The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-3.3.4 release! This release is a bug fix release resolving several issues found in the prior releases along with many documentation updates. Please note that with 3.3 series becoming STABLE the 3.2 series is now officially deprecated. The major changes to be aware of: * Several memory leaks resolved One memory leak handling pinned connections. This affected NTLM and Negotiate authentication, as well as SSL-bumped traffic. One memory leak on server certificate validation of SSL-bump. * Several helper crashes ssl_crtd helpers built on ARM crashing on startup. basic_ncsa_auth helper build with glibc-2.17 crashing when validating user credentials. Squid would exit with an assertion on any external ACL helper lookups when the helper queue overloads on a grace-period lookup. * SSL-bump crashes with OpenSSL 1.0.1d and 1.0.1e Squid build against these versions of OpenSSL was crashing while validating the server certificate on server-first bumped traffic. * Blowfish, SHA and generic hash support added to basic_ncsa_auth These algorithms currently rely on crypt() library support. However when such support is available the NCSA helper is now able to validate credentials hashed with those algorithms. * TPROXY feature support added for BSD Current release of FreeBSD with IPFW, OpenBSD with PF, and potentially NetBSD with IPFW are able to support TPROXY feature. See the ChangeLog for the full list of changes in this and earlier releases. All users are urged to upgrade to this release as soon as possible. Please remember to run "squid -k parse" when testing upgrade to a new version of Squid. It will audit your configuration files and report any identifiable issues the new release will have in your installation before you "press go". We are still removing the infamous "Bungled Config" halting points and adding checks, so if something is not identified please report it. Please refer to the release notes at http://www.squid-cache.org/Versions/v3/3.3/RELEASENOTES.html when you are ready to make the switch to Squid-3.3 Upgrade tip: "squid -k parse" is starting to display even more useful hints about squid.conf changes. This new release can be downloaded from our HTTP or FTP servers http://www.squid-cache.org/Versions/v3/3.3/ ftp://ftp.squid-cache.org/pub/squid/ ftp://ftp.squid-cache.org/pub/archive/3.3/ or the mirrors. For a list of mirror sites see http://www.squid-cache.org/Download/http-mirrors.html http://www.squid-cache.org/Download/mirrors.html If you encounter any issues with this release please file a bug report. http://bugs.squid-cache.org/ Amos Jeffries
