kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/www/squid/distinfo

111 lines
8.8 KiB
Text
Raw Normal View History

Hmm, squid-2.5.STABLE3-http_reply_access_denied.patch seems to updated.
2003-09-12 05:22:31 +02:00
$NetBSD: distinfo,v 1.38 2003/09/12 03:22:31 taca Exp $
Add NetBSD RCS Ids.
1998-08-07 15:27:33 +02:00
update squid pacakge to 2.5.3 (squid-2.5.STABLE3). Changes to squid-2.5.STABLE3 (25 May 2003): - Bug #573: Occational false negatives in external acl lookups - Bug #577: assertion failed: cbdata.c:224: "c->y == c" when external_acl helpers crashes - Bug #590: Squid may hang or behave oddly on shutdown while requests is being processed. - Bug #590: external acl lookups does not deal well with queue overload - cache_effective_user documentation update - cache_peer documentation update for htcp and carp - Bug #600: The example header_access paranoid setting is missing WWW-Authenticate - Bug #605: Segmentation fault in idnsGrokReply() on certain platforms - Fixes to build properly on AIX 5 - Bug #574: wb_group updated to version 1.1 to make group names case insensitive and correct a segfault issue in the helper - SNMP mib updates to make cacheNumObjCount, cacheCurrentUnlinkRequests, cacheCurrentSwapSize and cacheClients correctly report as gauges (was reporting as counters). - Woraround for --enable-ssl Kerberos issue on RedHat 9 - Bug #579: Close and repopen log files on "squid -k reconfigure" - Bug #598: squid_ldap_auth could segfault if LDAP server is unavailable - Bug #609,#612: msntauth helper fixes in dealing with large or non-existing allow/deny user files. - Bug #620: acl ident REQUIRED matches even if the ident lookup fails - Bug #432: reply_body_max_size fails with ident or proxy_auth acls and also fails to block large objects where the content-length is not known - Bug #606: Basic auth looping and gets stuck at high CPU usage when multiple proxy_auth ACLs combined in one line and login fails. - squid_ldap_auth updated with support for TLS and SSL - Bug #623: segfault if using negated external acls in certain configurations involving other acls later on the same http_access line. - Bug #622: wb_group helper update to version 1.2 to ass support for Domain-Qualified groups refering to groups in a specific domain - Bug #596: logic error in poll() error management - Bug #597: logic errors in error management - Bug #591: segmentation fault in authentication on "squid -k debug" - Bug #587: smb_auth fails on complex logins involving domain names or other odd characters - Bug #558, #587: smb_auth.pl fails on complex logins involving domain names or other odd characters - Bug #643: external_acl fails with ttl=0 due to a change introduced by the patch for Bug #553 in 2.5.STABLE2. - Bug #630: minor issues in digest authantication causing random authentication failures and incompability with many mainstream browser digest implementations due to browser qop bugs. To deal with those broken browser nonce_stricness now defaults to off, and two new digest options have been added (check_nonce_count and post_workaround) to allow workarounds to other quite bad browser bugs if needed. - Bug #644: digest authentication fails on requests with one or more comma in the requested URL - Bug #648: deny_info TCP_RESET not working. The fix for this also adds the ability to send redirects.
2003-05-25 16:58:16 +02:00
SHA1 (squid-2.5.3/squid-2.5.STABLE3.tar.bz2) = 37ceb0a65e9ac644e52ba29cd8bd0c296dca64cb
Size (squid-2.5.3/squid-2.5.STABLE3.tar.bz2) = 1028081 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-Lithuanian.patch) = be9c09a8dab329cdcd73105d96fa68c1ab02b3b2
Size (squid-2.5.3/squid-2.5.STABLE3-Lithuanian.patch) = 25761 bytes
Update squid package to 2.5.3nb1. Compile time warnings when using GCC-3.3 synopsis GCC-3.3 gets slightly confused by the Squid code and gives a few mostly false warnings regarding type-punning. severity Cosmetic versions Squid-2.5 and earlier platforms All patch squid-2.5.STABLE3-gcc-3_3.patch workaround Ignore the warnings aufs Files queued for open counter mismatch synopsis Under certain conditions the "Files queued for open counter" could grow larger than intended. If this grows too large then Squid may think it runs out of filedescriptors even if there is plenty of filedescriptors free, but we do not expect this to become a real problem in any installations. severity Minor versions Squid-2.5 and earlier platforms All using aufs patch squid-2.5.STABLE3-aufs-openingfds.patch external_acl does not wait for ident lookups to complete synopsis extrenal_acl_type %IDENT does not wait for ident lookups to complete. severity Minor bugzilla #683 versions Squid-2.5 platforms All patch squid-2.5.STABLE3-external_acl_ident.patch workaround use an ident acl before your external acl to trigger the ident lookup Compilation error in src/HttpHeaderTools.c on certain platforms synopsis The Squid-2.5.STABLE2 patch for digest authentication used a C99 feature (dynamic array initializers) which may not be available in all C compilers severity Minor bugzilla #660 versions Squid-2.5.STABLE3 platforms Several platforms not using GCC or a C99 compliant C compiler patch squid-2.5.STABLE3-HttpHeaderTools.patch workaround Use GCC Segmentation fault if more than one custom deny_info message defined synopsis The Squid-2.5.STABLE2 patch for deny_info TCP_RESET was not entirely correct and causes segmentation fault on startup if more than one custom deny_info error message is defined severity Minor bugzilla #662 versions Squid-2.5.STABLE3 platforms All patch squid-2.5.STABLE3-deny_info.patch workaround Disable the use deny_info in your squid.conf.
2003-07-06 16:08:43 +02:00
SHA1 (squid-2.5.3/squid-2.5.STABLE3-HttpHeaderTools.patch) = 97b5648b20379d8c98a120b332595155053db4e7
Size (squid-2.5.3/squid-2.5.STABLE3-HttpHeaderTools.patch) = 916 bytes
Update squid package to 2.5.3nb2. - (Minor) round-robin cache_dir selection incorrectly compares max-size - (Major) cbdata.c:186: "c->valid" assertion due to peer digest not found - (Major) Crash after ftpTimeout: timeout in SENT_PASV state - (Minor) Requests denied by http_reply_access are not logged with TCP_DENIED - (Minor) ie_refresh does not signal no-cache to peer caches - (Medium) Client Socket Buffer leak on reply_body_max_size - (Medium) Forward Host headers in place - (Medium) Memory leak in deny_info TCP_RESET - (Cosmetic) ERR_TOO_BIG Spanish translation - (Cosmetic) minimum_retry_timeout unused - (Minor) SNMP update of cachePeerPingsSent and cachePeerPingsAcked - (Cosmetic) store_check_cachable_stats slghtly misleading - (Minor) /etc/hosts and lines with comments after the host name - (Minor) sbrk as fallback method for high_memory_warning - (Minor) header_access fails when using peers - (Cosmetic) neighbor_type_domain documentation update - (Minor) issue warning if CARP load factor values decrease in the cache_peer list - (Cosmetic) Compile time warnings when using GCC-3.3 - (Minor) aufs Files queued for open counter mismatch - (Minor) external_acl does not wait for ident lookups to complete - (Minor) icmpRecv: recv: (11) Resource temporarily unavailable - (Cosmetic) Incorrect RFC reference regarding URL syntax - (Cosmetic) quote '%' character in logs - (Cosmetic) check open("/dev/null") return value for errors. - (Cosmetic) "cache_dir diskd" documentation update Not all of the pathces are new but updated one.
2003-07-21 08:20:16 +02:00
SHA1 (squid-2.5.3/squid-2.5.STABLE3-deny_info.patch) = 665600974d6381d663bb6dbcd0d50967c1c40d36
Size (squid-2.5.3/squid-2.5.STABLE3-deny_info.patch) = 741 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-cache_dir_doc.patch) = 763579c7b618247ad63cd3e8a20a59deb9cc4f98
Size (squid-2.5.3/squid-2.5.STABLE3-cache_dir_doc.patch) = 499 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-devnull.patch) = 0951fa67c99c550bcb22f54ec7cdcbd158a854c3
Size (squid-2.5.3/squid-2.5.STABLE3-devnull.patch) = 498 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-log_quote.patch) = fbb5403c9bdb63ab77df3bac5f5e4395499c0866
Size (squid-2.5.3/squid-2.5.STABLE3-log_quote.patch) = 792 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-rfc_reference.patch) = 7e82f72cd830d7903f56661803c1afb734cf888d
Size (squid-2.5.3/squid-2.5.STABLE3-rfc_reference.patch) = 850 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-icmpRecv.patch) = a857f83360200186a01c4ff57a42d231736ac32d
Size (squid-2.5.3/squid-2.5.STABLE3-icmpRecv.patch) = 654 bytes
Update squid package to 2.5.3nb1. Compile time warnings when using GCC-3.3 synopsis GCC-3.3 gets slightly confused by the Squid code and gives a few mostly false warnings regarding type-punning. severity Cosmetic versions Squid-2.5 and earlier platforms All patch squid-2.5.STABLE3-gcc-3_3.patch workaround Ignore the warnings aufs Files queued for open counter mismatch synopsis Under certain conditions the "Files queued for open counter" could grow larger than intended. If this grows too large then Squid may think it runs out of filedescriptors even if there is plenty of filedescriptors free, but we do not expect this to become a real problem in any installations. severity Minor versions Squid-2.5 and earlier platforms All using aufs patch squid-2.5.STABLE3-aufs-openingfds.patch external_acl does not wait for ident lookups to complete synopsis extrenal_acl_type %IDENT does not wait for ident lookups to complete. severity Minor bugzilla #683 versions Squid-2.5 platforms All patch squid-2.5.STABLE3-external_acl_ident.patch workaround use an ident acl before your external acl to trigger the ident lookup Compilation error in src/HttpHeaderTools.c on certain platforms synopsis The Squid-2.5.STABLE2 patch for digest authentication used a C99 feature (dynamic array initializers) which may not be available in all C compilers severity Minor bugzilla #660 versions Squid-2.5.STABLE3 platforms Several platforms not using GCC or a C99 compliant C compiler patch squid-2.5.STABLE3-HttpHeaderTools.patch workaround Use GCC Segmentation fault if more than one custom deny_info message defined synopsis The Squid-2.5.STABLE2 patch for deny_info TCP_RESET was not entirely correct and causes segmentation fault on startup if more than one custom deny_info error message is defined severity Minor bugzilla #662 versions Squid-2.5.STABLE3 platforms All patch squid-2.5.STABLE3-deny_info.patch workaround Disable the use deny_info in your squid.conf.
2003-07-06 16:08:43 +02:00
SHA1 (squid-2.5.3/squid-2.5.STABLE3-external_acl_ident.patch) = e46b7bcaf0d94f2ff75d4160d4c5689d937b03e4
Size (squid-2.5.3/squid-2.5.STABLE3-external_acl_ident.patch) = 903 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-aufs-openingfds.patch) = 9fa576f4f6bd4ebdb1b60faa30683784e12b242b
Size (squid-2.5.3/squid-2.5.STABLE3-aufs-openingfds.patch) = 851 bytes
Update squid package to 2.5.3nb2. - (Minor) round-robin cache_dir selection incorrectly compares max-size - (Major) cbdata.c:186: "c->valid" assertion due to peer digest not found - (Major) Crash after ftpTimeout: timeout in SENT_PASV state - (Minor) Requests denied by http_reply_access are not logged with TCP_DENIED - (Minor) ie_refresh does not signal no-cache to peer caches - (Medium) Client Socket Buffer leak on reply_body_max_size - (Medium) Forward Host headers in place - (Medium) Memory leak in deny_info TCP_RESET - (Cosmetic) ERR_TOO_BIG Spanish translation - (Cosmetic) minimum_retry_timeout unused - (Minor) SNMP update of cachePeerPingsSent and cachePeerPingsAcked - (Cosmetic) store_check_cachable_stats slghtly misleading - (Minor) /etc/hosts and lines with comments after the host name - (Minor) sbrk as fallback method for high_memory_warning - (Minor) header_access fails when using peers - (Cosmetic) neighbor_type_domain documentation update - (Minor) issue warning if CARP load factor values decrease in the cache_peer list - (Cosmetic) Compile time warnings when using GCC-3.3 - (Minor) aufs Files queued for open counter mismatch - (Minor) external_acl does not wait for ident lookups to complete - (Minor) icmpRecv: recv: (11) Resource temporarily unavailable - (Cosmetic) Incorrect RFC reference regarding URL syntax - (Cosmetic) quote '%' character in logs - (Cosmetic) check open("/dev/null") return value for errors. - (Cosmetic) "cache_dir diskd" documentation update Not all of the pathces are new but updated one.
2003-07-21 08:20:16 +02:00
SHA1 (squid-2.5.3/squid-2.5.STABLE3-gcc-3_3.patch) = 2428ae815331d2d1f156b6c3b653df1f95a554fc
Size (squid-2.5.3/squid-2.5.STABLE3-gcc-3_3.patch) = 17191 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-carpfactor.patch) = 2033cd84196fd82fdc9246b0780d39936f4725bb
Size (squid-2.5.3/squid-2.5.STABLE3-carpfactor.patch) = 870 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-neighbor_type_domain.patch) = 813b1f85afea173e34f34281233ca073fd444343
Size (squid-2.5.3/squid-2.5.STABLE3-neighbor_type_domain.patch) = 739 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-header_access_peer.patch) = 6434e62f93e9245c9e4f8e7c4404d381de066a84
Size (squid-2.5.3/squid-2.5.STABLE3-header_access_peer.patch) = 511 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-memwarnsbrk.patch) = 4de86afdb84855173642ec99c4b610343283b639
Size (squid-2.5.3/squid-2.5.STABLE3-memwarnsbrk.patch) = 529 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-hostscomments.patch) = aa5cc8136e7c201d30a05958f4f0dde8807560ca
Size (squid-2.5.3/squid-2.5.STABLE3-hostscomments.patch) = 485 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-store_check_cachable_stats.patch) = 4cc01c27ebdcbb853bc966ce8510947c38caea94
Size (squid-2.5.3/squid-2.5.STABLE3-store_check_cachable_stats.patch) = 1815 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-cachePeerPingsSentsnmp.patch) = 80254088adcb2af78322680820a9f06b461dbb2f
Size (squid-2.5.3/squid-2.5.STABLE3-cachePeerPingsSentsnmp.patch) = 1051 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-minimum_retry_timeout.patch) = 28ea2edba658f308ba9c677bb5004a44cd47dc55
Size (squid-2.5.3/squid-2.5.STABLE3-minimum_retry_timeout.patch) = 2293 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-ERR_TOO_BIG_Spanish.patch) = a380afc6b5a81e5001a2804d0612b382b51935d0
Size (squid-2.5.3/squid-2.5.STABLE3-ERR_TOO_BIG_Spanish.patch) = 2411 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-tcp_reset_leak.patch) = c550bdfe5f049a0ff4285da1a4729a2441dd7237
Size (squid-2.5.3/squid-2.5.STABLE3-tcp_reset_leak.patch) = 522 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-hostheader.patch) = ae2181cc549629abb543bbc08a35d3645f593468
Size (squid-2.5.3/squid-2.5.STABLE3-hostheader.patch) = 1630 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-reply_body_max_size.patch) = 882a85bf0a9316fba249808ce436828db9dffccb
Size (squid-2.5.3/squid-2.5.STABLE3-reply_body_max_size.patch) = 764 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-ie_refresh.patch) = 1b5c2fbeea08ae4b3e6c52acdac9a63da19f52fb
Size (squid-2.5.3/squid-2.5.STABLE3-ie_refresh.patch) = 645 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-http_reply_access-denied.patch) = 22d9cd846a4d9721470330e403567dee964e7713
Size (squid-2.5.3/squid-2.5.STABLE3-http_reply_access-denied.patch) = 551 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-SENT_PASV.patch) = d2309e94fa8c0a3efa846df00ceda34c68df1c51
Size (squid-2.5.3/squid-2.5.STABLE3-SENT_PASV.patch) = 1325 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-peer_digest_not_found_assertion.patch) = 7d795418b8b322e0c04782feeae301c8fd734df4
Size (squid-2.5.3/squid-2.5.STABLE3-peer_digest_not_found_assertion.patch) = 794 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-round_robin_max_size.patch) = 89aa269b95f79115b8870c67971ac6d1176b59f8
Size (squid-2.5.3/squid-2.5.STABLE3-round_robin_max_size.patch) = 688 bytes
Update squid package to squid-2.5.3nb3. - fix startup script as PR pkg/22502 by Steven M. Bellovin - includes newer official squid patches except squid-2.5.STABLE3-coss-improvements-2.patch (which is broken). o 2003-07-22 15:22 (Cosmetic) statCounter.syscalls.disk counters treated inconsistently o 2003-07-25 17:25 (Minor) Improvements to the (experimental) COSS storage scheme. o 2003-07-28 09:28 (Minor) Blank username logging fix o 2003-07-29 22:29 (Minor) More improvements to the (experimental) COSS storage scheme. o 2003-08-06 13:06 (Medium) assertion failed: http.c:869: "-1 == cfd || FD_SOCKET == fd_table[cfd].type" o 2003-08-06 14:06 (Medium) assertion failed: client_side.c:1478: "size > 0" when using aufs o 2003-08-06 14:06 (Minor) aufs calculates the number of threads and queue limits wrongly o 2003-08-10 07:10 (Cosmetic) Compile error in auth/digest_auth.c o 2003-08-10 19:10 (Minor) Username not logged into ACCESS.LOG in case of /407 o 2003-08-13 00:13 (Minor) ICP dynamic timeout algorithm ignores multicast
2003-08-18 18:03:01 +02:00
SHA1 (squid-2.5.3/squid-2.5.STABLE3-syscalls.disk-counters.patch) = ccafdad340b1813d1ec90349030314949e5f37ae
Size (squid-2.5.3/squid-2.5.STABLE3-syscalls.disk-counters.patch) = 2478 bytes
Broken squid-2.5.STABLE3-coss-improvements-2.patch was fixed. Bump package revision.
2003-08-18 19:00:24 +02:00
SHA1 (squid-2.5.3/squid-2.5.STABLE3-coss-improvements.patch) = d776c2c20c590d1f9007bf7eaa53fa58ce010365
Size (squid-2.5.3/squid-2.5.STABLE3-coss-improvements.patch) = 26803 bytes
Update squid package to squid-2.5.3nb3. - fix startup script as PR pkg/22502 by Steven M. Bellovin - includes newer official squid patches except squid-2.5.STABLE3-coss-improvements-2.patch (which is broken). o 2003-07-22 15:22 (Cosmetic) statCounter.syscalls.disk counters treated inconsistently o 2003-07-25 17:25 (Minor) Improvements to the (experimental) COSS storage scheme. o 2003-07-28 09:28 (Minor) Blank username logging fix o 2003-07-29 22:29 (Minor) More improvements to the (experimental) COSS storage scheme. o 2003-08-06 13:06 (Medium) assertion failed: http.c:869: "-1 == cfd || FD_SOCKET == fd_table[cfd].type" o 2003-08-06 14:06 (Medium) assertion failed: client_side.c:1478: "size > 0" when using aufs o 2003-08-06 14:06 (Minor) aufs calculates the number of threads and queue limits wrongly o 2003-08-10 07:10 (Cosmetic) Compile error in auth/digest_auth.c o 2003-08-10 19:10 (Minor) Username not logged into ACCESS.LOG in case of /407 o 2003-08-13 00:13 (Minor) ICP dynamic timeout algorithm ignores multicast
2003-08-18 18:03:01 +02:00
SHA1 (squid-2.5.3/squid-2.5.STABLE3-blank-username-log.patch) = 8b0b2f62b78bdd6751b4d364be5f50f8774a573f
Size (squid-2.5.3/squid-2.5.STABLE3-blank-username-log.patch) = 394 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-coss-improvements-2.patch) = c2b3a2d7abe19f688afb7b97703a52780b51fb70
Size (squid-2.5.3/squid-2.5.STABLE3-coss-improvements-2.patch) = 21096 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-mem_cfd.patch) = 533ed4b0bd7d338e1212647124b3352ed9732bf2
Size (squid-2.5.3/squid-2.5.STABLE3-mem_cfd.patch) = 8088 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-aufs_open_fail.patch) = 7f5fd4c5761fa5478f42269957916ccaf33ed92b
Size (squid-2.5.3/squid-2.5.STABLE3-aufs_open_fail.patch) = 817 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-aufs_threads.patch) = 7c4e1ac6ded7d8d163ef5c5c5395d514ce7d75bc
Size (squid-2.5.3/squid-2.5.STABLE3-aufs_threads.patch) = 4093 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-digest_compile.patch) = cfbf9d650268269bd6492ac19c00e799306b423d
Size (squid-2.5.3/squid-2.5.STABLE3-digest_compile.patch) = 1445 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-407_user_name.patch) = b35eda048d1cea42dcaf6751c52939bb4d13c2d3
Size (squid-2.5.3/squid-2.5.STABLE3-407_user_name.patch) = 723 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-multicast-ICP-timeout.patch) = f3b93425b2979249c7dad536fb77b0f0445e01ca
Size (squid-2.5.3/squid-2.5.STABLE3-multicast-ICP-timeout.patch) = 1863 bytes
Update squid package to 2.5.3nb5. Apply some official patches. external_acl_type concurrency= renamed to children= synopsis To lessen confusion in later upgrades to Squid-3 the external_acl_type concurrency= option has been renamed to children= to match Squid-3 usage. This is done because concurrency= has a completely different meaning in squid-3. Squid-2.5 still accepts the old syntax to keep compatibility within the Squid-2.5 release, but it is recommended to start using the new syntax unless you need to be able to easily downgrade to a earlier Squid-2.5 release. severity Cosmetic date 2003-09-02 07:02 versions Squid-2.5.STABLE3 and earlier platforms All workaround Make sure to read the Squid-3 releasenotes very carefully when upgrading. Assertion error or segmentation fault if using proxy_auth in delay_access synopsis If proxy_auth acl type is used in delay_access then Squid may abort with an assertion error or segmentation fault. Notice: This patch may change some error conditions to be logged with TCP_DENIED rather than TCP_MISS. severity Medium date 2003-09-01 20:01 bugzilla #638, #756 versions Squid-2.5 platforms All workaround Don't use proxy_auth acl types in delay_access Segmentation fault if proxy_auth with ntlm used in http_reply_access synopsis In configurations where authentication is enforced in http_access and then reused in http_reply_access to further control access levels Squid may segfault if the ntlm authentication scheme is used. severity Medium date 2003-09-01 20:01 bugzilla #763 versions Squid-2.5 platforms All workaround Don't use proxy_type acls in http_reply_access or disable the use of the ntlm authentication scheme (disabled by default) code 407 instead of 403 for authenticated traffic-shaped user synopsis delay_access can disturb Squids logics on when to request a new login from the user. Most notably if delay_access ends up in a proxy_auth acl then any access denials will require a new login but the opposite may also happen. severity Medium date 2003-08-31 09:31 bugzilla #742 versions Squid-2.5 and earlier platforms All workaround make sure delay_access always ends up in the same class of ACL as http_access does on the same request. Form POSTing troubles with NTLM authentication or other error responses synopsis Large POST/PUT requests may fail with a "Connection reset" error in the browser in situations where Squid immediately responds with an error page. This is most notable when using NTLM authentication but may also occur in a few other situations severity Medium date 2003-08-28 22:28 bugzilla #267, #757 versions Squid-2.5 and earlier platforms All workaround Allow POST/PUT without requiring authentication if you are using NTLM authentication. No explicit error message when ncsa_auth (squid user) can't access passwd file synopsis ncsa_auth just exists if it can not read the supplied password file, instead of reporting an error. severity Minor date 2003-08-20 12:20 bugzilla #733 versions Squid-2.5 and earlier platforms All workaround If ncsa_auth exits for no apparent reason, verify that the given ncsa password file is readable by the cache_effective_user. forwarded_for off has no effect synopsis The patch for Bug #92 (squid-2.5.STABLE3-mem_cfd.patch) broke the forwarded_for directive. severity Minor date 2003-08-18 17:18 bugzilla #750 versions Squid-2.5.STABLE3 snapshots 2003-08-07 to 2003-08-18 platforms All workaround Use anonymization via http_header_access to delete the X-Forwarded-For header from forwarded requests. This is probably preferred in any case.
2003-09-11 17:48:24 +02:00
SHA1 (squid-2.5.3/squid-2.5.STABLE3-forwarded_for.patch) = 23d7206338454db02d63806b5ed2a7459072bde5
Size (squid-2.5.3/squid-2.5.STABLE3-forwarded_for.patch) = 949 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-ncsa_auth_passwdfile.patch) = 04e7a62717daf24467888d6b0663ffca110ede08
Size (squid-2.5.3/squid-2.5.STABLE3-ncsa_auth_passwdfile.patch) = 641 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-POST-error.patch) = 79a383c870810d1dc5bd48a479cb9b2868c536a9
Size (squid-2.5.3/squid-2.5.STABLE3-POST-error.patch) = 9828 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-auth_delay_pools.patch) = e991189cbc21a6945f079b2544560c096f166159
Size (squid-2.5.3/squid-2.5.STABLE3-auth_delay_pools.patch) = 1275 bytes
Hmm, squid-2.5.STABLE3-http_reply_access_denied.patch seems to updated.
2003-09-12 05:22:31 +02:00
SHA1 (squid-2.5.3/squid-2.5.STABLE3-http_reply_access_denied.patch) = c1bb758ce585daae249e0ac4eaa48ea37b02c26b
Size (squid-2.5.3/squid-2.5.STABLE3-http_reply_access_denied.patch) = 3268 bytes
Update squid package to 2.5.3nb5. Apply some official patches. external_acl_type concurrency= renamed to children= synopsis To lessen confusion in later upgrades to Squid-3 the external_acl_type concurrency= option has been renamed to children= to match Squid-3 usage. This is done because concurrency= has a completely different meaning in squid-3. Squid-2.5 still accepts the old syntax to keep compatibility within the Squid-2.5 release, but it is recommended to start using the new syntax unless you need to be able to easily downgrade to a earlier Squid-2.5 release. severity Cosmetic date 2003-09-02 07:02 versions Squid-2.5.STABLE3 and earlier platforms All workaround Make sure to read the Squid-3 releasenotes very carefully when upgrading. Assertion error or segmentation fault if using proxy_auth in delay_access synopsis If proxy_auth acl type is used in delay_access then Squid may abort with an assertion error or segmentation fault. Notice: This patch may change some error conditions to be logged with TCP_DENIED rather than TCP_MISS. severity Medium date 2003-09-01 20:01 bugzilla #638, #756 versions Squid-2.5 platforms All workaround Don't use proxy_auth acl types in delay_access Segmentation fault if proxy_auth with ntlm used in http_reply_access synopsis In configurations where authentication is enforced in http_access and then reused in http_reply_access to further control access levels Squid may segfault if the ntlm authentication scheme is used. severity Medium date 2003-09-01 20:01 bugzilla #763 versions Squid-2.5 platforms All workaround Don't use proxy_type acls in http_reply_access or disable the use of the ntlm authentication scheme (disabled by default) code 407 instead of 403 for authenticated traffic-shaped user synopsis delay_access can disturb Squids logics on when to request a new login from the user. Most notably if delay_access ends up in a proxy_auth acl then any access denials will require a new login but the opposite may also happen. severity Medium date 2003-08-31 09:31 bugzilla #742 versions Squid-2.5 and earlier platforms All workaround make sure delay_access always ends up in the same class of ACL as http_access does on the same request. Form POSTing troubles with NTLM authentication or other error responses synopsis Large POST/PUT requests may fail with a "Connection reset" error in the browser in situations where Squid immediately responds with an error page. This is most notable when using NTLM authentication but may also occur in a few other situations severity Medium date 2003-08-28 22:28 bugzilla #267, #757 versions Squid-2.5 and earlier platforms All workaround Allow POST/PUT without requiring authentication if you are using NTLM authentication. No explicit error message when ncsa_auth (squid user) can't access passwd file synopsis ncsa_auth just exists if it can not read the supplied password file, instead of reporting an error. severity Minor date 2003-08-20 12:20 bugzilla #733 versions Squid-2.5 and earlier platforms All workaround If ncsa_auth exits for no apparent reason, verify that the given ncsa password file is readable by the cache_effective_user. forwarded_for off has no effect synopsis The patch for Bug #92 (squid-2.5.STABLE3-mem_cfd.patch) broke the forwarded_for directive. severity Minor date 2003-08-18 17:18 bugzilla #750 versions Squid-2.5.STABLE3 snapshots 2003-08-07 to 2003-08-18 platforms All workaround Use anonymization via http_header_access to delete the X-Forwarded-For header from forwarded requests. This is probably preferred in any case.
2003-09-11 17:48:24 +02:00
SHA1 (squid-2.5.3/squid-2.5.STABLE3-delay_access_auth.patch) = ad29242a43f492871958e83c17367fa67fbf0597
Size (squid-2.5.3/squid-2.5.STABLE3-delay_access_auth.patch) = 5527 bytes
SHA1 (squid-2.5.3/squid-2.5.STABLE3-external_acl_children.patch) = 15bb8c2f808ae679490dadba5506b30bf0d089dd
Size (squid-2.5.3/squid-2.5.STABLE3-external_acl_children.patch) = 2333 bytes
Update squid package to 2.5.2. pkgsrc change: install some supplemental documents. Changes to squid-2.5.STABLE2 (Mars 17, 2003): - Contrib files added back to the distribution - Several compiler warnings fixed when using --disable-ident or --disable-http-violations - authentication can now be used in most access controls, but must in most cases first be enforced in http_access to force the user to authenticate. - cleanups in the developer bootstrap.sh process when preparing the sources. - several squid.conf.default documentation updated to correctly refer to the current names when refering to other directives - authenticate_ip_ttl documentation updates - several assertion faults and segmentation violations corrected - the RunCache/RunAccel and squid.rc scripts updated to refer to the squid binary in sbin rather than the old bin location. - squid_ldap_auth command line processing fixes when specifying the LDAP server last on the line instead of -h option - aufs data corruption bugfix - aufs performance improvement for low traffic systems - aufs stability improvements - external_acl corrected to properly deal with quoted strings - WCCPv1 bugfix to make sure the router accepts the hash assignments - "Total accounted memory" now correctly reported in cachemgr - several small memory leaks (mostly reconfigure related) - new squid.conf option to allow GET/HEAD requests with a request entity - "make uninstall" no longer removes squid.conf - cachemgr.cgi now uses POST to avoid having the cachemgr password logged in the web server logs - authentication schemes which are known to not be proxyable are now filtered out from forwarded server replies to avoid that the clients tries to use such schemes when we know for a fact it won't work - spelling corrections in various error messages - now possible to define acl values with spaces in them by using the "include file" feature - squid_ldap_group updated to 2.10 to fix compilation issues with recent (and older) OpenLDAP libraries and to make the helper deal correctly with true LDAP groups by first looking up the user DN. - Some internal code cleanups - now verifies that programs etc exists iside the chroot directory when using chroot_dir. No longer neccesary to set up a split view environment where the same paths works both inside the chroot and outside just to convince Squid that the files is actually there.. - improved memory usage reporting - --disable-hostname-checks configure option - no longer ignores double dots in host names. Any hostname with double dots is now rejected as invalid. - log_mime_hdrs no longer logs garbage if very long headers are seen. - 'select_fds_hist' object added to cachemgr 'histogram' output - pid file now unlinked when squid has really shut down, not immediately when the shutdown request is received. This allows the pid file to be monitored to determine when Squid has shut down properly - correct authentication scheme setups on some platforms or compilers - several squid.conf.default documentation updates to remove references to renamed or replaced directives by changing them to their current names. - the SSL reverse proxy support updated to allow building with OpenSSL 0.9.7 and and later. - Corrected a minor performance problem while processing HEAD replies from various broken web servers not sending a correct HTTP reply - time acls can now specify multiple times in the same acl name, like most other acl types. - winbind helpers updated to match Samba-2.2.7a and should work with Samba-2.2.6 or later (required). For compability with older Samba versions A new configure option --with-samba-sources=... has been added to allow you to specify which Samba version the helpers should be built for if different than the above versions. - Squid MIB definition syntax correction to work better with newer (and older) SNMP tools. - Fixed access.log format when logging "error:invalid-HTTP-ident" on requests where parsing the HTTP identifier (HTTP/1.0) failed. - "make distclean" no longer removes the icons, this avoids the dependency on "uudecode" to rebuild Squid after "make distclean" - User name returned by external acl lookups (external_acl_type) is now available as "ident" in later acl checks in addition to the logging in access.log. - Incorrect behaviour of Digest authentication partly corrected - it will not handle sessions, but will always enforce password correctness.. (patch submitted by Sean Burford). - Issue with persistent connections and PUT/POST request corrected
2003-03-25 18:44:22 +01:00
SHA1 (patch-aa) = 2e0d96f6ccb9d0c42db2da49e76846edad09624f
Update squid to 2.5.1 with several patches from http://www.squid-cache.org/Versions/v2/2.5/bugs/. Now try to install more authentication modules, but those modules should be handled by proper frame work (Curretly, SASL modules aren't handled). Changes to squid-2.5 (): - Major rewrite of proxy authentication to support other schemes than basic. First in the line is NTLM support but others can easily be added (minimal digest is present). See Programmers Guide. (Robert Collins & Francesco Chemolli) - Reworked how request bodies are passed down to the protocols. Now all client side processing is inside client_side.c, and the pass and pump modules is no longer used. - Optimized searching in proxy_auth and ident ACL types. Squid should now handle large access lists a lot more efficiently. (Francesco Chemolli) - Fixed forwarding/peer loop detection code (Brian Degenhardt) - now a peer is ignored if it turns out to be us, rather than committing suicide - Changed the internal URL code to obey appendDomain for internal objects if it needs appending. This fixes weirdnesses where a machine can think it is "foo.bar.com", and "foo" is requested. (Brian Degenhardt) - Added the use of Automake to create the Makefile.in's in the squid source tree. This will allow libtool in the future, and immediately allows better dependency tracking - with or without gcc - as well as the dist-all and distcheck targets for developers which respectively build a tar.gz and a tar.bz2 distribution, and check that what will be distributed builds. - Added TOS and source address selection based on ACLs, written by Roger Venning. This allows administrators to set the TOS precedence bits and/or the source IP from a set of available IPs based upon some ACLs, generally to map different users to different outgoing links and traffic profiles. - Added 'max-conn' option to 'cache_peer' - Added SSL gatewaying support, allowing Squid to act as a SSL server in accelerator setups. - SASL authentication helper by Ian Castle - msntauth updated to v2.0.3 - no_cache now applies to cache hits as well as cache misses - the Gopher client in Squid has been significantly improved - Squid now sanity checks FTP data connections to ensure the connection is from the requested server. Can be disabled if needed by turning off the ftp_sanitycheck option. - external acl support. A mechanism where flexible ACL checks can be driven by external helpers. See the external_acl_type and acl external directives. - Countless other small things and fixes - HTML pages generated by Squid or CacheMgr as well as the ERR documents now contain a doctype declaration so that browsers know which HTML specification the document uses. In addition to that they have a new look (background-color, font) and are valid according to the HTML standards at www.w3.org. (Clemens Löser) - Login and password send to Basic auth helpers is now URL escaped to allow for spaces and other "odd" characters in logins and passwords - Proxy Authentication is no longer blindly forwarded to peer caches if not used locally. If forwarding of proxy authentication is desired then it must now be configured with the login=PASS cache_peer option. - Responses with Vary: in the header are now cached by squid. (Henrik Nordstrom). - Removed unused 'siteselect_timeout' directive.
2002-10-13 18:43:20 +02:00
SHA1 (patch-ab) = 1224ba4cee98a26d2c9d670eb6d57c6187ff2d56
Update checksum for "squid-2.5.STABLE1-disable-http-violations.patch".
2003-02-16 10:07:37 +01:00
SHA1 (patch-ac) = 1b283f0a573c02c82ce26f75e67d19b1ec5ff9f0
Update squid to 2.5.1 with several patches from http://www.squid-cache.org/Versions/v2/2.5/bugs/. Now try to install more authentication modules, but those modules should be handled by proper frame work (Curretly, SASL modules aren't handled). Changes to squid-2.5 (): - Major rewrite of proxy authentication to support other schemes than basic. First in the line is NTLM support but others can easily be added (minimal digest is present). See Programmers Guide. (Robert Collins & Francesco Chemolli) - Reworked how request bodies are passed down to the protocols. Now all client side processing is inside client_side.c, and the pass and pump modules is no longer used. - Optimized searching in proxy_auth and ident ACL types. Squid should now handle large access lists a lot more efficiently. (Francesco Chemolli) - Fixed forwarding/peer loop detection code (Brian Degenhardt) - now a peer is ignored if it turns out to be us, rather than committing suicide - Changed the internal URL code to obey appendDomain for internal objects if it needs appending. This fixes weirdnesses where a machine can think it is "foo.bar.com", and "foo" is requested. (Brian Degenhardt) - Added the use of Automake to create the Makefile.in's in the squid source tree. This will allow libtool in the future, and immediately allows better dependency tracking - with or without gcc - as well as the dist-all and distcheck targets for developers which respectively build a tar.gz and a tar.bz2 distribution, and check that what will be distributed builds. - Added TOS and source address selection based on ACLs, written by Roger Venning. This allows administrators to set the TOS precedence bits and/or the source IP from a set of available IPs based upon some ACLs, generally to map different users to different outgoing links and traffic profiles. - Added 'max-conn' option to 'cache_peer' - Added SSL gatewaying support, allowing Squid to act as a SSL server in accelerator setups. - SASL authentication helper by Ian Castle - msntauth updated to v2.0.3 - no_cache now applies to cache hits as well as cache misses - the Gopher client in Squid has been significantly improved - Squid now sanity checks FTP data connections to ensure the connection is from the requested server. Can be disabled if needed by turning off the ftp_sanitycheck option. - external acl support. A mechanism where flexible ACL checks can be driven by external helpers. See the external_acl_type and acl external directives. - Countless other small things and fixes - HTML pages generated by Squid or CacheMgr as well as the ERR documents now contain a doctype declaration so that browsers know which HTML specification the document uses. In addition to that they have a new look (background-color, font) and are valid according to the HTML standards at www.w3.org. (Clemens Löser) - Login and password send to Basic auth helpers is now URL escaped to allow for spaces and other "odd" characters in logins and passwords - Proxy Authentication is no longer blindly forwarded to peer caches if not used locally. If forwarding of proxy authentication is desired then it must now be configured with the login=PASS cache_peer option. - Responses with Vary: in the header are now cached by squid. (Henrik Nordstrom). - Removed unused 'siteselect_timeout' directive.
2002-10-13 18:43:20 +02:00
SHA1 (patch-ad) = 23a906011ffef78d070cc49c94c4f4837eb319ec
Update squid package to squid-2.5.1nb4. - include more official squid patches. o Make external_acl user names available as IDENT in later acl processing o digest authentication security issue o external_acl Assertion failed: auth_user_request != NULL o make install fails to install icons after make distclean o "error: invalid HTTP-ident" breaks log processing
2003-03-02 17:22:43 +01:00
SHA1 (patch-ae) = 5031183c7512573c8c8602d0b0541999f43343f2
update squid pacakge to 2.5.3 (squid-2.5.STABLE3). Changes to squid-2.5.STABLE3 (25 May 2003): - Bug #573: Occational false negatives in external acl lookups - Bug #577: assertion failed: cbdata.c:224: "c->y == c" when external_acl helpers crashes - Bug #590: Squid may hang or behave oddly on shutdown while requests is being processed. - Bug #590: external acl lookups does not deal well with queue overload - cache_effective_user documentation update - cache_peer documentation update for htcp and carp - Bug #600: The example header_access paranoid setting is missing WWW-Authenticate - Bug #605: Segmentation fault in idnsGrokReply() on certain platforms - Fixes to build properly on AIX 5 - Bug #574: wb_group updated to version 1.1 to make group names case insensitive and correct a segfault issue in the helper - SNMP mib updates to make cacheNumObjCount, cacheCurrentUnlinkRequests, cacheCurrentSwapSize and cacheClients correctly report as gauges (was reporting as counters). - Woraround for --enable-ssl Kerberos issue on RedHat 9 - Bug #579: Close and repopen log files on "squid -k reconfigure" - Bug #598: squid_ldap_auth could segfault if LDAP server is unavailable - Bug #609,#612: msntauth helper fixes in dealing with large or non-existing allow/deny user files. - Bug #620: acl ident REQUIRED matches even if the ident lookup fails - Bug #432: reply_body_max_size fails with ident or proxy_auth acls and also fails to block large objects where the content-length is not known - Bug #606: Basic auth looping and gets stuck at high CPU usage when multiple proxy_auth ACLs combined in one line and login fails. - squid_ldap_auth updated with support for TLS and SSL - Bug #623: segfault if using negated external acls in certain configurations involving other acls later on the same http_access line. - Bug #622: wb_group helper update to version 1.2 to ass support for Domain-Qualified groups refering to groups in a specific domain - Bug #596: logic error in poll() error management - Bug #597: logic errors in error management - Bug #591: segmentation fault in authentication on "squid -k debug" - Bug #587: smb_auth fails on complex logins involving domain names or other odd characters - Bug #558, #587: smb_auth.pl fails on complex logins involving domain names or other odd characters - Bug #643: external_acl fails with ttl=0 due to a change introduced by the patch for Bug #553 in 2.5.STABLE2. - Bug #630: minor issues in digest authantication causing random authentication failures and incompability with many mainstream browser digest implementations due to browser qop bugs. To deal with those broken browser nonce_stricness now defaults to off, and two new digest options have been added (check_nonce_count and post_workaround) to allow workarounds to other quite bad browser bugs if needed. - Bug #644: digest authentication fails on requests with one or more comma in the requested URL - Bug #648: deny_info TCP_RESET not working. The fix for this also adds the ability to send redirects.
2003-05-25 16:58:16 +02:00
SHA1 (patch-ag) = fc215888a815d2b39f408b980f8bce3bf5ca998c
Update squid to 2.5.1 with several patches from http://www.squid-cache.org/Versions/v2/2.5/bugs/. Now try to install more authentication modules, but those modules should be handled by proper frame work (Curretly, SASL modules aren't handled). Changes to squid-2.5 (): - Major rewrite of proxy authentication to support other schemes than basic. First in the line is NTLM support but others can easily be added (minimal digest is present). See Programmers Guide. (Robert Collins & Francesco Chemolli) - Reworked how request bodies are passed down to the protocols. Now all client side processing is inside client_side.c, and the pass and pump modules is no longer used. - Optimized searching in proxy_auth and ident ACL types. Squid should now handle large access lists a lot more efficiently. (Francesco Chemolli) - Fixed forwarding/peer loop detection code (Brian Degenhardt) - now a peer is ignored if it turns out to be us, rather than committing suicide - Changed the internal URL code to obey appendDomain for internal objects if it needs appending. This fixes weirdnesses where a machine can think it is "foo.bar.com", and "foo" is requested. (Brian Degenhardt) - Added the use of Automake to create the Makefile.in's in the squid source tree. This will allow libtool in the future, and immediately allows better dependency tracking - with or without gcc - as well as the dist-all and distcheck targets for developers which respectively build a tar.gz and a tar.bz2 distribution, and check that what will be distributed builds. - Added TOS and source address selection based on ACLs, written by Roger Venning. This allows administrators to set the TOS precedence bits and/or the source IP from a set of available IPs based upon some ACLs, generally to map different users to different outgoing links and traffic profiles. - Added 'max-conn' option to 'cache_peer' - Added SSL gatewaying support, allowing Squid to act as a SSL server in accelerator setups. - SASL authentication helper by Ian Castle - msntauth updated to v2.0.3 - no_cache now applies to cache hits as well as cache misses - the Gopher client in Squid has been significantly improved - Squid now sanity checks FTP data connections to ensure the connection is from the requested server. Can be disabled if needed by turning off the ftp_sanitycheck option. - external acl support. A mechanism where flexible ACL checks can be driven by external helpers. See the external_acl_type and acl external directives. - Countless other small things and fixes - HTML pages generated by Squid or CacheMgr as well as the ERR documents now contain a doctype declaration so that browsers know which HTML specification the document uses. In addition to that they have a new look (background-color, font) and are valid according to the HTML standards at www.w3.org. (Clemens Löser) - Login and password send to Basic auth helpers is now URL escaped to allow for spaces and other "odd" characters in logins and passwords - Proxy Authentication is no longer blindly forwarded to peer caches if not used locally. If forwarding of proxy authentication is desired then it must now be configured with the login=PASS cache_peer option. - Responses with Vary: in the header are now cached by squid. (Henrik Nordstrom). - Removed unused 'siteselect_timeout' directive.
2002-10-13 18:43:20 +02:00
SHA1 (patch-aj) = aa2271e53602fe168604aeced6ed66d28fe47707
SHA1 (patch-ak) = 19861281d8a9ece352ce9e881e1e60f6787933e3
SHA1 (patch-al) = 534f273ec63f6de0818f1f86a2b655eac4564213
SHA1 (patch-an) = 8748cfb50e0acb6588228b87b424f87b0c48cc59
SHA1 (patch-ba) = c91bc26e4b6df2cb4b7042591efb4afd7c989462
SHA1 (patch-bb) = 70e92462230ac3b9920946b089290d9ec814fade
SHA1 (patch-bc) = 536299e59c396829f23484a14bb9a6f5c0a4de35
src/fs/diskd: only include sys/msg.h if we have it. fixes build on (at least) Darwin 6.2.
2002-12-01 06:36:51 +01:00
SHA1 (patch-ca) = 652e35b253a6b75a3ac452773d681e70c5fc310d
SHA1 (patch-cb) = 7fb49ee4f9e21dea9ca6e54da9a581866b225853
SHA1 (patch-cc) = 9d9cf0b66768b3942c1683a7a908bfb0aa2fe0f2
Reference in a new issue Copy permalink