[squid-users] Squid 3.3.4 is available

The Squid HTTP Proxy team is very pleased to announce the availability
of the Squid-3.3.4 release!

This release is a bug fix release resolving several issues found in
the prior releases along with many documentation updates.

  Please note that with 3.3 series becoming STABLE the 3.2 series is
  now officially deprecated.

The major changes to be aware of:

* Several memory leaks resolved

One memory leak handling pinned connections. This affected NTLM and
Negotiate authentication, as well as SSL-bumped traffic.
One memory leak on server certificate validation of SSL-bump.

* Several helper crashes

ssl_crtd helpers built on ARM crashing on startup.
basic_ncsa_auth helper build with glibc-2.17 crashing when validating
user credentials.
Squid would exit with an assertion on any external ACL helper lookups
when the helper queue overloads on a grace-period lookup.

* SSL-bump crashes with OpenSSL 1.0.1d and 1.0.1e

Squid build against these versions of OpenSSL was crashing while
validating the server certificate on server-first bumped traffic.

* Blowfish, SHA and generic hash support added to basic_ncsa_auth

These algorithms currently rely on crypt() library support.
However when such support is available the NCSA helper is now able
to validate credentials hashed with those algorithms.

* TPROXY feature support added for BSD

Current release of FreeBSD with IPFW, OpenBSD with PF, and
potentially NetBSD with IPFW are able to support TPROXY feature.

  See the ChangeLog for the full list of changes in this and earlier
  releases.

  All users are urged to upgrade to this release as soon as possible.

Please remember to run "squid -k parse" when testing upgrade to a new
version of Squid. It will audit your configuration files and report
any identifiable issues the new release will have in your installation
before you "press go". We are still removing the infamous "Bungled
Config" halting points and adding checks, so if something is not
identified please report it.

Please refer to the release notes at
http://www.squid-cache.org/Versions/v3/3.3/RELEASENOTES.html
when you are ready to make the switch to Squid-3.3

Upgrade tip:
   "squid -k parse" is starting to display even more
    useful hints about squid.conf changes.

This new release can be downloaded from our HTTP or FTP servers

http://www.squid-cache.org/Versions/v3/3.3/
ftp://ftp.squid-cache.org/pub/squid/
ftp://ftp.squid-cache.org/pub/archive/3.3/

or the mirrors. For a list of mirror sites see

http://www.squid-cache.org/Download/http-mirrors.html
http://www.squid-cache.org/Download/mirrors.html

If you encounter any issues with this release please file a bug report.
http://bugs.squid-cache.org/

Amos Jeffries
Received on Sat Apr 27 2013 - 14:10:48 MDT