-
Notifications
You must be signed in to change notification settings - Fork 10
/
ChangeLog
3979 lines (3770 loc) · 187 KB
/
ChangeLog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Backed out:
- Bug #1893: Variant invalidation on PURGE and HTCP CLR
Incomplete:
- Use the client's DNS lookup if our DNS lookup fails on
transparent requests.
- Bug #2160: Cache hits on objects with more than 4KB headers
Done:
- New cache_peer connect-fail-limit=NN option to tune how Squid
attempts to reconnect to failing peers.
- Debug tool to trigger running named events NOW
- request_body_max_size now acl driven
- Delayed delay pool assignment to catch big downloads of unknown
lenght
- Internal URL rewriter support
- Stricter MemPool debug mode detecting double free and filling freed
objects with garbage
- Optimization using reference counted memory cache to avoid repeated
copying of data.
- Foreground rebuilding now finishes the entire rebuild before it
starts accepting requests.
- Bug 2950: HTTP responses with no Date, Last-modified or expired can
now be cached (given an appropriate refresh_pattern). Previously we
were not caching them in case of an infinite loop in cache farms:
however Squid adds Date: headers now which remove that concern.
Pending backport:
Changes to squid-2.7.STABLE9 (15 March 2010)
- 2.7.STABLE8 failed to compile with OpenSSL 0.9.8 on some systems
- failure to detect certain system libraries on some systems
resulting in compilation errors
Changes to squid-2.7.STABLE8 (10 March 2010)
- Bug #2458: reply_body_max_size incorrectly documented
- Bug #2858: Segment violation in HTCP
- Bug #2773: Segfault in RFC2069 Digest authantication
- 64-bit filesize issue in squidclient if trying to post a file > 2GB
- Improve %nn parser to better deal with certain odd %nn sequences
- Segmentation fault if failed to open cache.log
- Bug #2819: const correctness errors in dns_internal.c
- Handle DNS header-only packets as invalid. (CVE-2010-0308)
- Windows port: Updated mswin_ad_group native helper to version 2.1
- Cosmetic change to keep GCC happy
- Bug #2678 - storeurl_rewrite does not play nicely with vary
- Bug #2861 - only-if-cached request blocks if it collapsed into
another request
- Use libcap functions instead of raw kernel interface
- No need to sync the store on -k rotate, but instead it needs to be
done in reconfigure
- const correctness in OpenSSL initialization
- Rework the http digest auth parser
Changes to squid-2.6.STABLE24 (8 March 2010)
- Bug #2365: cachemgr.cgi fails to HTML encode config dumps properly
- Bug #2458: reply_body_max_size incorrectly documented
- Bug #2858: Segment violation in HTCP
- Improve %nn parser to better deal with certain odd %nn sequences
- Segmentation fault if failed to open cache.log
- Handle DNS header-only packets as invalid. (CVE-2010-0308)
- Cosmetic change to keep GCC happy
- Bug #2773: Segfault in RFC2069 Digest authantication
- Bug #2819: const correctness errors in dns_internal.c
- Use libcap functions instead of raw kernel interface
- No need to sync the store on -k rotate, but instead it needs to be
done in reconfigure
- const correctness in OpenSSL initialization
- Rework the http digest auth parser
Changes to squid-2.6.STABLE23 (17 September 2009)
- Bug #2494: Fix tproxy url in configure
- Add in some better documentation for override-expire.
- Fix Bug #2661 - Solaris /dev/poll support broken with EINVAL
- Clarify external_acl_type %{Header} sightly
- Cosmetic change to make GCC happy
- Windows port: Fix PSAPI.DLL usage, is always available on Windows NT
and later
- Windows port: Added support for Windows 7, Windows Server 2008 R2
and later
- The debug mode option '-d' was not documented in LDAP helpers usage
message
- Windows port: Added a note about installation on Windows Vista and
later
- Bug #2642: Remove duplicate peerMonitorInit() on reconfigure
- Bug #2672: cacheMemMaxSize 32-bit overflow during snmpwalk
- Accept PUT/POST requests without an entity-body
- Bug #2369: squid traffic counter 32-bit overflow
- Bug #2080: wbinfo_group.pl - false positive under certain conditions
- Bug #2739: DNS resolver option ndots can't be parsed from
resolv.conf
- Bug #2541: Hang in 100% CPU loop while extacting header details
using a delimiter other than comma (external_acl_type,
access_log_format, external_refresh_check)
- Bug #2768 - squid_ldap_group argument parsing error
Changes to squid-2.7.STABLE7 (17 September 2009)
- Bug #2661 - Solaris /dev/poll support broken with EINVAL
- Clarify external_acl_type %{Header} documentation slightly
- Bug #2482: Remove mem_obj->old_entry in async code to avoid deep ctx
errors
- GCC-4.x cleanups
- Bug #2605: Don't call setsid() on helper childs when running in
daemon mode
- Windows port: Fix PSAPI.DLL usage, is always available on Windows NT
and later
- Windows port: Added support for Windows 7, Windows Server 2008 R2
and later
- Bug #2602: increase MAX_URL to 8192
- The debug mode option '-d' was not documented in LDAP helpers usage
message
- Windows port: Added a note about installation on Windows Vista and
later
- Bug #2642: Remove duplicate peerMonitorInit() on reconfigure
- Bug #2515: Final chunk parsing errors on FreeBSD6+
- Bug #2647: Reprioritise override-* and stale-while-revalidate
- Windows port: Fix improper access permissions to registry and DNS
parsing from registry
- Windows port: Fix getservbyname() usage abuse.
- Bug #2672: cacheMemMaxSize 32-bit overflow during snmpwalk
- Bug #2691: store_url memory leak
- Accept PUT/POST requests without an entity-body
- Plug request_t + HttpStateData memory leak on PUT/POST requests with
early response
- Bug #2710: squid_kerb_auth non-terminated string
- Bug #2369: squid traffic counter 32-bit overflow
- Bug #2080: wbinfo_group.pl - false positive under certain conditions
- Bug #2739: DNS resolver option ndots can't be parsed from
resolv.conf
- Windows port: fix mswin_negotiate_auth.exe crash when executing a
LocalCall authentication with verbose deBug #enabled
- Add 0.0.0.0 as an to_localhost address
- Windows port: Update mswin_check_ad_group to version 2.0
- Windows port: There is no "-P" command line option into
mswin_check_ad_group helper.
- Correct Valgrind mempool protection
- Bug #2451: Correct length handling on 304 responses
- Bug #2541: Hang in 100% CPU loop while extacting header details
using a delimiter other than comma (external_acl_type,
access_log_format, external_refresh_check)
- Bug #2768 - squid_ldap_group -K argument parsing error
Changes to squid-2.7.STABLE6 (4 February 2009)
- Bug #2494: Fix tproxy url in configure
- Correct latency measurements
- Correct upgrade_http0.9 example
- Correct parsing of invalid http version numbers
- Crossreference authenticate_ip_shortcircuit_access and
authenticate_ip_shortcircuit_ttl
- Add in some better documentation for override-expire.
Changes to squid-2.6.STABLE22 (19 October 2008)
- Bug #2396: Correct the opening of the PF device file.
- Make --with-large-files and --with-build-envirnment=default play
nice together
- Workaround for Linux-2.6.24 & 2.6.25 netfiler_ipv4.h include header
__u32 problem
- Make dns_nameserver work when using --disable-internal-dns on glibc
based systems
- Bug #2426: Increase negotiate auth token buffer size
- Bug #2427: squid_ldap_group -h reports the old % codes for -f
- Bug #2477: swap.state permission issues if crashing during "squid -k
reconfigure"
- Windows port: Fix build error using latest MinGW runtime.
Changes to squid-2.7.STABLE5 (17 October 2008)
- Bug #2439: configuration file contains non-ASCII characters
- Bug #2441: Shut down store url rewrite helpers on squid -k
reconfigure
- foreground rebuild should do all of the rebuilding before Squid
accepts requests.
- Bug #2464: assertion failed: sc->new_callback == NULL at
store_client.c:190
- Bug #2394: add upgrade_http0.9 option making it possible to disable
upgrade of HTTP/0.9 responses
- Bug #2426: Increase negotiate auth token buffer size
- Bug #2468: Limit stale-if-error to 500-504 responses
- Bug #2477: swap.state permission issues if crashing during "squid -k
reconfigure"
- Bug #2430: Old headers still returned after a cache validation if
the request triggering the cache validation was itself a
If-Modified-Since request.
- Bug #2481: Don't set expires: now in generated error responses
- Windows port: Fix build error using latest MinGW runtime.
Changes to squid-2.7.STABLE4 (8 August 2008)
- Bug #2387: The calculation of the number of hash buckets need to
account for the memory size, not only disk size
- Bug #2393: DNS requests retried indefinitely at full speed on failed
TCP connection
- Bug #2393: DNS retransmit queue could get hold up
- Correct socket syscalls statistics in commResetFD()
- Plug a small "squid -k reconfigure" race in the new round-robin
counter management
- Windows port: fix typo in handling of notification of IP
address changes
- Document the "zph_mode option" setting, got left out when merging
the zph patches
- Bug #2396: Correct the opening of the PF device file.
- Make --with-large-files and --with-build-envirnment=default play
nice together
- Bug #2407: Spelling error in http_port tcpkeepalive option
- Bug #2408: assertion failed: forward.c:529: "fs"
- Bug #2414: assertion failed: forward.c:110: "!EBIT_TEST(e->flags,
ENTRY_FWD_HDR_WAIT)"
- Workaround for Linux-2.6.24 & 2.6.25 netfiler_ipv4.h include header
__u32 problem
- Make dns_nameserver work when using --disable-internal-dns on glibc
based systems
- Make clientCacheHit bail out gracefuly if hitting an aborted object
- Bug #2406: access.log logs rewritten URL and strip_query_terms
ineffective
- More changes to deal properly with aborted requests
- Bug #2427: squid_ldap_group -h reports the old % codes for -f
Changes to squid-2.6.STABLE21 (27 June 2008)
- Bug #2350: Bugs in Linux kernel capabilities code
- Bug #2241: weights not applied properly in round-robin peer
selection
- Off by one error in DNS label decompression could cause valid DNS
messages to be rejected
- logformat docs contain extra whitespace
- Reject ridiculously large ASN.1 lengths
- Fix SNMP reporting of counters with a value > 0xFF80000
- Correct spelling of WCCPv2 dst_port_hash to match the source
- Plug some "squid -k reconfigure" memory leaks. Mostly SSL related.
- Bug #1993: Memory leak in http_reply_access deny processing
- Bug #2122: In some situations collapsed_forwarding could leak
private information
- Bug #2376: Round-Robin becomes unbalanced when a peer dies and comes
back
- Bug #2387: The calculation of the number of hash buckets need to
account for the memory size, not only disk size
- Bug #2393: DNS requests retried indefinitely at full speed on failed
TCP connection
- Bug #2393: DNS retransmit queue could get hold up
- Correct socket syscalls statistics in commResetFD()
Changes to squid-2.7.STABLE3 (25 June 2008)
- Byg #2376: Round-Robin peer selection becomes unbalanced when a
peer dies and comes back
- Bug #2365: cachemgr.cgi fails to HTML encode config dumps properly
- Bug #2122: In some situations collapsed_forwarding could leak
private information
- Bug #2388: acl documentation cleanup
- Report the cache_peer name instead of hostname
- Bug #2378: Duplicate paths in FwdServers
- Bug #1993: Memory leak in http_reply_access deny processing
- Plug some "squid -k reconfigure" memory leaks. Mostly SSL related.
- wccp2 sevice flags documentation correction for dst_port_hash
- Fix SNMP reporting of counters with a value > 0xFF800000
- Reject ridiculously large ASN.1 lengths
- logformat docs contain extra whitespace
- Off by one error in DNS label decompression could cause valid DNS
messages to be rejected
- Bug #2241: weights not applied properly in round-robin peer
selection
- Bug #2283: Properly abort invalid/truncated messages
- Bug #2192: http_port ... vport broken by recent changes in how
accelerator mode deals with port numbers
- Fix build error on Solaris using gcc and --with-large-files
- Windows port: add support for crypt function
- Bug #2372: Segmentation fault if netdb_filename could not be written
- Windows port: add option for control of IP address changes
notification in squid.conf
- Windows port: always shutdown winsocks on program termination
- Windows port: configure enhancements on MinGW and Cygwin
- Windows port: fix build error on Cygwin
- Bug #2366: Fix assertion/FD leak during logfile_mod_daemon rotate.
- Release notes correction: delay_body_max_size is not in 2.7 (2.8
feature) and bug #219 delay pools on -k reconfigure has been fixed
Changes to squid-2.7.STABLE2 (31 May 2008)
- Resolved merge conflict in Bug #219: Reassign delay pools after
reconfigure
- Back out incomplete patch for Bug #1893: Variant invalidation on
PURGE and HTCP CLR
- Bug #2350: Linux Capabilities version mismatch causing startup crash
on newer kernels
- Fix build error on Windows: in_addr_t is not available.
- Bug #2360: Move the SSL options before https_port so it gets
inherited proper
Changes to squid-2.7.STABLE1 (27 May 2008)
- General code tidyups of HTTP parser and related optimizations
- Simple perl library and script for processing access.log files
- Optimization to only parse response headers once, reusing the
already parsed headers when building the client reply.
- Kill the psuedo-support for wais. Was never really implemented.
- Clean up use of httpReplySetHeaders to be consistent across the
code, and remove the unneeded http_version argument.
- Simplified epoll comm loop
- Strengthen the HTTP protocol parser further wrt integer errors
- Change cachemgr filedescriptors timeout column to seconds
- Clean up X-Forwarded-For acl_uses_indirect_client to make most
acls behave
- act-as-origin http_port option, making Squid act as if it was
the origin server, and related X-Cache-Age and X-Origin-Date headers
- Rename cache_dir option read-only to no-store
- new logformat tag for logging the outgoing IP address
(tcp_outgoing_address)
- logformat %rp logging the URL-Path only (excluding hostname)
- external_acl_type %URI tag for referencing the complete requested
URI
- Various old an unused pieces of code trimmed
- max_filedescriptor squid.conf option
- Clean up filedescriptor limitations, and handle comm loop
restrictions proper
- -I command line option to accept open socket on stdin
- support for FreeBSD and Linux accept filters
- Changed most temporary & forwarding errors to return 504 Gateway
Timeout
- Bug #1843: multicast-siblings cache_peer option for optimising
multicast ICP relations
- cache_peer idle=n option to specify a minimum number of idle
connections to keep open
- http_port allow-direct option to allow direct forwarding in
accelerator mode
- Implementation of an external logfile daemon (ie, logging to
a pipe); UDP logging (based in part on work done by Tim Starling)
- Optimizations to avoid zero'ing some buffers
- Add "%sn" - a sequence number - to the customlog format
- Internal cleanups and minor reorganisations
- The shipped icp_access and htcp_access rules changed to only
allow local network
- url_rewriter interface extended with key=value pairs
- Use native MD5 implementation if available. Use --without-system-md5
to disable.
- Enable squid to lookup /etc/services for named peer ports.
- store URL rewriting/mapping support to tell Squid when the exact
same object exists under multiple requested URLs.
- Bug #7: Update headers on 304 responses
- Asyncronous cache validation support
- external_refresh_check helper, allowing program control over cache
refreshes
- ignore_ims_on_miss directive, making Squid ignore If-Modified-Since
and If-None-Match on cache misses
- Primitive HTTP/1.1 support, mainly targeted for reverse proxies
- Cache-Control stale-while-revalidate and stale-if-error directives
- Bug #1893: Variant invalidation on PURGE and HTCP CLR
- netdb_filename directive to specify location of netdb state file
- Windows port: Handle notification of IP address changes for dial-up
connections
- default cache rules removed, allowing caching of query and cgi-bin
responses
- Bug #2153: Use the cache_peer name in CARP hashing to support
multiple peers on the same host
- myportname ACL for matching the accepting port name
- Make visible_hostname a soft error
- Ability to cache authentication based on source IP, mainly to
work around NTLM inefficiencies, but other uses possible.
- squid.conf include support
- squid_ldap_group option to strip kerberos realm from username
- Bug #1888: Add incoming_rate directive to control how often to
check incoming connections
- Bug #2263: Custom log formats fail to log file sizes >2GB
properly on 32-bit platforms
- Fix stripping NT domain in squid_ldap_group
- Removed obsolete advanced comm tuning knobs
- Bug #2192: Confusing and inconsistent relations between accelerator
mode options
- TCP keepalive support
- Support for tos/priority marking of cache hits (zph)
- Make --with-large-files try to build 64-bit if possible
- Windows port: allow build of squid_session on Windows
- Updated mswin_check_lm_group documentation
- Bug #2350: Memory allocation problem in restoreCapabilities()
- Bug #1955: Clarify refresh_pattern override-expire option
- Correct Via response header when seeing an HTTP/0.9 response
- Bug #219: Reassign delay pools after reconfigure
- Bug #2223: flexible handling of x-forwarded-for
Changes to squid-2.6.STABLE20 (25 Apr 2008)
- Bug #2263: Custom log formats fail to log file sizes >2GB properly
on 32-bit platforms
- Fix stripping NT domain in squid_ldap_group
- Bug #2278: Cache-Control: max-stale=0 forwarded wrongly as max-stale
(without delta)
- Bug #2283: Fails to parse chunked encoding using chunk extensions
- Bug #420: Deal properly with empty list HTTP header members
- Windows Server 2008 support
- Bug #1886: tcp_outgoing_address acl doesn't work with indirect
source address (follow-x-forwarded-for)
- Bug #2296: Stuck in 100% CPU when fetching an corrupt peer digest
- Add support for the resolv.conf domain directive, and also
automatically derived default domain
- minimum_icp_query_timeout directive
- Bug #2329: Range header ignored on HIT
Changes to squid-2.6.STABLE19 (19 Mar 2008)
- Fix tcp_outgoing_address example config to match its description
- Bug #2198: assertion failed sc != NULL when using peer monitor
function
- Fix missing default disk store type into QUICKSTART example.
- Bugzilla #761 : Handle recursive completion operations in diskd.
- documentation bugfix for tcp_outgoing_tos directive
- Sort cache list in wccpv2 to ensure a consistent hash allocation
across all services
- Updated Ukrainan error pages
- Compile error in squid_kerb_auth under Mac OS X 10.5.2
- squid_radius_auth failed ro process more than 256 requests
- Clarified description of 'cache_vary' directive
- Make range_offset_limit 0 disable local range processing as
documented, even if the first range starts at 0
Changes to squid-2.6.STABLE18 (10 Jan 2008)
- Fix 2 assertion failures related to the fix for SQUID-2007:2
- GPL license cleanup to GPLv2 or later. One file in edir_digest_auth
was GPLv2 only, now replaced with a GPLv2 or later licensed vesion.
- Minor cleanups to make certain 64-bit platforms happier
- Several Digest authentication bugs fixed wich was causing random
authenitcation popups or failures.
- --with-valgrind-debug updated for valgrind-3.3.0.
Changes to squid-2.6.STABLE17 (26 Nov 2007)
- Fix compile error with old GCC 2.x or other ANSI-C compilers before
C99
- Mention the login= cache_peer option in release notes
- Fix bad cache_peer example in squid.conf
- Bug #2086: Fix a compile-time memory corruption error causing cf_gen
to fail
- Bug #2048: Clarify high_memory_warning usage
- Reject DNS responses which result in no data
- Fix version number in configuration manual
- Move cache and request/reply_header_max_size to their proper
sections
- Bug #2088: sbrk statistics broken when process size >2GB
- Move logopen() much earlier to have fatal startup errors sent to the
proper syslog facility
- Fix HTTP/0.9 responses
- Correct bad example config for tos_outgoing_tos
- Fix grammar in description of mail_program squid.conf option
- Ignore Content-Length in chunked responses instead of rejecting the
response as invalid
- Documented that http_port no longer have a default
- Cleanup of cache digest documentation
- Make aufs store rebuilding back off a little if I/O load too high
- Bug #2100: Respect DNS ttl=0
- Update udp_(incoming|outgoing)_address documentation to reflect
current bahaviour.
- Update HTCP documentation
- Document the overlapping helper request format
- Change priority of proxy auth and extacl provided username in
login=*:pass
- pack header entries on cache updates
- Make squid_db_auth reopen the database connection on each query by
default
- Improve helper debug ouput, including the channel number
- Update cachePeerEntry MIB description to mention what is used as
index key
- Import squid_radius_auth for authenticating to RADIUS
Changes to squid-2.6.STABLE16 (5 Sep 2007)
- Test for sys/capability.h linux include file to avoid failing on
linux systems missing libcap
- Release private objects on cache rebuild
- Segfault in clientBuildReplyHeader when http->entry == NULL
- Bug #2072: digest_pw_auth fails when using plaintext passwords
- Bug #2073: assertion failed: client_side.c:4175: "buf != NULL ||
!conn->body.request on POST
- Adjust default pconn timeouts to avoid shutting down connection while
child sends request
- Bug #1980: cache_peer monitortimeout not working
- Bug #1882: Parent responses are not cached if sibling returns 504
- More squid.conf reordering to get the dependencies between options
sorted proper
Changes to squid-2.6.STABLE15 (31 Aug 2007)
- The select() I/O loop got broken by the /dev/poll addition
(2.6.STABLE14)
- Bug #2017: Fails to work around broken servers sending just the HTTP
headers
- Bug #2023: Compile error with old GCC 2.x or other ANSI-C compilers
before C99
- squid.conf.default updated and reorganised in more sensible groups
- correct and document the syslog access_log format
- Armenian error pages translation
- digest_ldap_helper usage help updated
- Bug #1560: ftpSendPasv: getsockname(-1,..): (9) Bad file descriptor
- Improve delay pools in low traffic environment by checking timeouts
at a steady 1 second interval even when there is not much activity
- Don't request authentication on transparently intercepted
connections
- Cleanup linux capabilities for tproxy
- Bug #2003: 'via' config directive doesn't affect response headers
- Bug #1902: Adds Numeric Hit and invalid request counters to IP Cache
- Add missing $|=1 to squid_db_auth
- Bug #2050: Persistent connection dropped if cache has no
Content-Length
- Verify the URL on memory cache hits
- Bug #2057: NTLM stop work in messengers after upgrade to 2.6.STABLE14
- Bug #1972: Squid sets peers to down state when they are in fact
working.
- potential segmentation fault in storeLocateVary()
- Bug #2066: chdir after chroot
- Windows port: Fix compiler warnings when building Squid as
application (not Windows service mode)
- Spelling correction of received
Changes to squid-2.6.STABLE14 (15 Jul 2007)
- squid.conf.default cleanup to have options in their proper sections.
- documentation correction in the refresh_pattern ignore-auth option
- URI-escaping not uses the recommended upper-case hex codes
- refresh_pattern min-age 0 correted to really mean 0, and not 1 second
- Always use xisxxxx() Squid defined macros instead of ctype
functions.
- Kerberos SPNEGO/Negotiate helper for the negotiate scheme
- Database basic auth helper using Perl DBI to connect to most SQL DBs
- Solaris /dev/poll network I/O support
- configure fixes to make cross compilation somewhat easier
- Removed incorrect -a reference from http_port documentation
- Bug #1900: Double "squid -k shutdown" makes Squid restart again
- Bug #1968: Squid hangs occasionally when using DNS search paths
- Novell eDirectory digest auth helper (digest_edir_auth)
- Bug #1130: min-size option for cache_dir
- POP3 basic auth helper querying a POP3 server
- Cosmetic squid_ldap_auth fixes from Squid-3
- Bug #1085: Add no-wrap to cache manager HTML tables
- Automatically restart if number of available filedescriptors becomes
alarmingly low, preventing a situation where Squid would otherwise
permanently stop processing requests.
- Bug #2010: snmp_core.cc:828: warning: array subscript is above
array bounds
- Deal better with forwarding loops
Changes to squid-2.6.STABLE13 (11 May 2007)
- Make sure reply headers gets sent even if there is no body available
yet, fixing RealMedia streaming over HTTP issues.
- Undo an accidental name change of storeUnregisterAbort.
- Kill an ancient malplaced storeUnregisterAbort call from ftp.c
- Bug #1814: SSL memory leak on persistent SSL connections
- Don't log ECONNREFUSED/ECONNABORTED accept failures in cache.log
- Cosmetic fix: added missing newline in WCCPv2 configuration dump.
- Ukrainan error messages
- Convert various error pages from DOS to UNIX text format
- Bug #1820: COSS assertion failure t->length == MD5_DIGEST_CHARS
- Clarify the max-conn=n cache_peer option syntax slightly
- Bug #1892: COSS segfault on shutdown
- Windows port: fix undefined ECONNABORTED
- Make refreshIsCachable handle ETag as a cache validator, not
only last-modified
- in_port_t is not portable, use unsigned short instead
- Fix fs / auth / snmp dependencies
- Portability: statfs() may reqire #include <sys/statfs.h>
Changes to squid-2.6.STABLE12 (20 Mar 2007)
- Assertion error on TRACE
Changes to squid-2.6.STABLE11 (17 Mar 2007)
- Bug #1915: assertion failed: client_side.c:4055: "buf != NULL ||
!conn->body.request"
- Handle garbage helper responses better in concurrent protocol format
- Fix kqueue when overflowing the changes queue
- Make sure the child worker process commits suicide if it could
not start up
- Don't log short responses at debug level 1
- Fix bswap16 & bwsap32 error on NetBSD
- Fix collapsed_forwarding for non-GET requests
Changes to squid-2.6.STABLE10 (4 Mar 2007)
- Upgrade HTTP/0.9 responses to our HTTP version (HTTP/1.0)
- various diskd bugfixes
- In the access.log hierarchy field log the unique peer name
instead of the host name
- unlinkdClose() should be called after (not before) storeDirSync()
- CLEAN_BUF_SZ was defined, but never used anywhere
- logging HTTP-request size
- Fix icmp pinger communication on FreeBSD and other not supporing
large dgram AF_UNIX sockets
- Release objects on swapin failure
- Bug #1787: Objects stuck in cache if origin server clock in future
- Bug #1420: 302 responses with an Expires header is always cached
- Primitive support for HTTP/1.1 chunked encoding, working around
broken servers
- Clean up relations between TCP probing and DNS checks of peers with
no known addresses.
- Fix a minor HTML coding error in ftp directory listings with // in
the path
- Bug #1875, #1420. Cleanup of refresh logics when dealing with
non-refreshable content
- Gopher cleanups and bugfixes
- Negotiate authentication fixed again. Broken since STABLE7 by the
patch for Bug #1792.
- Bug #1892: COSS tries to shut down the same directory twice on exit
- Bug #1908: store*DirRebuildFromSwapLog() ignores some SWAP_LOG_DEL
entries
- Added support for Subversion HTTP request methods MKACTIVITY,
CHECKOUT and MERGE.
Changes to squid-2.6.STABLE9 (24 Jan 2007)
- Bug #1878: If-Modified-Since broken in 2.6.STABLE8
- Bug #1877 diskd bug in storeDiskdIOCallback()
Changes to squid-2.6.STABLE8 (21 Jan 2007)
- Bug #1873: authenticateNTLMFixErrorHeader: state 4.
- Document the https_port vhost option, useful in combination with
a wildcard certificate
- Document the existence of connection pinning / forwarding of NTLM
auth and a few other features overlooked in the release notes.
- Spelling correction of the ssl cache_peer option
- Add back the optional "accel" http_port option. Makes accelerator
mode configurations easier to read.
- Bug #1872: Date parsing error causing objects to get unexpectedly
cached.
- Cleanup to have the access.log tags autogenerated from enums.h
- Bug #1783: STALE: Entry's timestamp greater than check time. Clock
going backwards?
- Don't update object timestamps on a failed revalidation.
- Fix how ftp://user@host URLs is rendered when Squid is built with
leak checking enabled
Changes to squid-2.6.STABLE7 (13 Jan 2007)
- Windows port: Fix intermittent build error using Visual Studio
- Add missing tproxy info from the dump of http port configuration
- Bug #1853: Support for ARP ACL on NetBSD
- clientNatLookup(): fix wrong function name in debug messages
- Convert ncsa_auth man page from DOS to Unix text format.
- Bug #1858: digest_ldap_auth had some remains of old hash format
- Correct the select_loops counter when using select(). Was counted twice
- Clarify the http_port vhost option a bit
- Fix cache-control: max-stale without value or bad value
- Bug #1857: Segmentation fault on certain types of ftp:// requests
- Bug #1848: external_acl crashes with an infinite loop under high load
- Bug #1792: max_user_ip not working with NTLM authentication
- Bug #1865: deny_info redirection with authentication related acls
- Small example on how to use the squid_session helper
- Bug #1863: cache_peer monitorurl, monitorsize and monitorinterval not working properly
- Clarify the transparent http_port option a bit more
- Bug #1828: squid.conf docutemtation error for proxy_auth digest
- Bug #1867: squid.pid isn't removed on shutdown
Changes to squid-2.6.STABLE6 (12 Dec 2006)
- Bug #1817: Assertion failure assert(buflen >= copy_sz) in htcp.c htcpBuildAuth()
- Add client source port logformat tag >p
- Cleanup of transparent & accelerator mode request parsing to untangle the firewall dependencies a bit
- Bug #1799: Harmless 1 byte buffer overflow on long host names in /etc/hosts
- automake no longer recommends mkinstalldirs. Removed.
- Only use crypt() if it's available, allowing ncsa_auth to be built
on platofms without crypt() support.
- Windows port documentation updates
- Bug #1818: Assertion failure assert(e->swap_dirn >= 0) in fs/coss/store_dir_coss.c storeCoss_DeleteStoreEntry
- Bug #1117: assertion failed: aufs/store_dir_aufs.c:642: "rb->flags.need_to_validate"
- Remove extra newline in redirect message sent by deny_info http://... aclname
- Bug #1805: assertion failed: StatHist.c:195: "D[i] >= 0"
- Clarify the external_acl_type helper format specification and some defaults
- Add support for the weight= parameter to round-robin peers
- Bug #1832: Error building squid-2.6.STABLE5 using --enable-truncate
- Convert snmpDebugOid to use a temporary String object instead of strcat
- Document that proxy_auth also accepts -i for case-insensitive operation
- Remove malloc/free of temporary buffer in time parsing routines.
- Reduce memory allocator pressure by not continually allocating client-side read buffers
- Accept large dates >2^31 on 64-bit platformst. Seen for example in the Google logo.
- Convert the connStateData->chr single link list to a normal dlink_list for clarity.
- Bug #1584: Unable to register with multiple WCCP2 routers
- Fix the WCCPv2 mask assignment code to not crash as the value assignments are built.
- Bug #439: Multicast ICP peering is unstable and considers most peers dead
- Bug #1801: NTLM authentication ends up in a loop if the server responds with a retriable error
- Bug #1839: Cosmetic debug message cleanup in peerHandleHtcpReply.
- Bug #1840: Disable digest and netdb queries to multicast peers
- Bug #1641: assertion failed: stmem.c:149: "size > 0" while processing certain Vary objects
- Fix build errors when using latest MinGW Windows environment
Changes to squid-2.6.STABLE5 (3 Now 2006)
- Bug #1776: 2.6.STABLE4 aufs fails to compile if coss isn't enabled
- COSS improvements and cleanups
- SNMP linking issue resolved, enabling SNMP support to be build in all platforms
- Bug #1784: access_log syslog results in blanks syslog lines between every entry
- Bug #1719: Incorrect error message on invalid cache_peer specifications
- Bug #1785: Memory leak in handling of negatively cached objects
- Bug #1780: Incorrect Vary processing in combination with collapsed_forwarding
- Bug #1782: Memory leak in ncsa_auth on password changes
- Suppress some annoying coss startup messages raising the debug level to 2.
- Clarify the external_acl_helper concurrency= change.
- aioDone() could be called twice from aufs and from coss (when using AIOPS) during shutdown.
- Bug #1794: Accept 00:00-24:00 as a valid time specification even if redundand and the same as 00:00-23:59
- Bug #1795: Theoretical memory leak in storeSetPublicKey
- Removing port 563 from the default SSL_ports and Safe_ports ACLs
- Bug #1724: Automatically enable Linux Netfilter support with --enable-linux-tproxy.
- Bug #1800: squid -k reconfigure crash when using req/rep_header acls
- Clarify the select/poll/kqueue/epoll configure --enable/disable options
- Bug #1779: Delay pools fairness when multiple connections compete for bandwidth
- Bug #1802: Crash on exit in certain conditions where cache.log is not writeable
- Bug #1796: Assertion error HttpHeader.c:914: "str"
- Bug #1790: Crash on wccp2 + mask assignement + standard wccp service
- Silence harmless gcc compile warning.
- Clean up poll memory on shutdown
- Ported select, poll and win32 to new comm event framework
- Windows port: Correctly identify Windows Vista and Windows Server Longhorn
- Added a basic comm_select_simple comm loop only requiring minimal POSIX compliance.
- Safeguard from kb_t counter overflows on 32-bit platforms
Changes to squid-2.6.STABLE4 (23 Sep 2006)
- Bug #1736: Missing Italian translation of ERR_TOO_BIG error page
- Windows port enhancement: added native exception handler with signal emulation
- Fix the %un log_format tag again. Got broken in 2.6.STABLE2
- Fix Squid crash when using %a in ERR_INVALID_REQ and ERR_INVALID_URL error messages.
- Bug #212: variable %i always 0.0.0.0 in many error pages
- Bug #1708: Ports in ACL accepts characters and out of range
- Bug #1706: Squid time acl accepts invalid time range.
- Fix another harmless fake_auth compiler warning on gcc 4.1.1 x86
- Fix an harmless snmp_core.c compiler warning on gcc 4.1.1 x86
- Bug #1744: squid-2.6.STABLE3 - fakeauth_auth crashing on certain requests
- Bug #1746: Harmless off by one overrun in ncsa_auth md5 password validation
- Bug #1598: start_announce cannot be disabled
- Periodically flush cache.log to disk when "buffered_logs on" is set
- Numerous COSS improvements and fixes
- Windows port: merge of MinGW support
- Windows port: Merged Windows threads support into aufs
- Bug #1759: Windows port cachemgr.cgi attempts to write to file system root directory
- Numerous portability fixes
- Various minor statistics cleanup on 64-bit hosts with more than 4GB of memory
- Bug #1758: HEAD on ftp:// URLs always returned 200 OK.
- Bug #1760: FTP related memory leak
- Bug #1770: WCCP2 weighted assignment
- Bug #1768: Redundant DNS PTR lookups
- Bug #1696: Add support for wccpv2 mask assignment
- Bug #1774: ncsa_auth support for cramfs timestamps
- Bug #1769: near-hit and filedescriptor usage missing in SNMP MIB
- Bug #1725: cache_peer login=PASS documentation somewhat confusing
- Bug #1590: Silence those ETag loop warnings
- Bug #1740: Squid crashes on certain malformed HTTP responses
- Bug #1699: assertion failed: authenticate.c:836: "auth_user_request != NULL"
- Improve error reporting on unexpected CONNECT requests in accelerator mode
- Cosmetic change to increase cache.log detail level on invalid requests
- Bug #1229: http_port and other directives accept invalid ports
- Reject http_port specifications using both transparent and accelerator options
- Cosmetic cleanup to not dump stacktraces on configuration errors
Changes to squid-2.6.STABLE3 (18 Aug 2006)
- Bug #1577: assertion failed "fm->max_n_files <= (1 << 24)" on
very large cache_dir. Limit number of objects stored to slightly
less to avoid this.
- Bug #1705: Correct error message on invalid time weekday specification
- Don't attempt to guess netmask in src/dst acl specifications
if none was provided. Assume it's an IP even if it ends in 0
- Bug #1665: log_format %ue, %us tags for external or ssl user id
- Bug #1707: delay pools often ignored the set limit
- Bug #1716: Support for recent OpenSSL 0.9.7 versions
(0.9.8 always worked)
- COSS fixes and performance improvements
- Memory leak when reading configuration files with overlapping
ACL data where squid -k parse complains.
- Memory leak related to pinned connections
- Show include acls unexpanded in cachemgr configuration dumps
- Fixed WARNING defer handler for HTTP Socket does not call commDeferFD
- Bug #1304: Downloads may hang when using the cache_dir max-size option
- Optimization of network I/O
- Bug #1730: make problem with --enable-follow-x-forwarded-for on Solaris
- Fixed a memory leak on certain invalid requests
- Bug #1733: ERR_CANNOT_FORWARD Portuguese translation update
- Bug #582: ntlm fake_auth not handles non-ascii login names
- New startup message indicating the type of event loop used
- Bug #1602: TCP fallback on truncated DNS responses
- Bug #1667: assertion failed: store.c:1081: "e->store_status == STORE_PENDING"
- Bug #1723: cachemgr now works in accelerator mode
Changes to squid-2.6.STABLE2 (31 Jul 2006)
- WCCP2 doesn't update statCounter.syscalls.sock.sendtos counter.
- Releasenotes Table of contents should use relative links without
filename.
- Reject HTTP/0.9 formatted CONNECT requests.
- Cosmetic cleanup to use safe_free instead of xfree + manual
assign to NULL
- Bug #1650: transparent interception "Unable to forward this
request at this time"
- Bug #1658: Memory corruption when using client-side SSL certificates
- Add storeRecycle; a storeIO method to delete a StoreEntry w/out
deleting the underlying object.
- Many COSS fixes and new coss data dumper utility for diagnostics
- Bug #1669: SEGV in storeAddVaryReadOld
- Many fixes in debug sections and spelling of debug messages
- Don't keep client connection persistent if there was a mismatch in
the response size.
- Move eventCleanup debug messages to debug level 2 (was 0)
- Add the missing concurrency parameters to basic and digest auth
schemes
- Bug #1670: assertion failure: i->prefix_size > 0 in client_side.c:2509
- Log SSL user id in the custom log User name format (%un)
- Bug #1653: Username info not logged into Cachemgr active_requests
statistics
- Added to the redirectors interface the support for SSL client
certificate
- squid.conf.default cleanup to remove references to old options
- Fix many filedescriptors in combination with TPROXY
- Fix connection pinning in transparently intercepted connections
- Bug #1679: LDFLAGS not honored in some programs.
- Minor cleanup of port numbers in transparent interception or
vhost + vport
- Bug #1671: transparent interception fails with FreeBSD ipfw or
Linux-2.2 ipchains
- Bug #1660: Accept-Encoding related memory corruption
- Bug #1651: Odd results if url_rewriter defined multiple times
- Bug #1655: Squid does not produce coredumps under linux when
started as root
- Bug #1673: cache digests not served to other caches
- Cleanup of Linux capability code used by tproxy
- Bug #1684: xstrdup: tried to dup a NULL pointer!
- Bug #1668: unchecked vsnprintf() return code could lead to log
corruption
- Bug #1688: Assertion failure in HttpHeader.c in some header_access
configurations
- Cygwin support fir --disable-internal-dns
- Silence those annoying sslReadServer: Connection reset by peer
errors.
- Bug #1693: persistent connections broken in transparent
interception mode
- Bug #1691: multicast peering issues
- Bug #1696: Correct WCCP2 processing of router capability info
segments
- Bug #1694: Assertion failure in mgr:config if using
access_log_format %<h
- Bug #1677: Duplicate etags in the If-None-Match header
- Bug #1665: access_log_format codes for login names from external
acl or ssl
- Bug #1681: All ntlmauthenticator processes are busy
- Added ARP acl support for OpenBSD and ARP fixes for Windows
- Bug #1700: WCCP fails on FreeBSD (Unable to disconnect WCCP out
socket)
- WCCP2 correct dampening of assign buckets when there it lots of
changes
- minimum_expiry_time to tune the magic 60 seconds limit of what
is considered cachable when the object doesn't have any cache
validators.
- Bug #1703: wrong path to diskd helper corrected, and config
parser extended to trap incorrect paths early
- Bug #1703: COSS failed to initialize async-io threads
- Bug #1703: should abort if diskd helper exits unexpectedly
- Bug #1702: Warn if acl name is too long
- Bug #1685: Crashes or other odd results after storeSwapMetaUnpack: errors
- wccp2_rebuild_wait directive to delay registering with WCCP until the
- Bug #1662: Infinite loop in external acl with grace period if the
same http_access line had multiple external acls
Changes to squid-2.6.STABLE1 (1 Jul 2006)
- New --enable-default-hostsfile configure option
- Added username info to active_requests cachemgr stats
- Modified squid MIB to incorporate squid.conf visible_hostname
- Added multi-line capability in squid.conf
- Added new httpd_suppress_version_string configuration directive
- WCCPv2 support
- Negotiate authentication scheme support
- NTLM authentication scheme rewritten
- Customizable access log formats
- Selective access logging
- Access logging via syslog
- Reverse proxy enhancements, with new cache_peer based forwarding
model.
- LDAP based Digest helper (Note: not true LDAP integration, just using
LDAP for storage of the Digest hashes)
- Improved helper communication protocol
- External ACL improvements. %PATH, log=, grace=, and more..
- Improved SSL support with hardware offload, client certificate
support (primitive), chained certificates and numerous bug fixes
- DNS lookups now use the search path from /etc/resolv.conf or
the Windows registry
- Linux epoll support
- collapsed forwarding to optimize reverse proxies or other
setups having very many clients going to the same URL
- New improved COSS implementation
- Optional support for blank passwords
- The old and obsolete Samba-2.2.X winbind helpers have been removed
- external acls now uses the simplified URL-escaped protol "3.0" by
default.
- Linux TPROXY support
- Support for proxying of Microsoft Integrated Login by adding
support for the deviations from the HTTP protocol required
to support these authentication mechanisms
- Added the capability to run as a Windows service under Cygwin
- CARP now plays well with the other peering algorithms
- read_ahead_gap option to read ahead more than 16KB of the reply
- check_hostnames and allow_underscore squid.conf options
- http_port is now optional, allowing for SSL only operation
- Full ETag/Vary support, caching responses which varies with
request details (browser, language etc).
- umask now defaults to 027 to protect the content of cache and
log files from local users
- HTCP support for access control and the CRL operation for
purgeing of cache content
- Optionally follow X-Forwarded-For headers to determine the original
client IP behind sedond level proxies
- FreeBSD kqueue support
Changes to squid-2.5.STABLE14 (20 May 2006)
- [Minor] icons not displayed when visible_hostname is a
short hostname (without domain). (Bug #1532)
- [Medium] Memleak in HTCP client code (default disabled)
(Bug #1553)
- [Major] memory leak in ident processing (Bug #1557)
- [Medium] Memory leak in header processing related to external_acl
header detail format tag (Bug #1564)
Changes to squid-2.5.STABLE13 (12 Mar 2006)
- [Minor] Fails to compile on Solaris and some other platforms
with undefined reference to setenv (Bug #1435)
- [Cosmetic] Added WebDAV REPORT method to know HTTP methods list
- [Minor] Squid ntlm_auth (not the Samba provided one) giving
odd results if --enable-ntlm-fail-open is used (Bug #1022)
- [Minor] wbinfo_group.pl doesn't work with Samba 3.0.21 and later
(Bug #1472)
- [Minor] Squid crash when asyncio function counters url accessed
from Cachemgr CGI (Bug #1464)
- [Cosmetic] Linux compile warning about prctl called with too few
arguments (Bug #1483)
- [Minor] Wrong timezone declaration for 64 bit Irix (Bug #1479)
- [Minor] Some 206 responses logged incorrectly (Bug #1511)
- [Minor] Issues in processing ranges on objects >2GB (Bug #437)
- [Cosmetic] Segmentation fault on empty proxy_auth ACLs (Bug #1414)
- [Minor] Ident access lists don't work in delay_access statements
(Bug #1428)
- [Minor] Some clients support NTLM even if not initially negotiating
persistent connections (Bug #1447)
- [Medium] 504 Gateway Time-out on FTP uploads (Bug #1459)
- [Medium] delay pools given too much bandwidht after "-k reconfigure"
(Bug #1481)
- [Cosmetic] New persistent_connection_after_error configuration
directive (Bug #1482)
- [Cosmetic] Hangs at 100% CPU if /dev/null is not accessible (Bug
#1484)
- [Minor] Fails to compile on Fedora Core 5 test 2 x86_64 (Bug #1492)
- [Cosmetic] Typo in ftp.c (Bug #1507)
- [Cosmetic] Error in FTP listings of files with -> in their name
(Bug #1508)
- [Cosmetic] With Squid-2.5 there is no more the DUPLICATE IP logging
in cache.log (Bug #779)
- [Minor] Fails to process long host names (Bug #1434)
- [Cosmetic] Azerbaijani errors translation (Bug #1454)
- [Cosmetic] misleading error message message for bad/unresolveable
cache_peer name (Bug #1504)
- [Cosmetic] confusing statistics on stateful helpers (NTLM auth)
(Bug #1506)
- [Major] connstate memory leak (Bug #1522)
Changes to squid-2.5.STABLE12 (22 Oct 2005)
- [Major] Error introduced in 2.5.STABLE11 causing truncated responses
when using delay pools (Bug #1405)
- [Cosmetic] Document that tcp_outgoing_* works badly in combination
with server_persistent_connections (Bug #454)
- [Cosmetic] Add additinal tracing to squid_ldap_auth making
diagnostics easier on squid_ldap_auth configuration errors
(Bug #1395)
- [Minor] $HOME not set when started as root (Bug #1401)
- [Minor] httpd_accel_single_host breaks in combination with
server_persistent_connections (Bug #1402)
- [Cosmetic] Setting CACHE_HTTP_PORT to configure was only partially
implemented, effectively ignored. (Bug #1403)
- [Minor] CNAME based DNS addresses could get cached for longer
than intended (Bug #1404)
- [Minor] Incorrect handling of squid-internal-dynamic/netdb exchanges
in transparently intercepting proxies (Bug #1410).
- [Minor] Cache revalidations on HEAD requests causing poor cache
hit ratio (Bug #1411).
- [Minor] Not possible to send 302 redirects via a redirector in
response to CONNECT requests (bug #1412)
- [Minor] Incorrect handling of Set-Cookie on cache refreshes (Bug
#1419)
- [Major] Segmentation fault crash in rfc1738_do_escape (Bug #1426)
- [Minor] Delay pools class 3 fails on clients in network 255
(Bug #1431)
Changes to squid-2.5.STABLE11 (22 Sep 2005)
- [Minor] Workaround for servers sending double content-length headers
(Bug #1305)
- [Cosmetic] Updated Spanish error messages by Nicolas Ruiz
- [Cosmetic] Date header corrected on internal objects (icons etc)