The Squid HTTP Proxy team is very pleased to announce the
availability of the Squid-3.1.0.16 beta release!
This release is a major milestone and covers several feature regressions
and security issues.
* Advisory SQUID-2010:1 "Denial of Service issue in DNS handling" is
resolved by this release.
* follow_x_forwarded_for port was incomplete in a few areas. This
release fills all the known gaps and adds handling for IPv6 addresses in
the header and ICAP support. The chain of trust has been extended to
include all known security cases and unwrap the real client IP back to
the outer boundary of the trusted network(s).
* SNMP had some OID changes for IPv6 support which were inaccurate.
This release fixes all those probems and brings Squid-3.1 up to a
reliable OID numbering standard. Details of the exact OID can be found
in the Squid wiki http://wiki.squid-cache.org/Features/Snmp
* A minor regression has been resolved in config file parsing where an
error in a sub-include was not halting Squid properly. In some setups
this could result in squid starting with inconsistent configuration
state. This is now fixed.
* Several issues with connection pinning and NTLM/Negotiate/Kerberos
authentication pass-thru have been found and resolved. These problems
could result in NTLM connections being re-authenticated periodically or
outright failing to authenticate at all through Squid.
* The old RunCache/RunAccel scripts are now officially obsolete and
have been dropped from distribution as of this release.
* A new option client_ip_max_connections has been added to set limits
on the number of TCP connections any given client IP can make
simultaneously. Further connections will be dropped immediately.
All users of Squid-3.1 are urged to upgrade to this release as soon as
possible.
Please refer to the release notes at
http://www.squid-cache.org/Versions/v3/3.1/RELEASENOTES.html
if and when you are ready to make the switch to Squid-3.1
This new release can be downloaded from our HTTP or FTP servers
http://www.squid-cache.org/Versions/v3/3.1/
ftp://ftp.squid-cache.org/pub/squid/
or the mirrors. For a list of mirror sites see
http://www.squid-cache.org/Download/http-mirrors.dyn
http://www.squid-cache.org/Download/mirrors.dyn
If you encounter any issues with this release please file a bug report.
http://bugs.squid-cache.org/
Amos Jeffries
