From: Amos Jeffries Date: Thu, 12 Apr 2012 13:42:36 +0000 (-0600) Subject: 3.2.0.17 X-Git-Tag: SQUID_3_2_0_17 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dad5203230fbbbd55ace819d3860be74eac2c04b;p=thirdparty%2Fsquid.git 3.2.0.17 --- diff --git a/ChangeLog b/ChangeLog index 93e749194e..7299d39e3f 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,15 @@ +Changes to squid-3.2.0.17 (12 Apr 2011): + + - Bug 3527: EUI compile errors on Mac OS X 10.5.8 PPC + - Bug 3509: kQueue compile error + - Bug 3505: crash in CbcPointer constructor + - Bug 3441: Part 3: Replace corrupted v1 swap.state with new v2 format. + - Bug 3397: do not mark connection as opened until after SYN-ACK + - Bug 3193: NTLM decoder truncating strings + - Windows FD handling polish and some fixes + - Solaris 9/10 various build fixes + - ... and some more code polish + Changes to squid-3.2.0.16 (07 Mar 2011): - Bug 3508: Correct DNS timeout handling. diff --git a/configure.ac b/configure.ac index d8a58e3ad2..a60fcde71f 100644 --- a/configure.ac +++ b/configure.ac @@ -3,7 +3,7 @@ dnl $Id$ dnl dnl dnl -AC_INIT([Squid Web Proxy],[3.2.0.16-BZR],[http://www.squid-cache.org/bugs/],[squid]) +AC_INIT([Squid Web Proxy],[3.2.0.17-BZR],[http://www.squid-cache.org/bugs/],[squid]) AC_PREREQ(2.61) AC_CONFIG_HEADERS([include/autoconf.h]) AC_CONFIG_AUX_DIR(cfgaux) diff --git a/doc/release-notes/release-3.2.html b/doc/release-notes/release-3.2.html index 0735c8f6a9..7eae49da98 100644 --- a/doc/release-notes/release-3.2.html +++ b/doc/release-notes/release-3.2.html @@ -2,10 +2,10 @@ - Squid 3.2.0.16 release notes + Squid 3.2.0.17 release notes -

Squid 3.2.0.16 release notes

Squid 3.2.0.17 release notes

Squid Developers

@@ -25,17 +25,18 @@ for Applied Network Research and members of the Web Caching community.

2.1 Fixed CVE-2009-0801 : NAT interception vulnerability to malicious clients. -
2.2 SMP scalability -
2.3 Helper Multiplexer -
2.4 Helpers On-Demand -
2.5 Helper Name Changes -
2.6 Multi-Lingual manuals -
2.7 Solaris 10 pthreads Support (Experimental) -
2.8 Surrogate/1.0 protocol extensions to HTTP -
2.9 Logging Infrastructure Updated -
2.10 Client Bandwidth Limits -
2.11 Better eCAP Suport -
2.12 Cache Manager access changes +
2.2 NCSA helper DES algorithm password limits +
2.3 SMP scalability +
2.4 Helper Multiplexer +
2.5 Helpers On-Demand +
2.6 Helper Name Changes +
2.7 Multi-Lingual manuals +
2.8 Solaris 10 pthreads Support (Experimental) +
2.9 Surrogate/1.0 protocol extensions to HTTP +
2.10 Logging Infrastructure Updated +
2.11 Client Bandwidth Limits +
2.12 Better eCAP Suport +
2.13 Cache Manager access changes

3. Changes to squid.conf since Squid-3.1

@@ -72,7 +73,7 @@ for Applied Network Research and members of the Web Caching community.

1. Notice

The Squid Team are pleased to announce the release of Squid-3.2.0.16 for testing.

The Squid Team are pleased to announce the release of Squid-3.2.0.17 for testing.

This new release is available for download from http://www.squid-cache.org/Versions/v3/3.2/ or the mirrors.

@@ -100,6 +101,7 @@ report with a stack trace.

The most important of these new features are:

Fixed CVE-2009-0801 : NAT interception vulnerability to malicious clients.
NCSA helper DES algorithm password limits
SMP scalability
Helper Multiplexer and On-Demand
Helper Name Changes

2.2 SMP scalability +

2.2 NCSA helper DES algorithm password limits +

Details in Advisory +SQUID-2011:2

The DES algorithm used by the NCSA Basic authentication helper has an +limit of 8 bytes but some implementations do not error when truncating +longer passwords down to this unsafe level.

This both significantly lowers the threshold of difficulty decrypting +captured password files and hides from users the fact that the extra bits +of their chosen long password is not being utilized.

The NCSA helper bundled with Squid will prevent passwords longer than 8 +characters being sent to the DES algorithm. The MD5 hash algorithm which +supports longer than 8 character passwords is also supported by this helper +and should be used instead.

2.3 SMP scalability

The new "workers" squid.conf option can be used to launch multiple worker @@ -176,7 +198,7 @@ worker customization in SMP mode. For details, search for "Conditional configuration" and "SMP-Related Macros" sections in squid.conf.documented.

2.3 Helper Multiplexer +

2.4 Helper Multiplexer

The helper multiplexer's purpose is to relieve some of the burden @@ -224,7 +246,7 @@ the reduction in direct helper spawned by Squid can result in a great reduction

2.4 Helpers On-Demand +

2.5 Helpers On-Demand

Traditionally Squid has been configured with a fixed number of helpers and started them during @@ -260,7 +282,7 @@ When client requests threaten to overload the running helpers an additional 2 wi of starting the maximum number of helpers will occur.

2.5 Helper Name Changes +

2.6 Helper Name Changes

To improve the understanding of what each helper does and where it should be used the helper binaries @@ -343,7 +365,7 @@ This helper has also gone through a version update and now uses more current Ber

2.6 Multi-Lingual manuals +

2.7 Multi-Lingual manuals

The man(8) and man(1) pages bundled with Squid are now provided online for all @@ -356,7 +378,7 @@ versions and beginning with 3.2 they are available in languages other than Engli This move begins the Localization of the internal administrator facing manuals.

2.7 Solaris 10 pthreads Support (Experimental) +

2.8 Solaris 10 pthreads Support (Experimental)

Automatic detection and use of the pthreads library available from Solaris 10

2.8 Surrogate/1.0 protocol extensions to HTTP +

2.9 Surrogate/1.0 protocol extensions to HTTP

The Surrogate extensions to HTTP protocol enable an origin web server to specify separate @@ -393,7 +415,7 @@ and for some uses desirable to receive external reverse-proxies Surrogate-Ca is required to prevent an unacceptable surrogate ID of 'localhost' being generated.

-
2.9 Logging Infrastructure Updated +
2.10 Logging Infrastructure Updated

The advanced logging modules introduced in Squid-2.7 are now available from Squid-3.2.
@@ -421,7 +443,7 @@ These logs are now created using an access_log line with the format "referrer" o They also now log all client requests, if there was no Referer or User-Agent header a dash (-) is logged.
-
2.10 Client Bandwidth Limits +
2.11 Client Bandwidth Limits

In mobile environments, Squid may need to limit Squid-to-client bandwidth @@ -453,14 +475,14 @@ response data from Squid. This delay may need to be lowered in high-bandwidth environments.
-
2.11 Better eCAP Suport +
2.12 Better eCAP Suport

Support for libecap version 0.2.0 has been added with this series of Squid. Bringing better support for body handling, and logging.
-
2.12 Cache Manager access changes +
2.13 Cache Manager access changes

The Squid Cache Manager has previously only been accessible under the cache_object:// diff --git a/doc/release-notes/release-3.2.sgml b/doc/release-notes/release-3.2.sgml index 74f4ba3aaa..8cf3561e51 100644 --- a/doc/release-notes/release-3.2.sgml +++ b/doc/release-notes/release-3.2.sgml @@ -1,6 +1,6 @@
-Squid 3.2.0.16 release notes +Squid 3.2.0.17 release notes Squid Developers @@ -13,7 +13,7 @@ for Applied Network Research and members of the Web Caching community. Notice
-The Squid Team are pleased to announce the release of Squid-3.2.0.16 for testing. +The Squid Team are pleased to announce the release of Squid-3.2.0.17 for testing. This new release is available for download from or the .