Skip to content

Stable E2Guardian v5.4.7r

Latest
Compare
Choose a tag to compare
@philipianpearce philipianpearce released this 25 Aug 09:40

This is the stable release for version v5.4 (v5.4.7r)

It is likely to be the final v5.4 release as v5.5 is now stable

Fixes in v5.4.7r

Fix possible XSS in bypass url - issue #782

If use are using v5.4 and using the bypass feature, upgrade urgently as this fixes a vulnerability in this feature.

Fixes in v5.4.6r
Amended Spanish tranlations
reduce artifact ttl: new gitlab limit of 5GB
Fix odd memory issue with some lists
- replace std::sort with std::stable_sort
Update README.md
Remove specific link to v5.4
Add packages links

Fixes in v5.4.5r

Fix #713 max value for maxheaderlines increased to 2500

Fixes in v5.4.4r
Fix bug #727 - some lists not being sorted correctly
Fix #725 - Local grey match not overriding main exception match
Fix #720 - Upper case search terms not blocked
Update spelling in message 160
Fix bug #712 - Upstream connect failure message wrong
Fix #695 and fix #711 - connecttimeout being ignored
Fix #695 bannediplist missing
Fix bug #707 cert hostnames not being checked - only happens when openssl v1.1 is used
Fix spelling of 'implement' (and derived words).
configure.ac: Don't expand AM_INIT_AUTOMAKE multiple times.
Fix default size of maxcontentramcachescansize option in configs/e2guardian.conf.in
Make sure values of maxcontentfiltersize and maxcontentramcachesize obey to the requirements in the (inline) documentation.
Fix default non-initialized default for max_content_ramcache_scan_size.
Update gitlab-ci: Remove unused makefile file in docker images
Update gitlab-ci: test for finding data path
Fix typo in comments of e2guardianf1.conf.in
Fix c string conversion compiler error
Correct miss spelling in conf file #691
Fix #686 icap default filtergroup is not set.
Fix #685 - uppercase domain in user never matches
Fix pid error at start
Fix bug #684 - crash when only one entry in a maplist
Fix c string conversion compiler error
Fix #677 exceptionfile not checked when checking request before checking
file extension
Fix #679 SQUID+ICAP protocol error / timeout/no response: out_res_body_flag was not reset
Add official docker hub image
Possible fix for #676 - Added conditional pid check
Fix #678 -N reloading instead of quitting with e2guardian -q
Fix #675 Logs user, url being anonymized at random, messages in storyboard no longer being honored
Fix #674 messages and categories set in pre-auth.story are blanked.

New feature
#692 - add extracheckports option to allow loop checking when squid in front

New features in v5.4.3r :-

Auth list files moved into storyboard system - fixes #458
Improve auth plugin logic - add per-plugin default group options
On single list reading failure do not abort but check rest of config
Tidy up request log output
New usedashforblank option for logs
Extended logs added (type 7 & 8) and -EXTFLAGS- added to block page params
Add searchterms field to log types 7,8 - new logclientnameandip config flag
Make consistent punctuation removal in NaughtyFilter
Time based list and storyboard functions added - #529
SB: Add timed blanket block
SB: Add support for log-only function (logcategory flag)
SB: Response HTTP header modification added & listenportin state added
SB: Add #568 feature - give warning when defined list is not used
New useoriginalip option - solves issues with some apps who use non-stqndard SNI.
nomitm lists added for sites which refuse to be mitm.
nolog lists added and actioned via new SB entry point - for clearer logs
searchexception list added to override searchregexplist
Re-organized phrase lists and lists directory - see lists/README
Re-organized e2guardian.conf and e2guardianf1.conf - easier to follow and more guidance notes
New pf-basic auth plugin - for use with squid used for auth in front of e2g.

See ChangeLog for full details.

Configs are compatible with v5.4.3r and v5.4.4r.

The configs are not fully compatible with v5.3 - see notes/Upgrading_to_v5.4

Please report any issues prefixed with v5.4.

Many thanks to all who have contributed and raised issues and suggestions.

Philip

Packages for Debian/Ubuntu: https://e2guardian.numsys.eu/v5.4/
Official Images on Docker Hub: https://hub.docker.com/r/fredbcode/e2guardian