but the reply status was not 200, so we | |
| 5467 | had to perform a cache miss. We forgot to change the | |
| 5468 | log_type and these were being recorded as TCP_HIT's. | |
| 5469 | - Fixed a void pointer subtraction bug in delayIdPtrHashCmp(). | |
| 5470 | - Fixed delay_pools coredump and memory leak bugs from | |
| 5471 | NULL delay_id values. | |
| 5472 | - Fixed a SEGV bug with delay_pools when requesting | |
| 5473 | 'objects' or 'vm_objects' from the cachemgr. | |
| 5474 | - Added a workaround for buggy FTP servers that return | |
| 5475 | a size of zero for non-zero-sized objects. | |
| 5476 | - Removed umask(0) call from main(). | |
| 5477 | - Fixed a peer selection bug that caused us to never select | |
| 5478 | a neighbor based on ICP replies if the ICP timeout occurs. | |
| 5479 | In conjunction with this, removed the PING_TIMEOUT state. | |
| 5480 | - Fixed a store_rebuild bug that caused us to get stuck trying | |
| 5481 | if a cache_dir subdirectory didn't exist. | |
| 5482 | - Fixed a buffer overrun bug in gb_to_str(). | |
| 5483 | ||
| 9bc73deb | 5484 | 2.2.STABLE4: |
| 5485 | ||
| 5486 | - Fixed a dread_ctrl leak caused in store_client.c | |
| 5487 | - Fixed a memory leak in eventRun(). | |
| 5488 | - Fixed a memory leak of ErrorState structures due to | |
| 5489 | a bug in forward.c. | |
| 5490 | - Fixed detection of subdomain collisions for SPLAY trees. | |
| 5491 | - Fixed logging of hierarchy codes for SSL requests (Henrik | |
| 5492 | Nordstrom). | |
| 5493 | - Added some descriptions to mib.txt. | |
| 5494 | - Fixed a bug with non-hierarchical requests (e.g. POST) | |
| 5495 | and cache digests. We used to look up non-hierarchical | |
| 5496 | requests in peer digests. A false hit may cause Squid | |
| 5497 | to forward a request to a sibling. In combination with | |
| 5498 | 'Cache-control: only-if-cached, this generates 504 Gateway | |
| 5499 | Timeout responses and the request may not be re-forwardable. | |
| 5500 | - Fixed a filedescriptor leak for some aborted requests. | |
| 5501 | ||
| 5502 | ||
| 4d62b0af | 5503 | Changes to Squid-2.1 (November 16, 1998): |
| 8f897f34 | 5504 | |
| 5505 | - Changed delayPoolsUpdate() to be called as an event. | |
| 5506 | - Replaced comm_select FD scanning loops with global fd_set | |
| 5507 | structures. Inspired by Jeff Mogul's patch for squid 1.1. | |
| 9e1559ea | 5508 | - Moved functions common to dns.c, redirect.c, authenticate.c, |
| 5509 | ipcache.c, and fqdncache.c into helper.c. | |
| 0753aa46 | 5510 | - Changed storeClientCopy2() so that it keeps sending the remainder |
| 5511 | of a STORE_ABORTED request, instead of cutting off the client as | |
| 5512 | soon as the object becomes aborted. | |
| f0538986 | 5513 | - Fixed combined ipf-transparent proxy and a local http-accelerator |
| 5514 | operation (Quinton Dolan). | |
| 5515 | - Rewrote base64_decode.c because of potential buffer overrun | |
| 5516 | bugs. | |
| 912432d8 | 5517 | - Configurable handling of whitespace in request URI's. |
| 5518 | See 'uri_whitespace' in squid.conf. | |
| e33ec474 | 5519 | - Added ability to generate HTTP redirect messages from |
| 5520 | the redirector output by prepending "301:" or "302:" to the | |
| 5521 | new url. See FAQ 4.16 for more details. | |
| 829a9357 | 5522 | - Eliminated refreshWhen() which was out-of-sync with refreshCheck() |
| 5523 | potentially causing under-utilized cache digests | |
| 5524 | - Maintain refreshCheck statistics on per-protocol basis so we | |
| 5525 | can tell why ICP or Digests return too many misses, etc. | |
| c68e9c6b | 5526 | - Fixed delay_pools.c class2/class3 typo (Simon Woods). |
| 5527 | - Changed squid.conf's default access controls to deny all | |
| 5528 | HTTP requests. Admins must write ACL rules to specifically | |
| 5529 | allow their local clients. | |
| 5530 | - Patched French error messages (Mathias HERBERTS). | |
| 5531 | - NextStep porting fixes by Mike Laster: | |
| 5532 | - use xstrdup() in cf_gen.c | |
| 5533 | - check for putenv() in configure | |
| 5534 | - #define S_ISDIR macro | |
| 5535 | - Added --disable-poll configure option (Henrik Nordstrom). | |
| 5536 | - Fixed internal URL hostname case bugs (Henrik Nordstrom). | |
| 5537 | - Patched ftp.c so we never cache autenticated FTP requests | |
| 5538 | (Henrik Nordstrom). | |
| 5539 | - Fixed FTP authentication. We tried to unescape authentication | |
| 5540 | given by basic authentication which is not URL escaped | |
| 5541 | (Henrik Nordstrom). | |
| 5542 | - Fixed HTTP version for common logfile format (Henrik Nordstrom). | |
| 5543 | - Added 'redirect_rewrites_host_header' option to disable rewriting | |
| 5544 | of Host header for redirector responses (Henrik Nordstrom). | |
| 5545 | - Allow semi-customized error message signatures (Henrik Nordstrom). | |
| 5546 | - Fixed bug with errors for unsupported requests (Henrik Nordstrom). | |
| 5547 | - Fixed handling of blank lines in ACL input files (Henrik | |
| 5548 | Nordstrom). | |
| 5549 | - Changed proxy_auth ACL type to consist of a list of valid | |
| 5550 | users. REQUIRED == any (same as ident ACL). ACL type user | |
| 5551 | changed to ident since this is what it really is. | |
| 5552 | (Henrik Nordstrom). | |
| 5553 | - Fixed long URL bugs; make sure 'log_uri' never exceeds | |
| 5554 | MAX_URL bytes. | |
| 5555 | - Allow comments in external ACL files (Gerhard Wiesinger). | |
| 5556 | - Added 'range_offset_limit' configuration option. Requests | |
| 5557 | with ranges that start after this value will be passed | |
| 5558 | on unmodified, and Squid will not cache the response | |
| 5559 | (Henrik Nordstrom). | |
| 5560 | - Added Client HTTP Hit byte counters to 'counters' output | |
| 5561 | (Douglas Swarin). | |
| 5562 | - Got Squid to compile with --enable-async-io on FreeBSD. | |
| 5563 | - Fixed infinite loop bug for cachemgr 'config' option. | |
| 5564 | - Fixed cachability bugs for replies with Pragma: no-cache. | |
| 5565 | - Made content-type multipart/x-mixed-replace uncachable. | |
| 5566 | - Y2K fix for parsing dates in "Wed Jun 9 01:29:59 1993 GMT" | |
| 5567 | format (Richard Kettlewell). | |
| 5568 | - Fixed passing -s option to dnsserver processes (Alvaro Jose | |
| 5569 | Fernandez Lago). | |
| 5570 | - Changed proxy_auth to work on internal objects and when in | |
| 5571 | accelerator mode. (Henrik Nordstrom) | |
| 5572 | - Added login=user:password option to cache_peer directive to | |
| 5573 | be used from a dial-up cache where the parent requires proxy | |
| 5574 | authentication. (Henrik Nordstrom) | |
| 5575 | - If you want to "auto-login", then use a URL on the form | |
| 5576 | http://username:password@server/.... Squid now picks this up | |
| 5577 | when going direct, and turns it into basic WWW | |
| 5578 | authentication. It is also possible to do automatic login to | |
| 5579 | certain servers by using a redirector to add the needed | |
| 5580 | authentication information. (Henrik Nordstrom) | |
| 04f0ba5c | 5581 | - Changed refreshCheck() so that objects with negative age |
| 5582 | are always stale. | |
| 4d62b0af | 5583 | - Fixed "plain" FTP listings (Henrik Nordstrom). |
| 5584 | - Fixed showing banner/logon message for top-level FTP | |
| 5585 | directories (Henrik Nordstrom). | |
| 5586 | * Changes below have been made to SQUID_2_1_PATCH1 | |
| 5587 | - Fixed pinger packet size assertion. | |
| 5588 | - Fixed WAIS forwarding. | |
| 5589 | - Fixed dnsserver coredump bug caused by using both -D and | |
| 5590 | -s options. | |
| e42d5181 | 5591 | * Changes below have been made to SQUID_2_1_PATCH2 |
| 5592 | - Fixed EBIT macro bugs when the bitmask is a 64-bit long. | |
| 5593 | - Fixed proxy auth NULL password bug. | |
| 5594 | - Fixed queueing of multiple peerRefreshDNS events. | |
| 5595 | - Added a stack of StoreEntry objects to be released after | |
| 5596 | store rebuild completes. | |
| 5597 | - Fixed NULL pointer bugs with too-large requests (found by | |
| 5598 | Martin Lathoud). | |
| 5599 | - Fixed reading replies from buggy ident servers. Replies | |
| 5600 | might not have terminating CR or LF (Henrik Nordstrom). | |
| b4019ff7 | 5601 | - Changed internal StoreEntry key so that the request method |
| 5602 | is encoded as a single octet. Encoding an enumerated type | |
| 5603 | has size and byte-order incompatibilities, especially for | |
| 5604 | cache digests. | |
| 5605 | - Fixed storeEntryLocked so that SPECIAL, but PRIVATE entries | |
| 5606 | are not always locked. This fixes having multiple | |
| 5607 | store_digest's stuck in memory. | |
| 5608 | - Fixed clientProcessOnlyIfCachedMiss so it unlocks and | |
| 5609 | unregisters from "cache hit" entries. | |
| 5610 | * Changes below have been made to SQUID_2_1_PATCH3 | |
| 5611 | - Fixed memory leak in clientHandleIMSReply for | |
| 5612 | storeClientCopy failures. | |
| 8f897f34 | 5613 | |
| 41587298 | 5614 | Changes to Squid-2.0 (October 2, 1998): |
| 71d6dc56 | 5615 | |
| 4c154d99 | 5616 | - Added NAT/Transparent hijacking code from Quinton Dolan. |
| 5617 | - Added actual filesystem usage to cachemgr 'storedir' page. | |
| 41587298 | 5618 | Only works for operating systems which support statvfs(). |
| a79d724b | 5619 | - Fixed HTCP compile-time bugs. |
| 5620 | - Fixed quick_abort bugs. Configured values are stored as | |
| 5621 | Kbytes, not bytes. | |
| 41587298 | 5622 | - Removed fwdAbortFetch(). It breaks quick_abort and seems |
| 5623 | mostly useless. | |
| 0da7d807 | 5624 | - Changed storeDirSelectSwapDir() to skip swap directories |
| 5625 | when their utilization is over the high water mark ratio. | |
| 9ca005ac | 5626 | - Fixed off-by-one bug for dead neighbor detection (Joe Ramey). |
| 18cc143b | 5627 | - fixed bugs in Content-Range header generation |
| 5628 | - changed the way Range requests are handled: | |
| 71d6dc56 | 5629 | - do not "advertise" our ability to process ranges at |
| 5630 | all | |
| 5631 | - on hits, handle simple ranges and forward complex | |
| 5632 | ones | |
| 5633 | - on misses, fetch the whole document for simple ranges | |
| 5634 | and forward range request for complex ranges | |
| 5635 | The change is supposed to decrease the number of cases when | |
| 5636 | clients such as Adobe acrobat reader get confused when we | |
| 5637 | send a "200" response instead of "206" (because we cannot | |
| 5638 | handle complex ranges, even for hits) Note: Support for | |
| 5639 | complex ranges requires storage of partial objects. | |
| 41587298 | 5640 | - Removed SNMP mib-2.system group from squid. |
| 6474667e | 5641 | - Removed SNMP ability to iterate through ipcache and friends. |
| 5642 | - Added SNMP ipcache/fqdncache basic statistics. | |
| 5643 | - Converted SQUID-MIB to SMIv2 (RFC 1902). | |
| 5644 | - Moved SQUID-MIB to enterprises section of the tree in preparation | |
| 5645 | of the split into PROXY-MIB & SQUID-MIB. | |
| 5646 | - Corrected minor errors in SQUID-MIB. | |
| 5647 | - Moved uptime into cacheSystem from cacheConfig. | |
| 5648 | - Corrected a number of get-next-request bugs, snmpwalk should now | |
| 5649 | return all objects and not skip some. | |
| 41587298 | 5650 | - Fixed netdbClosestParent() so it won't return sibling |
| 5651 | peers. | |
| 5652 | - Fixed a bug with secondary clients on entries with | |
| 5653 | ENTRY_BAD_LENGTH set. We should release the | |
| 5654 | bad entry to prevent secondary clients jumping on. | |
| 5655 | - Changed MIB to prevent parse warnings at startup. | |
| f0538986 | 5656 | * Changes below have been made to SQUID_2_0_PATCH1 |
| 9689d97c | 5657 | - Fixed a forwarding loop bug. Even though we were detecting |
| 5658 | a loop, it was not being broken. | |
| 5659 | - Try to prevent sibling forwarding loops by NOT forwarding a | |
| 5660 | request to a sibling if we have a stale copy of the object. | |
| 5661 | Validation requests should only be sent to parents (or | |
| 5662 | direct). | |
| 5663 | - Fixed ncsa_auth hash bugs when re-reading password file. | |
| 5664 | - Changed clientHierarchical() so that by default SSL/CONNECT | |
| 5665 | requests do NOT go to neighbor caches. | |
| d87ebd78 | 5666 | - Changed clientHandleIMSReply() to not call storeAbort() |
| 5667 | because there can be more than one client hanging on the | |
| 5668 | StoreEntry. This hopefully fixes "store_status != | |
| 5669 | STORE_ABORTED" assertions. | |
| f0538986 | 5670 | - Added temporary fix to httpMakePublic() to prevent assertions |
| 5671 | (!EBIT_TEST(e->flags, RELEASE_REQUEST)) in storeSetPublicKey(). | |
| 5672 | * Changes below have been made to SQUID_2_0_PATCH2 | |
| 5673 | - PATCH1 introduced a seriously stupid bug which prevented ICP | |
| 5674 | queries for all requests. Fixed by checking | |
| 5675 | request->hierarchical in peerSelectFoo(). | |
| 18cc143b | 5676 | |
| 4c154d99 | 5677 | Changes to squid-1.2.beta25 (September 21, 1998): |
| 5678 | ||
| 4b66bfd3 | 5679 | - Fixed async IO bugs from adding filedescriptor arg to AIOCB |
| 5680 | callbacks (Henrik Nordstrom). | |
| 5681 | - Fixed store_swapout.c assertion. We were freeing object data | |
| 5682 | past the swapout_done offset. This probably happens (only?) | |
| 5683 | when an object changes from cachable to uncachable while | |
| 5684 | it is being swapped out. | |
| a260d877 | 5685 | - Added MEM_CLIENT_SOCK_BUF type so we can change the size |
| 5686 | of the buffers used for writing data to the client sockets. | |
| 669d90e7 | 5687 | - Added configure check for libbind.a. If found, it will be |
| 5688 | used instead of libresolv.a. | |
| 5689 | - Changed fwdStart() to always allow internally generated | |
| dddd5b55 | 5690 | requests, such as for peer digests. These requests are |
| 5691 | known to fwdStart() because the address arg is set to | |
| 5692 | 'no_addr'. | |
| 669d90e7 | 5693 | - Completed initial HTCP implementation. It works, but is not |
| 5694 | tested much. | |
| 2d5c8e74 | 5695 | - Added counters for I/O syscalls. |
| 5696 | - Fixed httpMaybeRemovePublic. With broken ICP neighbors | |
| 5697 | (netapp) Squid doesn't use private keys. This caused us | |
| 5698 | to remove almost every object from the cache. | |
| 5699 | - Added 'asndb' cachemgr stats to show AS Number tree. | |
| dddd5b55 | 5700 | - Fixed AS Number byte-order bug for netmasks. |
| 2d5c8e74 | 5701 | - Fixed comm_incoming calling rate for high loads (Stewart |
| 5702 | Forster). | |
| 426012d2 | 5703 | - Give always_direct higher precedence than never_direct |
| 5704 | (Henrik Nordstrom). | |
| dddd5b55 | 5705 | - Changed PORT ACL type to accept ranges. Now you can easily |
| 5706 | deny, for example, all priveleged ports except 80, 70, 21, | |
| 5707 | etc. | |
| 5708 | - ARP ACL fixes for Linux (David Luyer). | |
| 5709 | - Replaced various "EBIT" flags bitfileds with structures of | |
| 5710 | "int:1" members. | |
| 5711 | - Changed storeKeyPrivate and storeKeyPublic to be a bit more | |
| 5712 | efficient by removing snprintf(). This causes an | |
| 5713 | incompatibility with old cache keys, however. To transition, | |
| 5714 | we will look up both the new and old style keys for about the | |
| 5715 | next 30 days. After that, if you haven't run this (or a | |
| 5716 | future) version, your cache contents will be lost. | |
| 5717 | - Made the client-side write buffer size configurable with | |
| 5718 | a #define in defines.h. By default it is still 4096 bytes. | |
| 5719 | - Removed redirectUnregister(). It should be unnecessary | |
| 5720 | because of cbdata locks. | |
| 5721 | - Fixed multiple HEAD request brokennesses (Henrik Nordstrom). | |
| 5722 | - Changed non-blocking connect(2) code to call getsockopt() | |
| 5723 | instead of connect() again. This is the approach recommended | |
| 5724 | by Stevens, and fixes bugs on BSD-ish systems when subsequent | |
| 5725 | connect() calls loop with EAGAIN status. | |
| 5726 | - Added MD5 cache keys to memory pool accounting. | |
| 5727 | - Added code to track number of open DISK descriptors and stop | |
| 5728 | swapping out objects if the number of disk descriptors becomes | |
| 5729 | too large. For now the limit must be manually configured with | |
| 5730 | the 'max_open_disk_fds'. By default, there is no limit. | |
| 5731 | - Stopped encoding a request method in the high byte of the ICP | |
| 5732 | reqnum field. Instead queried cache keys are copied to a | |
| 5733 | static array, indexed by the reqnum, modulo the array size. | |
| 5734 | Now we just use the request number to lookup a cache key, | |
| 5735 | instead of rebuilding it from the ICP reply URL and method, | |
| 5736 | unless we have netapp neighbors--they don't do reqnum | |
| 5737 | properly. | |
| 5738 | - Fixed reconfigure memory access bugs in redirect.c. | |
| 0753aa46 | 5739 | - Ignore unreasonably large ICP RTT values which cause overflow |
| 5740 | bugs in calculating the average RTT (thanks Niall!) | |
| 4b66bfd3 | 5741 | |
| 8e6a43e8 | 5742 | Changes to squid-1.2.beta24 (August 21, 1998): |
| 5743 | ||
| 6c4067e5 | 5744 | - Added Bulgarian error pages by Evgeny Gechev. |
| ceb79b2b | 5745 | - Changed StoreEntry->lock_count to a u_short. |
| c7d6216e | 5746 | - Replaced urlcmp with strcmp |
| 5747 | - Fixed pragma no-cache ejecting ENTRY_SPECIAL objects | |
| 5748 | (Henrik Nordstrom). | |
| 5749 | - Eliminated unneeded BASE HREF on "root" directories (Henrik | |
| 5750 | Nordstrom). | |
| 5751 | - Fixed peerDigestFetchFinish() assertion caused by forwarding | |
| 5752 | failures (e.g. miss_access rules). | |
| ada249f8 | 5753 | - Changed signal handlers with ASYNC_IO and Linux so that |
| 5754 | -k command line options work (Miquel van Smoorenburg). | |
| 4616f9ea | 5755 | - Rewrote shutdown code to use events instead of setting |
| 5756 | FD timeouts. | |
| 903e21a0 | 5757 | - Fixed cachemgr 'objects' (statObjects()) by adding a check |
| b6a76fb2 | 5758 | for READ_AHEAD_GAP, and calling storeCheckSwapout() in |
| 5759 | storeBufferFlush(). Otherwise, the read-past pages would | |
| 5760 | never be freed. | |
| 681979a2 | 5761 | - Fixed DNSSERVER shutdown bugs. The re-opened dnsserver processes |
| 5762 | were being closed by the dnsServerShutdown event. | |
| b6a76fb2 | 5763 | - Modified storeHashInsert() to insert PRIVATE objects at |
| 5764 | the tail of the LRU list, and PUBLIC objects at the head. | |
| 5765 | Thus, PRIVATE objects get kicked out quicker. | |
| 95e36d02 | 5766 | - Added David Luyer's DELAY_POOLS code. |
| 54b5b3e5 | 5767 | - Fixed a bug due to HEAD replies which lack the end-of-headers |
| 5768 | line. | |
| 5769 | - Made proxy-auth realm string configurable (Bob Franklin) | |
| 5770 | - Changed default mime time to a viewable one (Henrik Nordstrom). | |
| 5771 | - configure fixes for Sony's NEWS-OS 6.x (Makoto MATSUSHITA). | |
| 5772 | - Fixed 'you are running out of filedescriptors' bug which | |
| 5773 | could cause the HTTP incoming connection handler to not | |
| 5774 | be reset. | |
| e23fbf04 | 5775 | - Changed syslog logging. Now squid debug levels 0 and 1 go |
| d737baa0 | 5776 | to syslog. Level 0 gets LOG_WARNING and level 1 gets LOG_NOTICE |
| e23fbf04 | 5777 | (this needs more work!) |
| 2cb51fe0 | 5778 | - Fixed memory access errors in statAvgTick(). |
| abc1237e | 5779 | - Fixed duplicate requestUnlink() bug in forward.c |
| 6c4067e5 | 5780 | - Fixed possible memory access bugs from not setting e->mem_obj |
| 5781 | = NULL in destroy_MemObject(). | |
| 5782 | - Deleted TCP_IMS_MISS tag. Always use TCP_IMS_HIT instead. | |
| 5783 | - Modified headersEnd and httpMsgIsolateHeaders to account | |
| 5784 | for funky line terminations such as CRCRNL. | |
| 5785 | (``but Netscape and IE _tolerate_ this'') | |
| 5786 | - Fixed carp functions (Eric Stern). | |
| 5787 | - Replaced internal proxy_auth code with extern authentication | |
| 5788 | module (Arjan de Vet). | |
| 5789 | - moved hash.c to libmiscutil.a. | |
| e931f99a | 5790 | - Fixed handling of ICP queries with whitespace in URLs. |
| 5791 | Now we return ICP error and escape the URL before logging. | |
| 3a15a393 | 5792 | - Added configure check for socklen_t (David Luyer). |
| 5793 | - Removed USE_SPLAY #defines; it is now standard. | |
| 3a76c002 | 5794 | - Added FD arg to async IO callbacks (AIOCB) so we can eliminate |
| 5795 | temporary disk_ctrl_t structures. | |
| 5796 | - Changed ENOSPC disk write errors to reduce specific cache_dir | |
| 5797 | sizes, and not just the size of the cache as a whole. | |
| f9cece6e | 5798 | - Added httpMaybeRemovePublic() to purge public objects for |
| 5799 | certain responses even though they are uncachable. This is | |
| 5800 | needed, for example, when an initially cachable object | |
| 5801 | later becomes uncachable. | |
| 8e6a43e8 | 5802 | - Added refresh_pattern options to ignore client reloads |
| 5803 | (Henrik Nordstrom) | |
| 5804 | - Relocated disk.c code which combines blocks for writing | |
| 5805 | (Stewart Forster). | |
| c7d6216e | 5806 | |
| 857703c6 | 5807 | Changes to squid-1.2.beta23 (June 22, 1998): |
| 5808 | ||
| cf7f704c | 5809 | - Added Turkish error pages by Tural KAPTAN. |
| 66bbb757 | 5810 | - Added basic support for Range requests. For most cachable |
| 5811 | requests, Squid replies with an "Accept-Ranges" header. Upon | |
| 5812 | receiving a potentially cachable Range request for a not | |
| 5813 | cached object, Squid requests the whole object from origin | |
| 5814 | server and then replies with specified range(s) to the | |
| 5815 | client. Multi-range requests are supported. Adjacent | |
| 5816 | overlapping ranges are merged. If-Range requests are | |
| 5817 | supported. Limitations: Multi-range requests with out of | |
| 5818 | order ranges are not supported. | |
| 5819 | - Made md5.c use standard memcpy and memset if they are | |
| 5820 | avaliable. | |
| 5821 | - Memory pools will now shrink if Squid is run-time | |
| 5822 | reconfigured with smaller value of memory_pools_limit tag. | |
| 5823 | - Added counter for number of clients (Tomi Hakala). | |
| 5824 | - Changed neighbor UP/DOWN algorithm to require 10 failed TCP | |
| 5825 | connections for UP->DOWN transition. | |
| 5826 | - Added 'unique_hostname' configuration option when its | |
| 5827 | necessary to have multiple machines with the same visible | |
| 5828 | hostname. | |
| 222917b2 | 5829 | - Fixed pumpReadFromClient() to not read too many bytes on |
| 5830 | persistent connections. | |
| 53856ebd | 5831 | - We can now cache HTTP replies with Set-Cookie. These evil |
| 5832 | headers are now filtered out for cache hits on the client | |
| 5833 | side. | |
| 222917b2 | 5834 | - Fixed SNMP bugs caused by using snmpwalk. |
| 9089cc70 | 5835 | - Fixed snmp system Group; all objects are now returned. |
| 5836 | - Fixed snmp system Group sysDescr and sysContact. | |
| 78dfab2a | 5837 | - Fixed snmp system Group sysObjectID it now returns a OBJECT |
| 5838 | IDENTIFIER. | |
| 7fce9c3e | 5839 | - Allocate FwdState from mem pools. |
| 5840 | - Minor HTCP progress. | |
| 222917b2 | 5841 | - Moved 'miss_access' ACL check from client_side.c to forward.c |
| ed169eab | 5842 | - Fixed logging of usernames for requests which require |
| 5843 | proxy-authentication. | |
| cf7f704c | 5844 | - Fixed HTTP request parser to accept lowercase HTTP identifier |
| 5845 | (Oskar Pearson). | |
| 5846 | - Fixed FTP listings to always include links to the parent | |
| 5847 | directory (Henrik Nordstrom). | |
| 5848 | - Fixed FTP to show an "empty" listing instead of showing | |
| 5849 | a "document contains no data" error (Henrik Nordstrom). | |
| 5850 | - Fixed refreshCheck() bug. Often it was checking the | |
| 5851 | refresh patterns against the string "[null_mem_obj]" | |
| 5852 | because we moved URLs to MemObject. | |
| 5853 | - Added CARP support by Eric Stern. | |
| 48382032 | 5854 | - Fixed select-spin bug when an ICP reply actually gets queued |
| 5855 | and we failed to execute the write callback. | |
| 354b5fe1 | 5856 | - Fixed a storeCheckSwapOut bug. We were freeing up to |
| 5857 | the queued offset instead of the done offset. This | |
| 5858 | resulted in a small chunk of object data not being in | |
| 5859 | memory and not yet written to disk. A client could | |
| 5860 | recieve a partial object because file_read() unexpectedly | |
| 5861 | returns EOF. | |
| 0aa791f8 | 5862 | - Fixed proxy-authentication hangs (Henrik Nordstrom). |
| c2354a6b | 5863 | - Fixed request_t->flags bug causing authenticated, proxied |
| 5864 | responses to be cached (Arjan de Vet). | |
| e0e32f36 | 5865 | - Fixed MIME types for .tgz extension (Henrik Nordstrom). |
| 5866 | - Added view and download options to FTP listings (Henrik | |
| 5867 | Nordstrom). | |
| 5868 | - Modified configure to allow using pre-installed libdlmalloc.a | |
| 5869 | (Masashi Fujita). | |
| e8d8856c | 5870 | - Fixed cachemgr 'objects' implementation. |
| fecf98dc | 5871 | - Changed refreshCheck() algorithm. For cached objects, we |
| 5872 | now check, in the following order: | |
| 5873 | * request max-age | |
| 5874 | * response Expires (if present) | |
| 5875 | * refresh_pattern max-age | |
| 5876 | * response Last-Modified compared to refresh_pattern | |
| 5877 | LM-factor (only if Last-Modified is present) | |
| 5878 | * refresh_pattern min-age | |
| 5879 | - Changed Copyrights. | |
| d192d11f | 5880 | |
| ee3a78d4 | 5881 | Changes to squid-1.2.beta22 (June 1, 1998): |
| 5882 | ||
| 2246b732 | 5883 | - do not cut off "; parameter" from "digitized" Content-Type |
| 5884 | http fields | |
| 5885 | - Added X-Request-URI for persistent connection debugging | |
| 5886 | (Henrik Nordstrom) | |
| f4d83f6d | 5887 | - Added Polish error pages from Maciej Kozinski. |
| 145f10f1 | 5888 | - Fixed hash_first/hash_next bugs with **Current pointer. |
| 5889 | Replaced with *next pointer. | |
| f4d83f6d | 5890 | - Fixed PUT/POST bugs in client (Henrik Nordstrom). |
| 5891 | - Deny forwarding loops in httpd accel mode (Henrik Nordstrom). | |
| 5892 | - Fixed eventRun "spin" bug when event delta time == 0. | |
| a9cc1935 | 5893 | - Fixed setting Last Modified time on cached entries when |
| 5894 | receiving a 304 reply. | |
| 06e87923 | 5895 | - Added while loop in httpAccept(). |
| 5896 | - Added while loop in icpHandleUdp(). | |
| 5897 | - Fixed some small memory leaks. | |
| 5898 | - Fixed single-bit-int flag checks (Henrik Nordstrom). | |
| 137ee196 | 5899 | - Replaced "complex" (offset accounting) calls to snprintf with MemBuf |
| 5900 | - Do not send only-if-cached cc directive with requests | |
| 6474667e | 5901 | for peer's digests. |
| ee3a78d4 | 5902 | - Added "automatic tuning" for incoming request rate, i.e. |
| 5903 | how often to check HTTP and ICP sockets. See comm.c | |
| 5904 | comments for details. | |
| 145f10f1 | 5905 | |
| 6ee40ea2 | 5906 | Changes to squid-1.2.beta21 (May 22, 1998): |
| 5907 | ||
| 434b408f | 5908 | - Added Italian error pages by Alessio Bragadini. |
| a3f9588e | 5909 | - Added Estonian error pages by Toomas Soome. |
| 06066bbc | 5910 | - Added Russian (koi-r) error pages by Andrew L. Davydov. |
| 7b381d33 | 5911 | - Added Czech error pages by Jakub Nantl. |
| 8e866bb4 | 5912 | - Fixed asnAclInitialize calling to prevent coredump. |
| 5913 | - Fixed FTP directory parsing again. | |
| 5914 | - Made FTP directory listing "Generated" tagline like | |
| 5915 | the one for error pages. | |
| 52f977aa | 5916 | - Fixed an assertion coredump in statHistCopy from |
| 6474667e | 5917 | reconfiguring with different #peers in squid.conf |
| 10202788 | 5918 | - Ignore leading whitespace on requests (and replies). RFC |
| 5919 | 2068 section 4.1, robustness (Henrik Nordstrom) | |
| 5920 | - Fixed keep_alive bug. We did not always honour reply | |
| 5921 | headers, but rather assumed connections could be persistent. | |
| 5922 | - Fixed reading whois output for AS numbers, especially when | |
| 5923 | they are longer than 4 KB. | |
| 5924 | - Removed 'cache_stoplist_pattern' configuration option. This | |
| 5925 | feature is now handled by 'no_cache'. | |
| 5926 | - If a URN resolves to only one URL, just return it immediately | |
| 5927 | instead of giving the user a "choice" (Andy Powell). | |
| 5928 | - Fixed year-2000 bug in lib/iso3307.c (Henrik Nordstrom). | |
| 5929 | - Changed squid-internal object names. | |
| 5930 | - Added netdb exchange protocol. | |
| 5931 | - Fixed wordlistDestroy() uninitialized pointer bug in | |
| 5932 | ftpParseControlReply. | |
| 06066bbc | 5933 | - Fixed redirector subprocess to show real program name. |
| 5934 | - Changed URN menu output to be sorted. | |
| 5935 | - Added fast select(2) timeouts when using ASYNC_IO. | |
| 5936 | - Added ARP ACL support for Linux (David Luyer). | |
| 6474667e | 5937 | - Added binary http headers to requests |
| 5938 | - request_t objects are now created and destroyed in a consistent way | |
| 5939 | - Fixed cache control printf bug | |
| 5940 | - Added a lot of new http header ids | |
| 5941 | - Improved Connection: header handling; now both Connection and | |
| 5942 | Proxy-Connection headers are checked for connection directives | |
| 5943 | - Connection request header is now handled correctly regardless | |
| 5944 | of its position and the number of entries | |
| 2246b732 | 5945 | - Only replies with valid Content-Length can be sent with keep-alive |
| 5946 | connection directive (Henrik Nordstrom) | |
| 6474667e | 5947 | - Better handling of persistent connection "clues" in HTTP headers; |
| 2246b732 | 5948 | the decision now depends on HTTP version (and User-Agent exceptions) |
| 6474667e | 5949 | - Removed handling of "length=" directive in IMS headers; |
| 5950 | the directive is not in the HTTP/1.1 standard; | |
| 5951 | standing by for objections | |
| 5952 | - allowed/denied headers are now checked using bit masks instead of | |
| 5953 | strcmp loops | |
| 5954 | - removed Uri: from allowed headers; Uri is deprecated in RFC 2068 | |
| 2246b732 | 5955 | - removed processing of Request-Range header (not in specs?) |
| 7b381d33 | 5956 | - Fixed byte-order bugs in cacheDigestHashKey. |
| 5957 | - Changed hash_remove_link() to return void. | |
| 5958 | - Changed ipcache_gethostbyname() to return NULL if | |
| 5959 | i->addrs.count == 0. | |
| 6de5fa88 | 5960 | - Added millisecond-timing to select/poll loops and event |
| 5961 | queue. | |
| 5962 | - Changed 'peerPingTimeout' value to be twice the average | |
| 5963 | of all the peer ICP RTT's. | |
| 5964 | - Added 'half_closed_clients' option to force closing of | |
| 5965 | client connections which might only be half-closed. | |
| 5966 | - Fixed matchDomainName coredump bug. | |
| 5967 | - Don't cache HTTP replies with Vary: headers until we | |
| 5968 | get content negotiation working. | |
| 5969 | - Fixed SSL proxying to forward full HTTP request headers. | |
| c09459dd | 5970 | - Changed storeGetMemSpace(). Only purge down to the HIGH |
| 5971 | water mark; move locked entries to the head of the inmem | |
| 5972 | list. | |
| 5973 | - Changed clientReadRequest() to locally handle any | |
| 5974 | "squid-internal-static" URL for any host. | |
| 52f977aa | 5975 | - Disable persistent connections for client connections |
| 5976 | from broken Netscape User-Agent, version 3.* (Stewart Forster) | |
| 434b408f | 5977 | |
| 901b8eaf | 5978 | Changes to squid-1.2.beta20 (April 24, 1998): |
| 5979 | ||
| fd1bc012 | 5980 | - Improved support for only-if-cached cache control directive. |
| 5981 | - Enabled 304 replies for ENTRY_SPECIAL objects (e.g., icons). | |
| a1a62b14 | 5982 | - Fixed 'quick_abort' percent calculation bug. |
| 5983 | - Fixed quick_abort FPE bug. | |
| 5984 | - Changed more errno-checking functions to use ignoreErrno(). | |
| 5985 | - Added ERESTART to ignoreErrno() because of report from | |
| 5986 | a Solaris system. | |
| 5987 | - Fixed '#elsif' typo. | |
| 5988 | - Fixed MemPool assertion by moving memInit() to before | |
| 5989 | configuration parsing functions. | |
| 5990 | - Fixed default 'announce_period' value (was 1 day, should | |
| 5991 | be 0) (Joe Ramey). | |
| 5992 | - Added configure warning for low filedescriptors and pointer | |
| 5993 | to FAQ. | |
| b0497a40 | 5994 | - Fixed httpBodySet() bug causing URN related coredumps. |
| 5995 | - Changed ipcacheCycleAddr() to always cycle through all all | |
| 5996 | available addresses, and not just advance when one of | |
| 5997 | them goes BAD. | |
| 5998 | - Fixed squid-internal bug for mixed-case hostnames (Henrik | |
| 5999 | Nordstrom). | |
| 4e41d49f | 6000 | - Fixed ICP counting probelm. icpUdpSend() arg should be |
| 6001 | LOG_ICP_QUERY instead of LOG_TAG_NONE. | |
| e4b71f74 | 6002 | - Added some additional fault toleranse on FTP data channels |
| 6003 | (Henrik Nordstrom). | |
| 6004 | - Corrected error reporting on FTP "hacks" (Henrik Nordstrom). | |
| 6005 | - Added lock/unlock for StoreEntry during storeAbort(). | |
| 6006 | - Added filemap bit usage stats to cachemgr 'storedir' and | |
| 6007 | 'info'. | |
| 6008 | - Replaced 'cache_stoplist' with 'no_cache' Access list. | |
| 6009 | - Fixed (hopefully) remaining swapfile-open-at-exit bugs. | |
| 44745828 | 6010 | - Fixed default hierarchy_stoplist to be ``default if none.'' |
| 6011 | - Fixed 'fake a recent reply' hack for detecting DEAD | |
| 6012 | and ALIVE neighbors (Joe Ramey). | |
| e376562a | 6013 | - Fixed FTP directory parsing bugs (Joe Ramey). |
| 6014 | - Fixed ftpTraverseDirectory coredump for NULL ftpState->filepath | |
| 6015 | (Joe Ramey). | |
| dea17509 | 6016 | - Fixed daylight savings time bug (again). |
| fd1bc012 | 6017 | - A lot of Cache Digests additions, fixes, and tuning. |
| 6018 | Cache Digests are still "very experimental". | |
| e376562a | 6019 | - Fixed snprintf() bug. When len == 1, snprintf() would treat |
| 6020 | the buffer as unknown size, emulating sprintf() behaviour. | |
| 6021 | - Made Error page language configurable with configure script | |
| 6022 | (Henrik Nordstrom). | |
| 6023 | - Fixed squid-internal URLs when http_port == 80. | |
| 6024 | - Remember the client address on redirected requests (Henrik | |
| 6025 | Nordstrom). | |
| 6026 | - Don't rebuild the request if the redirector returned the same | |
| 6027 | URL (Henrik Nordstrom). | |
| 6028 | - Rewrite Host: header on redirected requests (Henrik | |
| 6029 | Nordstrom). | |
| 6030 | - Include port (if non-standard) in generated Host: headers | |
| 6031 | (Henrik Nordstrom). | |
| 6032 | - Fixed rfc1123 timezone hacks for Windows NT | |
| 6033 | (Henrik Nordstrom). | |
| 6034 | - Added Russian Error pages by Ilia Zadorozhko. | |
| 6035 | - Added totals for ICP and HTTP hits to cachemgr client_list | |
| 6036 | output. | |
| 6cfa8966 | 6037 | - Changed error message to 'Generated TIME by HOST (SQUID/VER)' |
| 6038 | because any string with an '@' must be an email address. | |
| e376562a | 6039 | - Fixed POST for content-length == 0. |
| 901b8eaf | 6040 | - Fixed "huge 304 reply" loop bug. |
| 5e9ab945 | 6041 | - Fixed --enable-splaytree compile bugs. |
| c93fbf13 | 6042 | - Removed ASN lookup code in peer_select.c. |
| b6a2f15e | 6043 | - Added warnings if ACL code detects subdomains in SPLAY |
| 6044 | trees. | |
| 6045 | - Rewrote some bits of httpRequestFree() to eliminate | |
| 6046 | possible bugs that could cause an "e->lock_count" asseertion. | |
| 6047 | - Added value/bounds checking to _db_init() when setting | |
| 6048 | the debugLevels[] array. | |
| fd1bc012 | 6049 | |
| 005e5260 | 6050 | Changes to squid-1.2.beta19 (Apr 8, 1998): |
| 6051 | ||
| b0497a40 | 6052 | - Squid-1.2.beta19 compiles and runs on Windows/NT with |
| 6053 | Cygnus Gnu-WIN32 b19 (Henrik Nordstrom). | |
| 447203a7 | 6054 | - Added French Error pages by Frank DENIS. |
| 6055 | - Added Dutch Error pages by Mark Visser | |
| 901b8eaf | 6056 | - Added German Error pages by Bernd P. Ziller, Jens Frank, |
| 6057 | and Anke S. | |
| f9f2be04 | 6058 | - Added support for only-if-cached cache-control directive. |
| 005e5260 | 6059 | - Added RELAXED_HTTP_PARSER #define to allow requests which are |
| 6060 | missing the HTTP identifier on the request line (e.g. buggy | |
| 6061 | SpyGame queries). RELAXED_HTTP_PARSER is undefined by default. | |
| 1f4d31f9 | 6062 | - Fixed disk.c FD leak for delayed closes in |
| 6063 | diskHandleWriteComplete(). | |
| 6064 | - Fixed cache announcement feature. | |
| 20fe7191 | 6065 | - Fixed httpReadReply() to retry failed HTTP requests on |
| 6066 | persistent connections when read() returns -1, not only | |
| 6067 | when it returns 0. | |
| 805e5f70 | 6068 | - Fixed cbdata memory counting leak. cbdataUnlock() always |
| 6069 | called free(), never memFree(). | |
| ff396fe6 | 6070 | - Fixed storeDirWriteCleanLogs() malloc bug on Alphas. |
| 005e5260 | 6071 | - Fixed `++loopdetect < 10' assertion due to |
| 6072 | clientHandleIMSReply bug for invalid/partial HTTP | |
| 6073 | replies. | |
| 6074 | - Added preliminary code for HTCP. | |
| 6075 | - Renamed 'aux' dir to 'cfgaux' for legacy DOS machines. | |
| 6076 | - Added "snmp_community" as an ACL type. | |
| 6077 | - Cleaned up proxy-auth acl implementation and removed | |
| 6078 | memory leaks. | |
| 6079 | - Added generic 'hashFreeItems()' function for efficiently | |
| 6080 | freeing hash table pointers. | |
| 6081 | - Added whoisTimeout() for ASN code. | |
| 447203a7 | 6082 | - Removed BINARY TREE code. |
| 005e5260 | 6083 | - Fixed forgetting to reset Config.Swap.maxSize in |
| 6084 | configDoConfigure. | |
| 6085 | - Fixed httpReplyUpdateOnNotModified() arguments-in-wrong-order | |
| 6086 | bug which caused not modified replies to not get updated. | |
| 6087 | - Fixed client_side.c bugs which could cause data to be written | |
| 6088 | to the client in the wrong order for persistent connections. | |
| 6089 | clientPurgeRequest() and clientHandleIMSComplete() must not | |
| 6090 | call comm_write(). Instead they must create and write to | |
| 6091 | StoreEntry's. | |
| 6092 | - Fixed ICP query service time counting bug(s). | |
| 6093 | - replaced 'char *mime_headers_end()' with 'size_t headersEnd()' | |
| 6094 | to fix buffer overruns. This also requires adding 'buf_sz' | |
| 6095 | args to some functions like clientBuildReplyHeader(). | |
| 6096 | But we can eliminate the need to NULL-terminate the | |
| 6097 | buffer beforehand. | |
| 6098 | - Changed commConnectCallback() to reset the FD timeout to | |
| 6099 | zero before notifying about the connection. This requires | |
| 6100 | commSetTimeout() calls in numerous places to reinstall | |
| 6101 | timeouts. | |
| 6102 | - Changed comm_poll_incoming() to be called less frequently | |
| 6103 | (every 15 I/O's instead of every 7 FD's) (Michael O'Reilly). | |
| 6104 | - Removed HAVE_SYSLOG case for debug() macro. Almost all | |
| 6105 | systems do have syslog(), but more importatnly the | |
| 6106 | _db_level value is needed for debugging to stderr. | |
| 6107 | - Rewrote squid/dnsserver interface to use smaller, single-line | |
| 6108 | messages. | |
| 6109 | - Rewrote 'dns' cachemgr output to use a table format. | |
| 6110 | - Rewrote a lot of dnsserver.c. | |
| 6111 | - Added eventAddIsh() for semi-random event scheduling. | |
| 6112 | - Fixed an ftpTimeout bug for sessions which use PORT | |
| 6113 | commands. | |
| 6114 | - Fixed ftp.c to recognized invalid PASV replies (e.g. | |
| 6115 | port == 0). | |
| 6116 | - Removed hash_insert(). All hasing uses hash_join() now. | |
| 6117 | - Renamed hash_unlink() to hash_remove_link(). | |
| 6118 | - Added hashPrime() to find closes prime hash table size | |
| 6119 | to a given value. | |
| 6120 | - Fixed Keep-Alive ratio counting bug which prevented | |
| 6121 | persistent connections from being used between cache | |
| 6122 | peers. | |
| 6123 | - Changed icmp.c to NOT queue messages sent from squid to | |
| 6124 | the pinger program. | |
| 6125 | - Changed icp_v2.c to NOT queue ICP messages by default. | |
| 6126 | But they will be queued and resent once if the first | |
| 6127 | send fails. Counters.icp.queued_replies counts the | |
| 6128 | number of messaages queued. | |
| 6129 | - Cleaned up ICP logging. | |
| 6130 | - Added identTimeout(). | |
| 6131 | - Fixed ipcache reply counting bug. Overcounted dnsserver | |
| 6132 | replies for partial replies. | |
| 6133 | - Added urlInternal() for building internal Squid URLs. | |
| 6134 | - Changed peerAllowedToUse() to check both 'cache_peer_domain' | |
| 6135 | AND 'cache_peer_acl' configurations. This should be changed | |
| 6136 | in the fugure to use ONLY cache_peer_acl. | |
| 6137 | - Changed DEAD/REVIVED neighbor detection to avoid reporting | |
| 6138 | so many false deaths. (Joe Ramey). | |
| 6139 | - Added some preliminary code to support "cache digests." | |
| 6140 | - Fixed pumpClose() coredumps (?). | |
| 6141 | - Updated cachemgr 'info' output to show median service | |
| 6142 | times for various categories. | |
| 6143 | - Fixed ABW bug in storeDirWriteCleanLogs(). sizeof(off_t) | |
| 6144 | != sizeof(int) for Alphas. | |
| 6145 | - Fixed potential alignment problem in storeDirWriteCleanLogs(). | |
| 6146 | - Fixed store_rebuild.c to NOT replace current, but | |
| 6147 | not-swapped-out StoreEntry's with on-disk entries. | |
| 6148 | - Changed storeCleanup() to call storeRelease on invalid | |
| 6149 | entries which don't have a swapfile (i.e. no unlink() | |
| 6150 | penalty). | |
| 6151 | - Fixed storeSwapInStart() to fail for unvalidated | |
| 6152 | entries. | |
| 6153 | - SNMP changes: | |
| 6154 | . renovated mib and added descriptions and comments | |
| 6155 | . added hit and byte counters to client_db , for | |
| 6156 | cacheClientTable | |
| 6157 | . cacheClientTable, netdbTable, cachePeerTable, | |
| 6158 | cacheConnTable now indexed by ip address. hash_lookup was | |
| 6159 | enhanced to allow for subsequent hash_next's similar to | |
| 6160 | hash_first, to speed up getnext's in tables which refer to | |
| 6161 | hash-table structures. | |
| 6162 | . added generic (well, sorf of) table indexing functionality | |
| 6163 | . added makefile dependencies for snmplib and cache_snmp.h | |
| 6164 | . WaisHost, WaisPort, Timeouts removed | |
| 6165 | . FdTable split into FdTable and ConnTable. FdTable simplified | |
| 6166 | . PeerTable and PeerStat merged and put into new cacheMesh | |
| 6167 | group | |
| 6168 | . cacheClientTable added for client statistics and accounting | |
| 6169 | (cacheMesh 2) | |
| 6170 | . cacheSec and cacheAccounting groups removed | |
| 6171 | . fixed acl bug when communities not defined | |
| 6172 | . snmp_acl now survives bad configuration | |
| 81d0c856 | 6173 | |
| 9a713ffb | 6174 | Changes to squid-1.2.beta18 (Mar 23, 1998): |
| 6175 | ||
| 275d9f2e | 6176 | - Added v1.1 'test_reachability' option. |
| 6177 | - Fixed hash4() len == 0 bug. | |
| 2c26197b | 6178 | - Fixed Config.Swap.maxSize reconfigure bug. |
| 6179 | - Fixed ICP query bug determining request method. | |
| 6180 | - Moved ICP's storeGet() cache lookup into neighborsUdpAck() | |
| 6181 | so that we know neighbors are alive even when they send | |
| 6182 | us replies for unknown entries. | |
| 6183 | - Changed configure script to add '-std1' for Digital Unix cc. | |
| 6184 | - Fixed SNMP sizeof(int) / sizeof(long) bugs for 64-bit | |
| 6185 | systems. | |
| 6186 | - Added support for 'Cache-Control: Only-If-Cached' request header. | |
| 34ad1721 | 6187 | - Fixed CheckQuickAbort() bugs for multiple clients on one |
| 6188 | StoreEntry. Also changed storePendingNClients() to return | |
| 6189 | mem->nclients instead of counting the number of store_client | |
| 6190 | entries with pending callback functions. | |
| 275d9f2e | 6191 | |
| 041b157e | 6192 | Changes to squid-1.2.beta17 (Mar 17, 1998): |
| 6193 | ||
| df43fc93 | 6194 | - SNMP MIB version check changed to non-rcs. |
| 02922e76 | 6195 | - Added memory pools for variable size objects (strings). |
| 6196 | There are three pools; for small, medium, and large objects. | |
| 6197 | - Extended String object to use memory pools. Most fixed size char | |
| 6198 | array fields will be replaced using string pools. Same for most | |
| 6199 | malloc()-ed buffers. | |
| 5e14bf6d | 6200 | - Changed icon handling to use the hostname and port of the squid |
| 9ed90c85 | 6201 | server, instead of the special hostname "internal.squid" |
| 6202 | (Henrik Nordstrom). | |
| 5e14bf6d | 6203 | - All icons are now configured in mime.conf. No hardcoded icons, |
| f8360ee3 | 6204 | including gohper icons (Henrik Nordstrom). |
| 459f2559 | 6205 | - Fixed ICP bug when we send queries, but expect zero |
| 6206 | replies. | |
| ed9c0b33 | 6207 | - Fixed alignment/casting bugs for ICP messages. |
| 2b5b6324 | 6208 | - A generic client-to-server "pump" was added to handle HTTP |
| 6209 | PUT as well as POST methods on the client-cache side. Based on | |
| 6210 | "pump" PUT requests can be made to either HTTP or FTP url's. | |
| 6211 | Code is still beta and interoperability with browsers etc has | |
| 6212 | not been tested. | |
| 6213 | - Put #ifdefs around 'source_ping' code. | |
| 5e14bf6d | 6214 | - Added missing typedef for _arp_ip_data (Wesha). |
| 6215 | - Added regular-expression-based ACLs for client and server | |
| 6216 | domain names (Henrik Nordstrom). | |
| 6217 | - Fixed ident-related coredumps from incorrect callback data. | |
| 6218 | - Fixed parse_rfc1123() "space" bug. | |
| 6219 | - Fixed xrealloc() XMALLOC_DEBUG bug (not calling check_free()).. | |
| 6220 | - Fixed some src/asn.c end-of-reply bugs and memory leaks. | |
| 6221 | - Fixed some peer->options flag-setting bugs. | |
| 6222 | - Fixed single-parent feature to work again | |
| 6223 | - Removed 'single_parent_bypass' configuration option; instead | |
| 6224 | just use 'no-query'. | |
| 6225 | - Surrounded 'source_ping' code with #ifdefs. | |
| 6226 | - Changed 'deny_info URL' to use a custom Error page. | |
| 6227 | - Modified src/client.c for testing POST requests. | |
| 041b157e | 6228 | - Fixed hash4() for SCO (Vlado Potisk). |
| 459f2559 | 6229 | |
| 7ba777f2 | 6230 | Changes to squid-1.2.beta16 (Mar 4, 1998): |
| 6231 | ||
| 447203a7 | 6232 | - Added Spanish error messages from Javier Puche. |
| 02922e76 | 6233 | - Added Portuguese error messages from Pedro Lineu Orso |
| 0965bd19 | 6234 | - Added a simple but very effective hack to cachemgr.cgi that tries to |
| 6235 | interpret lines with '\t' as table records and formats them | |
| 6236 | accordingly. With a few exceptions (see source code), first line | |
| 6237 | becomes a table heading ("<th>" html tag) and the rest is formated | |
| 6238 | with "<td>" tags. | |
| 7021844c | 6239 | - Added "mem_pools_limit" configuration option. Semantics of |
| 6240 | "mem_pools" option has also changed a bit to reflect new memory | |
| 6241 | management policy. | |
| 7ba777f2 | 6242 | - Reorganized memory pools. Squid now supports a global pool |
| 6243 | limit instead of individual pool limits. Per-pool limits can be | |
| 3a88d597 | 6244 | implemented on top of the current scheme if needed, but it is |
| 7ba777f2 | 6245 | probably hard to guess their values. Squid distributes pool |
| 6246 | memory among "frequently allocated" objects. There is a | |
| 6247 | configurable limit on the total amount of "idle" memory to be | |
| 6248 | kept in reserve. All requests that exceed that amount are | |
| 6249 | satisfied using malloc library. Support for variable size | |
| 6250 | objects (mostly strings) will be enabled soon. | |
| 6251 | - memAllocate() has now only one parameter. Objects are always | |
| 6252 | reset with 0s. (We actually never used that parameter before; | |
| 6253 | it was always set to "clear"). | |
| 6254 | - Added Squid "signature" to all ERR_ pages. The signature is | |
| 6255 | hardcoded and is added on-the-fly. The signature may use | |
| 6256 | %-escapes. Added interface to add more hard-coded responses if | |
| 6257 | needed (see errorpage.c::error_hard_text). | |
| 6258 | - Both default and configured directories are searched for ERR_ | |
| 6259 | pages now. Configured directory is, of course, searched first. | |
| 6260 | This allows you to customize a subset of ERR_ pages (in a | |
| 6261 | separate directory) without danger of getting other copies out | |
| 6262 | of sync. | |
| 6263 | - Security controls for the SNMP agent added. Besides | |
| 6264 | communities (like password) and views (part of tree | |
| 6265 | accessible), the snmp_acl config option can be used to do acl | |
| 6266 | based access checks per community. | |
| 6267 | - SNMP agent was heavily re-written, based on cmu-snmpV1.8. You | |
| 6268 | can now walk through the whole mib tree. Several new variables | |
| 6269 | added under cacheProtoAggregateStats | |
| 12cf1be2 | 6270 | - Added rudimental statistics for HTTP headers. |
| 7ba777f2 | 6271 | - Adjusted StatLogHist to a more generic/flexible StatHist. |
| 12cf1be2 | 6272 | Moved StatHist implementation into a separate file. |
| 178dbda2 | 6273 | - Added FTP support for PORT if PASV fails, also try the |
| 6274 | default FTP data port (Henrik Nordstrom). | |
| 6275 | - Fixed NULL pointer bug in clientGetHeadersForIMS when a | |
| 6276 | request is cancelled for fails on the client side. | |
| 6277 | - Filled in some squid.conf comments (never_direct, | |
| 6278 | always_direct). | |
| 6279 | - Added RES_DNSRCH to dnsserver's _res.options when the | |
| 6280 | -D command line option is given. | |
| 6281 | - Fixed repeated Detected DEAD/REVIVED Sibling messages when | |
| 6282 | peer->tcp_up == 0 (Michael O'Reilly). | |
| 6283 | - Fixed storeGetNextFile's incorrect "directory does not exist" | |
| 6284 | errors (Michael O'Reilly). | |
| 6285 | - Fixed aiops.c race condition (Michael O'Reilly, Stewart | |
| 6286 | Forster). | |
| 6287 | - Added 'dns_nameservers' config option to specify non-default | |
| 6288 | DNS nameserver addresses (Maxim Krasnyansky). | |
| 6289 | - Added lib/util.c code to show memory map as a tree | |
| 6290 | (Henrik Nordstrom). | |
| 6291 | - Added HTTP and ICP median service times to Counters and | |
| 6292 | cachemgr average stats. | |
| 6293 | - Changed "-d" command line option to take debugging level | |
| 6294 | as argument. Debugging equal-to or less-than the argument | |
| 6295 | will be written to stderr. | |
| 3ff01c3e | 6296 | - Removed unused urlClean() function from url.c. |
| adba4a64 | 6297 | - Fixed a bug that allowed '?' parts of urls to be recorded in |
| ef65d6ca | 6298 | store.log. Logged urls are now "clean". |
| 178dbda2 | 6299 | - Cache Manager got new Web interface (cachemgr.cgi). New .cgi |
| 6300 | script forwards basic authentication from browser to squid. | |
| 6301 | Authentication info is encoded within all dynamically generated | |
| 6302 | pages so you do not have to type your password often. | |
| 6303 | Authentication records expire after 3 hours (default) since | |
| 6304 | last use. Cachemgr.cgi now recognizes "action protection" types | |
| 6305 | described below. | |
| 6306 | - Added better recognition of available protection for actions | |
| 6307 | in Cache Manager. Actions are classified as "public" (no | |
| 6308 | password needed), "protected" (must specify a valid password), | |
| 6309 | "disabled" (those with a "disable" password in squid.conf), and | |
| 6310 | "hidden" (actions that require a password, but do not have | |
| 6311 | corresponding cachemgr_passwd entry). If you manage to request | |
| 6312 | a hidden, disabled, or unknown action, squid replies with | |
| 6313 | "Invalid URL" message. If a password is needed, and you failed | |
| 6314 | to provide one, squid replies with "Access Denied" message and | |
| 6315 | asks you to authenticate yourself. | |
| 6316 | - Added "basic" authentication scheme for the Cache Manager. | |
| 6317 | When a password protected function is accessed, Squid sends an | |
| 6318 | HTTP_UNAUTHORIZED reply allowing the client to authorize itself | |
| 6319 | by specifying "name" and "password" for the specified action. | |
| 6320 | The user name is currently used for logging purposes only. The | |
| 6321 | password must be an appropriate "cachemgr_passwd" entry from | |
| 6322 | squid.conf. The old interface (appending @password to the url) | |
| 6323 | is still supported but discouraged. Note: it is not possible | |
| 6324 | to pass authentication information between squid and browser | |
| 6325 | *via a web server*. The server will strip all authentication | |
| 6326 | headers coming from the browser. A similar problem exists for | |
| 6327 | Proxy-Authentication scheme. | |
| 6328 | - Added ERR_CACHE_MGR_ACCESS_DENIED page to notify of | |
| 6329 | authentication failures when accessing Cache Manager. | |
| 63259c34 | 6330 | - Added "-v" (Verbose) and "-H" (extra Headers) options to client.c. |
| 178dbda2 | 6331 | - Added simple context-based debugging to debug.c. Currently, |
| 6332 | the context is defined as a constant string. Context reporting | |
| 6333 | is triggered by debug() calls. Context debugging routines | |
| 6334 | print minimal amount of information sufficient to describe | |
| 6335 | current context. The interface will be enhanced in the future. | |
| 6336 | - Replaced _http_reply with HttpReply. HttpReply is a | |
| 6337 | stand-alone object that is responsible for parsing, swapping, | |
| 6338 | and comm_writing of HTTP replies. Moved these functions from | |
| 6339 | various modules into HttpReply module. | |
| 8bfcd557 | 6340 | - Added HttpStatusLine, HttpHeader, HttpBody. |
| 178dbda2 | 6341 | - All HTTP headers are now parsed and stored in a "compiled" |
| 6342 | form in the HttpHeader object. This allows for a great | |
| 6343 | flexibility in header processing and builds basis for support | |
| 6344 | of yet unsupported HTTP headers. | |
| 6345 | - Added Packer, a memory/store redirector with a printf | |
| 6346 | interface. Packer allows to comm_write() or swap() an object | |
| 6347 | using a single routine. | |
| 6348 | - Added MemBuf, a auto-growing memory buffer with printf | |
| 6349 | capabilities. MemBuf replaces most of old local buffers for | |
| 6350 | compiling text messages. | |
| 6351 | - Added MemPool that maintains a pre-allocated pool of opaque | |
| 6352 | objects. Used to eliminate memory thrashing when allocating | |
| 6353 | small objects (e.g. field-names and field-value in http | |
| 6354 | headers). | |
| 8bfcd557 | 6355 | |
| 3197e644 | 6356 | Changes to squid-1.2.beta15 (Feb 13, 1998): |
| 6357 | ||
| 55647891 | 6358 | NOTE: This version has changes which may cause all or part |
| 6359 | of your cache to be lost. However, you can problably | |
| 6360 | save most of it by doing a slow restart. Specifically: | |
| 6361 | ||
| 6362 | 1. Kill the running squid-1.2.beta14 process; wait for it to | |
| 6363 | fully exit. | |
| 6364 | 2. Remove all 'swap.state*' files, either in each cache_dir, or | |
| 6365 | as defined in your squid.conf | |
| 6366 | 3. Start squid-1.2.beta15. The store will be rebuilt from the | |
| 6367 | existing swap files, reading the directories and opening | |
| 6368 | the files. | |
| 6369 | ||
| bcfbdc11 | 6370 | - Fixed some problems related to disk (and pipe) write error |
| 6371 | handling. file_close() doesn't always close the file | |
| 6372 | immediately; i.e. when there are pending buffers to write. | |
| 6373 | StoreEntry->lock_count could become zero while a write is | |
| 6374 | pending, then bad things happen during the callback. | |
| 6375 | - The file_write() callback data must now be in the callback | |
| 6376 | database (cbdata). We now use the swapout_ctrl_t structure | |
| 6377 | for the callback data; it stays around for as long as we are | |
| 6378 | swapping out. | |
| 6379 | - Changed the way write errors are handled by diskHandleWrite. | |
| 6380 | If there is no callback function, now we exit with a fatal | |
| 6381 | message under the assumption that the file in question is a | |
| 6382 | log file or IPC pipe. Otherwise, we flush all the pending | |
| 6383 | write buffers (so we don't see multiple repeated write errors | |
| 6384 | from the same descriptor) and let the upper layer decide how | |
| 6385 | to handle the failure. | |
| 6386 | - Fixed storeDirWriteCleanLogs. A write failure was leaving | |
| 6387 | some empty swap.state files, even though it tells us that its | |
| 6388 | "not replacing the file." Don't flush/rename logs which we | |
| 6389 | have prematurely closed due to write failures, indiciated by | |
| 6390 | fd[dirn] == -1. Close these files LAST, not before | |
| 6391 | renaming. | |
| 6392 | - Fixed storeDirClean to clean directories in a more sensible | |
| 6393 | order, instead of the new "MONOTONIC" order for swap files. | |
| 0465e406 | 6394 | - Merged fdstat.c functions into fd.c. |
| 6395 | - Cleaned up some debugging sections. Some unrelated source | |
| 6396 | files were using the same section. | |
| 6397 | - Removed curly brackets from all cachemgr output. | |
| 6398 | - Removed unused filemap->last_file_number_allocated member. | |
| 6399 | - Removed unused fde->lifetime_data member. | |
| 6400 | - Fixed incorrectly applying htonl() on icp_common_t->shostid. | |
| 6401 | - Call setsid() before exec() in ipc.c so that child processes | |
| 6402 | don't receive SIGINT (etc) when running squid on a tty. | |
| 2f2dd5ad | 6403 | - Changed StoreEntry->object_len to ->swap_file_sz so we |
| 6404 | can verify the disk file size at restart. Moved object_len | |
| 6405 | to MemObject->object_sz. Note object_sz is initialized | |
| 6406 | to -1. If object_sz < 0, then we need to open the swap | |
| 6407 | file and read the swap metadata. | |
| 6408 | - Changed store_client->mem to ->entry because we need | |
| 6409 | e->swap_file_sz to set mem->object_sz at swapin. | |
| 2f2dd5ad | 6410 | - Renamed storeSwapData structure to storeSwapLogData. |
| 6411 | - Fixed storeGetNextFile to not increment d->dirn. Added | |
| 6412 | check for opendir() failure. | |
| 6413 | - Fixed storeRebuildStart to properly link the directory | |
| 6414 | list for storeRebuildfromDirectory mode. | |
| e157f97f | 6415 | - Added -S command line option to double-check store |
| 6416 | consistency with disk files in storeCleanup(). | |
| 6417 | - Fixed a problem with transactional logging. In many | |
| 6418 | cases we were adding the public cache key and then | |
| 6419 | logging a delete for the private key. This is worthless | |
| 6420 | because during rebuild we could not locate the previous | |
| 6421 | public-keyed entry. Now we assert that only public-keyed | |
| 6422 | entries can be logged to swap.state. storeSetPublicKey() | |
| 6423 | and storeSetPrivateKey() have been modified to log an | |
| 6424 | ADD or DEL when the key changes. | |
| 6425 | - Fixed storeDirClean bug. Needed to call | |
| 6426 | storeDirProperFileno() so the "dirn bits" get set. | |
| 6427 | - Fixed a storeRebuildFromDirectory bug. fullpath[] and | |
| 6428 | fullfilename[] were static to that function and did | |
| 6429 | not change when the "rebuild_dir" arg did. Moved these | |
| 6430 | buffers to the rebuild_dir structure. | |
| 6431 | - In storeRebuildFromSwapLog, we were calling storeRelease() | |
| 6432 | for cache key collisions. This only set the RELEASE_REQUEST | |
| 6433 | bit and did not clear the swap_file_number in the filemap or | |
| 6434 | in the StoreEntry, so the swap file could get unlinked later | |
| 6435 | when it was really released. | |
| 4e0f0471 | 6436 | - Fixed FTP so that ';type=X' specifically sets the HTTP reply |
| 6437 | content-type and content-encoding (Henrik Nordstrom). | |
| 6438 | - Removed 'icon_content_type' configuration option. Content | |
| 6439 | types now taken from mime.conf (Henrik Nordstrom). | |
| 2a9b2b73 | 6440 | - Added additional memory malloc tracing and memory leak |
| 6441 | detection. Use --enable-xmalloc-debug-trace configure | |
| 6442 | option and -m command line option (Henrik Nordstrom). | |
| bcfbdc11 | 6443 | |
| 93169941 | 6444 | Changes to squid-1.2.beta14 (Feb 6, 1998): |
| 6445 | ||
| 5471db88 | 6446 | - Replaced snmplib free() calls with xfree(). |
| 6447 | - Changed the 'net_db_name' hash table structure to | |
| 6448 | make it easier to move names from one network to another | |
| 6449 | (copied from 1.1 code). | |
| 93169941 | 6450 | - Filled in some of the config dump routines (dump_acl, |
| 6451 | dump_acl_access). | |
| 6452 | - Full memory debugging option (--enable-xmalloc-debug-trace) | |
| 6453 | (Henrik Nordstrom). | |
| 6454 | - Filled-in and clarified many squid.conf comments (Oskar | |
| 6455 | Pearson). | |
| 6456 | - Fixed up handling of SWAP_LOG_DEL swap.state entries. | |
| 5471db88 | 6457 | |
| f91834bf | 6458 | Changes to squid-1.2.beta13 (Feb 4, 1998): |
| f577e074 | 6459 | |
| b4512acd | 6460 | - NOTE: With this version the "swap.state" file format has |
| 6461 | changed. Running this version for the first time will | |
| 6462 | cause your current cache contents to be lost! | |
| f91834bf | 6463 | - NOTE: this version still has the bug where we don't rewind |
| 6464 | a swapout file and rewrite the swap meta data. Objects | |
| 6465 | larger than 8KB will be lost when rebuilding from the swap | |
| 6466 | files. | |
| d04dd4bf | 6467 | - Combined various interprocess communication setup functions |
| 6468 | into ipcCreate(). | |
| 6469 | - Removed some leftover ICP_HIT_OBJ things. | |
| 6470 | - Removed cacheinfo and proto_count() and friends; these are to | |
| 6471 | be replaced in functionality by StatCounters and 5/60 minute | |
| 6472 | average views via cachemgr. | |
| 6473 | - Fixed --enable-acltree configure message (Masashi Fujita). | |
| 6474 | - Fixed no reference to @LIB_MALLOC@ in src/Makefile.in | |
| 6475 | (Masashi Fujita). | |
| 6476 | - Fixed building outside of source tree (Masashi Fujita). | |
| dbfed404 | 6477 | - FTP: Format NLST listings, and inform the user that the NLST |
| 6478 | (plain) format is available when we find a LIST listing that we | |
| 6479 | don't understand (Henrik Nordstrom) | |
| 6480 | - FTP: Use SIZE on Binary transfers, and not ASCII. The | |
| 6481 | condition was inversed, making squid use SIZE on ASCII | |
| 6482 | transfers (Henrik Nordstrom). | |
| 6483 | - Enable virtual and Host: based acceleration in order to be | |
| 6484 | able to use Squid as a transparent proxy without breaking | |
| 6485 | either virtual servers or clients not sending Host: header | |
| 6486 | the order of the virtual and Host: based acceleration needs | |
| 6487 | to be swapped, giving Host: a higher precendence than virtual | |
| 6488 | host (Henrik Nordstrom). | |
| 6489 | - Use memmove/bcopy as detected by configure Some systems does | |
| 6490 | not have memmove, but have the older bcopy implementation | |
| 6491 | (Henrik Nordstrom). | |
| 6cf028ab | 6492 | - Completely rewritten aiops.c that creates and manages a pool |
| 6493 | of threads so thread creation overhead is eliminated (SLF). | |
| 6494 | - Lots of mods to store.c to detect and cancel outstanding | |
| 6495 | ASYNC ops. Code is not proven exhaustive and there are | |
| 6496 | definately still cases to be found where outstanding disk ops | |
| 6497 | aren't cancelled properly (SLF). | |
| 6498 | - Changes to call interface to a few routines to support disk | |
| 6499 | op `tagging', so operations can be cleanly cancelled on | |
| 6500 | store_abort()s (SLF). | |
| 6501 | - Implementation of swap.state files as transaction logs. | |
| 6502 | Removed objects are now noted with a negative object size. | |
| 6503 | This allows reliatively clean rebuilds from non-clean | |
| 6504 | shutdowns (SLF). | |
| 6505 | - Now that the swap.state files are transaction logs, there's | |
| 6506 | now no need to validate by stat()ing. All the validation | |
| 6507 | procedure does is now just set the valid bit AFTER all the | |
| 6508 | swap.state files have been read, because by that time, only | |
| 6509 | valid objects can be left. Object still need to be marked | |
| 6510 | invalid when reading the swap.state file because there's no | |
| 6511 | guarantee the file has been retaken or deleted (SLF). | |
| 6512 | - An fstat() call is now added after every | |
| 6513 | storeSwapInFileOpened() so object sizes can be checked. Added | |
| 6514 | code to storeRelease() the object if the sizes don't match (SLF). | |
| 6474667e | 6515 | - #defining USE_ASYNC_IO now uses the async unlink() rather than |
| 6516 | unlinkd() (SLF). | |
| 6cf028ab | 6517 | - #defining MONOTONIC_STORE will support the creation of disk |
| 6518 | objects clustered into directories. This GREATLY improves disk | |
| 6519 | performance (factor of 3) over old `write-over-old-object' | |
| 6520 | method. If using the MONOTONIC_STORE, the | |
| 6521 | {get/put}_unusedFileno stack stuff is disabled. This is | |
| 6522 | actually a good thing and greatly reduces the risk of serving | |
| 6523 | up bad objects (SLF). | |
| 6524 | - Fixed unlink() in storeWriteCleanLogs to be real unlink() | |
| 6525 | rather than ASYNC/unlinkd unlinks. swap.state.new files were | |
| 6526 | being removed just after they were created due to delayed | |
| 6527 | unlinks (SLF). | |
| 6528 | - Disabled various assertions and made these into debug warning | |
| 6529 | messages to make the code more stable until the bugs can be | |
| 6530 | tracked down (SLF). | |
| 6531 | - Added most of Michael O'Reilly's patches which included many | |
| 6532 | bug fixes. Ask him for full details (SLF). | |
| 6533 | - Moved aio_check_callbacks in comm_{poll|select}(). It was | |
| 6534 | called after the fdset had been built which was wrong because | |
| 6535 | the callbacks were changing the state of the read/write | |
| 6536 | handlers prior to the poll/select() calls (SLF). | |
| f09f5b26 | 6537 | - Fixed ARP ACL memory leaks (Dale). |
| f577e074 | 6538 | - Eliminated URL and SHA cache keys. Cache keys will always |
| 6539 | be MD5's now. | |
| 6540 | - Fixed up store swap meta data. | |
| 6541 | - Changed swap.state logs to a binary format. | |
| f91834bf | 6542 | - The swap.state logs are written transaction-style. |
| d04dd4bf | 6543 | |
| b5cfbd5b | 6544 | Changes to squid-1.2.beta12 (Jan 30, 1998): |
| 6545 | ||
| b4512acd | 6546 | - Added metadata headers to cache swap files. This is an |
| 6547 | incompatible change with previous versions. Running this | |
| 6548 | version for the first time will cause your current cache | |
| 6549 | contents to be lost. | |
| 9fc0b4b8 | 6550 | - -D_REENTRANT when linking with -lpthreads (Henrik Nordstrom) |
| 6551 | - Show symlink destinations as a hyperlink in FTP listings | |
| 6552 | (Henrik Nordstrom) | |
| 3a4eaced | 6553 | - Fixed not allocating enough space for rewriting URLs with |
| 6554 | the Host: header (Eric Stern). | |
| 6555 | - Year-2000 fixes (Arjan de Vet). | |
| 6556 | - Fixed looping for cache hits on HEAD requests. | |
| fc6dc767 | 6557 | - Fixed parseHttpRequest() coredump for |
| 6474667e | 6558 | "GET http://foo HTTP/1.0\r\n\r\n\r\n" |
| 9fc0b4b8 | 6559 | |
| 9f802cb1 | 6560 | Changes to squid-1.2.beta11 (Jan 6, 1998): |
| 6561 | ||
| fd82d0b0 | 6562 | - Fixed fake 'struct rusage' definition which prevented compling |
| 6563 | on Solaris 2.4. | |
| 6564 | - Fixed copy-by-ref bug for request->headers in | |
| 6565 | clientRedirectDone() (Michael O'Reilly). | |
| 812db943 | 6566 | - Workaround for Solaris pthreads closing FD 0 upon fork() |
| 6567 | (Michael O'Reilly). | |
| 05fd71a7 | 6568 | - Fixed shutdown bug with outgoing UDP sockets; we need to |
| 6569 | disable their read handlers. | |
| 6570 | - For comm_poll(), use the fast 50 msec timeout only when | |
| 6571 | USE_ASYNC_IO is defined. | |
| 1fbc6de3 | 6572 | - Fixed pointer bug when freeing AS# ACL entries. |
| 6573 | - Fixed forgetting to reset Config.npeers to zero in free_peer(). | |
| 0f6bdbfa | 6574 | - Fixed ICP bug causing excessive TIMEOUTs with sibling |
| 6575 | neighbors. We must call the ICP reply callback even for | |
| 6576 | sibling misses. | |
| 6577 | - Fixed some dnsserver-related reconfigure bugs. Need to | |
| 6578 | use cbdataLock, etc in fqdncache.c. Also don't want to | |
| 6579 | use ipcacheQueueDrain() and fqdncacheQueueDrain(). | |
| 6580 | - Fixed persistent connection bug. We were incorrectly | |
| 6581 | deciding that non-200 replies without content-length | |
| 6582 | would not have a reply body. | |
| 6583 | - Fixed intAverage() precedence bug. | |
| 6584 | - Fixed memmove() 'len' arg bug. | |
| 6585 | - Changed algorithm for determining alive/dead state of peers. | |
| 6586 | Instead of using a fixed number of unacknowledged ICP | |
| 6587 | replies, it is now based on timeouts. If there are no ICP | |
| 6588 | replies received from a peer within 'dead_peer_timeout' | |
| 6589 | seconds, then we call it dead. | |
| 6590 | - Added calls to getCurrentTime() in | |
| 6591 | comm_{select,poll}_incoming() when ALARM_UPDATES_TIME is not | |
| 6592 | being used. | |
| 6593 | - Fixed shutdown bug when the incoming and outgoing ICP socket | |
| 6594 | is the same file descriptor. | |
| e970f357 | 6595 | - Added buffered writes for storeWriteCleanLogs() (Stewart |
| 6596 | Forster). | |
| 6597 | - Patches for Qnx4 (Jean-Claude MICHOT). | |
| 6598 | - Fixed returning void functions which seems to be a GCC-ism. | |
| e5f4e1b0 | 6599 | - New configure script options (Henrik Nordstrom): |
| 6600 | --enable-new-storekey=[sha|md5(|url)] (was --enable-hashkey) | |
| 6601 | --enable-acltree | |
| 6602 | --enable-icmp | |
| 6603 | --enable-delay-hack | |
| 6604 | --enable-useragent-log | |
| 6605 | --enable-kill-parent (this should be named -hack) | |
| 6606 | --enable-snmp | |
| 6607 | --enable-time-hack | |
| 6608 | --enable-cachemgr-hostname[=hostname] (new) | |
| 6609 | --enable-arp-acl (new) | |
| 6610 | - Added Doug Lea malloc-2.6.4 to the distribution, so that | |
| 6611 | people easily can try a decent malloc package if they syspect | |
| 6612 | their malloc is broken. --enable-dlmalloc (Henrik Nordstrom). | |
| 6613 | - Made XMALLOC_DEBUG_COUNT working again. Requires a small stub | |
| 6614 | function (Henrik Nordstrom). | |
| 6615 | - Removed top-level Makefile. People must now run 'configure' | |
| 6616 | before 'make'. | |
| 714ace98 | 6617 | - Fixed checkFailureRatio() implementation. |
| 82b3c7d9 | 6618 | - Made 'squid -z' behave like the 1.1 version. |
| e5f4e1b0 | 6619 | |
| fd82d0b0 | 6620 | |
| ab9a3f7e | 6621 | Changes to squid-1.2.beta10 (Jan 1, 1998): |
| 6622 | ||
| 6623 | - Fixed content-length bugs for 204 replies, 304 replies, | |
| 6624 | and HEAD requests (Henrik Nordstrom). | |
| 6625 | - Fixed errorAppendEntry() bug in gopherReadReply(). | |
| 6626 | - Basic support for FTP URL typecodes (;type=X). | |
| 9c965c1b | 6627 | - Support for access controls based on ethernet MAC addresses |
| ab9a3f7e | 6628 | (Dale). |
| 6629 | - Initial URN support; see | |
| 6630 | http://squid.nlanr.net/Squid/urn-support.html | |
| 6631 | - Fixed client-side persistent connections for objects with | |
| 6632 | bad content lengths (Henrik Nordstrom). | |
| 6633 | - Fixed bad call to storeDirUpdateSwapSize() for objects which | |
| 6634 | never reach SWAPOUT_DONE state. | |
| 68e3a9df | 6635 | - Fixed up poll() #defines in squid.h (Stewart Forster). |
| 6636 | - Changed poll() timeout from 1000 msec to 50 msec for | |
| 6637 | better performance under low load (Stewart Forster). | |
| e7a1fde6 | 6638 | - Changed storeWriteCleanLogs() to write objects in the LRU |
| 6639 | list order instead of the random hash table order. | |
| 109ff6af | 6640 | - Fixed FTP bug when data socket connections fail or timeout. |
| 6641 | - Reuse FTP data connection when possible (Henrik Nordstrom). | |
| 6642 | - Added configure options (Henrik Nordstrom) | |
| 6643 | --enable-store-key=sha|md5 | |
| 6644 | --enable-xmalloc-statistics | |
| 6645 | --enable-xmalloc-debug | |
| 78743365 | 6646 | --enable-xmalloc-debug-count |
| 6647 | --async-io | |
| 109203bf | 6648 | - Fixed confusing with the use/meaning of ERR_CANNOT_FORWARD |
| 6649 | by creating ERR_FORWARDING_DENIED and changing the | |
| 6650 | content of the ERR_CANNOT_FORWARD text. | |
| 4e9c07c1 | 6651 | - Fixed pipeline request bug from using strdup() (Henrik |
| 6652 | Nordstrom). | |
| 6653 | - Call clientReadRequest() directly instead of commSetSelect() | |
| 6654 | for pipelined requests (Henrik Nordstrom). | |
| 1b02b5be | 6655 | - Fixed 4k page leak in icpHandleIMSReply(); |
| 6656 | - Renamed 'icp*' functions to 'client*' names in client_side.c. | |
| e7a1fde6 | 6657 | |
| b90a0f8d | 6658 | Changes to squid-1.2.beta8 (Dec 2, 1997): |
| 6659 | ||
| eae03fc8 | 6660 | - Fixed accessLogLog() to log ident from Proxy-Authorization |
| 6661 | request header (BoB Miorelli). | |
| 226f9ba2 | 6662 | - Fixed #includes, prototypes, etc. in SNMP source files. |
| 6663 | - Moved 'POLLRDNORM' and 'POLLWRNORM' macro checks from | |
| 6664 | include/config.h.in to src/squid.h | |
| 6665 | - Moved 'num32' typedefs from src/typedefs.h to | |
| 6666 | include/config.h.in. | |
| 6667 | - Moved snmplib/md5.c to lib/md5.c. | |
| 6668 | - Added MD5 cache key support. | |
| 6669 | - Removed xmalloc() return check in uudeocde.c | |
| 6670 | - Added 'ifdef' support to cf_gen.c for optional code (e.g. SNMP) | |
| 6671 | - Changed 'client' program to provide easier cache manager access, | |
| 3ff01c3e | 6672 | e.g.: 'client mgr:info' |
| 226f9ba2 | 6673 | - Fixed 'client' to send 'Connection' instead of 'Proxy-Connection' |
| 6674 | for simulated keep-alive requests. | |
| 6675 | - Removed 'fd' arg from clientProcess* functions. | |
| 9e3468d5 | 6676 | - Fixed bugs from using errorSend() on persistent/pipelined |
| 226f9ba2 | 6677 | client connections. A latter request should not be allowed to |
| 6678 | write to the client fd until the current request completes. | |
| 6679 | Now use errorAppendEntry() for such situations. | |
| 6680 | - Fixed content-length bugs. We were using content-length == 0 | |
| 6681 | to also indicate a lack of content-length reply header. But | |
| 6682 | 'content-length: 0' might appear in a reply, so now use -1 to | |
| 6683 | indicate that no content length given. | |
| 6684 | - Split up clientProcessRequest() into smaller chunks so it | |
| 6685 | might be easier to follow. | |
| 6686 | - renamed various client_side.c functions to start with 'client' | |
| 6687 | instead of 'icp'. | |
| 6688 | - Fixed a 'cbdata leak' from the comm.c close handlers. | |
| 6689 | - Fixed a 'cbdata leak' from the comm.c connect routines. | |
| 6690 | - Fixed comm_select() and comm_poll() to stop looping on the | |
| 6691 | incoming HTTP/ICP sockets. If there are fewer than 7 FD's | |
| 6692 | ready for I/O, the incoming sockets might not get service, so | |
| 6693 | comm_select() would be called for up to 7 times until the | |
| 6694 | 'incoming_counter' was incremented enough to trigger a call | |
| 6695 | to comm_select_incoming(). Now we make sure | |
| 6696 | comm_select_incoming() gets called if select returns less | |
| 6697 | than 7 ready FD's. | |
| 9e3468d5 | 6698 | - Added errorpage '%B' token to generate FTP URLs with a '%2f' |
| 6699 | inserted at the start of the url-path. calls ftpUrlWith2f(). | |
| 6700 | (Henrik Nordstrom). | |
| 226f9ba2 | 6701 | - Changed fqdncache.c to use LRU double-linked list instead of qsort() |
| 6702 | for replacement and cachemgr output. | |
| 6703 | - Changed ipcache.c to use LRU double-linked list instead of qsort() | |
| 6704 | - Changed hash_insert() and hash_join() to return void. | |
| 6705 | for replacement and cachemgr output. | |
| 6706 | - Moved StoreEntry->method member to MemObject->method. | |
| 6707 | - Made StoreEntry->flags 16 bits. | |
| 6708 | - Made StoreEntry->refcount 16 bits. | |
| 6709 | - Changed URL-based public cache key to always include the request | |
| 6710 | method. | |
| eae03fc8 | 6711 | |
| 95bc9f0b | 6712 | Changes to squid-1.2.beta7 (Nov 24, 1997): |
| 6713 | ||
| 6a11653c | 6714 | - Fixed poll() for Linux (David Luyer). |
| 6715 | - SHA optimizations (David Luyer). | |
| 6716 | - Fixed errno clashes with macro on Linux (David Luyer). | |
| 6717 | - Fixed storeDirCloseSwapLogs(); logs might not be open. | |
| 6718 | - Fixed storeClientCopy2() bug. Detect when there is | |
| 6719 | no more data to send for objects in STORE_OK state. | |
| 19ee64b1 | 6720 | - Fixed FTP truncation bug when ftpState->size == 0, e.g. |
| 6721 | especially directory listings. | |
| 95bc9f0b | 6722 | - Mega FTP fix from Henrik Nordstrom. A better job of |
| 6723 | implementing the '%2f' hack. | |
| 6724 | - Fixed some pipelined request bugs. storeClientCopy() was | |
| 6725 | being given the wrong StoreEntry, and we had a race condition | |
| 6726 | which is now handled by storeClientCopyPending(). | |
| 99077fe6 | 6727 | - Added initial SNMP support. |
| 6a11653c | 6728 | |
| 2c9b45c9 | 6729 | Changes to squid-1.2.beta6 (Nov 13, 1997): |
| 6730 | ||
| 1b5516d3 | 6731 | - Fixed Authorized responses getting swapped out when they |
| 6732 | don't have Proxy-Revalidate reply header. | |
| 6733 | - Fixed Proxy Authentication support. We never sent back | |
| 6734 | a 407 reply, and were incorrectly incrementing the passwd | |
| 6735 | before comparing it. | |
| 6736 | - Fixed stat()ing pathnames for default values before parsing | |
| 6737 | config file (Ron Gomes). | |
| 6738 | - Fixed logging request and response headers on separate lines | |
| 6739 | (Ron Gomes). | |
| 6740 | - Fixed FTP Authentication message (Henrik Nordstrom). | |
| 6741 | - Changed Proxy Authentication to trigger a reread of the passwd | |
| 6742 | file if a password check fails (Henrik Nordstrom). | |
| 6743 | - Changed FTP to retry the first CWD with a leading slash if it | |
| 6744 | fails without one. | |
| 6745 | ||
| 8c17a569 | 6746 | Changes to squid-1.2.beta5 (Nov 6, 1997): |
| 6747 | ||
| 90045285 | 6748 | - Track the 'keep-alive ratio' for a peer as the ratio of |
| 6749 | the number of replies including 'Proxy-Connection: Keep-Alive' | |
| 6750 | compared to the number of requests sent. If the peer does | |
| 6751 | not support Persistent connections then this ratio will tend | |
| 6752 | toward zero. If the ratio is less than 50% after 10 requests | |
| 6753 | then we'll stop sending Keep-Alive. | |
| 8c3994aa | 6754 | - Proper support for %nn escapes in FTP, and numerous |
| 6755 | other fixes (Henrik Nordstrom). | |
| 6756 | - Support for Secure Hash Algorithm and framework for other | |
| 6757 | hash functions as cache keys. | |
| 6758 | - Fixed SSL snprintf() bug which broke SSL proxying. | |
| 6759 | - Fixed store_dir swap log bug from reconfigure (SIGHUP). | |
| 8c17a569 | 6760 | - Fixed LRU Reference Age bug. The arg to pow() must be |
| 8031bd43 | 6761 | minutes, not seconds. |
| 90045285 | 6762 | |
| 9ddfb255 | 6763 | Changes to squid-1.2.beta4 (Oct 30, 1997): |
| 6764 | ||
| a493f974 | 6765 | - Fixed DST bug in rfc1123.c |
| 6766 | - Changed default http_accel_port to 80. | |
| 6767 | - added errorCon() as a ErrorState constructor function | |
| 6768 | (Max Okumoto). | |
| 6769 | - Added ERR_FTP_FAILURE message for ftpFail(). | |
| 6770 | - For FTP, the timeout callback must be moved to the 'data' | |
| 6771 | descriptor when data transfer begins. Otherwise we are | |
| 6772 | likely to get a timeout on the control descriptor. | |
| 6773 | - Fixed double-free bug in httpRequestFree(). | |
| 6774 | - Fixed store_swap_size counting bug in storeSwapOutHandle(). | |
| 6775 | ||
| 409a6aad | 6776 | Changes to squid-1.2.beta3 (Oct 29, 1997): |
| 6777 | ||
| 6778 | - Initialize _res.options to RES_DEFAULT in dnsserver.c. | |
| 6779 | - Fix assertions which assumed 4-byte pointers. | |
| 6780 | - Fix missing % in fqdncache.c snprintf(). | |
| 6781 | ||
| 5a2d610b | 6782 | Changes to squid-1.2.beta2 (Oct 28, 1997): |
| 6783 | ||
| 8c3994aa | 6784 | - Fixed aiops.c and async_io.c so that they actually compile |
| f5b8bbc4 | 6785 | with USE_ASYNC_IO (Arjan de Vet). |
| 6786 | - Fixed errState->errno causing problems with some macros | |
| 6787 | (Michael O'Reilly). | |
| d287f51e | 6788 | - Fixed memory leaks in pconn.c (Max Okumoto). |
| 0866009b | 6789 | - Enhanced 'client' program with 'ping' behaviour (Ron Gomes). |
| 272547b5 | 6790 | - Fixed InvokeHandlers() from calling memCopy() for ALL |
| 6791 | store_client's with callbacks. A store_client might be reading | |
| 6792 | from disk. | |
| 5a2d610b | 6793 | - Rewrote storeMaintainSwapSpace(). No longer will we scan one |
| 272547b5 | 6794 | bucket at a time. Instead we'll maintain a single LRU |
| 6795 | list. When an object is 'touched' we move it to the | |
| 6796 | top of this list. When we need disk space, we delete | |
| 6797 | from the bottom. | |
| 5a2d610b | 6798 | - Removed storeGetSwapSpace(). |
| f5b8bbc4 | 6799 | |
| 871f0b8a | 6800 | Changes to squid-1.2.beta1 (): |
| 6801 | ||
| 6802 | - Reworked storage manager to not keep objects in memory during | |
| 6803 | transit. In other words, no separate NOVM distribution. | |
| 6804 | - Lots of cleanup and debugging for beta release. | |
| 6805 | - Use snprintf() everywhere instead of sprintf(). | |
| 6806 | - The 'in_memory' hash table has been replaced with a | |
| 6807 | doubly-linked list. New objects are added to the head of | |
| 6808 | the list. When memory space is needed, old objects are | |
| 6809 | purged from the tail of the list. | |
| 6810 | ||
| 0edfe7a2 | 6811 | Changes to squid-1.2.alpha7 (): |
| 6812 | ||
| c4958532 | 6813 | - fixes fixes fixes. |
| 6814 | - Made Arjan's PROXY_AUTH ACL patch standard. | |
| 0edfe7a2 | 6815 | |
| 8905b90c | 6816 | Changes to squid-1.2.alpha6 (): |
| 6817 | ||
| 6684fec0 | 6818 | - Simpler cacheobj implementation. |
| 6605655c | 6819 | - persistent connection histogram |
| 8872e1f8 | 6820 | - SERVER-SIDE PERSISTENT CONNECTIONS: |
| 6474667e | 6821 | - Added pconn.c |
| 6822 | - Addec Cofig.Timeout.pconn; default 120 seconds | |
| 6823 | - Added httpState->flags | |
| 6824 | - Added flags arg to httpBuildRequestHeader() | |
| 6825 | - Added HTTP_PROXYING and HTTP_KEEPALIVE flags | |
| 6826 | - Added 'Connection' to allowed HTTP headers (http-anon.c) | |
| 8872e1f8 | 6827 | - Added 'Proxy-Connection' to allowed HTTP headers |
| 6828 | (http-anon.c) | |
| a7736231 | 6829 | - Merged proxyhttpStart() with httpStart() and created |
| 8872e1f8 | 6830 | new httpBuildState(). |
| 6831 | - New httpPconnTransferDone() detects end-of-data on | |
| 6832 | persistent connections. | |
| 6684fec0 | 6833 | |
| 88738790 | 6834 | Changes to squid-1.2.alpha5 (): |
| 6835 | ||
| 6836 | - New configuration system. Everything is generated from | |
| 6837 | 'cf.data.pre', including the main parser, setting defaults, | |
| 6838 | outputting current values, and freeing memory. | |
| 6839 | This also involved moving some of the local data structures | |
| 6840 | (e.g. struct _acl *AclList in acl.c) to the Config | |
| 6841 | structure. (Max Okumoto) | |
| 6842 | - No more '/i' for regular expressions. Now insert a '-i' | |
| 6843 | to switch to case-insensitive. Use '+i' for case-sensitive. | |
| 6844 | - When you have a variable named the same as its type, sizeof() | |
| 6845 | gets the wrong one (fde). | |
| 6846 | - Need to flush unbuffered logs before fork(). | |
| 6847 | - Added two fields swap log: refcount and e->flag. | |
| 6848 | - Removed all the .h files for each .c file. Now #include stuff | |
| 6849 | is in either: defines.h, enums.h, typedefs.h, structs.h, | |
| 6850 | or protos.h, globals.h. This greatly reduces dependencies | |
| 6851 | between the various source files. | |
| 6852 | - globals.c is generated from globals.h by a Perl script. | |
| 8ee3ca2c | 6853 | - Started customizable error texts. |
| 88738790 | 6854 | |
| 97f674c8 | 6855 | Changes to squid-1.2.alpha4 (): |
| 6856 | ||
| ec973719 | 6857 | - New MIME configuration, regular expression based |
| 6858 | - Added request_timeout config option | |
| 6859 | - Multiple HTTP sockets (Lincoln Dale). | |
| 6860 | - Moved 'fds_are_n_free' check to httpAccept(). | |
| 6861 | - s/USE_POLL/HAVE_POLL/; make poll() default if available. | |
| 7e49f700 | 6862 | - Changed storeRegister to use offsets and make immediate |
| 6863 | callbacks if appropriate. | |
| 6864 | - Removed icpDetectClientClose(). Some of that functionality | |
| 6865 | goes into clientReadRequest() and the rest into | |
| 6866 | httpRequestFree(). | |
| b1b387d1 | 6867 | - Moved IP lookups to commConnect stuff. |
| 6868 | - Added support for retrying connect(). | |
| 858164fc | 6869 | - New inline debug() macro (David Luyer). |
| e174e0fe | 6870 | - Replace frequent gettimeofday() calls with alarm(3) based |
| 6871 | clock. Need to add more gettimeofday() calls to get back | |
| a59968c7 | 6872 | high-resolution timestamp logging (Andres Kroonmaa). |
| 0153d498 | 6873 | - Added support for Cache-control: proxy-revalidate; |
| 6874 | based on squid-1.1 patch from Mike Mitchell. | |
| ec973719 | 6875 | |
| 3b08d32d | 6876 | Changes to squid-1.2.alpha3 (): |
| 6877 | ||
| 6878 | - Implemented persistent connections between clients and squid. | |
| 6879 | - Moved various FD tables (comm.c, fdstat.c, disk.c) to a single | |
| 6880 | table in fd.c. | |
| 6881 | - Removed use of FD as an identifier in certain callback | |
| 6882 | operations (ipcache, fqdncache). | |
| 6883 | - General code cleanup. | |
| 6884 | - Fixed typedefs for callback functions. | |
| 6885 | - Removed FD lifetime/timeout dichotomy. Now we only have | |
| 6886 | timeouts, however the lifetime concept/keyword may still | |
| 6887 | linger in certain places. | |
| 6888 | - Change Makefile 'realclean' target to 'distclean' | |
| 6889 | - Changed config file parsing of time specifications to use | |
| 6890 | parseTimeLine(). | |
| 6891 | - Removed storetoString.c | |
| 6892 | ||
| 6893 | Changes to squid-1.2.alpha2 (): | |
| 74cebec0 | 6894 | |
| 6895 | - Merged squid-1.1.9, squid-1.1.10 changes | |
| 6896 | ||
| 7b41ec97 | 6897 | Changes to squid-1.2.alpha1 (): |
| 6898 | ||
| 6899 | - Unified peer selection algorithm. | |
| 75e88d56 | 6900 | - aiops.c and aiops.h are a threaded implementation of |
| 6901 | asynchronous file operations (Stewart Forster). | |
| 6902 | - async_io.c and async_io.h are complete rewrites of the old | |
| 6903 | versions (Stewart Forster). | |
| 6ad85e8a | 6904 | - Rewrote all disk file operations of squid to support |
| 75e88d56 | 6905 | the idea of callbacks except where not required (Stewart |
| 6906 | Forster). | |
| 75e88d56 | 6907 | - Background validation of 'tainted' swap log entries (Stewart |
| 6908 | Forster). | |
| 6909 | - Modified storeWriteCleanLog to create the log file using the | |
| 6910 | open/write rather than fopen/printf (Stewart Forster). | |
| 6911 | - Added the EINTR error response to handle badly interrupted | |
| 6912 | system calls (Stewart Forster). | |
| 6ad85e8a | 6913 | - UDP_HIT_OBJ not supported, removed. |
| 6914 | - Different sized 'cache_dirs' supported. | |
| 75e88d56 | 6915 | |
| e924600d | 6916 | ============================================================================== |