~squid/squid/3.1 : changes

~squid/squid/3.1 » Changes from revision 10499

From Revision 10499 to 10480

Rev	Summary	Authors	Tags	Date
10499	Bug 4169: HIT marked as MISS when If-None-Match does not mat... Bug 4169: HIT marked as MISS when If-None-Match does not match	Garri Djavadyan		7 years ago
10498	Bug 3379: Combination of If-Match and a Cache Hit result in ... Bug 3379: Combination of If-Match and a Cache Hit result in TCP Connection Failure	Garri Djavadyan		7 years ago
10497	Bug 4515: regression after CVE-2016-4554 patch Bug 4515: regression after CVE-2016-4554 patch	Amos Jeffries		7 years ago
10496	Require exact match in Host header name lookup Require exact match in Host header name lookup	Amos Jeffries		7 years ago
10495	pinger: Fix buffer overflow in Icmp6::Recv pinger: Fix buffer overflow in Icmp6::Recv	Yuriy M. Kaminskiy		8 years ago
10494	Do not blindly forward cache peer CONNECT responses. Do not blindly forward cache peer CONNECT responses. Squid blindly forwards cache peer CONNECT responses to clients. This may break things if the peer responds with something like HTTP 403 (Forbidden) and keeps the connection with Squid open: - The client application issues a CONNECT request. - Squid forwards this request to a cache peer. - Cache peer correctly responds back with a "403 Forbidden". - Squid does not parse cache peer response and just forwards it as if it was a Squid response to the client. - The TCP connections are not closed. At this stage, Squid is unaware that the CONNECT request has failed. All subsequent requests on the user agent TCP connection are treated as tunnelled traffic. Squid is forwarding these requests to the peer on the TCP connection previously used for the 403-ed CONNECT request, without proper processing. The additional headers which should have been applied by Squid to these requests are not applied, and the requests are being forwarded to the cache peer even though the Squid configuration may state that these requests must go directly to the origin server. This fixes Squid to parse cache peer responses, and if an error response found, respond with "502 Bad Gateway" to the client and close the connections. Backport by Raphaël Hertzog based on original work by Alex Rousskov	Alex Rousskov		8 years ago
10493	Fix backport error in rev.10490 Fix backport error in rev.10490	Amos Jeffries		8 years ago
10492	Docs: Update CONTRIBUTORS Docs: Update CONTRIBUTORS	Source Maintenance		8 years ago
10491	Release Notes updates Release Notes updates	Amos Jeffries		9 years ago
10490	Fix various ICMP handling issues in Squid pinger Fix various ICMP handling issues in Squid pinger * ICMP code type logging display could over-read the registered type string arrays. * Malformed ICMP packets were accepted into processing with undefined and potentially nasty results. Both sets of flaws can result in pinger segmentation fault and halting the Squid functionality relying on pinger for correct operation. Thanks to the OpenSUSE project for analysis and resolution of these.	Amos Jeffries		9 years ago
10489	Fix off by one in SNMP subsystem Fix off by one in SNMP subsystem	Sebastian Krahmer		9 years ago
10488	Ignore Range headers with unidentifiable byte-range values Ignore Range headers with unidentifiable byte-range values If squid is unable to determine the byte value for ranges, treat the header as invalid.	Amos Jeffries		9 years ago
10487	Protect against buffer overrun in DNS query generation Protect against buffer overrun in DNS query generation see SQUID-2013:2. This bug has been present as long as the internal DNS component however most code reaching this point is passing through URL validation first. With Squid-3.2 Host header verification using DNS directly we may have problems.	Nathan Hoad	SQUID_3_3_9	10 years ago
10486	Bug 3790: cachemgr.cgi crash with authentication Bug 3790: cachemgr.cgi crash with authentication	Reinhard Sojka		11 years ago
10485	3.1.23 3.1.23	Amos Jeffries	SQUID_3_1_23	11 years ago
10484	Another piece of SQUID-2012:1 Another piece of SQUID-2012:1	Eygene Ryabinkin		11 years ago
10483	Additional pieces of SQUID-2012:1 Additional pieces of SQUID-2012:1	Amos Jeffries		11 years ago
10482	3.1.22 3.1.22	Amos Jeffries	SQUID_3_1_22	11 years ago
10481	Additional fix on rev.10479 for freeing const buffer Additional fix on rev.10479 for freeing const buffer	Amos Jeffries		11 years ago
10480	Bug 3685: Squid hangs in ClassCBucket::update Bug 3685: Squid hangs in ClassCBucket::update	Amos Jeffries		11 years ago

Older »