%define __perl_requires %{SOURCE98}

Name:     squid

Version:  5.5

Release:  5%{?dist}

Summary:  The Squid proxy caching server

Epoch:    7

# See CREDITS for breakdown of non GPLv2+ code

License:  GPLv2+ and (LGPLv2+ and MIT and BSD and Public Domain)

URL:      http://www.squid-cache.org

Source0:  http://www.squid-cache.org/Versions/v5/squid-%{version}.tar.xz

Source1:  http://www.squid-cache.org/Versions/v5/squid-%{version}.tar.xz.asc

Source2:  http://www.squid-cache.org/pgp.asc

Source3:  squid.logrotate

Source4:  squid.sysconfig

Source5:  squid.pam

Source6:  squid.nm

Source7:  squid.service

Source8:  cache_swap.sh

Source9:  squid.sysusers

Source98: perl-requires-squid.sh

# Upstream patches

# Backported patches

Patch101: squid-5.5-ip-bind-address-no-port.patch

# https://bugzilla.redhat.com/show_bug.cgi?id=2151188

# Local patches

# Applying upstream patches first makes it less likely that local patches

# will break upstream ones.

Patch201: squid-4.0.11-config.patch

Patch202: squid-3.1.0.9-location.patch

Patch203: squid-3.0.STABLE1-perlpath.patch

Patch204: squid-3.5.9-include-guards.patch

# revert this upstream patch - https://bugzilla.redhat.com/show_bug.cgi?id=1936422

# workaround for #1934919

Patch205: squid-5.0.5-symlink-lang-err.patch

# https://bugzilla.redhat.com/show_bug.cgi?id=1953505

Patch206: squid-5.0.6-openssl3.patch

# https://bugzilla.redhat.com/show_bug.cgi?id=1969322

Patch207: squid-5.0.6-active-ftp.patch

# https://bugzilla.redhat.com/show_bug.cgi?id=1988122

Patch208: squid-5.1-test-store-cppsuite.patch

# Security patches

# https://bugzilla.redhat.com/show_bug.cgi?id=2100721

Patch501: squid-5.5-CVE-2021-46784.patch

# https://bugzilla.redhat.com/show_bug.cgi?id=2129771

Patch502: squid-5.5-CVE-2022-41318.patch

# cache_swap.sh

Requires: bash gawk

# for httpd conf file - cachemgr script alias

Requires: httpd-filesystem

# squid_ldap_auth and other LDAP helpers require OpenLDAP

BuildRequires: make

BuildRequires: openldap-devel

# squid_pam_auth requires PAM development libs

BuildRequires: pam-devel

# SSL support requires OpenSSL

BuildRequires: openssl-devel

# squid_kerb_aut requires Kerberos development libs

BuildRequires: krb5-devel

# time_quota requires TrivialDB

BuildRequires: libtdb-devel

# ESI support requires Expat & libxml2

BuildRequires: expat-devel libxml2-devel

# TPROXY requires libcap, and also increases security somewhat

BuildRequires: libcap-devel

# eCAP support

BuildRequires: libecap-devel

#ip_user helper requires

BuildRequires: gcc-c++

BuildRequires: libtool libtool-ltdl-devel

BuildRequires: perl-generators

# For test suite

BuildRequires: pkgconfig(cppunit)

# For verifying downloded src tarball

BuildRequires: gnupg2

# for _tmpfilesdir and _unitdir macro

# see https://docs.fedoraproject.org/en-US/packaging-guidelines/Systemd/#_packaging

BuildRequires: systemd-rpm-macros

# systemd notify

BuildRequires: systemd-devel

%{?systemd_requires}

%{?sysusers_requires_compat}

# Old NetworkManager expects the dispatcher scripts in a different place

Conflicts: NetworkManager < 1.20

%description

Squid is a high-performance proxy caching server for Web clients,

supporting FTP, gopher, and HTTP data objects. Unlike traditional

caching software, Squid handles all requests in a single,

non-blocking, I/O-driven process. Squid keeps meta data and especially

hot objects cached in RAM, caches DNS lookups, supports non-blocking

DNS lookups, and implements negative caching of failed requests.

Squid consists of a main server program squid, a Domain Name System

lookup program (dnsserver), a program for retrieving FTP data

(ftpget), and some management and client tools.

%prep

%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'

%setup -q

# Upstream patches

# Backported patches

%patch101 -p1 -b .ip-bind-address-no-port

# Local patches

%patch201 -p1 -b .config

%patch202 -p1 -b .location

%patch203 -p1 -b .perlpath

%patch204 -p0 -b .include-guards

%patch205 -p1 -R -b .symlink-lang-err

%patch206 -p1 -b .openssl3

%patch207 -p1 -b .active-ftp

%patch208 -p1 -b .test-store-cpp

%patch501 -p1 -b .CVE-2021-46784

%patch502 -p1 -b .CVE-2022-41318

# https://bugzilla.redhat.com/show_bug.cgi?id=1679526

# Patch in the vendor documentation and used different location for documentation

sed -i 's|@SYSCONFDIR@/squid.conf.documented|%{_pkgdocdir}/squid.conf.documented|' src/squid.8.in

%build

# NIS helper has been removed because of the following bug

# https://bugzilla.redhat.com/show_bug.cgi?id=1531540

%configure \

   --libexecdir=%{_libdir}/squid \

   --datadir=%{_datadir}/squid \

   --sysconfdir=%{_sysconfdir}/squid \

   --with-logdir='%{_localstatedir}/log/squid' \

   --with-pidfile='/run/squid.pid' \

   --disable-dependency-tracking \

   --enable-eui \

   --enable-follow-x-forwarded-for \

   --enable-auth \

   --enable-auth-basic="DB,fake,getpwnam,LDAP,NCSA,PAM,POP3,RADIUS,SASL,SMB,SMB_LM" \

   --enable-auth-ntlm="SMB_LM,fake" \

   --enable-auth-digest="file,LDAP" \

   --enable-auth-negotiate="kerberos" \

   --enable-external-acl-helpers="LDAP_group,time_quota,session,unix_group,wbinfo_group,kerberos_ldap_group" \

   --enable-storeid-rewrite-helpers="file" \

   --enable-cache-digests \

   --enable-cachemgr-hostname=localhost \

   --enable-delay-pools \

   --enable-epoll \

   --enable-icap-client \

   --enable-ident-lookups \

   %ifnarch %{power64} ia64 x86_64 s390x aarch64

   --with-large-files \

   %endif

   --enable-linux-netfilter \

   --enable-removal-policies="heap,lru" \

   --enable-snmp \

   --enable-ssl \

   --enable-ssl-crtd \

   --enable-storeio="aufs,diskd,ufs,rock" \

   --enable-diskio \

   --enable-wccpv2 \

   --enable-esi \

   --enable-ecap \

   --with-aio \

   --with-default-user="squid" \

   --with-dl \

   --with-openssl \

   --with-pthreads \

   --disable-arch-native \

   --disable-security-cert-validators \

   --disable-strict-error-checking \

   --with-swapdir=%{_localstatedir}/spool/squid

# workaround to build squid v5

mkdir -p src/icmp/tests

mkdir -p tools/squidclient/tests

mkdir -p tools/tests

%make_build

%check

make check

%install

%make_install

echo "

#

# This is %{_sysconfdir}/httpd/conf.d/squid.conf

#

ScriptAlias /Squid/cgi-bin/cachemgr.cgi %{_libdir}/squid/cachemgr.cgi

# Only allow access from localhost by default

<Location /Squid/cgi-bin/cachemgr.cgi>

 Require local

 # Add additional allowed hosts as needed

 # Require host example.com

</Location>" > $RPM_BUILD_ROOT/squid.httpd.tmp

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/pam.d

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d/

mkdir -p $RPM_BUILD_ROOT%{_prefix}/lib/NetworkManager/dispatcher.d

mkdir -p $RPM_BUILD_ROOT%{_unitdir}

mkdir -p $RPM_BUILD_ROOT%{_libexecdir}/squid

install -m 644 %{SOURCE3} $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/squid

install -m 644 %{SOURCE4} $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/squid

install -m 644 %{SOURCE5} $RPM_BUILD_ROOT%{_sysconfdir}/pam.d/squid

install -m 644 %{SOURCE7} $RPM_BUILD_ROOT%{_unitdir}

install -m 755 %{SOURCE8} $RPM_BUILD_ROOT%{_libexecdir}/squid

install -m 644 $RPM_BUILD_ROOT/squid.httpd.tmp $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d/squid.conf

install -m 755 %{SOURCE6} $RPM_BUILD_ROOT%{_prefix}/lib/NetworkManager/dispatcher.d/20-squid

mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/log/squid

mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/spool/squid

mkdir -p $RPM_BUILD_ROOT/run/squid

chmod 644 contrib/url-normalizer.pl contrib/user-agents.pl

# install /usr/lib/tmpfiles.d/squid.conf

mkdir -p ${RPM_BUILD_ROOT}%{_tmpfilesdir}

cat > ${RPM_BUILD_ROOT}%{_tmpfilesdir}/squid.conf <

# See tmpfiles.d(5) for details

d /run/squid 0755 squid squid - -

EOF

# Move the MIB definition to the proper place (and name)

mkdir -p $RPM_BUILD_ROOT/usr/share/snmp/mibs

mv $RPM_BUILD_ROOT/usr/share/squid/mib.txt $RPM_BUILD_ROOT/usr/share/snmp/mibs/SQUID-MIB.txt

# squid.conf.documented is documentation. We ship that in doc/

rm -f $RPM_BUILD_ROOT%{_sysconfdir}/squid/squid.conf.documented

# remove unpackaged files from the buildroot

rm -f $RPM_BUILD_ROOT/squid.httpd.tmp

# sysusers.d

install -p -D -m 0644 %{SOURCE9} %{buildroot}%{_sysusersdir}/squid.conf

%files

%license COPYING 

%doc CONTRIBUTORS README ChangeLog QUICKSTART src/squid.conf.documented

%doc contrib/url-normalizer.pl contrib/user-agents.pl

%{_unitdir}/squid.service

%attr(755,root,root) %dir %{_libexecdir}/squid

%attr(755,root,root) %{_libexecdir}/squid/cache_swap.sh

%attr(755,root,root) %dir %{_sysconfdir}/squid

%attr(755,root,root) %dir %{_libdir}/squid

%attr(770,squid,root) %dir %{_localstatedir}/log/squid

%attr(750,squid,squid) %dir %{_localstatedir}/spool/squid

%attr(755,squid,squid) %dir /run/squid

%config(noreplace) %attr(644,root,root) %{_sysconfdir}/httpd/conf.d/squid.conf

%config(noreplace) %attr(640,root,squid) %{_sysconfdir}/squid/squid.conf

%config(noreplace) %attr(644,root,squid) %{_sysconfdir}/squid/cachemgr.conf

%config(noreplace) %{_sysconfdir}/squid/mime.conf

%config(noreplace) %{_sysconfdir}/squid/errorpage.css

%config(noreplace) %{_sysconfdir}/sysconfig/squid

# These are not noreplace because they are just sample config files

%config %{_sysconfdir}/squid/squid.conf.default

%config %{_sysconfdir}/squid/mime.conf.default

%config %{_sysconfdir}/squid/errorpage.css.default

%config %{_sysconfdir}/squid/cachemgr.conf.default

%config(noreplace) %{_sysconfdir}/pam.d/squid

%config(noreplace) %{_sysconfdir}/logrotate.d/squid

%dir %{_datadir}/squid

%attr(-,root,root) %{_datadir}/squid/errors

%{_prefix}/lib/NetworkManager

%{_datadir}/squid/icons

%{_sbindir}/squid

%{_bindir}/squidclient

%{_bindir}/purge

%{_mandir}/man8/*

%{_mandir}/man1/*

%{_libdir}/squid/*

%{_datadir}/snmp/mibs/SQUID-MIB.txt

%{_tmpfilesdir}/squid.conf

%{_sysusersdir}/squid.conf

%pre

%sysusers_create_compat %{SOURCE9}

for i in /var/log/squid /var/spool/squid ; do

        if [ -d $i ] ; then

                for adir in `find $i -maxdepth 0 \! -user squid`; do

                        chown -R squid:squid $adir

                done

        fi

done

exit 0

%pretrans -p <lua>

-- temporarilly commented until https://bugzilla.redhat.com/show_bug.cgi?id=1936422 is resolved

--

-- previously /usr/share/squid/errors/es-mx was symlink, now it is directory since squid v5

-- see https://docs.fedoraproject.org/en-US/packaging-guidelines/Directory_Replacement/

-- Define the path to the symlink being replaced below.

--

-- path = "/usr/share/squid/errors/es-mx"

-- st = posix.stat(path)

-- if st and st.type == "link" then

--   os.remove(path)

-- end

-- Due to a bug #447156

paths = {"/usr/share/squid/errors/zh-cn", "/usr/share/squid/errors/zh-tw"}

for key,path in ipairs(paths)

do

  st = posix.stat(path)

  if st and st.type == "directory" then

    status = os.rename(path, path .. ".rpmmoved")

    if not status then

      suffix = 0

      while not status do

        suffix = suffix + 1

        status = os.rename(path .. ".rpmmoved", path .. ".rpmmoved." .. suffix)

      end

      os.rename(path, path .. ".rpmmoved")

    end

  end

end

%post

%systemd_post squid.service

%preun

%systemd_preun squid.service

%postun

%systemd_postun_with_restart squid.service

%triggerin -- samba-common

if ! getent group wbpriv >/dev/null 2>&1 ; then

  /usr/sbin/groupadd -g 88 wbpriv >/dev/null 2>&1 || :

fi

/usr/sbin/usermod -a -G wbpriv squid >/dev/null 2>&1 || \

    chgrp squid /var/cache/samba/winbindd_privileged >/dev/null 2>&1 || :

%changelog

* Tue Dec 06 2022 Tomas Korbar <tkorbar@redhat.com> - 7:5.5-5

- Resolves: #2151188 - [RFE] Add the "IP_BIND_ADDRESS_NO_PORT"

  flag to sockets created for outgoing connections in the squid source code.

* Mon Nov 07 2022 Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-4

- Resolves: #2095468 - [RFE] squid use systemd-sysusers

* Mon Nov 07 2022 Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-3

- Resolves: #2130253 - CVE-2022-41318 squid: buffer-over-read in SSPI and SMB

  authentication

* Mon Jul 11 2022 Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-2

- Resolves: #2100785 - CVE-2021-46784 squid: DoS when processing gopher server

  responses

* Tue May 31 2022 Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-1

- new version 5.5

- Resolves: #2075727 - The memory usage of the squid process keeps increasing

* Thu Oct 07 2021 Luboš Uhliarik <luhliari@redhat.com> - 7:5.2-1

- new version 5.2

- Resolves: #1934560 - squid: out-of-bounds read in WCCP protocol

- Resolves: #2011637 - Rebase squid to 5.2

* Wed Sep 15 2021 Luboš Uhliarik <luhliari@redhat.com> - 7:5.1-3

- Resolves: #1988122 - Enable LTO build of squid for RHEL 9

* Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 7:5.1-2

- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags

  Related: rhbz#1991688

* Thu Aug 05 2021 Luboš Uhliarik <luhliari@redhat.com> - 7:5.1-1

- new version 5.1

- Resolves: #1990517 - Rebase squid to 5.1

- Resolves: #1985231 - squid: FTBFS because of OpenSSL 3.0 preprocessor macro

  changes

* Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 7:5.0.6-4

- Rebuilt for RHEL 9 BETA for openssl 3.0

  Related: rhbz#1971065

* Tue Jun 08 2021 Luboš Uhliarik <luhliari@redhat.com> - 7:5.0.6-3

- Resolves: #1969322 - squid doesn't work with active ftp

* Mon May 17 2021 Lubos Uhliarik <luhliari@redhat.com> - 7:5.0.6-2

- Resolves: #1953505 - squid: Port to OpenSSL 3.0

* Mon May 17 2021 Lubos Uhliarik <luhliari@redhat.com> - 7:5.0.6-1

- new version 5.0.6

- Resolves: #1961253 - Rebase squid to 5.0.6

* Fri Apr 23 2021 Lubos Uhliarik <luhliari@redhat.com> - 7:5.0.5-2

- new version 5.0.5

- Resolves: #1952896 - Rebase squid to >= 5.0.5

- Resolves: #1940412 - Remove libdb dependency from squid

* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 7:4.14-2

- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

* Wed Mar 31 2021 Lubos Uhliarik <luhliari@redhat.com> - 7:4.14-1

- new version 4.14

- Resolves: #1939927 - CVE-2020-25097 squid: improper input validation may allow

  a trusted client to perform HTTP Request Smuggling

* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 7:4.13-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

* Sat Oct 17 2020 Jeff Law <law@redhat.com> - 7:4.13-2

- Fix missing #includes for gcc-11

* Tue Aug 25 2020 Lubos Uhliarik <luhliari@redhat.com> - 7:4.13-1

- new version 4.13

* Fri Aug 07 2020 Jeff law <law@redhat.com> - 7:4.12-4

- Disable LTO

* Sat Aug 01 2020 Fedora Release Engineering <releng@fedoraproject.org> - 7:4.12-3

- Second attempt - Rebuilt for

  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 7:4.12-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

* Mon Jun 15 2020 Lubos Uhliarik <luhliari@redhat.com> - 7:4.12-1

- new version 4.12

* Thu May 07 2020 Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-1

- new version 4.11

- libsystemd integration

- Resolves: #1827564 - CVE-2020-11945 squid: improper access restriction upon

  Digest Authentication nonce replay could lead to remote code execution

* Thu Mar 26 2020 Lubos Uhliarik <luhliari@redhat.com> - 7:4.10-4

- Resolves: #1817208 - More cache_swap.sh optimizations

* Wed Mar 25 2020 Lubos Uhliarik <luhliari@redhat.com> - 7:4.10-3

- Resolves: #1786485 - squid.service: use ${SQUID_CONF} rather than $SQUID_CONF

- Resolves: #1798535 - CVE-2019-12528 squid: Information Disclosure issue in

  FTP Gateway

- Resolves: #1798554 - CVE-2020-8450 squid: Buffer overflow in a Squid acting

  as reverse-proxy

- Resolves: #1798541 - CVE-2020-8449 squid: Improper input validation issues 

  in HTTP Request processing

* Tue Jan 28 2020 Lubos Uhliarik <luhliari@redhat.com> - 7:4.10-1

- new version 4.10

* Tue Dec 17 2019 Lubos Uhliarik <luhliari@redhat.com> - 7:4.9-3

- Resolves: #1784383 - Add BuildRequires: systemd-rpm-macros

- Resolves: #1783757 - Build with ./configure --with-pidfile=/run/squid.pid

- Resolves: #1783768 - Optimize cache_swap.sh cache_dir search

* Mon Nov 11 2019 Lubos Uhliarik <luhliari@redhat.com> - 7:4.9-2

- new version 4.9

- verify src taball signature by default in prep section

* Tue Oct 08 2019 Lubos Uhliarik <luhliari@redhat.com> - 7:4.8-6

- Resolves: #1741342 - Do not call autoconf at build time

* Tue Oct 08 2019 Lubos Uhliarik <luhliari@redhat.com> - 7:4.8-5

- Resolves: #1716950 - Drop "sleep 1" from logrotate fragment

* Thu Aug 22 2019 Lubomir Rintel <lkundrak@v3.sk> - 7:4.8-4

- Move the NetworkManager dispatcher script out of /etc

* Mon Aug 05 2019 Lubos Uhliarik <luhliari@redhat.com> - 7:4.8-3

- Resolves: #1737030 - depend on httpd-filesystem

* Sat Jul 27 2019 Fedora Release Engineering <releng@fedoraproject.org> - 7:4.8-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

* Wed Jul 10 2019 Lubos Uhliarik <luhliari@redhat.com> - 7:4.8-1

- new version 4.8

- Resolves: #1727745 - squid: CVe-2019-13345 squid: XSS via user_name or auth

  parameter in cachemgr.cgi

* Tue Jul 02 2019 Lubos Uhliarik <luhliari@redhat.com> - 7:4.7-6

- fix filepath to squid.conf.documented in squid's manpage

- fix path to systemctl in nm script

* Wed May 22 2019 Lubos Uhliarik <luhliari@redhat.com> - 7:4.7-5

- Related: #1709299 - Use upstream squid.service

* Fri May 17 2019 Luboš Uhliarik <luhliari@redhat.com> - 7:4.7-1

- new version 4.7

* Fri May 17 2019 Luboš Uhliarik <luhliari@redhat.com> - 7:4.6-3

- Resolves: #1709299 - Use upstream squid.service

* Mon Apr 29 2019 Lubos Uhliarik <luhliari@redhat.com> - 7:4.6-2

- Resolves: #1599074 - squid: 3 coredumps every day

* Wed Apr 24 2019 Lubos Uhliarik <luhliari@redhat.com> - 7:4.6-1

- new version 4.6

- disabled strict checking due to gcc warnings

* Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 7:4.4-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

* Mon Jan 14 2019 Björn Esser <besser82@fedoraproject.org> - 7:4.4-2

- Rebuilt for libcrypt.so.2 (#1666033)

* Mon Dec 10 2018 Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-1

- new version 4.4

* Sun Oct 14 2018 Peter Robinson <pbrobinson@fedoraproject.org> 7:4.2-3

- Drop obsolete legacy sys-v remanents

* Mon Aug 20 2018 Luboš Uhliarik <luhliari@redhat.com> - 7:4.2-2

- Resolves: #1618790 - SELinux 'dac_override' denial for cache_swap.sh

* Mon Aug 06 2018 Luboš Uhliarik <luhliari@redhat.com> - 7:4.2-1

- new version 4.2

- enable back strict error checking

* Wed Aug 01 2018 Luboš Uhliarik <luhliari@redhat.com> - 7:4.1-1

- new version 4.1

* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 7:4.0.25-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

* Thu Jun 28 2018 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.25-1

- new version 4.0.25

* Mon Jun 04 2018 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.24-2

- removed obsolete BuildRequires (libdb4-devel)

* Thu Mar 08 2018 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.24-1

- new version 4.0.24

- disabled strict checking (removed -Werror)

* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 7:4.0.23-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

* Tue Jan 23 2018 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.23-2

- Resolves: #1481195 - squid loses some REs when optimising ACLs

* Tue Jan 23 2018 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.23-1

- new version 4.0.23

* Sat Jan 20 2018 Björn Esser <besser82@fedoraproject.org> - 7:4.0.22-2

- Rebuilt for switch to libxcrypt

* Wed Jan 17 2018 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.22-1

- new version 4.0.22

- Removed NIS helper (#1531540)

* Mon Aug 07 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.21-1

- new version 4.0.21

* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 7:4.0.20-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 7:4.0.20-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

* Mon Jun 05 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.20-2

- related: new version 4.0.20

* Mon Jun 05 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.20-1

- new version 4.0.20

* Tue Apr 25 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.19-4

- Related: #1445255 - Squid SMP Mode Fails

* Tue Apr 25 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.19-3

- Resolves: #1445255 - Squid SMP Mode Fails

* Tue Apr 18 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.19-2

- Resolves: #1442375 - squid helper squid_kerb_ldap not included in package

* Mon Apr 03 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.19-1

- new version 4.0.19

* Thu Mar 30 2017 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.18-1

- new version 4.0.18

* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 7:4.0.17-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

* Mon Dec 19 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.17-1

- new version 4.0.17

* Mon Oct 31 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.16-1

- new version 4.0.16

* Mon Oct 10 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.15-1

- new version 4.0.15

* Mon Sep 12 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.14-1

- new version 4.0.14

* Tue Aug 09 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.13-1

- new version 4.0.13

* Mon Jul 11 2016 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:4.0.11-1

- new version 4.0.11

* Wed May 18 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.19-2

- Resolves: #1336993 - Mistyped command in dirname

  /etc/NetworkManager/dispatcher.d/20-squid

* Tue May 10 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.19-1

- new version 3.5.19

* Thu May 05 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.17-1

- new version 3.5.17

* Tue Apr 05 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.16-1

- new version 3.5.16

* Tue Mar 01 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.15-1

- new version 3.5.15

- Resolves: #1311585 - squid: Multiple Denial of Service issues in

  HTTP Response processing

- Resolves: #1312267 - squid: SQUID-2016_2 advisory, multiple DoS issues

* Tue Mar 01 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.13-3

- Resolves: #1308866 - CVE-2016-2390 squid: incorrect server error 

  handling resulting in denial of service

* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 7:3.5.13-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

* Fri Jan 08 2016 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.13-1

- new version 3.5.13

* Thu Dec 03 2015 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.12-2

- new version 3.5.12

* Fri Sep 25 2015 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.9-3

- Resolves: #1231992

* Fri Sep 25 2015 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.9-2

- Resolves: #1230501

* Thu Sep 24 2015 Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.9-1

- new version 3.5.9

- added Patch, which fixes problem with include guards 

* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7:3.5.3-5

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Sat May 02 2015 Kalev Lember <kalevlember@gmail.com> - 7:3.5.3-4

- Rebuilt for GCC 5 C++11 ABI change

* Tue Mar 31 2015 Pavel Šimerda <psimerda@redhat.com> - 7:3.5.3-3

- Fix build by removing eDirectory support

* Tue Mar 31 2015 Pavel Šimerda <psimerda@redhat.com> - 7:3.5.3-2

- clean up defunct patches

* Tue Mar 31 2015 Pavel Šimerda <psimerda@redhat.com> - 7:3.5.3-1

- new version 3.5.3

* Mon Mar 23 2015 Pavel Šimerda <psimerda@redhat.com> - 7:3.5.2-4

- Resolves: #1145235, #1173488, #1176318 – revert a couple of recent changes

* Sun Mar 15 2015 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.5.2-3

- Correct execmod build issue caused by libtool confusion on

  required compiler flags

* Sun Mar 15 2015 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.5.2-2

- Update to latest upstream version 3.5.2

- Remove deprecated (and renamed) squid_msnt_auth basic auth helper. Only

  performs LM authentication and not considered useful in todays networks.

* Wed Feb 25 2015 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.4.12-1

- Update to latest upstream version 3.4.12

- bug #1173946: Disable -march=native compile time optimization, use Fedora defaults.

* Tue Nov 18 2014 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.4.9-3

- Update to latest upstream version 3.4.9

* Sun Oct 19 2014 Peter Robinson <pbrobinson@fedoraproject.org> 7:3.4.7-3

- Update ppc64 macro to cover little endian too

* Thu Sep 11 2014 Michal Luscon <mluscon@redhat.com> - 7:3.4.7-2

- Fixed: CVE-2014-6270

* Thu Aug 28 2014 Michal Luscon <mluscon@redhat.com> - 7:3.4.7-1

- Update to latest upstream version

- Fixed: CVE-2014-3609

* Thu Aug 21 2014 Kevin Fenzi <kevin@scrye.com> - 7:3.4.6-3

- Rebuild for rpm bug 1131960

* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7:3.4.6-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Wed Jul 2 2014 Michal Luscon <mluscon@redhat.com> - 7:3.4.6-1

- Update to latest upstream version 3.4.6

* Fri Jun 13 2014 Michal Luscon <mluscon@redhat.com> - 7:3.4.5-6

- Fixed #855111: set unlimited start and shutdown timeout

* Sun Jun 08 2014 Michal Luscon <mluscon@redhat.com> - 7:3.4.5-5

- Run squid under user and group squid

* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7:3.4.5-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Tue May 27 2014 Michal Luscon <mluscon@redhat.com> - 7:3.4.5-3

- Remove sysvinit subpackage 

- Enable rock store