-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-3.5.2 release! This release is a bug fix release resolving several issues found in the prior Squid releases. The major changes to be aware of: * Regression Bug #4176: Digest auth too many helper lookups It was found that the Digest authentication helper was being called to validate credentials on every client request regardless of an appropriate TTL or nonce re-use counter being available. This release decreases CPU usage and improves latency of client traffic on all installations using Digest authentication. * SSL-Bump feature transparency improvements The SSL-Bump feature is now relaying SNI information from the client to server when performing server-first bumping of intercepted traffic. The sslproxy_options directive is now no longer being applied to server connections when peek/stare operations are performed. Squid will now supply to the external verification helper the missing root CAs (i.e. fill in the gaps) when validating chains that already passed internal checks. Each of these reduces TLS errors induced by the existence of Squid in the path, making SSL-Bump much more transparent than before. * Fix some cbdataFree related memory leaks This resolves some slow memory leaks resulting from the use of cache_peer. Be aware there are other issues still outstanding which have the appearance of memory leaks in some installations. If you are seeing what appears to be a leak this may help, but it also may not be the whole issue. * All security fixes from 3.4.12 are also present in this release. All users of Squid SSL-Bump feature are urged to upgrade to this release as soon as possible. All users of NTLM or Negotiate (Kerberos) authentication features are urged to upgrade to this release as soon as possible. All users of Squid are encouraged to upgrade to this release as soon as possible. See the ChangeLog for the full list of changes in this and earlier releases. Please refer to the release notes at http://www.squid-cache.org/Versions/v3/3.5/RELEASENOTES.html when you are ready to make the switch to Squid-3.5 Upgrade tip: "squid -k parse" is starting to display even more useful hints about squid.conf changes. This new release can be downloaded from our HTTP or FTP servers http://www.squid-cache.org/Versions/v3/3.5/ ftp://ftp.squid-cache.org/pub/squid/ ftp://ftp.squid-cache.org/pub/archive/3.5/ or the mirrors. For a list of mirror sites see http://www.squid-cache.org/Download/http-mirrors.html http://www.squid-cache.org/Download/mirrors.html If you encounter any issues with this release please file a bug report. http://bugs.squid-cache.org/ Amos Jeffries -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQEcBAEBAgAGBQJU5TK5AAoJELJo5wb/XPRjtYcH/35kDtQ5zLgtZ1RScVhPjOnT KKAkLTru/FGPtaonO/fBDV9t3bwqU1NkzIiBfJ0wodkQaAYpg+/iD0Zs7Mjq5++d 0aXoRWEK7n8Pbx1v9UOzymUgweHQqjBeY9iPaViil1mgg0/V70Gvb6qIVGtGU+Qz 8tTeWb1zl66TxdGm++XUb+3seY4jRPfC6RoarhTj5VB6S3n3YUYqJ3njidWwv/oN NovSJNDSyB7rZKyOyUodURu74Mi/Qoej39SqlGB3pfp1LVujqQjUYaKPCuRT57/q 527Ni5IShf+k2MOCJYFFcuw9Gy9Of9t1E7p7spbADeNyjFuUvjRsE0ZOpN09kpo= =UkbJ -----END PGP SIGNATURE----- _______________________________________________ squid-announce mailing list squid-announce@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-announce
