From: Amos Jeffries Date: Mon, 11 Jun 2018 10:44:30 +0000 (+1200) Subject: Prep for 4.0.25 (#219) X-Git-Tag: M-staged-PR221~2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=b5391492eb4be8d2603e8ff6c01fc43a16c25281;p=thirdparty%2Fsquid.git Prep for 4.0.25 (#219) --- diff --git a/ChangeLog b/ChangeLog index 098e148d68..0a7aa98f5c 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,25 @@ +Changes to squid-4.0.25 (11 Jun 2018): + + - Regression Bug 4855: querying private entries for HTCP/ICP + - Regression Bug 4852: deny_info %R macro not being expanded + - Regression Bug 4847: proxy_auth ACL -i/+i flags not working + - Regression Bug 4831: filter chain certificates for validity when loading + - Regression fix: Transient reader locking broken in 4.0.24 + - Bug 4845: NegotiateSsl crash on aborting transaction + - Bug 4843 pt1: ext_edirectory_userip_acl refactoring for GCC-8 + - Bug 4843 pt2: squidclient refactoring for GCC-8 + - Bug 4829: IPC shared memory leaks when disker queue overflows + - Bug 4828: Use feature detection for IPFilter API/ABI checks + - Bug 4816: update negotiate_kerberos_auth helper protocol to v3.4 + - Bug 4811: supply AccessLogEntry (ALE) for more fast ACL checks + - Bug 4707: purge tool does not obey --sysconfdir= build option + - Bug 4171: checking for log_file_daemon despite disabling logging + - Bug 4042: ext_kerberos_ldap_group: add -P principal option + - TLS: avoid "ssl_crtd" assertions on reconfiguration + - Add timestamps to (most) FATAL messages + - Add "--kid role-ID" command line option + - ... and many documentation updates + Changes to squid-4.0.24 (07 Mar 2018): - Bug 4822: Build failure (-Wformat) where time_t is not long int diff --git a/doc/release-notes/release-4.sgml b/doc/release-notes/release-4.sgml index 9bc34cb773..b7b8b54ab3 100644 --- a/doc/release-notes/release-4.sgml +++ b/doc/release-notes/release-4.sgml @@ -1,6 +1,6 @@
-Squid 4.0.24 release notes +Squid 4.0.25 release notes Squid Developers @@ -12,7 +12,7 @@ for Applied Network Research and members of the Web Caching community. Notice -

The Squid Team are pleased to announce the release of Squid-4.0.24 for testing. +

The Squid Team are pleased to announce the release of Squid-4.0.25 for testing. This new release is available for download from or the . @@ -174,6 +174,10 @@ Most user-facing changes are reflected in squid.conf (see below). cache structures creation), as it allows the caller to wait until Squid has finished. +

The squid binary now accepts a --kid command line option which + informs the process which role it is to take on. This aids with debugging + SMP issues with specific process types and resolves some SMP forking issues. + Initial GnuTLS support

Squid can now be built to use GnuTLS in place of OpenSSL for the core @@ -378,6 +382,10 @@ This section gives a thorough account of those changes in three categories: verify the server certificate.

New tls-domain= option to verify the server certificate domain. + logfile_daemon +

Now only requires that helper binary exists when daemon: log module + is actually being used. + logformat

New quoting modifier to produce \-escaped output.

New code %ssl::<cert_errors to display server X.509