Author: Luigi Gangitano
Revision Date: 2015-10-05 23:28:00 UTC

[ Amos Jeffries <amosjeffries@squid-cache.org> ]
* New Upstream Release (Closes: #799923, #800876)

* debian/squid.rc
  - Grok pid_filename from squid.conf (Closes: #520736)
  - Update SELinux context when creating directories (Closes: #798827)

[ Luigi Gangitano <luigi@debian.org> ]
  - Urgency high due to regression fix for CVE-2015-3400.

Author: Luigi Gangitano
Revision Date: 2015-10-05 23:28:00 UTC

[ Amos Jeffries <amosjeffries@squid-cache.org> ]
* New Upstream Release (Closes: #799923, #800876)

* debian/squid.rc
  - Grok pid_filename from squid.conf (Closes: #520736)
  - Update SELinux context when creating directories (Closes: #798827)

[ Luigi Gangitano <luigi@debian.org> ]
  - Urgency high due to regression fix for CVE-2015-3400.

Author: Salvatore Bonaccorso
Revision Date: 2015-08-02 15:57:21 UTC

* Non-maintainer upload by the Security Team.
* Add CVE-2015-5400.patch patch.
  CVE-2015-5400: Information disclosure due to incorrect handling of peer
  responses. (Closes: #793128)

Author: Luigi Gangitano
Revision Date: 2015-01-28 12:34:42 UTC

[ Luigi Gangitano <luigi@debian.org> ]
* debian/patches/31-squid-3.4-13199.patch
  - Added upstream patch fixing excessive CPU usage (Closes: #776461)

* debian/patches/32-squid-3.4-13210.patch
  - Added upstream patch fixing excessive CPU and memory usage in
    NTLM and Negotiate authentication helpers (Closes: #776463)

* debian/patches/33-squid-3.4-13211.patch
  - Added upstream patch fixing a possible replay vulnerability on Digest
    authentication (Closes: #776464)

* debian/patches/34-squid-3.4-13213.patch
  - Added upstream patch fixing incorrect security permissions for
    TOS/DiffServ packet marking (Closes: #776468)

* debian/patches/35-squid-3.4-13203.patch
  - Added upstream patch fixing squidclient unable to connect to host with
    both IPv4 and IPv6 addresses (Closes: #742425)

Author: Salvatore Bonaccorso
Revision Date: 2013-02-23 14:08:15 UTC

* Non-maintainer upload by the Security Team.
* Add CVE-2012-5643-CVE-2013-0189.dpatch patch.
  Fix squid-cgi (cachemgr) memory leaks and denial of service
  vulnerability: remote attackers could cause a denial of service (memory
  consumption) via (1) invalid Content-Length headers, (2) long POST
  requests, or (3) crafted authentication credentials. CVE-2012-5643 and
  CVE-2013-0189. (Closes: #696187)

Author: Nico Golde
Revision Date: 2011-09-10 13:24:31 UTC

* Non-maintainer upload by the Security Team.
* Fix buffer overflow on long gopher server replies
  (CVE-2011-3205; Closes: #639755).

Author: Luigi Gangitano
Revision Date: 2010-02-10 18:53:36 UTC

* New upstream release
  - Adds client_ip_max_connection to avoid DoS under Slowloris attack
    (Ref: TEMP-0533661-009115 Closes: #533664)