%define __perl_requires %{SOURCE98}

Name:     squid

Version:  4.11

Release:  4%{?dist}

Summary:  The Squid proxy caching server

Epoch:    7

# See CREDITS for breakdown of non GPLv2+ code

License:  GPLv2+ and (LGPLv2+ and MIT and BSD and Public Domain)

URL:      http://www.squid-cache.org

Source0:  http://www.squid-cache.org/Versions/v4/squid-%{version}.tar.xz

Source1:  http://www.squid-cache.org/Versions/v4/squid-%{version}.tar.xz.asc

Source2:  squid.logrotate

Source3:  squid.sysconfig

Source4:  squid.pam

Source5:  squid.nm

Source6:  squid.service

Source7:  cache_swap.sh

Source98: perl-requires-squid.sh

# Upstream patches

# Backported patches

# Local patches

# Applying upstream patches first makes it less likely that local patches

# will break upstream ones.

Patch201: squid-4.11-config.patch

Patch202: squid-4.11-location.patch

Patch203: squid-4.11-perlpath.patch

Patch204: squid-4.11-include-guards.patch

Patch205: squid-4.11-large-acl.patch

# https://bugzilla.redhat.com/show_bug.cgi?id=980511

Patch206: squid-4.11-active-ftp.patch

# https://github.com/squid-cache/squid/commit/c26cd1cb6a60ff196ef13c00e82576d3bfeb2e30

Patch207: squid-4.11-systemd.patch

Patch208: squid-4.11-convert-ipv4.patch

# https://bugzilla.redhat.com/show_bug.cgi?id=1890606

Patch209: squid-4.11-cache-mgr-auth-strdup.patch

# Security fixes

# https://bugzilla.redhat.com/show_bug.cgi?id=1852554

Patch500: squid-4.11-CVE-2020-14058.patch

# https://bugzilla.redhat.com/show_bug.cgi?id=1852550

Patch501: squid-4.11-CVE-2020-15049.patch

# https://bugzilla.redhat.com/show_bug.cgi?id=1871705

Patch502: squid-4.11-CVE-2020-24606.patch

# https://bugzilla.redhat.com/show_bug.cgi?id=1871702

Patch503: squid-4.11-CVE-2020-15811.patch

# https://bugzilla.redhat.com/show_bug.cgi?id=1871700

Patch504: squid-4.11-CVE-2020-15810.patch

Requires: bash >= 2.0

Requires(pre): shadow-utils

Requires(post): systemd

Requires(preun): systemd

Requires(postun): systemd

# squid_ldap_auth and other LDAP helpers require OpenLDAP

BuildRequires: openldap-devel

# squid_pam_auth requires PAM development libs

BuildRequires: pam-devel

# SSL support requires OpenSSL

BuildRequires: openssl-devel

# squid_kerb_aut requires Kerberos development libs

BuildRequires: krb5-devel

# time_quota requires DB

BuildRequires: libdb-devel

# ESI support requires Expat & libxml2

BuildRequires: expat-devel libxml2-devel

# TPROXY requires libcap, and also increases security somewhat

BuildRequires: libcap-devel

# eCAP support

BuildRequires: libecap-devel

#ip_user helper requires

BuildRequires: gcc-c++

BuildRequires: libtool libtool-ltdl-devel

BuildRequires: perl-generators

# For test suite

BuildRequires: pkgconfig(cppunit)

BuildRequires: autoconf

# systemd notify

BuildRequires: systemd-devel

%description

Squid is a high-performance proxy caching server for Web clients,

supporting FTP, gopher, and HTTP data objects. Unlike traditional

caching software, Squid handles all requests in a single,

non-blocking, I/O-driven process. Squid keeps meta data and especially

hot objects cached in RAM, caches DNS lookups, supports non-blocking

DNS lookups, and implements negative caching of failed requests.

Squid consists of a main server program squid, a Domain Name System

lookup program (dnsserver), a program for retrieving FTP data

(ftpget), and some management and client tools.

%prep

%setup -q

# Upstream patches

# Backported patches

# Local patches

%patch201 -p1 -b .config

%patch202 -p1 -b .location

%patch203 -p1 -b .perlpath

%patch204 -p1 -b .include-guards

%patch205 -p1 -b .large_acl

%patch206 -p1 -b .active-ftp

%patch207 -p1 -b .systemd

%patch208 -p1 -R -b .convert-ipv4

%patch209 -p1 -b .cachemgr-strdup

# Security patches

%patch500 -p1 -b .cve-2020-14058

%patch501 -p1 -b .cve-2020-15049

%patch502 -p1 -b .cve-2020-24606

%patch503 -p1 -b .CVE-2020-15811

%patch504 -p1 -b .CVE-2020-15810

# https://bugzilla.redhat.com/show_bug.cgi?id=1679526

# Patch in the vendor documentation and used different location for documentation

sed -i 's|@SYSCONFDIR@/squid.conf.documented|%{_pkgdocdir}/squid.conf.documented|' src/squid.8.in

%build

# cppunit-config patch changes configure.ac

autoconf

# NIS helper has been removed because of the following bug

# https://bugzilla.redhat.com/show_bug.cgi?id=1531540

%configure \

   --libexecdir=%{_libdir}/squid \

   --datadir=%{_datadir}/squid \

   --sysconfdir=%{_sysconfdir}/squid \

   --with-logdir='%{_localstatedir}/log/squid' \

   --with-pidfile='%{_localstatedir}/run/squid.pid' \

   --disable-dependency-tracking \

   --enable-eui \

   --enable-follow-x-forwarded-for \

   --enable-auth \

   --enable-auth-basic="DB,fake,getpwnam,LDAP,NCSA,PAM,POP3,RADIUS,SASL,SMB,SMB_LM" \

   --enable-auth-ntlm="SMB_LM,fake" \

   --enable-auth-digest="file,LDAP" \

   --enable-auth-negotiate="kerberos" \

   --enable-external-acl-helpers="LDAP_group,time_quota,session,unix_group,wbinfo_group,kerberos_ldap_group" \

   --enable-storeid-rewrite-helpers="file" \

   --enable-cache-digests \

   --enable-cachemgr-hostname=localhost \

   --enable-delay-pools \

   --enable-epoll \

   --enable-icap-client \

   --enable-ident-lookups \

   %ifnarch %{power64} ia64 x86_64 s390x aarch64

   --with-large-files \

   %endif

   --enable-linux-netfilter \

   --enable-removal-policies="heap,lru" \

   --enable-snmp \

   --enable-ssl \

   --enable-ssl-crtd \

   --enable-storeio="aufs,diskd,ufs,rock" \

   --enable-diskio \

   --enable-wccpv2 \

   --enable-esi \

   --enable-ecap \

   --with-aio \

   --with-default-user="squid" \

   --with-dl \

   --with-openssl \

   --with-pthreads \

   --disable-arch-native \

   --disable-security-cert-validators \

   --with-swapdir=%{_localstatedir}/spool/squid

%make_build

%check

make check

%install

%make_install

echo "

#

# This is %{_sysconfdir}/httpd/conf.d/squid.conf

#

ScriptAlias /Squid/cgi-bin/cachemgr.cgi %{_libdir}/squid/cachemgr.cgi

# Only allow access from localhost by default

<Location /Squid/cgi-bin/cachemgr.cgi>

 Require local

 # Add additional allowed hosts as needed

 # Require host example.com

</Location>" > $RPM_BUILD_ROOT/squid.httpd.tmp

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/pam.d

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d/

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/NetworkManager/dispatcher.d

mkdir -p $RPM_BUILD_ROOT%{_unitdir}

mkdir -p $RPM_BUILD_ROOT%{_libexecdir}/squid

install -m 644 %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/squid

install -m 644 %{SOURCE3} $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/squid

install -m 644 %{SOURCE4} $RPM_BUILD_ROOT%{_sysconfdir}/pam.d/squid

install -m 644 %{SOURCE6} $RPM_BUILD_ROOT%{_unitdir}

install -m 755 %{SOURCE7} $RPM_BUILD_ROOT%{_libexecdir}/squid

install -m 644 $RPM_BUILD_ROOT/squid.httpd.tmp $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d/squid.conf

install -m 644 %{SOURCE5} $RPM_BUILD_ROOT%{_sysconfdir}/NetworkManager/dispatcher.d/20-squid

mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/log/squid

mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/spool/squid

mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/run/squid

chmod 644 contrib/url-normalizer.pl contrib/user-agents.pl

iconv -f ISO88591 -t UTF8 ChangeLog -o ChangeLog.tmp

mv -f ChangeLog.tmp ChangeLog

# install /usr/lib/tmpfiles.d/squid.conf

mkdir -p ${RPM_BUILD_ROOT}%{_tmpfilesdir}

cat > ${RPM_BUILD_ROOT}%{_tmpfilesdir}/squid.conf <

# See tmpfiles.d(5) for details

d /run/squid 0755 squid squid - -

EOF

# Move the MIB definition to the proper place (and name)

mkdir -p $RPM_BUILD_ROOT/usr/share/snmp/mibs

mv $RPM_BUILD_ROOT/usr/share/squid/mib.txt $RPM_BUILD_ROOT/usr/share/snmp/mibs/SQUID-MIB.txt

# squid.conf.documented is documentation. We ship that in doc/

rm -f $RPM_BUILD_ROOT%{_sysconfdir}/squid/squid.conf.documented

# remove unpackaged files from the buildroot

rm -f $RPM_BUILD_ROOT%{_bindir}/{RunAccel,RunCache}

rm -f $RPM_BUILD_ROOT/squid.httpd.tmp

%files

%defattr(-,root,root,-)

%license COPYING 

%doc CONTRIBUTORS README ChangeLog QUICKSTART src/squid.conf.documented

%doc contrib/url-normalizer.pl contrib/user-agents.pl

%{_unitdir}/squid.service

%attr(755,root,root) %dir %{_libexecdir}/squid

%attr(755,root,root) %{_libexecdir}/squid/cache_swap.sh

%attr(755,root,root) %dir %{_sysconfdir}/squid

%attr(755,root,root) %dir %{_libdir}/squid

%attr(770,squid,root) %dir %{_localstatedir}/log/squid

%attr(750,squid,squid) %dir %{_localstatedir}/spool/squid

%attr(755,squid,squid) %dir %{_localstatedir}/run/squid

%config(noreplace) %attr(644,root,root) %{_sysconfdir}/httpd/conf.d/squid.conf

%config(noreplace) %attr(640,root,squid) %{_sysconfdir}/squid/squid.conf

%config(noreplace) %attr(644,root,squid) %{_sysconfdir}/squid/cachemgr.conf

%config(noreplace) %{_sysconfdir}/squid/mime.conf

%config(noreplace) %{_sysconfdir}/squid/errorpage.css

%config(noreplace) %{_sysconfdir}/sysconfig/squid

# These are not noreplace because they are just sample config files

%config %{_sysconfdir}/squid/squid.conf.default

%config %{_sysconfdir}/squid/mime.conf.default

%config %{_sysconfdir}/squid/errorpage.css.default

%config %{_sysconfdir}/squid/cachemgr.conf.default

%config(noreplace) %{_sysconfdir}/pam.d/squid

%config(noreplace) %{_sysconfdir}/logrotate.d/squid

%dir %{_datadir}/squid

%attr(-,root,root) %{_datadir}/squid/errors

%attr(755,root,root) %{_sysconfdir}/NetworkManager/dispatcher.d/20-squid

%{_datadir}/squid/icons

%{_sbindir}/squid

%{_bindir}/squidclient

%{_bindir}/purge

%{_mandir}/man8/*

%{_mandir}/man1/*

%{_libdir}/squid/*

%{_datadir}/snmp/mibs/SQUID-MIB.txt

%{_tmpfilesdir}/squid.conf

%pre

if ! getent group squid >/dev/null 2>&1; then

  /usr/sbin/groupadd -g 23 squid

fi

if ! getent passwd squid >/dev/null 2>&1 ; then

  /usr/sbin/useradd -g 23 -u 23 -d /var/spool/squid -r -s /sbin/nologin squid >/dev/null 2>&1 || exit 1 

fi

for i in /var/log/squid /var/spool/squid ; do

        if [ -d $i ] ; then

                for adir in `find $i -maxdepth 0 \! -user squid`; do

                        chown -R squid:squid $adir

                done

        fi

done

exit 0

%pretrans -p <lua>

-- Due to a bug #447156

paths = {"/usr/share/squid/errors/zh-cn", "/usr/share/squid/errors/zh-tw"}

for key,path in ipairs(paths)

do

  st = posix.stat(path)

  if st and st.type == "directory" then

    status = os.rename(path, path .. ".rpmmoved")

    if not status then

      suffix = 0

      while not status do

        suffix = suffix + 1

        status = os.rename(path .. ".rpmmoved", path .. ".rpmmoved." .. suffix)

      end

      os.rename(path, path .. ".rpmmoved")

    end

  end

end

%post

%systemd_post squid.service

%preun

%systemd_preun squid.service

%postun

%systemd_postun_with_restart squid.service

%triggerin -- samba-common

if ! getent group wbpriv >/dev/null 2>&1 ; then

  /usr/sbin/groupadd -g 88 wbpriv >/dev/null 2>&1 || :

fi

/usr/sbin/usermod -a -G wbpriv squid >/dev/null 2>&1 || \

    chgrp squid /var/cache/samba/winbindd_privileged >/dev/null 2>&1 || :

%changelog

* Mon Oct 26 2020 Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-4

- Resolves: #1890606 - Fix for CVE 2019-13345 breaks authentication in

  cachemgr.cgi

* Wed Aug 26 2020 Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-3

- Resolves: #1871705 - CVE-2020-24606 squid: Improper Input Validation could

  result in a DoS

- Resolves: #1871702 - CVE-2020-15811 squid: HTTP Request Splitting could result

  in cache poisoning

- Resolves: #1871700 - CVE-2020-15810 squid: HTTP Request Smuggling could result

  in cache poisoning

* Thu Jul 02 2020 Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-2

- Resolves: #1853130 - CVE-2020-15049 squid:4/squid: request smuggling and

  poisoning attack against the HTTP cache

- Resolves: #1853136 - CVE-2020-14058 squid:4/squid: DoS in TLS handshake

* Thu May 07 2020 Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-1

- new version 4.11

- libsystemd integration

- Resolves: #1829467 - squid:4 rebase

- Resolves: #1828378 - CVE-2019-12521 squid:4/squid: off-by-one error in

  addStackElement allows for a heap buffer overflow and a crash

- Resolves: #1828377 - CVE-2019-12520 squid:4/squid: improper input validation

  in request allows for proxy manipulation

- Resolves: #1828375 - CVE-2019-12524 squid:4/squid: improper access restriction

  in url_regex may lead to security bypass

- Resolves: #1820664 - CVE-2019-18860 squid: mishandles HTML in the host

  parameter to cachemgr.cgi which could result in squid behaving in unsecure way

- Resolves: #1802514 - CVE-2020-8449 squid:4/squid: Improper input validation

  issues in HTTP Request processing

- Resolves: #1802513 - CVE-2020-8450 squid:4/squid: Buffer overflow in a Squid

  acting as reverse-proxy

- Resolves: #1802512 - CVE-2019-12528 squid:4/squid: Information Disclosure

  issue in FTP Gateway

- Resolves: #1771288 - CVE-2019-18678 squid:4/squid: HTTP Request Splitting

  issue in HTTP message processing

- Resolves: #1771283 - CVE-2019-18679 squid:4/squid: Information Disclosure

  issue in HTTP Digest Authentication

- Resolves: #1771280 - CVE-2019-18677 squid:4/squid: Cross-Site Request Forgery

  issue in HTTP Request processing

- Resolves: #1771275 - CVE-2019-12523 squid:4/squid: Improper input validation

  in URI processor

- Resolves: #1771272 - CVE-2019-18676 squid:4/squid: Buffer overflow in URI

  processor

- Resolves: #1771264 - CVE-2019-12526 squid:4/squid: Heap overflow issue in URN

  processing

- Resolves: #1738581 - CVE-2019-12529 squid: OOB read in Proxy-Authorization

  header causes DoS

* Tue Apr 28 2020 Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-9

- Resolves: #1738583 - CVE-2019-12525 squid:4/squid: parsing of header

  Proxy-Authentication leads to memory corruption

- Resolves: #1828369 - CVE-2020-11945 squid: improper access restriction upon

  Digest Authentication nonce replay could lead to remote code execution

- Resolves: #1828370 - CVE-2019-12519 squid: improper check for new member in

  ESIExpression::Evaluate allows for stack buffer overflow

* Fri Aug 23 2019 Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-8

- Resolves: # 1738485 - CVE-2019-12527 squid:4/squid: heap-based buffer overflow

  in HttpHeader::getAuth

* Wed Jul 31 2019 Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-7

- Resolves: #1729436 - CVE-2019-13345 squid: XSS via user_name or auth parameter

  in cachemgr.cgi

* Fri Jun 21 2019 Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-6

- Resolves: #1679526 - Missing detailed configuration file

- Resolves: #1703117 - RHEL 7 to 8 fails with squid installed because dirs

  changed to symlinks

- Resolves: #1691741 - Squid cache_peer DNS lookup failed when not all lower

  case

- Resolves: #1683527 - "Reloading" message on a fresh reboot after enabling

  squid

* Tue Dec 11 2018 Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-4

- Resolves: #1612524 - Man page scan results for squid 

* Tue Dec 11 2018 Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-3

- Resolves: #1642384 - squid doesn't work with active ftp

* Tue Dec 11 2018 Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-2

- Resolves: #1657847 - Unable to start Squid in Selinux Enforcing mode

* Mon Dec 10 2018 Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-1

- Resolves: #1656871 - squid rebase to 4.4

- Resolves: #1645148 - CVE-2018-19131 squid: Cross-Site Scripting when

  generating HTTPS response messages about TLS errors

- Resolves: #1645156 - CVE-2018-19132 squid: Memory leak in SNMP query

  rejection code

* Mon Aug 06 2018 Lubos Uhliarik <luhliari@redhat.com> - 7:4.2-1

- new version 4.2

- enable back strict error checking

* Wed Aug 01 2018 Luboš Uhliarik <luhliari@redhat.com> - 7:4.1-1

- new version 4.1

* Mon Jun 04 2018 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.23-5

- Resolves: #1585617 - Build against libdb only instead of libdb4

- disabled strict checking for now (squid can not be built with GCC8)

* Mon Apr 16 2018 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.23-4

- Resolves: #1566055 - module squid cannot be installed due to missing

  perl(Crypt::OpenSSL::X509)

* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 7:4.0.23-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

* Tue Jan 23 2018 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.23-2

- Resolves: #1481195 - squid loses some REs when optimising ACLs

* Tue Jan 23 2018 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.23-1

- new version 4.0.23

* Sat Jan 20 2018 Björn Esser <besser82@fedoraproject.org> - 7:4.0.22-2

- Rebuilt for switch to libxcrypt

* Wed Jan 17 2018 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.22-1

- new version 4.0.22

- Removed NIS helper (#1531540)

* Mon Aug 07 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.21-1

- new version 4.0.21

* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 7:4.0.20-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 7:4.0.20-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

* Mon Jun 05 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.20-2

- related: new version 4.0.20

* Mon Jun 05 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.20-1

- new version 4.0.20

* Tue Apr 25 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.19-4

- Related: #1445255 - Squid SMP Mode Fails

* Tue Apr 25 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.19-3

- Resolves: #1445255 - Squid SMP Mode Fails

* Tue Apr 18 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.19-2

- Resolves: #1442375 - squid helper squid_kerb_ldap not included in package

* Mon Apr 03 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.19-1

- new version 4.0.19

* Thu Mar 30 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.18-1

- new version 4.0.18

* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 7:4.0.17-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

* Mon Dec 19 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.17-1

- new version 4.0.17

* Mon Oct 31 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.16-1

- new version 4.0.16

* Mon Oct 10 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.15-1

- new version 4.0.15

* Mon Sep 12 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.14-1

- new version 4.0.14

* Tue Aug 09 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.13-1

- new version 4.0.13

* Mon Jul 11 2016 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:4.0.11-1

- new version 4.0.11

* Wed May 18 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.19-2

- Resolves: #1336993 - Mistyped command in dirname

  /etc/NetworkManager/dispatcher.d/20-squid

* Tue May 10 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.19-1

- new version 3.5.19

* Thu May 05 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.17-1

- new version 3.5.17

* Tue Apr 05 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.16-1

- new version 3.5.16

* Tue Mar 01 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.15-1

- new version 3.5.15

- Resolves: #1311585 - squid: Multiple Denial of Service issues in

  HTTP Response processing

- Resolves: #1312267 - squid: SQUID-2016_2 advisory, multiple DoS issues

* Tue Mar 01 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.13-3

- Resolves: #1308866 - CVE-2016-2390 squid: incorrect server error 

  handling resulting in denial of service

* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 7:3.5.13-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

* Fri Jan 08 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.13-1

- new version 3.5.13

* Thu Dec 03 2015 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.12-2

- new version 3.5.12

* Fri Sep 25 2015 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.9-3

- Resolves: #1231992

* Fri Sep 25 2015 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.9-2

- Resolves: #1230501

* Thu Sep 24 2015 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.9-1

- new version 3.5.9

- added Patch, which fixes problem with include guards 

* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7:3.5.3-5

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Sat May 02 2015 Kalev Lember <kalevlember@gmail.com> - 7:3.5.3-4

- Rebuilt for GCC 5 C++11 ABI change

* Tue Mar 31 2015 Pavel Šimerda <psimerda@redhat.com> - 7:3.5.3-3

- Fix build by removing eDirectory support

* Tue Mar 31 2015 Pavel Šimerda <psimerda@redhat.com> - 7:3.5.3-2

- clean up defunct patches

* Tue Mar 31 2015 Pavel Šimerda <psimerda@redhat.com> - 7:3.5.3-1

- new version 3.5.3

* Mon Mar 23 2015 Pavel Šimerda <psimerda@redhat.com> - 7:3.5.2-4

- Resolves: #1145235, #1173488, #1176318 – revert a couple of recent changes

* Sun Mar 15 2015 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.5.2-3

- Correct execmod build issue caused by libtool confusion on

  required compiler flags

* Sun Mar 15 2015 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.5.2-2

- Update to latest upstream version 3.5.2

- Remove deprecated (and renamed) squid_msnt_auth basic auth helper. Only

  performs LM authentication and not considered useful in todays networks.

* Wed Feb 25 2015 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.4.12-1

- Update to latest upstream version 3.4.12

- bug #1173946: Disable -march=native compile time optimization, use Fedora defaults.

* Tue Nov 18 2014 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.4.9-3

- Update to latest upstream version 3.4.9

* Sun Oct 19 2014 Peter Robinson <pbrobinson@fedoraproject.org> 7:3.4.7-3

- Update ppc64 macro to cover little endian too

* Thu Sep 11 2014 Michal Luscon <mluscon@redhat.com> - 7:3.4.7-2

- Fixed: CVE-2014-6270

* Thu Aug 28 2014 Michal Luscon <mluscon@redhat.com> - 7:3.4.7-1

- Update to latest upstream version

- Fixed: CVE-2014-3609

* Thu Aug 21 2014 Kevin Fenzi <kevin@scrye.com> - 7:3.4.6-3

- Rebuild for rpm bug 1131960

* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7:3.4.6-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Wed Jul 2 2014 Michal Luscon <mluscon@redhat.com> - 7:3.4.6-1

- Update to latest upstream version 3.4.6

* Fri Jun 13 2014 Michal Luscon <mluscon@redhat.com> - 7:3.4.5-6

- Fixed #855111: set unlimited start and shutdown timeout

* Sun Jun 08 2014 Michal Luscon <mluscon@redhat.com> - 7:3.4.5-5

- Run squid under user and group squid

* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7:3.4.5-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Tue May 27 2014 Michal Luscon <mluscon@redhat.com> - 7:3.4.5-3

- Remove sysvinit subpackage 

- Enable rock store

* Fri May 23 2014 Michal Luscon <mluscon@redhat.com> - 7:3.4.5-2

- Fixed #1099970: missing /var/run/squid folder

- Reverted #1038160: breaks SMP mode

* Tue May 6 2014 Michal Luscon <mluscon@redhat.com> - 7:3.4.5-1

- Update to latest upstream version 3.4.5

* Fri Apr 25 2014 Michal Luscon <mluscon@redhat.com> - 7:3.4.4.2-1

- Update to latest upstream version 3.4.4.2

* Thu Mar 13 2014 Pavel Šimerda <psimerda@redhat.com> - 7:3.4.4-1

- bump to 3.4.4

* Tue Feb 04 2014 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.4.3-1

- Update to latest upstream bugfix version 3.4.3

* Mon Jan 06 2014 Pavel Šimerda <psimerda@redhat.com> - 7:3.4.1-2

- Resolves: #1038160 - avoid running squid's own supervisor process

* Mon Dec 30 2013 Michal Luscon <mluscon@redhat.com> - 7:3.4.1-1

- Rebase to latest stable upstream release 3.4.1

- Fixed #1034306: fails to build for AArch64

- Fixed: active ftp

* Tue Dec 03 2013 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.3.11-1

- Update to latest upstream bugfix version 3.3.11

* Fri Sep 13 2013 Michal Luscon <mluscon@redhat.com> - 7:3.3.9-1

- Update to latest upstream version 3.3.9

- Fixed #976815: file descriptors are hard coded to 16384

- Fixed: active ftp crashing

- Fixed: offset of patches

* Thu Aug 08 2013 Michal Luscon <mluscon@redhat.com> - 7:3.3.8-3

- Fixed #994814: enable time_quota helper

* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7:3.3.8-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

* Mon Jul 22 2013 Michal Luscon <mluscon@redhat.com> - 7:3.3.8-1

- Update to latest upstream version 3.3.8

- Fixed: CVE-2013-4123

- Fixed: CVE-2013-4115

* Wed Jul 17 2013 Petr Pisar <ppisar@redhat.com> - 7:3.3.4-3

- Perl 5.18 rebuild

* Wed May  8 2013 Ville Skyttä <ville.skytta@iki.fi> - 7:3.3.4-2

- Fix basic auth and log daemon DB helper builds.

- Use xz compressed tarball, fix source URLs.

- Fix bogus dates in %%changelog.

* Fri May 3 2013 Michal Luscon <nluscon@redhat.com> - 7:3.3.4-1

- Rebase to latest upstream version 3.3.4

* Tue Apr 23 2013 Michal Luscon <mluscon@redhat.com> - 7:3.2.9-3

- Option '-k' is not stated in squidclient man

- Remove pid from service file(#913262)

* Fri Apr 19 2013 Michal Luscon <mluscon@redhat.com> - 7:3.2.9-2

- Enable full RELRO (-Wl,-z,relro -Wl,-z,now)

* Tue Mar 19 2013 Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1

- Update to latest upstream version 3.2.9

- Fixed: CVE-2013-1839

- Removed: makefile-patch (+make check)

* Mon Mar 11 2013 Michal Luscon <mluscon@redhat.com> - 7:3.2.8-3

- Resolved: /usr move - squid service file

* Sat Mar 09 2013 Michal Luscon <mluscon@redhat.com> - 7:3.2.8-2

- Resolved: #896127 - basic_ncsa_auth does not work

* Fri Mar 08 2013 Michal Luscon <mluscon@redhat.com> - 7:3.2.8-1

- Update to latest upstream version 3.2.8

- Fixed rawhide build issues (-make check)

* Thu Feb 07 2013 Michal Luscon <mluscon@redhat.com> - 7:3.2.7-1

- Update to latest upstream version 3.2.7

* Thu Jan 24 2013 Michal Luscon <mluscon@redhat.com> - 7:3.2.5-2

- CVE-2013-0189: Incomplete fix for the CVE-2012-5643

* Mon Dec 17 2012 Michal Luscon <mluscon@redhat.com> - 7:3.2.5-1

- Update to latest upstream version 3.2.5

* Mon Nov 05 2012 Michal Luscon <mluscon@redhat.com> - 7:3.2.3-3

- Resolved: #71483 - httpd 2.4 requires new configuration directives

* Fri Oct 26 2012 Michal Luscon <mluscon@redhat.com> - 7:3.2.3-2

- Resolved: #854356 - squid.service use PIDFile

- Resolved: #859393 - Improve cache_swap script

- Resolved: #791129 - disk space warning

- Resolved: #862252 - reload on VPN or network up/down

- Resolved: #867531 - run test suite during build

- Resolved: #832684 - missing after dependency nss-lookup.target

- Removed obsolete configure options

* Mon Oct 22 2012 Tomas Hozza <thozza@redhat.com> - 7:3.2.3-1

- Update to latest upstream version 3.2.3