Hello community,
here is the log from the commit of package squid for openSUSE:Factory checked in at 2015-05-23 13:07:58
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/squid (Old)
and /work/SRC/openSUSE:Factory/.squid.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "squid"
Changes:
--------
--- /work/SRC/openSUSE:Factory/squid/squid.changes 2015-05-06 12:10:50.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.squid.new/squid.changes 2015-05-23 13:07:59.000000000 +0200
@@ -1,0 +2,20 @@
+Fri May 22 17:43:50 UTC 2015 - mpluskal@suse.com
+
+- Update to 3.5.4
+ * Bug 4234: comm_connect_addr uses errno incorrectly
+ * Bug 4231: fd_open() not correctly handling UDS socket descriptions
+ * Bug 4226: digest_edirectory_auth: found but cannot be built
+ * Bug 4198: assertion failed: client_side.h:364: "sslServerBump == srvBump"
+ * Bug 3775: Disable HTTP/1.1 pipeline feature for pinned connections
+ * Fix require-proxy-header preventing HTTPS proxying and ssl-bump
+ * Fix Negotiate/Kerberos authentication request size exceeds output buffer size
+ * Fix SQUID_X509_V_ERR_DOMAIN_MISMATCH errors while accessing sites with valid certificates
+ * Add server_name ACL matching server name(s) obtained from various sources
+ * Add Kerberos support for MAC OS X 10.x
+ * Support for resuming TLS sessions
+ * ... and some portability and compile fixes
+ * ... and several documentation updates
+ * ... and all fixes from squid 3.4.13
+- Refresh patches
+
+-------------------------------------------------------------------
Old:
----
squid-3.5.3.tar.xz
squid-3.5.3.tar.xz.asc
New:
----
squid-3.5.4.tar.xz
squid-3.5.4.tar.xz.asc
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ squid.spec ++++++
--- /var/tmp/diff_new_pack.qmItrb/_old 2015-05-23 13:08:00.000000000 +0200
+++ /var/tmp/diff_new_pack.qmItrb/_new 2015-05-23 13:08:00.000000000 +0200
@@ -20,7 +20,7 @@
%define squidconfdir %{_sysconfdir}/squid
Name: squid
-Version: 3.5.3
+Version: 3.5.4
Release: 0
Summary: A fully featured HTTP/1.0 proxy
License: GPL-2.0+
@@ -429,6 +429,7 @@
%{_sbindir}/basic_fake_auth
%{_sbindir}/basic_getpwnam_auth
%{_sbindir}/basic_ldap_auth
+%{_sbindir}/digest_edirectory_auth
## will get removed in 3.6 series
# http://www.squid-cache.org/Versions/v3/3.5/RELEASENOTES.html#toc2.8
%{_sbindir}/basic_msnt_multi_domain_auth
++++++ squid-3.5.3.tar.xz -> squid-3.5.4.tar.xz ++++++
++++ 3932 lines of diff (skipped)
++++++ squid-3.5.3.tar.xz.asc -> squid-3.5.4.tar.xz.asc ++++++
--- /work/SRC/openSUSE:Factory/squid/squid-3.5.3.tar.xz.asc 2015-04-27 13:05:13.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.squid.new/squid-3.5.4.tar.xz.asc 2015-05-23 13:07:59.000000000 +0200
@@ -1,8 +1,8 @@
-File: squid-3.5.3.tar.xz
-Date: Sat Mar 28 11:51:30 UTC 2015
-Size: 2283580
-MD5 : 6cd553300a2253c0913f498beb79ee51
-SHA1: 6919305e16f59387197cf543f525e41f510b4727
+File: squid-3.5.4.tar.xz
+Date: Fri May 1 12:25:42 UTC 2015
+Size: 2289772
+MD5 : 5b53d5bb47fa033b76857f7956d0c36b
+SHA1: 71a04a5f7c4c38464a8a08ae1089c47abcea0e49
Key : 0xFF5CF463
fingerprint = EA31 CC5E 9488 E516 8D2D CC5E B268 E706 FF5C F463
keyring = http://www.squid-cache.org/pgp.asc
@@ -10,11 +10,11 @@
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
-iQEcBAABAgAGBQJVFpsoAAoJELJo5wb/XPRj4KYH/RU/x21yI0nI2sI0ilTUbG4K
-W0mFM1YcbjtaRreXU6zgc7kVLPiypRYeXP+GDvADK3uEmXCvjulyT2pBqCdiftsV
-BC2kBQDH4m1XUICE+vxKC2LmDAAPFxH0yOTiNltH1BEjNrjUcAPAlfuforVUz84u
-VbiVcKMHQ3UShCsdLU3ZfM9qt5AUI6IEKDYIrfOJ+zNg8tEdMXlA3vSno1M2LQ32
-v0wKJJ0WtT8KETOI2HAFAXJJFImJczWh480ffQV76vctT1BAmtue2CRpH0IKpNbZ
-8WBIx2wraxzBSu+YAvjinnabLMblyzPfkwuP4U4j0JBGml9A3Us+P/unIlsEGj0=
-=rz1P
+iQEcBAABAgAGBQJVQ3PPAAoJELJo5wb/XPRjdI8H/3vB73EXjW0nzu9iJr6gN7vs
+PZjle4b6cT/76nbAf0O4R5m/HAeIfuoWLsHoVCysroRMcVqni0su1swqavMj/d27
+ikhSyR/JlXArFFumV0Nj1srZuY11Qz9dohLqVBwX8dzuqzFrqF5jQMvM2bKK1Pm9
+hUF+tFZP4sF/y7NBdHMKkb7pRLLc8Yn75wZtg4FAhLY6HfM58e3Sn5Y3JUJ4Lyt0
+6YqnzDQzNAs6YCrsLnY/AY7TKL8hAXMmvJXP9q1wn31lCmzx5KNz3b9YTq+Ul1aB
+XqyXyP2FptkUrPJ448f0hgAsrDNfs2rpAblq35ueo6fAV4gwgtmlIb81Y5w0eTQ=
+=PwZH
-----END PGP SIGNATURE-----
++++++ squid-brokenad.patch ++++++
--- /var/tmp/diff_new_pack.qmItrb/_old 2015-05-23 13:08:02.000000000 +0200
+++ /var/tmp/diff_new_pack.qmItrb/_new 2015-05-23 13:08:02.000000000 +0200
@@ -74,7 +74,7 @@
===================================================================
--- helpers/external_acl/kerberos_ldap_group/support.h.orig
+++ helpers/external_acl/kerberos_ldap_group/support.h
-@@ -101,6 +101,7 @@ struct main_args {
+@@ -105,6 +105,7 @@ struct main_args {
int rc_allow;
int AD;
int mdepth;
@@ -82,7 +82,7 @@
char *ddomain;
struct gdstruct *groups;
struct ndstruct *ndoms;
-@@ -160,7 +161,7 @@ int create_nd(struct main_args *margs);
+@@ -164,7 +165,7 @@ int create_nd(struct main_args *margs);
int create_ls(struct main_args *margs);
#ifdef HAVE_KRB5
@@ -95,7 +95,7 @@
===================================================================
--- helpers/external_acl/kerberos_ldap_group/support_ldap.cc.orig
+++ helpers/external_acl/kerberos_ldap_group/support_ldap.cc
-@@ -888,7 +888,7 @@ get_memberof(struct main_args *margs, ch
+@@ -898,7 +898,7 @@ get_memberof(struct main_args *margs, ch
debug((char *) "%s| %s: DEBUG: Setup Kerberos credential cache\n", LogTime(), PROGRAM);
#if HAVE_KRB5
++++++ squid-config.patch ++++++
--- /var/tmp/diff_new_pack.qmItrb/_old 2015-05-23 13:08:02.000000000 +0200
+++ /var/tmp/diff_new_pack.qmItrb/_new 2015-05-23 13:08:02.000000000 +0200
@@ -2,7 +2,7 @@
===================================================================
--- src/cf.data.pre.orig
+++ src/cf.data.pre
-@@ -1397,6 +1397,8 @@ http_access deny manager
+@@ -1409,6 +1409,8 @@ http_access deny manager
# Adapt localnet in the ACL section to list your (internal) IP networks
# from where browsing should be allowed
http_access allow localnet
@@ -11,7 +11,7 @@
http_access allow localhost
# And finally deny all other access to this proxy
-@@ -3616,6 +3618,10 @@ DOC_START
+@@ -3637,6 +3639,10 @@ DOC_START
Instead, if you want Squid to use the entire disk drive,
subtract 20% and use that value.
@@ -22,7 +22,7 @@
'L1' is the number of first-level subdirectories which
will be created under the 'Directory'. The default is 16.
-@@ -3734,7 +3740,7 @@ DOC_START
+@@ -3755,7 +3761,7 @@ DOC_START
NOCOMMENT_START
# Uncomment and adjust the following to add a disk cache directory.
@@ -31,7 +31,7 @@
NOCOMMENT_END
DOC_END
-@@ -4410,7 +4416,7 @@ DOC_END
+@@ -4431,7 +4437,7 @@ DOC_END
NAME: logfile_rotate
TYPE: int
++++++ squid-nobuilddates.patch ++++++
--- /var/tmp/diff_new_pack.qmItrb/_old 2015-05-23 13:08:02.000000000 +0200
+++ /var/tmp/diff_new_pack.qmItrb/_new 2015-05-23 13:08:02.000000000 +0200
@@ -78,7 +78,7 @@
===================================================================
--- helpers/ntlm_auth/fake/ntlm_fake_auth.cc.orig
+++ helpers/ntlm_auth/fake/ntlm_fake_auth.cc
-@@ -147,7 +147,7 @@ main(int argc, char *argv[])
+@@ -141,7 +141,7 @@ main(int argc, char *argv[])
process_options(argc, argv);
++++++ squid-old-kerberos.patch ++++++
--- /var/tmp/diff_new_pack.qmItrb/_old 2015-05-23 13:08:02.000000000 +0200
+++ /var/tmp/diff_new_pack.qmItrb/_new 2015-05-23 13:08:02.000000000 +0200
@@ -1,8 +1,8 @@
Index: helpers/negotiate_auth/kerberos/negotiate_kerberos_auth.cc
===================================================================
---- helpers/negotiate_auth/kerberos/negotiate_kerberos_auth.cc.orig 2015-03-28 11:58:05.000000000 +0100
-+++ helpers/negotiate_auth/kerberos/negotiate_kerberos_auth.cc 2015-04-01 14:45:11.970927882 +0200
-@@ -537,7 +537,11 @@ main(int argc, char *const argv[])
+--- helpers/negotiate_auth/kerberos/negotiate_kerberos_auth.cc.orig
++++ helpers/negotiate_auth/kerberos/negotiate_kerberos_auth.cc
+@@ -535,7 +535,11 @@ main(int argc, char *const argv[])
keytab_name_env = getenv("KRB5_KTNAME");
if (!keytab_name_env) {
ret = krb5_init_context(&context);