+Changes to squid-3.2.0.2 (04 Sep 2010):
+
+ - Bug 3015: assertion failed: comm.cc:143: "ccb->active()"
+ - Support rotating logs from cachemgr and squidclient
+ - Support Kerberos authentication in squidclient
+ - Add manual page for negotiate_kerberos_auth
+ - Add helper ext_kerberos_ldap_group_acl to lookup Kerberos/NTLM group via LDAP
+ - Add tool 'purge' for management of UFS/AUFS/DiskD caches (experimental)
+ - Added log options %http::<bs and %icap::<bs
+ - Collapse HTCP cache_peer options into one setting
+ - Improved request smuggling attack detection. Tolerating valid benign HTTP
+ - ... and several HTTP/1.1 compliance improvements
+ - ... and all improvements in 3.1.7 and 3.1.8
+
Changes to squid-3.2.0.1 (03 Aug 2010):
- Port from 2.7: Logging infrastructure updates
- ... and a great many testing improvements
- ... and many documentation updates
+Changes to squid-3.1.8 (04 Sep 2010):
+
+ - Bug 3033: incorrect information regarding TOS
+ - Bug 3020: Segmentation fault: nameservers[vc->ns].vc = NULL
+ - Bug 3005,2972: Locate LTDL headers correctly (again)
+ - Bug 2872: leaking file descriptors
+ - Bug 2583: pure virtual method called
+ - Hardened DNS client against packet queue attacks
+ - Hardened HTTP request-line parser
+ - Several HTTP/1.1 support improvements
+ - Improved cross-compile support
+ - .. and several internal pointer safety fixes
+
Changes to squid-3.1.7 (23 Aug 2010):
- Regression Bug 3021: Large DNS reply causes crash
<!doctype linuxdoc system>
<article>
-<title>Squid 3.1.7 release notes</title>
+<title>Squid 3.1.8 release notes</title>
<author>Squid Developers</author>
<abstract>
<sect>Notice
<p>
-The Squid Team are pleased to announce the release of Squid-3.1.7
+The Squid Team are pleased to announce the release of Squid-3.1.8
This new release is available for download from <url url="http://www.squid-cache.org/Versions/v3/3.1/"> or the <url url="http://www.squid-cache.org/Mirrors/http-mirrors.html" name="mirrors">.
<itemize>
<item>The lack of some features available in Squid-2.x series. See the regression sections below for full details.
- <item>IPv6 split-stack support for Windows XP, MacOS X, OpenBSD and maybe others is not complete.
<item>CVE-2009-0801 : NAT interception vulnerability to malicious clients.
</itemize>
<p>Currently known issues which only depends on available developer time and may still be resolved in a future 3.1 release are:
<itemize>
- <item>An ongoing slow FD leak introduced somewhere during the Squid-3.0 cycle.
<item>Windows support is still largely missing.
<item>AIX support for building with the IBM compiler is broken.
</itemize>
<!doctype linuxdoc system>
<article>
-<title>Squid 3.2.0.1 release notes</title>
+<title>Squid 3.2.0.2 release notes</title>
<author>Squid Developers</author>
<abstract>
<sect>Notice
<p>
-The Squid Team are pleased to announce the release of Squid-3.2.0.1 for testing.
+The Squid Team are pleased to announce the release of Squid-3.2.0.2 for testing.
This new release is available for download from <url url="http://www.squid-cache.org/Versions/v3/3.2/"> or the <url url="http://www.squid-cache.org/Mirrors/http-mirrors.html" name="mirrors">.
<p><itemize>
<item>mswin_check_ad_group - ext_ad_group_acl - Check logged in users Group membership using Active Directory.
<item>ip_user_check - ext_file_userip_acl - Restrict users to cetain IP addresses, using a text file backend.
+ <item>squid_kerb_ldap - ext_kerberos_ldap_group_acl - Check logged in Kerberos or NTLM users Group membership using LDAP.
<item>squid_ldap_group - ext_ldap_group_acl - Check logged in users Group membership using LDAP.
<item>mswin_check_lm_group - ext_lm_group_acl - Check logged in users Group membership using LanManager.
<item>squid_session - ext_session_acl - Maintain a session cache of client identifiers (usually IP address).