Hello community, here is the log from the commit of package squid for openSUSE:Factory checked in at 2014-01-22 14:00:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/squid (Old) and /work/SRC/openSUSE:Factory/.squid.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "squid" Changes: -------- --- /work/SRC/openSUSE:Factory/squid/squid.changes 2013-12-30 10:44:19.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.squid.new/squid.changes 2014-01-23 15:56:49.000000000 +0100 @@ -1,0 +2,85 @@ +Tue Jan 7 19:45:22 UTC 2014 - [email protected] + +- Changes to squid-3.4.2 (30 Dec 2013): + * Regression Bug 3980: FATAL ERROR due to max_user_ip -s option + * Regression Fix: \-unescaping in quoted strings from helpers + * Regression Fix: URL helper API bypassing on URL containing '=' character + * Bug 3985: 60s limit introduced by balance_on_multiple_ip breaks bad IP recovery + * Bug 3806: Caching responses with Vary header + * Bug 3498: FTP PUT assertion + * WCCPv2: Fix assertion 'Cannot convert non-IPv4 to IPv4' on FreeBSD + * Enable concurrency by default for SSL certificate validator + * ... and fix several build errors + +------------------------------------------------------------------- +Wed Dec 25 23:10:24 UTC 2013 - [email protected] + +- Changes to squid-3.4.1 (09 Dec 2013): + * Bug 3935: Invalid pointer dereference when peeking at origin server certificate + * Bug 3589: intercepted and ICAP modified request using a cache_peer + * ... and several portability fixes + * ... and some documentation updates +- Changes to squid-3.4.0.3 (01 Dec 2013): + * Bug 3941: Release notes error + * Receive annotations from authentication and external ACL helpers + * basic_nis_auth: Improved portability + * ... and several documentation updates + * ... and all bug fixes from 3.3.9, 3.3.10, 3.3.11 +- Changes to squid-3.4.0.2 (03 Oct 2013): + * Regression Bug 3891: squid.conf parser errors in 3.4.0.1 + * Regression Fix: re-disable MinGW C++11 support + * Bug 3914: partial: make squidclient tool build cleanly with -Wconversion + * Fix memory leak in refresh_pattern parsing + * negotiate_kerberos_auth: upgrade to present group= keys + * Handle NTLM helper returning OK without user= value + * Add dns_multicast_local to control mDNS operation + * Add --disable-arch-native build option + * Display Build-Info in cache manager info report + * ... and all changes from squid 3.3.9 + * ... and some code and debug output polishing +- Changes to squid-3.4.0.1 (29 Jul 2013): + * Port from 2.7: StoreURL (renamed Store-ID) support + * Bug 3795: fix several mistakes in the MIB file + * Bug 3793: configure: improved helper detection + * Bug 3722: Invalid markup in Armenian hy ERR_ONLY_IF_CACHED_MISS + * Bug 3676: Support GCC 4.7 with -Wshadow option + * Bug 3643: NTLM helpers stuck in reserved state by Safari + * Bug 3389: Auto-reconnect for tcp access_log + * Bug 2066: squid does not do chdir() after chroot() + * Fix uninitialized fields in IcapLogEntry + * Fix a number of minor issues detected by Coverity Scan + * Fix some potential memory leaks detected by Coverity Scan + * Fix 64-bit support for Intel compiler suite (ICC) and other similar compilers + * Fix ACL matching algorithm to avoid repeating tests + * basic_pam_auth: Add -r option to strip NTLM/Negotiate domain from username + * squidpurge: fix META TLV parsing issues + * squid.conf: enforce all the directive and option names are lower-case + * Support EUI on HTTPS and FTP data connections + * Support OK/ERR/BH response codes from any helper + * Support No-lookup flag (-n) on DNS ACLs + * Support -march=native compiler optimization by default + * Support forwarding intercepted but not bumped connections to cache_peers + * Support IPv6 NAT interception on Linux and some BSD + * Deprecate log_icap and log_access configuration directives + * HTTP/1.1: improved method invalidation and cacheability detection + * HTTP/1.1: support length configuration for pipeline_prefetch queue + * Improved TPROXY support for OpenBSD and FreeBSD + * Add storeid_file_rewrite helper to perform Store-ID rewrites from a rules file + * Add all-of and any-of ACL types for grouping sets of ACL tests + * Add note directive for transaction annotations + * Add %note log format for transaction annotation logging + * Add note ACL type for matching annotated transactions with by annotation name or value + * Add kv-pair support to URL-rewrite/redirector interface + * Add SSL server certificate validator interface, helper and result cache + * Add SSL server certificate fingerprint ACL type + * Add spoof_client_ip access control + * Add pt-bz (Belize Portuguese) dialect to translations + * ... and many Windows portability changes (still incomplete) + * ... and many documentation changes + * ... and much code cleanup and polishing +- modified patches: + * squid-compiled_without_RPM_OPT_FLAGS.patch + * squid-config.patch +- remove obsolete fix-pod2man-check patch + +------------------------------------------------------------------- Old: ---- squid-3.3.11.tar.bz2 squid-3.3.11.tar.bz2.asc squid-fix-pod2man-check.patch New: ---- squid-3.4.2.tar.bz2 squid-3.4.2.tar.bz2.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ squid.spec ++++++ --- /var/tmp/diff_new_pack.GBTrvr/_old 2014-01-23 15:56:50.000000000 +0100 +++ /var/tmp/diff_new_pack.GBTrvr/_new 2014-01-23 15:56:50.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package squid # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,15 +18,17 @@ %define squidlibdir %{_libdir}/squid %define squidconfdir /etc/squid +#define snap -20131225-r13064 Name: squid Summary: Squid Version 3.3 WWW Proxy Server License: GPL-2.0+ Group: Productivity/Networking/Web/Proxy -Version: 3.3.11 +Version: 3.4.2 Release: 0 -Url: http://www.squid-cache.org/Versions/v3/3.3 -Source0: http://www.squid-cache.org/Versions/v3/3.3/%{name}-%{version}.tar.bz2 +Url: http://www.squid-cache.org/Versions/v3/3.4 +#Source0: http://www.squid-cache.org/Versions/v3/3.3/%{name}-%{version}%{snap}.tar.bz2 +Source0: http://www.squid-cache.org/Versions/v3/3.4/%{name}-%{version}.tar.bz2 Source1: %{name}-%{version}.tar.bz2.asc Source2: RELEASENOTES.html Source3: squid.init @@ -58,8 +60,6 @@ ## File is compiled without RPM_OPT_FLAGS # squid3 no-rpm-opt-flags <cmdline>:./cf_gen.cc Patch102: %{name}-compiled_without_RPM_OPT_FLAGS.patch -# Upstream notified of this problem by mageia guys -Patch103: %{name}-fix-pod2man-check.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build PreReq: %fillup_prereq PreReq: %insserv_prereq @@ -108,21 +108,23 @@ %description Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages. Squid has extensive access controls and makes a great server accelerator. -Squid 3.3 represents a new feature release above 3.2. +Squid 3.4 represents a new feature release above 3.3. The most important of these new features are: - * SQL Database logging helper - * Time-Quota session helper - * SSL-Bump Server First - * Server Certificate Mimic - * Custom HTTP request headers + * Helper protocol extensions + * SSL Server Certificate Validator + * Store-ID + * TPROXY Support for OpenBSD 5.1+ and FreeBSD 9+ + * Transaction Annotations + * Multicast DNS Most user-facing changes are reflected in squid.conf (see below). - First STABLE release Date: 20 Oct 2012 + First STABLE release Date: 08 Dec 2013 %prep +#setup -q -n %{name}-%{version}%{snap} %gpg_verify %{S:1} %setup -q -n %{name}-%{version} cp %{S:10} . @@ -134,7 +136,6 @@ chmod a-x CREDITS %patch101 %patch102 -%patch103 %build export CFLAGS="%{optflags} -fPIE -fPIC -DOPENSSL_LOAD_CONF" @@ -351,7 +352,8 @@ %{_sbindir}/basic_smb_auth %{_sbindir}/basic_smb_auth.sh %{_sbindir}/cert_tool -%{_sbindir}/digest_edirectory_auth +%{_sbindir}/cert_valid.pl +#{_sbindir}/digest_edirectory_auth %{_sbindir}/digest_file_auth %{_sbindir}/digest_ldap_auth %{_sbindir}/diskd @@ -359,6 +361,7 @@ %{_sbindir}/ext_file_userip_acl %{_sbindir}/ext_kerberos_ldap_group_acl %{_sbindir}/ext_ldap_group_acl +%{_sbindir}/ext_session_acl %{_sbindir}/ext_unix_group_acl %{_sbindir}/ext_wbinfo_group_acl %{_sbindir}/helper-mux.pl @@ -372,6 +375,7 @@ %{_sbindir}/pinger %{_sbindir}/rc%{name} %{_sbindir}/%{name} +%{_sbindir}/storeid_file_rewrite %{_sbindir}/unlinkd %{_sbindir}/url_fake_rewrite %{_sbindir}/url_fake_rewrite.sh ++++++ RELEASENOTES.html ++++++ ++++ 688 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/squid/RELEASENOTES.html ++++ and /work/SRC/openSUSE:Factory/.squid.new/RELEASENOTES.html ++++++ rpmlintrc ++++++ --- /var/tmp/diff_new_pack.GBTrvr/_old 2014-01-23 15:56:50.000000000 +0100 +++ /var/tmp/diff_new_pack.GBTrvr/_new 2014-01-23 15:56:50.000000000 +0100 @@ -1,2 +1,3 @@ addFilter("macro-in-comment") addFilter("no-manual-page-for-binary") +addFilter("zero-length") ++++++ squid-3.3.11.tar.bz2 -> squid-3.4.2.tar.bz2 ++++++ ++++ 118991 lines of diff (skipped) ++++++ squid-3.3.11.tar.bz2.asc -> squid-3.4.2.tar.bz2.asc ++++++ --- /work/SRC/openSUSE:Factory/squid/squid-3.3.11.tar.bz2.asc 2013-12-30 10:44:19.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.squid.new/squid-3.4.2.tar.bz2.asc 2014-01-23 15:56:49.000000000 +0100 @@ -1,8 +1,8 @@ -File: squid-3.3.11.tar.bz2 -Date: Sat Nov 30 14:12:34 UTC 2013 -Size: 2989941 -MD5 : abf2b0fe128f73f5dc157e7e917949e0 -SHA1: f99627f9f5c76cc2ddf6e14e4a3e955963801b6f +File: squid-3.4.2.tar.bz2 +Date: Mon Dec 30 11:52:11 UTC 2013 +Size: 2812777 +MD5 : 7ec46965bc58bc927e81869805a25241 +SHA1: 0b96ee7502b21c69b5f9bd8d2c113b35dd58ecf0 Key : 0xFF5CF463 <[email protected]> fingerprint = EA31 CC5E 9488 E516 8D2D CC5E B268 E706 FF5C F463 keyring = http://www.squid-cache.org/pgp.asc @@ -10,11 +10,11 @@ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) -iQEcBAABAgAGBQJSmfXuAAoJELJo5wb/XPRjaqcIAKvTzz9frodyUOeuop5W2yZx -s3knaI5ZyM7dsXYdDUixto5Q1+a8wIUAvZzCp2sLij3QQTKZJAxgmQ8Tztl/sgKI -NbHJSJxAtibNOGKBfCqCDurcNfmn2kLZJPxJXx3gulEP5O7rTdKVoZq/1vyj/rvv -rnzZBP2HZ5fnXNRfs7UPrOzMLmg423zXzsDnRjj69xy6w0dXpObDP5tb32jNmOLg -zRvk3lw4mtpWJ5kGZ4BbwPpO9i2MT94M9YupjL/doNbbiAt2nutGfGuLgPcmsCwA -fpb74hKIM20ON8A7XypeyX6eNeYn4nkRBSuzEX/sPWQUyq0BMxheCEZRboGCnvo= -=rlWB +iQEcBAABAgAGBQJSwWThAAoJELJo5wb/XPRjdhgIAIjPMGSUDhylA56CEH5NAXg7 +yevT8tC6D3dFhQLtXt8a0sT4ULzMwvXGvH/lYBrEyn8mO8tcU145AJldCAKA3tGS +j1EmB48w5Vu7R4rkfEpwraYS1y4X/hM1nqv0On78yvAOueau6E2Ti5bbkPKCU0xB +oP1YPv+WoLGQtvpgjO9EhX/uVTF+cnCWUwediq9EulAtnkkXAZnJlXgNoJW7cBFv +YhLKpds4Ge/LO0jsPp7j6BsOOhbpvIOmMiELCepZ8hk9Cxm7VeCMrFzI069tUiWs +TQGvblf32oVhlFWRNkVZI4ZPINXmGPPHT2t4f33Lrep0EawQDnFQfoJxOi2VUUM= +=Ugn1 -----END PGP SIGNATURE----- ++++++ squid-compiled_without_RPM_OPT_FLAGS.patch ++++++ --- /var/tmp/diff_new_pack.GBTrvr/_old 2014-01-23 15:56:53.000000000 +0100 +++ /var/tmp/diff_new_pack.GBTrvr/_new 2014-01-23 15:56:53.000000000 +0100 @@ -2,7 +2,7 @@ =================================================================== --- src/Makefile.am.orig +++ src/Makefile.am -@@ -975,7 +975,7 @@ cache_cf.o: cf_parser.cci +@@ -981,7 +981,7 @@ cache_cf.o: cf_parser.cci # cf_gen builds the configuration files. cf_gen$(EXEEXT): $(cf_gen_SOURCES) $(cf_gen_DEPENDENCIES) cf_gen_defines.cci @@ -15,7 +15,7 @@ =================================================================== --- src/Makefile.in.orig +++ src/Makefile.in -@@ -7306,7 +7306,7 @@ cache_cf.o: cf_parser.cci +@@ -7294,7 +7294,7 @@ cache_cf.o: cf_parser.cci # cf_gen builds the configuration files. cf_gen$(EXEEXT): $(cf_gen_SOURCES) $(cf_gen_DEPENDENCIES) cf_gen_defines.cci ++++++ squid-config.patch ++++++ --- /var/tmp/diff_new_pack.GBTrvr/_old 2014-01-23 15:56:53.000000000 +0100 +++ /var/tmp/diff_new_pack.GBTrvr/_new 2014-01-23 15:56:53.000000000 +0100 @@ -2,7 +2,7 @@ =================================================================== --- src/cf.data.pre.orig +++ src/cf.data.pre -@@ -1196,6 +1196,8 @@ http_access deny manager +@@ -1350,6 +1350,8 @@ http_access deny manager # Adapt localnet in the ACL section to list your (internal) IP networks # from where browsing should be allowed http_access allow localnet @@ -11,7 +11,7 @@ http_access allow localhost # And finally deny all other access to this proxy -@@ -3144,6 +3146,10 @@ DOC_START +@@ -3361,6 +3363,10 @@ DOC_START Instead, if you want Squid to use the entire disk drive, subtract 20% and use that value. @@ -22,7 +22,7 @@ 'L1' is the number of first-level subdirectories which will be created under the 'Directory'. The default is 16. -@@ -3277,7 +3283,7 @@ DOC_START +@@ -3494,7 +3500,7 @@ DOC_START NOCOMMENT_START # Uncomment and adjust the following to add a disk cache directory. @@ -31,7 +31,7 @@ NOCOMMENT_END DOC_END -@@ -3890,7 +3896,7 @@ DOC_END +@@ -4147,7 +4153,7 @@ DOC_END NAME: logfile_rotate TYPE: int -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
