+Changes to squid-3.2.0.2 (04 Sep 2010):
+
+ - Bug 3015: assertion failed: comm.cc:143: "ccb->active()"
+ - Support rotating logs from cachemgr and squidclient
+ - Support Kerberos authentication in squidclient
+ - Add manual page for negotiate_kerberos_auth
+ - Add helper ext_kerberos_ldap_group_acl to lookup Kerberos/NTLM group via LDAP
+ - Add tool 'purge' for management of UFS/AUFS/DiskD caches (experimental)
+ - Added log options %http::<bs and %icap::<bs
+ - Collapse HTCP cache_peer options into one setting
+ - Improved request smuggling attack detection. Tolerating valid benign HTTP
+ - ... and several HTTP/1.1 compliance improvements
+ - ... and all improvements in 3.1.7 and 3.1.8
+
Changes to squid-3.2.0.1 (03 Aug 2010):
- Port from 2.7: Logging infrastructure updates
- ... and a great many testing improvements
- ... and many documentation updates
+Changes to squid-3.1.8 (04 Sep 2010):
+
+ - Bug 3033: incorrect information regarding TOS
+ - Bug 3020: Segmentation fault: nameservers[vc->ns].vc = NULL
+ - Bug 3005,2972: Locate LTDL headers correctly (again)
+ - Bug 2872: leaking file descriptors
+ - Bug 2583: pure virtual method called
+ - Hardened DNS client against packet queue attacks
+ - Hardened HTTP request-line parser
+ - Several HTTP/1.1 support improvements
+ - Improved cross-compile support
+ - .. and several internal pointer safety fixes
+
Changes to squid-3.1.7 (23 Aug 2010):
- Regression Bug 3021: Large DNS reply causes crash
<!doctype linuxdoc system>
<article>
-<title>Squid 3.1.7 release notes</title>
+<title>Squid 3.1.8 release notes</title>
<author>Squid Developers</author>
<abstract>
<sect>Notice
<p>
-The Squid Team are pleased to announce the release of Squid-3.1.7
+The Squid Team are pleased to announce the release of Squid-3.1.8
This new release is available for download from <url url="http://www.squid-cache.org/Versions/v3/3.1/"> or the <url url="http://www.squid-cache.org/Mirrors/http-mirrors.html" name="mirrors">.
<itemize>
<item>The lack of some features available in Squid-2.x series. See the regression sections below for full details.
- <item>IPv6 split-stack support for Windows XP, MacOS X, OpenBSD and maybe others is not complete.
<item>CVE-2009-0801 : NAT interception vulnerability to malicious clients.
</itemize>
<p>Currently known issues which only depends on available developer time and may still be resolved in a future 3.1 release are:
<itemize>
- <item>An ongoing slow FD leak introduced somewhere during the Squid-3.0 cycle.
<item>Windows support is still largely missing.
<item>AIX support for building with the IBM compiler is broken.
</itemize>
<HTML>
<HEAD>
<META NAME="GENERATOR" CONTENT="LinuxDoc-Tools 0.9.65">
- <TITLE>Squid 3.2.0.1 release notes</TITLE>
+ <TITLE>Squid 3.2.0.2 release notes</TITLE>
</HEAD>
<BODY>
-<H1>Squid 3.2.0.1 release notes</H1>
+<H1>Squid 3.2.0.2 release notes</H1>
<H2>Squid Developers</H2>
<HR>
<HR>
<H2><A NAME="s1">1.</A> <A HREF="#toc1">Notice</A></H2>
-<P>The Squid Team are pleased to announce the release of Squid-3.2.0.1 for testing.</P>
+<P>The Squid Team are pleased to announce the release of Squid-3.2.0.2 for testing.</P>
<P>This new release is available for download from
<A HREF="http://www.squid-cache.org/Versions/v3/3.2/">http://www.squid-cache.org/Versions/v3/3.2/</A> or the
<A HREF="http://www.squid-cache.org/Mirrors/http-mirrors.html">mirrors</A>.</P>
<UL>
<LI>mswin_check_ad_group - ext_ad_group_acl - Check logged in users Group membership using Active Directory.</LI>
<LI>ip_user_check - ext_file_userip_acl - Restrict users to cetain IP addresses, using a text file backend.</LI>
+<LI>squid_kerb_ldap - ext_kerberos_ldap_group_acl - Check logged in Kerberos or NTLM users Group membership using LDAP.</LI>
<LI>squid_ldap_group - ext_ldap_group_acl - Check logged in users Group membership using LDAP.</LI>
<LI>mswin_check_lm_group - ext_lm_group_acl - Check logged in users Group membership using LanManager.</LI>
<LI>squid_session - ext_session_acl - Maintain a session cache of client identifiers (usually IP address).</LI>
<EM>concurrency=N</EM> previously called <EM>auth_param ... concurrency</EM> as a separate option.</P>
<P>Removed Basic, Digest, NTLM, Negotiate <EM>auth_param ... concurrency</EM> setting option.</P>
+<DT><B>cache_peer</B><DD>
+<P><EM>htcp-*</EM> options collapsed into <EM>htcp=</EM> taking an optional comma-separated list of flags.
+The old form is deprecated but still accepted.</P>
+
<DT><B>deny_info</B><DD>
<P>Support URL format tags. For dynamically generated URL in denial redirect.</P>
<P>Deprecated <EM>children=N</EM> in favor of <EM>children-max=N</EM>.</P>
<DT><B>logformat</B><DD>
+<P><EM>%>bs</EM> Number of HTTP-equivalent message body bytes received from the next hop.</P>
+<P><EM>icap::%>bs</EM> Number of message body bytes received from the ICAP server.</P>
<P><EM>%>lp</EM> Local TCP port used by transactions with http servers.</P>
<P><EM>%sn</EM> Unique sequence number per log line. Ported from 2.7</P>
<P><EM>%<eui</EM> EUI logging (EUI-48 / MAC address for IPv4, EUI-64 for IPv6)
<!doctype linuxdoc system>
<article>
-<title>Squid 3.2.0.1 release notes</title>
+<title>Squid 3.2.0.2 release notes</title>
<author>Squid Developers</author>
<abstract>
<sect>Notice
<p>
-The Squid Team are pleased to announce the release of Squid-3.2.0.1 for testing.
+The Squid Team are pleased to announce the release of Squid-3.2.0.2 for testing.
This new release is available for download from <url url="http://www.squid-cache.org/Versions/v3/3.2/"> or the <url url="http://www.squid-cache.org/Mirrors/http-mirrors.html" name="mirrors">.
<p><itemize>
<item>mswin_check_ad_group - ext_ad_group_acl - Check logged in users Group membership using Active Directory.
<item>ip_user_check - ext_file_userip_acl - Restrict users to cetain IP addresses, using a text file backend.
+ <item>squid_kerb_ldap - ext_kerberos_ldap_group_acl - Check logged in Kerberos or NTLM users Group membership using LDAP.
<item>squid_ldap_group - ext_ldap_group_acl - Check logged in users Group membership using LDAP.
<item>mswin_check_lm_group - ext_lm_group_acl - Check logged in users Group membership using LanManager.
<item>squid_session - ext_session_acl - Maintain a session cache of client identifiers (usually IP address).
projects / thirdparty / squid.git / commitdiff
