adamm/squid
SHA256
1
0
Fork 0
forked from pool/squid
Code Pull Requests Activity

Commit Graph

  • d378a8c84a Add bugzilla references factory Adam Majer 2026-03-06 13:52:34 +01:00
  • ec876e9f12 Update to 7.4 Adam Majer 2026-03-04 16:30:48 +01:00
  • 9b1dac58f0 Fix crypto card functionality (bsc#1250223) slfo-main Adam Majer 2026-02-13 17:29:21 +01:00
  • c93f08bd9a Accepting request 1316100 from server:proxy Ana Guerrero 2025-11-07 17:21:48 +00:00
  • d1ee561896 Since version 6, some previously deprecated features have been removed: * Edge Side Includes (ESI) * access to the cache manager using the cache_object:// scheme - use http instead * the squdclient tool - use curl http://<squid-address>/squid-internal-mgr/menu instead * the cachemgr.cgi tool * the purge tool - use the http PURGE method instead * Ident protocol support * basic_smb_lm_auth and ntlm_smb_lm_auth helpers - use Samba's ntlm_auth instead - Update to 7.3 - Regression Bug 5520: ERR_INVALID_URL for CONNECT host with leading digit - Quit NTLM authenticate() on missing NTLM authorization header - Fix Auth::User::absorb() IP list transfer logic - Fix type mismatch in new/delete of addrinfo::ai_addr - Fix libntlmauth string parsing on big-endian machines - ... and some code cleanups - ... and some CI improvements - changes since squid 6.14 (bsc#1252281, CVE-2025-62168) - Bug 3390: Proxy auth data visible to scripts - Bug 5504: Document that Squid discards invalid rewrite-url - Bug 5407: Support at least 1000 groups per Kerberos user - Fix parsing of malformed quoted squid.conf strings - Fix off-by-one in helper args count assertion - Fix UDP log module opening and closing code - Fix BodyPipe debugging in handleChunkedRequestBody() - Fix debugging of Eui48::lookup() problems - Fix memory leak when parsing deprecated %rG logformat code - Fix SQUID_YESNO 'syntax error near unexpected token' - DNS: fix RRPack memcpy - DNS: Do not leak RR data upon RR data unpacking errors - FTP: Avoid null dereferences when handling ftp_port traffic Adam Majer 2025-11-06 19:29:48 +00:00
  • 6d1abadf50 Accepting request 1313240 from home:joelgb:branches:server:proxy Adam Majer 2025-11-06 18:55:20 +00:00
  • 835bdb040f CVE-2025-62168 fixes slfo-1.2 Adam Majer 2025-11-06 16:07:32 +01:00
  • aeca661920 CVE-2025-59362 fix Adam Majer 2025-10-02 18:14:03 +02:00
  • 5d8b8ddd81 Accepting request 1229399 from server:proxy Ana Guerrero 2024-12-09 20:12:58 +00:00
  • be00812e5d Accepting request 1229399 from server:proxy Ana Guerrero 2024-12-09 20:12:58 +00:00
  • 557899966e - Update to 6.12 - Fix validation of Digest auth header parameters - changes since squid-6.11: - Fix Kerberos detection when cross-compiling - Improve robustness of DNS code on reconfigure - Prevent slow memory leak in TCP DNS queries - Improve errors emitted when invalid ACLs are parsed Adam Majer 2024-12-09 13:10:14 +00:00
  • 50777186fb - Update to 6.12 - Fix validation of Digest auth header parameters - changes since squid-6.11: - Fix Kerberos detection when cross-compiling - Improve robustness of DNS code on reconfigure - Prevent slow memory leak in TCP DNS queries - Improve errors emitted when invalid ACLs are parsed Adam Majer 2024-12-09 13:10:14 +00:00
  • 2f1e45563d Accepting request 1183540 from server:proxy Ana Guerrero 2024-06-27 14:04:49 +00:00
  • 5521453c13 Accepting request 1183540 from server:proxy Ana Guerrero 2024-06-27 14:04:49 +00:00
  • dcbaedea97 - update to 6.10 - ESI: Disable by default (#1728) - Bug 5378: type mismatch in libTrie (#1830) (bsc#1227086, CVE-2024-37894) - testCacheManager: use cppunit exception tests (#1811) - testRandomUuid: use cppunit exception tests (#1814) - Docs: REQUIRED in ident_regex, proxy_auth_regex, ext_user_regex (#1818) - Fix build with clang v18 [-Wvla-cxx-extension] (#1813) (#1817) Adam Majer 2024-06-27 07:06:46 +00:00
  • a546da3270 - update to 6.10 - ESI: Disable by default (#1728) - Bug 5378: type mismatch in libTrie (#1830) (bsc#1227086, CVE-2024-37894) - testCacheManager: use cppunit exception tests (#1811) - testRandomUuid: use cppunit exception tests (#1814) - Docs: REQUIRED in ident_regex, proxy_auth_regex, ext_user_regex (#1818) - Fix build with clang v18 [-Wvla-cxx-extension] (#1813) (#1817) Adam Majer 2024-06-27 07:06:46 +00:00
  • e0b39660b4 Accepting request 1177317 from server:proxy Ana Guerrero 2024-05-28 15:30:23 +00:00
  • 3f696fa535 Accepting request 1177317 from server:proxy Ana Guerrero 2024-05-28 15:30:23 +00:00
  • e338f8dceb - CVE-2024-33427.patch: fixes possible buffer overread leading to denial of service (bsc#1225417, CVE-2024-33427) Adam Majer 2024-05-28 08:55:47 +00:00
  • eb70b5ef0f - CVE-2024-33427.patch: fixes possible buffer overread leading to denial of service (bsc#1225417, CVE-2024-33427) Adam Majer 2024-05-28 08:55:47 +00:00
  • 5279438f47 - update to 6.9 - Regression Bug 5349: basic_nis_auth build error: unterminated #ifndef - Bug 5069: Keep listening after getsockname() error - Bug 5360: FwdState::noteDestinationsEnd() assertion "err" - Reduce stale errno usage - Plug memory leak in handling cache manager requests - Fix error: template-id not allowed for constructor in C++20 - Improve release packaging automation - header_fixups.patch: upstreamed, removed - 9be86d8db5e8f40829374d26334d0bb5272c1afd.patch: upstreamed, removed Adam Majer 2024-05-28 08:50:04 +00:00
  • 83753ab199 - update to 6.9 - Regression Bug 5349: basic_nis_auth build error: unterminated #ifndef - Bug 5069: Keep listening after getsockname() error - Bug 5360: FwdState::noteDestinationsEnd() assertion "err" - Reduce stale errno usage - Plug memory leak in handling cache manager requests - Fix error: template-id not allowed for constructor in C++20 - Improve release packaging automation - header_fixups.patch: upstreamed, removed - 9be86d8db5e8f40829374d26334d0bb5272c1afd.patch: upstreamed, removed Adam Majer 2024-05-28 08:50:04 +00:00
  • b821f3771c Accepting request 1155563 from server:proxy Dominique Leuenberger 2024-03-06 22:06:03 +00:00
  • f5630c87ae Accepting request 1155563 from server:proxy Dominique Leuenberger 2024-03-06 22:06:03 +00:00
  • 671bd512e1 - 9be86d8db5e8f40829374d26334d0bb5272c1afd.patch: don't throw on client errors Adam Majer 2024-03-06 13:17:43 +00:00
  • 23219f8b97 - 9be86d8db5e8f40829374d26334d0bb5272c1afd.patch: don't throw on client errors Adam Majer 2024-03-06 13:17:43 +00:00
  • 8068f73df2 - Fix handling of expanding HTTP header values (bsc#1219960, CVE-2024-25617) Adam Majer 2024-03-06 13:03:42 +00:00
  • 17b414d940 - Fix handling of expanding HTTP header values (bsc#1219960, CVE-2024-25617) Adam Majer 2024-03-06 13:03:42 +00:00
  • f54cc4704c - header_fixups.patch: added Adam Majer 2024-03-06 12:48:17 +00:00
  • 8ef00f7fd9 - header_fixups.patch: added Adam Majer 2024-03-06 12:48:17 +00:00
  • 9116fce63e - update to 6.8 - Fix marking of problematic cached IP addresses (#1691) - Bug 5344: mgr:config segfaults without logformat (#1680) - Fix infinite recursion when parsing HTTP chunks (#1553) (bsc#1216715, CVE-2024-25111) - changes in 6.7 - Bug 5337: workaround for crash on startup if -a option is used - Bug 5274: Successful tunnels logged as TCP_TUNNEL/500 - Fix crash when NTLM and Negotiate helpers are queried with no HTTP request - Fix SslBump memory leak when mimicking certificates with Authority Key Identifier - Fix memory leak on SslBump certificates with Authority Key Identifier extension - Fix a possible integer overflow in FTP Gateway - Extend cache_log_message to Bug 5187 and job invalidation BUGs - Remove incorrect beta version warning Adam Majer 2024-03-06 12:28:13 +00:00
  • 6cedc775e2 - update to 6.8 - Fix marking of problematic cached IP addresses (#1691) - Bug 5344: mgr:config segfaults without logformat (#1680) - Fix infinite recursion when parsing HTTP chunks (#1553) (bsc#1216715, CVE-2024-25111) - changes in 6.7 - Bug 5337: workaround for crash on startup if -a option is used - Bug 5274: Successful tunnels logged as TCP_TUNNEL/500 - Fix crash when NTLM and Negotiate helpers are queried with no HTTP request - Fix SslBump memory leak when mimicking certificates with Authority Key Identifier - Fix memory leak on SslBump certificates with Authority Key Identifier extension - Fix a possible integer overflow in FTP Gateway - Extend cache_log_message to Bug 5187 and job invalidation BUGs - Remove incorrect beta version warning Adam Majer 2024-03-06 12:28:13 +00:00
  • c45ed272c0 Accepting request 1151607 from server:proxy Ana Guerrero 2024-02-26 19:02:40 +00:00
  • b9466b8dea Accepting request 1151607 from server:proxy Ana Guerrero 2024-02-26 19:02:40 +00:00
  • 6158da84a9 Accepting request 1151577 from home:dimstar:rpm4.20:s Martin Pluskal 2024-02-26 13:40:54 +00:00
  • f3ee015a17 Accepting request 1151577 from home:dimstar:rpm4.20:s Martin Pluskal 2024-02-26 13:40:54 +00:00
  • 62c07f8bb8 Accepting request 1142310 from server:proxy Ana Guerrero 2024-01-29 21:33:26 +00:00
  • 3e94cee43c Accepting request 1142310 from server:proxy Ana Guerrero 2024-01-29 21:33:26 +00:00
  • f82e000827 add missing CVEs Adam Majer 2024-01-29 13:38:27 +00:00
  • 1b2dbe0e67 add missing CVEs Adam Majer 2024-01-29 13:38:27 +00:00
  • 8ba28a97f2 add bugzilla entry Adam Majer 2024-01-29 11:23:56 +00:00
  • 335a196703 add bugzilla entry Adam Majer 2024-01-29 11:23:56 +00:00
  • 6475d5fc34 Accepting request 1135832 from server:proxy Dominique Leuenberger 2024-01-03 11:26:37 +00:00
  • 271189ebfc Accepting request 1135832 from server:proxy Dominique Leuenberger 2024-01-03 11:26:37 +00:00
  • 6283f5f471 Accepting request 1135796 from home:dirkmueller:Factory Martin Pluskal 2023-12-31 07:22:40 +00:00
  • af1d180b1f Accepting request 1135796 from home:dirkmueller:Factory Martin Pluskal 2023-12-31 07:22:40 +00:00
  • 115a1d6339 Accepting request 1135553 from home:seanlew:branches:server:proxy Martin Pluskal 2023-12-29 09:02:20 +00:00
  • 311bd1e5b3 Accepting request 1135553 from home:seanlew:branches:server:proxy Martin Pluskal 2023-12-29 09:02:20 +00:00
  • de9ffd195b Accepting request 1122203 from server:proxy Ana Guerrero 2023-11-02 19:22:22 +00:00
  • f4934e733f Accepting request 1122203 from server:proxy Ana Guerrero 2023-11-02 19:22:22 +00:00
  • a18484478d - update to 6.4: * security fixes: + Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500, CVE-2023-46846) + Multiple issues in HTTP response caching (bsc#1216496, CVE-2023-5824) + Denial of Service in HTTP Digest Authentication (bsc#1216495, CVE-2023-46847) + Denial of Service in FTP (bsc#1216498, CVE-2023-46848) + Fix validation of certificates (bsc#1216803, CVE-2023-46724) * Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL * Bug 4981: Work around in-call job invalidation bugs * basic_smb_lm_auth: fix 'no previous declaration' warnings * CacheManager: require /squid-internal-mgr/ URL path prefix * ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion] * documentation changes Adam Majer 2023-11-02 08:45:54 +00:00
  • 62ba66243a - update to 6.4: * security fixes: + Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500, CVE-2023-46846) + Multiple issues in HTTP response caching (bsc#1216496, CVE-2023-5824) + Denial of Service in HTTP Digest Authentication (bsc#1216495, CVE-2023-46847) + Denial of Service in FTP (bsc#1216498, CVE-2023-46848) + Fix validation of certificates (bsc#1216803, CVE-2023-46724) * Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL * Bug 4981: Work around in-call job invalidation bugs * basic_smb_lm_auth: fix 'no previous declaration' warnings * CacheManager: require /squid-internal-mgr/ URL path prefix * ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion] * documentation changes Adam Majer 2023-11-02 08:45:54 +00:00
  • 8ebaae9f9e Accepting request 1112346 from server:proxy Dominique Leuenberger 2023-09-20 11:30:36 +00:00
  • 06806c2bd9 Accepting request 1112346 from server:proxy Dominique Leuenberger 2023-09-20 11:30:36 +00:00
  • 416db473b9 - update to 6.3: - Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL - Bug 4981: Work around in-call job invalidation bugs - basic_smb_lm_auth: fix 'no previous declaration' warnings - CacheManager: require /squid-internal-mgr/ URL path prefix - ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion] Adam Majer 2023-09-19 16:22:38 +00:00
  • 452d72b5c9 - update to 6.3: - Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL - Bug 4981: Work around in-call job invalidation bugs - basic_smb_lm_auth: fix 'no previous declaration' warnings - CacheManager: require /squid-internal-mgr/ URL path prefix - ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion] Adam Majer 2023-09-19 16:22:38 +00:00
  • 6bca1486be Accepting request 1103106 from server:proxy Dominique Leuenberger 2023-08-09 15:26:17 +00:00
  • 33fd7e9371 Accepting request 1103106 from server:proxy Dominique Leuenberger 2023-08-09 15:26:17 +00:00
  • ffbdb44135 Accepting request 1103093 from home:polslinux:branches:server:proxy Adam Majer 2023-08-09 09:34:23 +00:00
  • fcd32b7814 Accepting request 1103093 from home:polslinux:branches:server:proxy Adam Majer 2023-08-09 09:34:23 +00:00
  • 5898ee98bc Accepting request 1085760 from server:proxy Dominique Leuenberger 2023-05-10 14:17:59 +00:00
  • 9ce8aee8b8 Accepting request 1085760 from server:proxy Dominique Leuenberger 2023-05-10 14:17:59 +00:00
  • 457ff82d75 - update to 5.9: * Improve reply_body_max_size matching accuracy * fix gcc13 warning Adam Majer 2023-05-09 14:34:55 +00:00
  • 3be8318923 - update to 5.9: * Improve reply_body_max_size matching accuracy * fix gcc13 warning Adam Majer 2023-05-09 14:34:55 +00:00
  • 2b646b7904 Accepting request 1084087 from server:proxy Dominique Leuenberger 2023-05-03 10:56:54 +00:00
  • 2dda8e08c9 Accepting request 1084087 from server:proxy Dominique Leuenberger 2023-05-03 10:56:54 +00:00
  • b4f095cbd6 - partial revert of earlier "fix PIDFile" - move pidfile back to /run/squid.pid and not in the directory owned by squid. The purpose of /run/squid/ is to facilitate SMP worker's IPC and not for the PID file. The PID file can live just fine in /run since it's written by root. (bsc#1210960) Adam Majer 2023-05-02 15:18:21 +00:00
  • 07fb1be74a - partial revert of earlier "fix PIDFile" - move pidfile back to /run/squid.pid and not in the directory owned by squid. The purpose of /run/squid/ is to facilitate SMP worker's IPC and not for the PID file. The PID file can live just fine in /run since it's written by root. (bsc#1210960) Adam Majer 2023-05-02 15:18:21 +00:00
  • 953e647c10 Accepting request 1079395 from server:proxy Dominique Leuenberger 2023-04-14 11:14:09 +00:00
  • 9497358eb1 Accepting request 1079395 from server:proxy Dominique Leuenberger 2023-04-14 11:14:09 +00:00
  • 4c9afdf818 Accepting request 1079299 from home:dirkmueller:Factory Martin Pluskal 2023-04-14 07:58:30 +00:00
  • 9f9d69b591 Accepting request 1079299 from home:dirkmueller:Factory Martin Pluskal 2023-04-14 07:58:30 +00:00
  • 0e7ab95905 Accepting request 1073989 from server:proxy Dominique Leuenberger 2023-03-24 14:21:18 +00:00
  • c76636d04d Accepting request 1073989 from server:proxy Dominique Leuenberger 2023-03-24 14:21:18 +00:00
  • 1cfac9298b Accepting request 1073988 from home:marxin:branches:server:proxy Adam Majer 2023-03-23 14:58:09 +00:00
  • 8ec6e276c4 Accepting request 1073988 from home:marxin:branches:server:proxy Adam Majer 2023-03-23 14:58:09 +00:00
  • ebf28a57be Accepting request 1060834 from server:proxy Dominique Leuenberger 2023-01-25 16:44:05 +00:00
  • 374407c07e Accepting request 1060834 from server:proxy Dominique Leuenberger 2023-01-25 16:44:05 +00:00
  • e80819e868 Accepting request 1060819 from home:kukuk:branches:server:proxy Adam Majer 2023-01-25 10:29:53 +00:00
  • 85015dd9ad Accepting request 1060819 from home:kukuk:branches:server:proxy Adam Majer 2023-01-25 10:29:53 +00:00
  • 02ab6e3b13 Accepting request 1055875 from server:proxy Dominique Leuenberger 2023-01-04 16:53:50 +00:00
  • 6cca7078d5 Accepting request 1055875 from server:proxy Dominique Leuenberger 2023-01-04 16:53:50 +00:00
  • ade41a6377 Accepting request 1046445 from home:schubi2:pam_usr_etc Martin Pluskal 2023-01-04 14:36:50 +00:00
  • 04b3f78d48 Accepting request 1046445 from home:schubi2:pam_usr_etc Martin Pluskal 2023-01-04 14:36:50 +00:00
  • fe9190b371 Accepting request 1006088 from server:proxy Dominique Leuenberger 2022-09-26 16:48:40 +00:00
  • 2835498b26 Accepting request 1006088 from server:proxy Dominique Leuenberger 2022-09-26 16:48:40 +00:00
  • 6e6ffa9d7c Accepting request 1003832 from home:schubi2:logrotate Adam Majer 2022-09-26 10:29:20 +00:00
  • 0c32424ab7 Accepting request 1003832 from home:schubi2:logrotate Adam Majer 2022-09-26 10:29:20 +00:00
  • 01c681eb42 Add CVE references Adam Majer 2022-09-26 10:23:09 +00:00
  • 7c543ee7fd Add CVE references Adam Majer 2022-09-26 10:23:09 +00:00
  • dc4be11603 Accepting request 1003011 from server:proxy Dominique Leuenberger 2022-09-12 17:09:05 +00:00
  • 384314cf9f Accepting request 1003011 from server:proxy Dominique Leuenberger 2022-09-12 17:09:05 +00:00
  • a83ab69a00 Accepting request 1002491 from home:dirkmueller:Factory Adam Majer 2022-09-12 15:32:36 +00:00
  • 221d387569 Accepting request 1002491 from home:dirkmueller:Factory Adam Majer 2022-09-12 15:32:36 +00:00
  • 3b01ca3596 Accepting request 999925 from server:proxy Dominique Leuenberger 2022-08-30 12:49:06 +00:00
  • e089dbe488 Accepting request 999925 from server:proxy Dominique Leuenberger 2022-08-30 12:49:06 +00:00
  • 1fe21e0f0b Accepting request 999891 from home:computersalat:devel:proxy Adam Majer 2022-08-29 11:10:51 +00:00
  • e83ebc1600 Accepting request 999891 from home:computersalat:devel:proxy Adam Majer 2022-08-29 11:10:51 +00:00
  • ecc3c6de7f Accepting request 985925 from server:proxy Dominique Leuenberger 2022-06-30 11:18:25 +00:00
  • 7ab08601a3 Accepting request 985925 from server:proxy Dominique Leuenberger 2022-06-30 11:18:25 +00:00