Re: [squid-users] squid3 / debian stable / please update to 3.4.14

[Amos Jeffries]

On 2015-12-30 03:26, massimo.s...@asl.bergamo.it wrote:

ciao Luigi

I ask to update the distro to squid 3.4.14, the last stable version,
released in august.

Rationale :
1) various bugs and memory leaks fixed;
2) security fix for CVE 2015 5400;
3) support for Alternate-Protocol HTTP header.

I need 3) to disable QUIC on youtube, otherwise squid3 cannot cache
videos.




Hi Massimo, why cc'ing squid-users? nothing this list can do about it.

Anyhow, the Debian 3.4.8-6 package has already been patched to contain 
the important fixes from later upstream 3.4 releases.



(that covers your #1 and #2 items)

All it lacks is the minor changes which AFAIK do not meet the criteria 
required for acceptance into the Debian stable distro.


If you need custom build with other features (such as HTTPS support), 
you are better off building the more up to date 3.5 version available 
from Stretch/Testing repository.



As for #3, the Alternate-Protocol header patch is just automating these 
squid.conf settings, which you can use explicitly in any Squid version:


 acl AP rep_header_regex Alternate-Protocol .
 reply_header_access deny AP


HTH
Amos

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] squid3 / debian stable / please update to 3.4.14

[L . P . H . van Belle]

> you are better off building the more up to date 3.5 version available 
> from Stretch/Testing repository.

I disagree with this one, use SID and not testing, testing has a longer delay 
in security updates and is updated after unstable.
See :  https://www.debian.org/security/faq


Greetz, 

Louis

> -Oorspronkelijk bericht-
> Van: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] Namens
> Amos Jeffries
> Verzonden: donderdag 31 december 2015 10:43
> Aan: massimo.s...@asl.bergamo.it
> CC: lu...@debian.org; squid-users@lists.squid-cache.org
> Onderwerp: Re: [squid-users] squid3 / debian stable / please update to
> 3.4.14
> 
> On 2015-12-30 03:26, massimo.s...@asl.bergamo.it wrote:
> > ciao Luigi
> >
> > I ask to update the distro to squid 3.4.14, the last stable version,
> > released in august.
> >
> > Rationale :
> > 1) various bugs and memory leaks fixed;
> > 2) security fix for CVE 2015 5400;
> > 3) support for Alternate-Protocol HTTP header.
> >
> > I need 3) to disable QUIC on youtube, otherwise squid3 cannot cache
> > videos.
> >
> 
> 
> Hi Massimo, why cc'ing squid-users? nothing this list can do about it.
> 
> Anyhow, the Debian 3.4.8-6 package has already been patched to contain
> the important fixes from later upstream 3.4 releases.
> <http://metadata.ftp-
> master.debian.org/changelogs/main/s/squid3/squid3_3.4.8-
> 6+deb8u1_changelog>
> 
> (that covers your #1 and #2 items)
> 
> All it lacks is the minor changes which AFAIK do not meet the criteria
> required for acceptance into the Debian stable distro.
> 
> If you need custom build with other features (such as HTTPS support),
> you are better off building the more up to date 3.5 version available
> from Stretch/Testing repository.
> 
> 
> As for #3, the Alternate-Protocol header patch is just automating these
> squid.conf settings, which you can use explicitly in any Squid version:
> 
>   acl AP rep_header_regex Alternate-Protocol .
>   reply_header_access deny AP
> 
> 
> HTH
> Amos
> 
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] squid3 / debian stable / please update to 3.4.14

[Massimo . Sala]

Hi Amos

>   Hi Massimo, why cc'ing squid-users? nothing this list can do about 
it.


Package update : I know, it is a topic for debian users and package 
maintainer, so strictly speaking it is off-topic.

youtube video, disabling QUIC : I think it will be of general interest, I 
switch to a new thread for it.


Two subjects in one Email, excuse me !

Many thanks, Sala




Amos Jeffries <squ...@treenet.co.nz> 
31/12/2015 10:43

To
massimo.s...@asl.bergamo.it
cc
lu...@debian.org,
Subject
Re: [squid-users] squid3 / debian stable / please update to 3.4.14






On 2015-12-30 03:26, massimo.s...@asl.bergamo.it wrote:
> ciao Luigi
> 
> I ask to update the distro to squid 3.4.14, the last stable version,
> released in august.
> 
> Rationale :
> 1) various bugs and memory leaks fixed;
> 2) security fix for CVE 2015 5400;
> 3) support for Alternate-Protocol HTTP header.
> 
> I need 3) to disable QUIC on youtube, otherwise squid3 cannot cache
> videos.
> 



Anyhow, the Debian 3.4.8-6 package has already been patched to contain 
the important fixes from later upstream 3.4 releases.
<
http://metadata.ftp-master.debian.org/changelogs/main/s/squid3/squid3_3.4.8-6+deb8u1_changelog
>

(that covers your #1 and #2 items)

All it lacks is the minor changes which AFAIK do not meet the criteria 
required for acceptance into the Debian stable distro.

If you need custom build with other features (such as HTTPS support), 
you are better off building the more up to date 3.5 version available 
from Stretch/Testing repository.


As for #3, the Alternate-Protocol header patch is just automating these 
squid.conf settings, which you can use explicitly in any Squid version:

  acl AP rep_header_regex Alternate-Protocol .
  reply_header_access deny AP


HTH
Amos



___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] squid3 / debian stable / please update to 3.4.14

[L . P . H . van Belle]

Hai, 

You can very easy upgrade to 3.5.12 on Jessie. 
Add sid to your sources.list, or better in :
/etc/apt/sources.list.d/debian-sid.list 

Only the deb-src line is needed. 

Now apt-get update

# install dependecies.
apt-get build-dep squid

# get and build source. 
apt-get source squid -b

if you missing something, get that package first, build it, install it and do 
above again. 

!! thing to know when using the higher versions this way. 

/etc/squid3
Changed to
/etc/squid 

all squid3 changed to squid in debian testing/sid

and one thing. Backup first ! 

Greetz, 

Louis




> -Oorspronkelijk bericht-
> Van: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] Namens
> massimo.s...@asl.bergamo.it
> Verzonden: dinsdag 29 december 2015 15:26
> Aan: lu...@debian.org
> CC: squid-users@lists.squid-cache.org
> Onderwerp: [squid-users] squid3 / debian stable / please update to 3.4.14
> 
> ciao Luigi
> 
> I ask to update the distro to squid 3.4.14, the last stable version,
> released in august.
> 
> Rationale :
> 1) various bugs and memory leaks fixed;
> 2) security fix for CVE 2015 5400;
> 3) support for Alternate-Protocol HTTP header.
> 
> I need 3) to disable QUIC on youtube, otherwise squid3 cannot cache
> videos.
> 
> References :
> https://packages.debian.org/jessie/squid3
> 
> ftp://ftp.fu-berlin.de/unix/www/squid/squid/squid-3.4-ChangeLog.txt
> http://wiki.squid-cache.org/KnowledgeBase/Block QUIC protocol
> 
> 
> Best regards, Massimo
> 
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

[squid-users] squid3 / debian stable / please update to 3.4.14

[Massimo . Sala]

ciao Luigi

I ask to update the distro to squid 3.4.14, the last stable version, 
released in august.

Rationale :
1) various bugs and memory leaks fixed;
2) security fix for CVE 2015 5400;
3) support for Alternate-Protocol HTTP header.

I need 3) to disable QUIC on youtube, otherwise squid3 cannot cache 
videos.

References :
https://packages.debian.org/jessie/squid3

ftp://ftp.fu-berlin.de/unix/www/squid/squid/squid-3.4-ChangeLog.txt
http://wiki.squid-cache.org/KnowledgeBase/Block QUIC protocol


Best regards, Massimo

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users