pool/squid
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
273 Commits 2 Branches 0 Tags 2 MiB
f4934e733f
Commit Graph

273 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Ana Guerrero
f4934e733f Accepting request 1122203 from server:proxy 
- update to 6.4:
  * security fixes:
    + Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500, CVE-2023-46846)
    + Multiple issues in HTTP response caching (bsc#1216496, CVE-2023-5824)
    + Denial of Service in HTTP Digest Authentication (bsc#1216495, CVE-2023-46847)
    + Denial of Service in FTP (bsc#1216498, CVE-2023-46848)
    + Fix validation of certificates (bsc#1216803, CVE-2023-46724)
  * Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL
  * Bug 4981: Work around in-call job invalidation bugs
  * basic_smb_lm_auth: fix 'no previous declaration' warnings
  * CacheManager: require /squid-internal-mgr/ URL path prefix
  * ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion]
  * documentation changes

OBS-URL: https://build.opensuse.org/request/show/1122203
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=116
 2023-11-02 19:22:22 +00:00
Adam Majer
62ba66243a - update to 6.4: 
* security fixes:
    + Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500, CVE-2023-46846)
    + Multiple issues in HTTP response caching (bsc#1216496, CVE-2023-5824)
    + Denial of Service in HTTP Digest Authentication (bsc#1216495, CVE-2023-46847)
    + Denial of Service in FTP (bsc#1216498, CVE-2023-46848)
    + Fix validation of certificates (bsc#1216803, CVE-2023-46724)
  * Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL
  * Bug 4981: Work around in-call job invalidation bugs
  * basic_smb_lm_auth: fix 'no previous declaration' warnings
  * CacheManager: require /squid-internal-mgr/ URL path prefix
  * ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion]
  * documentation changes

OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=281
 2023-11-02 08:45:54 +00:00
Dominique Leuenberger
06806c2bd9 Accepting request 1112346 from server:proxy 
- update to 6.3:
  - Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL
  - Bug 4981: Work around in-call job invalidation bugs
  - basic_smb_lm_auth: fix 'no previous declaration' warnings
  - CacheManager: require /squid-internal-mgr/ URL path prefix
  - ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion]

OBS-URL: https://build.opensuse.org/request/show/1112346
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=115
 2023-09-20 11:30:36 +00:00
Adam Majer
452d72b5c9 - update to 6.3: 
- Bug 5294: ERR_CANNOT_FORWARD returned instead of ERR_DNS_FAIL
  - Bug 4981: Work around in-call job invalidation bugs
  - basic_smb_lm_auth: fix 'no previous declaration' warnings
  - CacheManager: require /squid-internal-mgr/ URL path prefix
  - ESI: Fix build [-Wsingle-bit-bitfield-constant-conversion]

OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=279
 2023-09-19 16:22:38 +00:00
Dominique Leuenberger
33fd7e9371 Accepting request 1103106 from server:proxy 
OBS-URL: https://build.opensuse.org/request/show/1103106
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=114
 2023-08-09 15:26:17 +00:00
Adam Majer
fcd32b7814 Accepting request 1103093 from home:polslinux:branches:server:proxy 
- update to 6.2:
  * Major UI changes:
    - Remove 8K limit for single access.log line
    - Add tls_key_log to report TLS communication secrets
  * Minor UI changes:
    - Add %transport::>connection_id logformat code
    - Add paranoid_hit_validation directive
    - Report SMP store queues state (mgr:store_queues)
    - Addcache_log_message directive
  * Developer Interest changes:
    - Replaced X-Cache and X-Cache-Lookup headers with Cache-Status
    - Reject HTTP/1.0 requests with unusual framing
    - codespell check added to source maintenance enforcement
    - Streamlined ./configure handling of optional libraries
    - Add –progress option to test-builds.sh
    - Remove layer-00-bootstrap from test script
    - Convert LRU map into a CLP map
    - Remove legacy context-based debugging in favor of CodeContext
  * Removed features:
    - Remove unused cache_diff binary
    - Remove obsolete membanger test
    - Remove deprecated leakfinder (–enable-leakfinder)

OBS-URL: https://build.opensuse.org/request/show/1103093
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=277
 2023-08-09 09:34:23 +00:00
Dominique Leuenberger
9ce8aee8b8 Accepting request 1085760 from server:proxy 
- update to 5.9:
  * Improve reply_body_max_size matching accuracy
  * fix gcc13 warning

OBS-URL: https://build.opensuse.org/request/show/1085760
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=113
 2023-05-10 14:17:59 +00:00
Adam Majer
3be8318923 - update to 5.9: 
* Improve reply_body_max_size matching accuracy
  * fix gcc13 warning

OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=275
 2023-05-09 14:34:55 +00:00
Dominique Leuenberger
2dda8e08c9 Accepting request 1084087 from server:proxy 
- partial revert of earlier "fix PIDFile"
  - move pidfile back to /run/squid.pid and not in the directory
    owned by squid. The purpose of /run/squid/ is to facilitate
    SMP worker's IPC and not for the PID file. The PID file can
    live just fine in /run since it's written by root. (bsc#1210960)

OBS-URL: https://build.opensuse.org/request/show/1084087
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=112
 2023-05-03 10:56:54 +00:00
Adam Majer
07fb1be74a - partial revert of earlier "fix PIDFile" 
- move pidfile back to /run/squid.pid and not in the directory
    owned by squid. The purpose of /run/squid/ is to facilitate
    SMP worker's IPC and not for the PID file. The PID file can
    live just fine in /run since it's written by root. (bsc#1210960)

OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=273
 2023-05-02 15:18:21 +00:00
Dominique Leuenberger
9497358eb1 Accepting request 1079395 from server:proxy 
OBS-URL: https://build.opensuse.org/request/show/1079395
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=111
 2023-04-14 11:14:09 +00:00
Martin Pluskal
9f9d69b591 Accepting request 1079299 from home:dirkmueller:Factory 
- update to 5.8:
  * Bug 5162: mgr:index URL do not produce MGR_INDEX template
  * Bug 5241: Block all non-localhost requests by default
  * Bug 5241: Block to-localhost, to-link-local requests by
    default
  * ext_kerberos_ldap_group_acl: Support -b with -D
  * Fix ACL type typo in req_header, rep_header key-changing
    ERRORs
  * ... and several compile fixes
  * ... and some code cleanup and polishing

OBS-URL: https://build.opensuse.org/request/show/1079299
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=271
 2023-04-14 07:58:30 +00:00
Dominique Leuenberger
c76636d04d Accepting request 1073989 from server:proxy 
OBS-URL: https://build.opensuse.org/request/show/1073989
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=110
 2023-03-24 14:21:18 +00:00
Adam Majer
8ec6e276c4 Accepting request 1073988 from home:marxin:branches:server:proxy 
- Enable LTO again as it survives tests now.

OBS-URL: https://build.opensuse.org/request/show/1073988
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=269
 2023-03-23 14:58:09 +00:00
Dominique Leuenberger
374407c07e Accepting request 1060834 from server:proxy 
OBS-URL: https://build.opensuse.org/request/show/1060834
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=109
 2023-01-25 16:44:05 +00:00
Adam Majer
85015dd9ad Accepting request 1060819 from home:kukuk:branches:server:proxy 
- Disable NIS auth module (NIS is deprecated and get's currently
  removed)

OBS-URL: https://build.opensuse.org/request/show/1060819
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=267
 2023-01-25 10:29:53 +00:00
Dominique Leuenberger
6cca7078d5 Accepting request 1055875 from server:proxy 
OBS-URL: https://build.opensuse.org/request/show/1055875
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=108
 2023-01-04 16:53:50 +00:00
Martin Pluskal
04b3f78d48 Accepting request 1046445 from home:schubi2:pam_usr_etc 
- Migration of PAM settings to /usr/lib/pam.d.

OBS-URL: https://build.opensuse.org/request/show/1046445
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=265
 2023-01-04 14:36:50 +00:00
Dominique Leuenberger
2835498b26 Accepting request 1006088 from server:proxy 
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.

and CVE references,
  - Regression Fix: Typo in manager ACL (bsc#1203677, CVE-2022-41317)
    (bsc#1203680, CVE-2022-41318)

OBS-URL: https://build.opensuse.org/request/show/1006088
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=107
 2022-09-26 16:48:40 +00:00
Adam Majer
0c32424ab7 Accepting request 1003832 from home:schubi2:logrotate 
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.

OBS-URL: https://build.opensuse.org/request/show/1003832
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=263
 2022-09-26 10:29:20 +00:00
Adam Majer
7c543ee7fd Add CVE references 
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=262
 2022-09-26 10:23:09 +00:00
Dominique Leuenberger
384314cf9f Accepting request 1003011 from server:proxy 
OBS-URL: https://build.opensuse.org/request/show/1003011
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=106
 2022-09-12 17:09:05 +00:00
Adam Majer
221d387569 Accepting request 1002491 from home:dirkmueller:Factory 
- update to 5.7:
  - Regression Fix: Typo in manager ACL
  - Bug 5186: noteDestinationsEnd check failed: transportWait
  - Bug 5160: Test suite fails with -flto=auto
  - Bug 3193 pt2: NTLM decoder truncating strings
  - Bug 5133: OpenSSL 3.0 support
  - ext_session_acl: fix TDB key lookup
  - forward_max_tries: Do not count discarded connections
  - ... and many compile and debugging fixes

OBS-URL: https://build.opensuse.org/request/show/1002491
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=260
 2022-09-12 15:32:36 +00:00
Dominique Leuenberger
e089dbe488 Accepting request 999925 from server:proxy 
OBS-URL: https://build.opensuse.org/request/show/999925
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=105
 2022-08-30 12:49:06 +00:00
Adam Majer
e83ebc1600 Accepting request 999891 from home:computersalat:devel:proxy 
fix PIDFile

OBS-URL: https://build.opensuse.org/request/show/999891
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=258
 2022-08-29 11:10:51 +00:00
Dominique Leuenberger
7ab08601a3 Accepting request 985925 from server:proxy 
OBS-URL: https://build.opensuse.org/request/show/985925
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=104
 2022-06-30 11:18:25 +00:00
Lars Vogdt
3d5852fb75 Accepting request 985780 from home:schubi2 
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.

OBS-URL: https://build.opensuse.org/request/show/985780
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=256
 2022-06-29 17:56:59 +00:00
Dominique Leuenberger
828dd3c8c8 Accepting request 984871 from server:proxy 
- Update to 5.6:
  * Improve handling of Gopher responses (bsc#1200907, CVE-2021-46784)
- Changes in 5.5:
  * fixes regression Bug 5192: esi_parser default is incorrect
  * Bug 5177: clientca certificates sent to https_port clients
  * Bug 5090: Must(!request->pinnedConnection()) violation
  * Kid restart leads to persistent queue overflows, delays/timeouts

OBS-URL: https://build.opensuse.org/request/show/984871
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=103
 2022-06-25 08:24:14 +00:00
Adam Majer
3db5ecbad9 - Update to 5.6: 
* Improve handling of Gopher responses (bsc#1200907, CVE-2021-46784)
- Changes in 5.5:
  * fixes regression Bug 5192: esi_parser default is incorrect
  * Bug 5177: clientca certificates sent to https_port clients
  * Bug 5090: Must(!request->pinnedConnection()) violation
  * Kid restart leads to persistent queue overflows, delays/timeouts

OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=254
 2022-06-24 09:29:25 +00:00
Dominique Leuenberger
24f7dcfe4b Accepting request 966241 from server:proxy 
- Do not try to set special permissions for basic_pam_auth (bsc#1197649)

OBS-URL: https://build.opensuse.org/request/show/966241
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=102
 2022-04-01 19:35:36 +00:00
Adam Majer
12b4ed7ebc - Do not try to set special permissions for basic_pam_auth (bsc#1197649) 
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=252
 2022-03-31 14:26:52 +00:00
Dominique Leuenberger
d6ca2748d9 Accepting request 965649 from server:proxy 
- Fix upgrade path from squid 4.x where we replaced some symlinks
  with directories in pretrans section (bsc#1197333)
- old_nettle_compat.patch: refresh patch

OBS-URL: https://build.opensuse.org/request/show/965649
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=101
 2022-03-29 16:16:15 +00:00
Adam Majer
eae485a694 with directories in pretrans section (bsc#1197333) 
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=250
 2022-03-29 12:32:38 +00:00
Adam Majer
7a4d40ca76 - Fix upgrade path from squid 4.x where we replaced some symlinks 
with directories (bsc#1197333)
- old_nettle_compat.patch: refresh patch

OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=249
 2022-03-29 12:30:01 +00:00
Dominique Leuenberger
e84e29bcf2 Accepting request 961868 from server:proxy 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/961868
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=100
 2022-03-15 18:03:52 +00:00
Adam Majer
3a4ba9cfbe Add CVE reference only 
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=247
 2022-03-08 11:45:31 +00:00
Dominique Leuenberger
8c3c7904b6 Accepting request 958214 from server:proxy 
OBS-URL: https://build.opensuse.org/request/show/958214
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=99
 2022-03-01 16:03:38 +00:00
Martin Pluskal
487cb8560d Accepting request 957749 from home:AndreasStieger:branches:server:proxy 
squid 5.4.1

OBS-URL: https://build.opensuse.org/request/show/957749
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=246
 2022-03-01 08:14:36 +00:00
Dominique Leuenberger
7fcf28aa05 Accepting request 952695 from server:proxy 
OBS-URL: https://build.opensuse.org/request/show/952695
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=98
 2022-02-09 19:39:20 +00:00
Martin Pluskal
2540ef9507 Accepting request 952643 from home:polslinux:branches:server:proxy 
- Update to 5.4:
  * Bug 5190: Preserve configured order of intermediate CA certificate chain
  * Bug 5188: Fix reconfiguration leaking tls-cert=... memory
  * Bug 5187: Properly track (and mark) truncated store entries
  * Bug 5134: assertion failed: Transients.cc:221: "old == e"
  * Bug 5132: Close the tunnel if to-server conn closes after client

OBS-URL: https://build.opensuse.org/request/show/952643
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=245
 2022-02-08 13:46:41 +00:00
Dominique Leuenberger
389d50ec6e Accepting request 942126 from server:proxy 
- Adjust harden_squid.service.patch to resolve boo#1193938

OBS-URL: https://build.opensuse.org/request/show/942126
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=97
 2021-12-22 19:18:17 +00:00
Martin Pluskal
c791b32bc9 - Adjust harden_squid.service.patch to resolve boo#1193938 
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=244
 2021-12-22 14:26:08 +00:00
Dominique Leuenberger
11313c1e8a Accepting request 941860 from server:proxy 
OBS-URL: https://build.opensuse.org/request/show/941860
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=96
 2021-12-21 17:40:50 +00:00
Martin Pluskal
da562559a5 Accepting request 939558 from home:dirkmueller:Factory 
- update to 5.3:
  * Bug 5169: StoreMap.cc:517 "!s.reading()" assertion
  * Bug 5158: AnyP::Uri::host() mishandles [escaped] IPv6 addresses
  * Bug 5060: Parallel builds are not reliable
  * Documentation updates for logformat directive

OBS-URL: https://build.opensuse.org/request/show/939558
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=243
 2021-12-21 14:30:33 +00:00
Dominique Leuenberger
38338573ad Accepting request 936249 from server:proxy 
OBS-URL: https://build.opensuse.org/request/show/936249
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=95
 2021-12-07 23:00:02 +00:00
Martin Pluskal
1ba7c0f00b Accepting request 933486 from home:jsegitz:branches:systemdhardening:server:proxy 
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/933486
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=242
 2021-12-07 12:01:22 +00:00
Dominique Leuenberger
b367df9e33 Accepting request 923558 from server:proxy 
- transition to squid 5.x. This is a major release and for changes
  and how to transition from 4.x, see the release notes,
  http://www.squid-cache.org/Versions/v5/RELEASENOTES.html
- update to 5.2
  * fixes issues with WCCP protocol that may lead to information
    disclosure (bsc#1189403, CVE-2021-28116)
- drop unused BR: db-devel, ed, opensp-devel, pkgconfig(kdb)
- new BR: pkgconfig(tdb)

OBS-URL: https://build.opensuse.org/request/show/923558
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=94
 2021-10-07 22:05:48 +00:00
Adam Majer
7540de6b79 Fix Source URLs 
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=241
 2021-10-06 17:10:48 +00:00
Martin Pluskal
91cd7d9ece Accepting request 923273 from home:adamm:branches:server:proxy 
- transition to squid 5.x. This is a major release and for changes
  and how to transition from 4.x, see the release notes,
  http://www.squid-cache.org/Versions/v5/RELEASENOTES.html
- update to 5.2
  * fixes issues with WCCP protocol that may lead to information
    disclosure (bsc#1189403, CVE-2021-28116)
- drop unused BR: db-devel, ed, opensp-devel, pkgconfig(kdb)
- new BR: pkgconfig(tdb)

OBS-URL: https://build.opensuse.org/request/show/923273
OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=240
 2021-10-06 08:28:26 +00:00
Dominique Leuenberger
c66d86bb71 Accepting request 909881 from server:proxy 
OBS-URL: https://build.opensuse.org/request/show/909881
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/squid?expand=0&rev=93
 2021-08-03 20:48:45 +00:00