+Changes to squid-3.1.8 (04 Sep 2010):
+
+ - Bug 3033: incorrect information regarding TOS
+ - Bug 3020: Segmentation fault: nameservers[vc->ns].vc = NULL
+ - Bug 3005,2972: Locate LTDL headers correctly (again)
+ - Bug 2872: leaking file descriptors
+ - Bug 2583: pure virtual method called
+ - Hardened DNS client against packet queue attacks
+ - Hardened HTTP request-line parser
+ - Several HTTP/1.1 support improvements
+ - Improved cross-compile support
+ - .. and several internal pointer safety fixes
+
Changes to squid-3.1.7 (23 Aug 2010):
- Regression Bug 3021: Large DNS reply causes crash
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<HTML>
<HEAD>
- <META NAME="GENERATOR" CONTENT="LinuxDoc-Tools 0.9.66">
- <TITLE>Squid 3.1.7 release notes</TITLE>
+ <META NAME="GENERATOR" CONTENT="LinuxDoc-Tools 0.9.65">
+ <TITLE>Squid 3.1.8 release notes</TITLE>
</HEAD>
<BODY>
-<H1>Squid 3.1.7 release notes</H1>
+<H1>Squid 3.1.8 release notes</H1>
<H2>Squid Developers</H2>
<HR>
<HR>
<H2><A NAME="s1">1.</A> <A HREF="#toc1">Notice</A></H2>
-<P>The Squid Team are pleased to announce the release of Squid-3.1.7</P>
+<P>The Squid Team are pleased to announce the release of Squid-3.1.8</P>
<P>This new release is available for download from
<A HREF="http://www.squid-cache.org/Versions/v3/3.1/">http://www.squid-cache.org/Versions/v3/3.1/</A> or the
<A HREF="http://www.squid-cache.org/Mirrors/http-mirrors.html">mirrors</A>.</P>
<P>
<UL>
<LI>The lack of some features available in Squid-2.x series. See the regression sections below for full details.</LI>
-<LI>IPv6 split-stack support for Windows XP, MacOS X, OpenBSD and maybe others is not complete.</LI>
<LI>CVE-2009-0801 : NAT interception vulnerability to malicious clients.</LI>
</UL>
</P>
<P>Currently known issues which only depends on available developer time and may still be resolved in a future 3.1 release are:</P>
<P>
<UL>
-<LI>An ongoing slow FD leak introduced somewhere during the Squid-3.0 cycle.</LI>
<LI>Windows support is still largely missing.</LI>
<LI>AIX support for building with the IBM compiler is broken.</LI>
</UL>
<DT><B>https_port intercept ssl-bump connection-auth[=on|off]</B><DD>
<P>New port options. see http_port.</P>
-<DT><B>icap_service bypass=on|off|1|0 routing=on|off|1|0</B><DD>
-<P>New options 'bypass=' and 'routing='.
+<DT><B>icap_service bypass=on|off|1|0 routing=on|off|1|0 ipv6=on|off</B><DD>
+<P>New options 'bypass=', 'routing=' and 'ipv6='.
<PRE>
bypass=on|off|1|0
If set to 'on' or '1', the ICAP service is treated as
Routing is not allowed by default: the ICAP X-Next-Services
response header is ignored.
+
+ ipv6=on|off
+ Only has effect on split-stack systems. The default on those systems
+ is to use IPv4-only connections. When set to 'on' this option will
+ make Squid use IPv6-only connections to contact this ICAP service.
</PRE>
</P>
<!doctype linuxdoc system>
<article>
-<title>Squid 3.1.7 release notes</title>
+<title>Squid 3.1.8 release notes</title>
<author>Squid Developers</author>
<abstract>
<sect>Notice
<p>
-The Squid Team are pleased to announce the release of Squid-3.1.7
+The Squid Team are pleased to announce the release of Squid-3.1.8
This new release is available for download from <url url="http://www.squid-cache.org/Versions/v3/3.1/"> or the <url url="http://www.squid-cache.org/Mirrors/http-mirrors.html" name="mirrors">.
<itemize>
<item>The lack of some features available in Squid-2.x series. See the regression sections below for full details.
- <item>IPv6 split-stack support for Windows XP, MacOS X, OpenBSD and maybe others is not complete.
<item>CVE-2009-0801 : NAT interception vulnerability to malicious clients.
</itemize>
<p>Currently known issues which only depends on available developer time and may still be resolved in a future 3.1 release are:
<itemize>
- <item>An ongoing slow FD leak introduced somewhere during the Squid-3.0 cycle.
<item>Windows support is still largely missing.
<item>AIX support for building with the IBM compiler is broken.
</itemize>