Squid Version 3.2 WWW Proxy Server
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages. Squid has extensive access controls and makes a great server accelerator.
Squid 3.2 represents a new feature release above 3.1.
The most important of these new features are:
* CVE-2009-0801 : NAT interception vulnerability to malicious clients.
* NCSA helper DES algorithm password limits
* SMP scalability
* Helper Multiplexer and On-Demand
* Helper Name Changes
* Multi-Lingual manuals
* Solaris 10 pthreads Support
* Surrogate/1.0 protocol extensions to HTTP
* Logging Infrastructure Updated
* Client Bandwidth Limits
* Better eCAP support
* Cache Manager access changes
First STABLE release Date: 02 Aug 2010
Latest Release: 3.2.2
Latest Release Date: 05 Oct 2012
- Developed at server:proxy
- Sources inherited from project openSUSE:Factory
-
7
derived packages
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout openSUSE:Backports:SLE-15-SP5:FactoryCandidates/squid && cd $_ - Create Badge
Source Files
| Filename | Size | Changed |
|---|---|---|
| README.kerberos | 0000002460 2.4 KB | |
| cache_dir.sed | 0000000107 107 Bytes | |
| initialize_cache_if_needed.sh | 0000000259 259 Bytes | |
| missing_installs.patch | 0000000532 532 Bytes | |
| pam.squid | 0000000165 165 Bytes | |
| squid-4.8.tar.xz | 0002440888 2.33 MB | |
| squid-4.8.tar.xz.asc | 0000001193 1.17 KB | |
| squid.changes | 0000126076 123 KB | |
| squid.keyring | 0000095203 93 KB | |
| squid.logrotate | 0000000352 352 Bytes | |
| squid.permissions | 0000000145 145 Bytes | |
| squid.service | 0000000352 352 Bytes | |
| squid.spec | 0000011213 11 KB | |
| tmpfilesdir.squid.conf | 0000000064 64 Bytes | |
| unsquid.pl | 0000005040 4.92 KB |
Revision 72 (latest revision is 122)
Dominique Leuenberger (dimstar_suse)
accepted
request 715745
from
Adam Majer (adamm)
(revision 72)
- Update to squid 4.8:
+ Ignore ECONNABORTED in accept(2)
+ RFC 7230 forbids generation of userinfo subcomponent of https URL
+ cachemgr.cgi: unallocated memory access resulting in a potential
denial of service. (bsc#1141442, CVE-2019-12854)
+ terminating c-strings beyond BASE64_DECODE_LENGTH
+ Replace uudecode with libnettle base64 decoder fixing a denial
of service vulnerability (bsc#1141329, CVE-2019-12529)
+ fix to_localhost does not include ::
+ Fix GCC-9 build issues
+ Fix Digest auth parameter parsing preventing a potential
denial of service (bsc#1141332, CVE-2019-12525)
+ Update HttpHeader::getAuth to SBuf which prevents a potential
heap overflowing allowing a possible remote code execution
attack when processing HTTP Authentication credentials
(bsc#1141330, CVE-2019-12527)
+ Add the NO_TLSv1_3 option to available tls-options values
+ Fix handling of tiny invalid responses
+ Fix Memory leak when http_reply_access uses external_acl
+ Fix Multiple XSS issues in cachemgr.cgi
(bsc#1140738, CVE-2019-13345)
- use unbundled version of libnettle
- disable LTO as a workaround to tests failing
Comments 0