+Changes to squid-3.5.7 (01 Aug 2015):
+
+ - Bug 4251: incorrect instance name for memory segments in /dev/shm
+ - Bug 4227: invalid key in AuthUserHashPointer causing assertation failure
+ - Bug 3345: support %un (any available user name) format code for external ACLs.
+ - Support ssl-bump splicing to origin cache_peer
+ - Fix SSL errors relayed using invalid certificates
+ - Fix crash in TcpAccepter with profiler enabled
+ - Fix some cases of ssl_crtd SSL certificate DB corruption
+ - Fix performance regression in SBuf::chop operations
+ - Improve handling of client connections on shutdown
+ - Handle exceptions during squid.conf parse
+ - Make pod2man an optional dependency
+ - ... and polishing for several cache.log notification messages
+ - ... and all fixes from squid 3.4.14
+
Changes to squid-3.5.6 (03 Jul 2015):
- Bug 4274: ssl_crtd.8 not being installed
- ... and many error page translation updates
- ... and much code cleanup and polishing
+Changes to squid-3.4.14 (01 Aug 2015):
+
+ - Do not blindly forward cache peer CONNECT responses (CVE-2015-5400)
+
Changes to squid-3.4.13 (01 May 2015):
- Bug 4212: ssl_crtd crashes with corrupt database
<!doctype linuxdoc system>
<article>
-<title>Squid 3.4.13 release notes</title>
+<title>Squid 3.4.14 release notes</title>
<author>Squid Developers</author>
<abstract>
<sect>Notice
<p>
-The Squid Team are pleased to announce the release of Squid-3.4.13.
+The Squid Team are pleased to announce the release of Squid-3.4.14.
This new release is available for download from <url url="http://www.squid-cache.org/Versions/v3/3.4/"> or the
<url url="http://www.squid-cache.org/Download/http-mirrors.html" name="mirrors">.
<!doctype linuxdoc system>
<article>
-<title>Squid 3.5.6 release notes</title>
+<title>Squid 3.5.7 release notes</title>
<author>Squid Developers</author>
<abstract>
<sect>Notice
<p>
-The Squid Team are pleased to announce the release of Squid-3.5.6.
+The Squid Team are pleased to announce the release of Squid-3.5.7.
This new release is available for download from <url url="http://www.squid-cache.org/Versions/v3/3.5/"> or the
<url url="http://www.squid-cache.org/Download/http-mirrors.html" name="mirrors">.
<p>New format code <em>%ssl::>sni</em> to send SSL client SNI.
<p>New format code <em>%ssl::<cert_subject</em> to send SSL server certificate DN.
<p>New format code <em>%ssl::<cert_issuer</em> to send SSL server certificate issuer DN.
+ <p>New format code <em>%un</em> to send any available user name (requires 3.5.7 or later).
<p>New response kv-pair <em>clt_conn_tag=</em> to associates a given tag with the client TCP connection.
<tag>forward_max_tries</tag>