+Changes to squid-3.2.4 (03 Dec 2012):
+
+ - Ported: urllogin ACL from squid 2.7
+ - Bug 3688: Lots of Orphan Comm:Connections to ICAP server
+ - Bug 3677: Port un-pinning logic changes from squid 3.3
+ - Bug 3405: ssl_crtd crashes failing to remove certificate
+ - ... and major bugs fixed in squid 3.1.22
+ - Fix accept_filter on Linux
+ - Remove 'Bungled' warning on missing component directives
+ - ... and many buffer and memory leak issues in the bundled helpers
+ - ... and a small amount of code polishing
+
Changes to squid-3.2.3 (21 Oct 2012):
- Regression: SMP crashes on startup with workers > 1
- ... and a great many testing improvements
- ... and many documentation updates
+Changes to squid-3.1.22 (03 Dec 2012):
+
+ - Bug 3685: Squid hangs in Delay Pools ClassCBucket::update
+ - Bug 3659: read_timeout problem with HTTPS
+ - Bug 3654: Fix IPv6 enabled squidclient
+ - Bug 3189: AIO thread race on pipe() initialization
+ - cachemgr.cgi: Memory Leaks and DoS Vulnerability
+
Changes to squid-3.1.21 (23 Sep 2012):
- Bug 3622: peerClearRRStart scheduling multiple events
dnl
dnl
dnl
-AC_INIT([Squid Web Proxy],[3.2.3-BZR],[http://www.squid-cache.org/bugs/],[squid])
+AC_INIT([Squid Web Proxy],[3.2.4-BZR],[http://www.squid-cache.org/bugs/],[squid])
AC_PREREQ(2.61)
AC_CONFIG_HEADERS([include/autoconf.h])
AC_CONFIG_AUX_DIR(cfgaux)
<!doctype linuxdoc system>
<article>
-<title>Squid 3.1.21 release notes</title>
+<title>Squid 3.1.22 release notes</title>
<author>Squid Developers</author>
<abstract>
<sect>Notice
<p>
-The Squid Team are pleased to announce the release of Squid-3.1.21
+The Squid Team are pleased to announce the release of Squid-3.1.22
This new release is available for download from <url url="http://www.squid-cache.org/Versions/v3/3.1/"> or the <url url="http://www.squid-cache.org/Mirrors/http-mirrors.html" name="mirrors">.
<HTML>
<HEAD>
<META NAME="GENERATOR" CONTENT="LinuxDoc-Tools 0.9.66">
- <TITLE>Squid 3.2.2 release notes</TITLE>
+ <TITLE>Squid 3.2.4 release notes</TITLE>
</HEAD>
<BODY>
-<H1>Squid 3.2.2 release notes</H1>
+<H1>Squid 3.2.4 release notes</H1>
<H2>Squid Developers</H2>
<HR>
<HR>
<H2><A NAME="s1">1.</A> <A HREF="#toc1">Notice</A></H2>
-<P>The Squid Team are pleased to announce the release of Squid-3.2.2 for testing.</P>
+<P>The Squid Team are pleased to announce the release of Squid-3.2.4 for testing.</P>
<P>This new release is available for download from
<A HREF="http://www.squid-cache.org/Versions/v3/3.2/">http://www.squid-cache.org/Versions/v3/3.2/</A> or the
<A HREF="http://www.squid-cache.org/Mirrors/http-mirrors.html">mirrors</A>.</P>
<P>The cache manager is available under the path prefix /squid-internal-mgr/. For example
the URL http://example/com/squid-internal-mgr/menu will bring up the manager menu. This
means there are some configuration changes required to lock down manager access.
-The <EM>manager</EM> ACL needs changing to:
+The <EM>manager</EM> ACL needs changing. A built-in definition is now used, equivalent
+to the following regex pattern:
<PRE>
- acl manager url_regex -i ^cache_object:// ^https?://[^/]+/squid-internal-mgr/
+ ^(cache_object://|https?://[^/]+/squid-internal-mgr/)
</PRE>
</P>
cache manager applications as their front page embedding all scripts, accessors or
redirects required for their initial GUI display.</P>
+<P>MGR_INDEX file
+<UL>
+<LI>should contain a complete HTML page, with optional client-side scripting.</LI>
+<LI>must not contain server-side scripting. </LI>
+<LI>will have macro substitution performed on it using the same macros as used by the error page tempates.</LI>
+</UL>
+</P>
+
<P>Version 3.2 of the CGI cache manager tool now presents XHR scripted probes to detect
proxies presenting these manager index pagess and provides direct HTTP/HTTPS web links
to those managers.</P>
<P>New type <EM>random</EM>. Pseudo-randomly match requests based on a configured probability.</P>
<P>Renamed <EM>myip</EM> to <EM>localip</EM>. It matches the IP which the client connected to.</P>
<P>Renamed <EM>myport</EM> to <EM>localport</EM>. It matches the port which the client connected to.</P>
+<P>Ported <EM>urllogin</EM> option from Squid 2.7, to match a regex pattern on the URL login field (if any).</P>
<P>The <EM>localip</EM>/<EM>localport</EM> differ from earlier releases where they matched a mix of
of an invalid IP and port 0, the client destination IP/port or the Squid listening IP/port.
This definition is now consistent across all modes of traffic received by Squid.</P>
-<P>The <EM>manager</EM> ACL requires adjustment to cover new cache manager access:
+<P>The <EM>manager</EM> ACL requires adjustment to cover new cache manager access. So it has now been
+built-in as a predefined ACL name matching URLs equivalent to the following regular expression:
<PRE>
- acl manager url_regex -i ^cache_object:// ^https?://[^/]+/squid-internal-mgr/
+ ^(cache_object://|https?://[^/]+/squid-internal-mgr/)
</PRE>
-</P>
+
+squid.conf containing the old manager definition can expect to see ACL type collisions.</P>
<DT><B>auth_param</B><DD>
<P>New options for Basic, Digest, NTLM, Negotiate <EM>children</EM> settings.
<DT><B>refresh_pattern</B><DD>
<P>New option <EM>max-stale=</EM> to provide a maximum staleness factor. Squid won't
serve objects more stale than this even if it failed to validate the object.</P>
+<P>Removed option <EM>ignore-no-cache</EM>. Its commonly desired behaviour is obsoleted
+by correct HTTP/1.1 Cache-Control:no-cache handling.</P>
<DT><B>reply_header_access</B><DD>
<P>Added support for custom response header names.</P>
<P>
<DL>
-<DT><B>acl</B><DD>
-<P><EM>urllogin</EM> option not yet ported from 2.6</P>
-<P><EM>urlgroup</EM> option not yet ported from 2.6</P>
-
<DT><B>broken_vary_encoding</B><DD>
<P>Not yet ported from 2.6</P>
<!doctype linuxdoc system>
<article>
-<title>Squid 3.2.3 release notes</title>
+<title>Squid 3.2.4 release notes</title>
<author>Squid Developers</author>
<abstract>
<sect>Notice
<p>
-The Squid Team are pleased to announce the release of Squid-3.2.3 for testing.
+The Squid Team are pleased to announce the release of Squid-3.2.4 for testing.
This new release is available for download from <url url="http://www.squid-cache.org/Versions/v3/3.2/"> or the <url url="http://www.squid-cache.org/Mirrors/http-mirrors.html" name="mirrors">.
<p>The cache manager is available under the path prefix /squid-internal-mgr/. For example
the URL http://example/com/squid-internal-mgr/menu will bring up the manager menu. This
means there are some configuration changes required to lock down manager access.
- The <em>manager</em> ACL needs changing to:
+ The <em>manager</em> ACL needs changing. A built-in definition is now used, equivalent
+ to the following regex pattern:
<verb>
- acl manager url_regex -i ^cache_object:// ^https?://[^/]+/squid-internal-mgr/
+ ^(cache_object://|https?://[^/]+/squid-internal-mgr/)
</verb>
<p>The manager prefix /squid-internal-mgr/ with no action attempts to load an optional
cache manager applications as their front page embedding all scripts, accessors or
redirects required for their initial GUI display.
+<p>MGR_INDEX file
+<itemize>
+ <item>should contain a complete HTML page, with optional client-side scripting.
+ <item>must not contain server-side scripting.
+ <item>will have macro substitution performed on it using the same macros as used by the error page tempates.
+</itemize>
+
<p>Version 3.2 of the CGI cache manager tool now presents XHR scripted probes to detect
proxies presenting these manager index pagess and provides direct HTTP/HTTPS web links
to those managers.
<p>The <em>localip</em>/<em>localport</em> differ from earlier releases where they matched a mix of
of an invalid IP and port 0, the client destination IP/port or the Squid listening IP/port.
This definition is now consistent across all modes of traffic received by Squid.
- <p>The <em>manager</em> ACL requires adjustment to cover new cache manager access:
+ <p>The <em>manager</em> ACL requires adjustment to cover new cache manager access. So it has now been
+ built-in as a predefined ACL name matching URLs equivalent to the following regular expression:
<verb>
- acl manager url_regex -i ^cache_object:// ^https?://[^/]+/squid-internal-mgr/
+ ^(cache_object://|https?://[^/]+/squid-internal-mgr/)
</verb>
+ squid.conf containing the old manager definition can expect to see ACL type collisions.
<tag>auth_param</tag>
<p>New options for Basic, Digest, NTLM, Negotiate <em>children</em> settings.
projects / thirdparty / squid.git / commitdiff
