The Squid HTTP Proxy team is very pleased to announce the availability
of the Squid-3.2.6 release!
This release is a security update and bug fix release resolving
several issues found in the prior releases.
Some major changes to be aware of:
* CVE-2012-5643 / SQUID-2012:1 vulnerability
Some additional pieces of this vulnerability have been found and
fixed.
* Bug 3731 <http://bugs.squid-cache.org/show_bug.cgi?id=3731>: TOS
setsockopt() not working has a proposed fix.
This fix still requires testing to verify it works on all operating
systems but since this is reverting a regression change we have a
high confidence that it does.
* Bug 3650 <http://bugs.squid-cache.org/show_bug.cgi?id=3650>: Negotiate
auth missing challenge token has been fixed.
One major cause of missing challenge tokens in Negotiate authentication
has been resolved. Note that there are similar issues which MAY still
exist in NTLM.
See the ChangeLog for the full list of changes in this and earlier
releases.
All users of Squid-3 are urged to upgrade to this release as soon as
possible.
Please remember to run "squid -k parse" when testing upgrade to a new
version of Squid. It will audit your configuration files and report
any identifiable issues the new release will have in your installation
before you "press go". We are still removing the infamous "Bungled
Config" halting points and adding checks, so if something is not
identified please report it.
Please refer to the release notes at
http://www.squid-cache.org/Versions/v3/3.2/RELEASENOTES.html
when you are ready to make the switch to Squid-3.2
Upgrade tip:
"squid -k parse" is starting to display even more
useful hints about squid.conf changes.
This new release can be downloaded from our HTTP or FTP servers
http://www.squid-cache.org/Versions/v3/3.2/
ftp://ftp.squid-cache.org/pub/squid/
ftp://ftp.squid-cache.org/pub/archive/3.2/
or the mirrors. For a list of mirror sites see
http://www.squid-cache.org/Download/http-mirrors.html
http://www.squid-cache.org/Download/mirrors.html
If you encounter any issues with this release please
file a bug report.
http://bugs.squid-cache.org/
Amos Jeffries
