Changes in squid-7.8 (28 Oct 2026): - Bug 5553: Segfault when parsing valueless request_header_add - Bug 5552: Buffer overflow when parsing deny_info NNN w/o URL - HTTP(S): Reject Range and Content-Range with INT64_MAX last-pos - Treat %00 pct-encoding triplets in URLs as invalid - Improve uri_whitespace chop support - Improve cache digest mask sizing - ICP: Tolerate more responses not associated…
Changes in squid-7.7 (17 Aug 2026): - Protect several base64 encoding buffers - Honor directive parameters after a quoted filename reference - FTP: Reject commands with parameters containing CR - FTP: Do not send commands with embedded CRs or LFs - ... and some build optimizations - ... and some cleanups
Changes in squid-7.6 (08 Jun 2026): - HTTP/1.1: Transfer-Encoding:identity is prohibited - Harden peerDigestSwapInMask against invalid cache digest reply - Fix parsing of legacy url_rewrite_program responses - Fix handling of truncated legacy errorpage %codes - Do not treat tiny virgin response buffer space specially - Honor reply_header_max_size for received FTP control responses - Improve parsin…
Changes in squid-7.5 (12 Mar 2026): - Bug 5501: Squid may exit when ACLs decode an invalid URI - ICP: Fix HttpRequest lifetime for ICP v3 queries - ICP: Fix validation of packet sizes and URLs - Do not escape malformed URI twice when sending ICP errors - ... and some code, CI, and documentation cleanups
Changes in squid-7.4 (19 Jan 2026): - Do not create world-readable directories - digest_edirectory_auth: Fix LDAPS memory leaks - snmplib: Improve handling of zero-length ASN OCTET STRINGs - Debug tls_read_method()/tls_write_method() errors - ICMP: Harden echo paths, fix overflows, UB, and leaks - Set SSL_OP_LEGACY_SERVER_CONNECT when peeking at servers - security_file_certgen: Fix OPENSSL_malloc(…
Changes in squid-7.3 (28 Oct 2025): - Regression Bug 5520: ERR_INVALID_URL for CONNECT host with leading digit - Quit NTLM authenticate() on missing NTLM authorization header - Fix Auth::User::absorb() IP list transfer logic - Fix type mismatch in new/delete of addrinfo::ai_addr - Fix libntlmauth string parsing on big-endian machines - ... and some code cleanups - ... and some CI improvements
Changes in squid-7.2 (15 Oct 2025): - Bug 3390: Proxy auth data visible to scripts - Bug 5504: Document that Squid discards invalid rewrite-url - Bug 5407: Support at least 1000 groups per Kerberos user - Fix parsing of malformed quoted squid.conf strings - Fix off-by-one in helper args count assertion - Fix UDP log module opening and closing code - Fix BodyPipe debugging in handleChunkedRequestBo…
Changes in squid-7.1 (10 Jul 2025): - Bug 5497: Fix detection of duped IPs returned by getaddrinfo() - Remove basic_smb_lm_auth and ntlm_smb_lm_auth helpers - ... and several documentation improvements - ... and some code cleanups
Changes in squid-6.14 (24 Jun 2025): - Bug 5352: Do not get stuck in RESPMOD after pausing peer read(2) - Bug 5489: Fix "make check" linking on Solaris - Fix SNMP cacheNumObjCount -- number of cached objects - Do not duplicate received Surrogate-Capability in sent requests - Fix Mem::Segment::open() stub to fix build without shm_open() - ... and CI and documentation updates
Changes in squid-7.0.2 (19 Jun 2025): - Bug 5352: Do not get stuck in RESPMOD after pausing peer read(2) - Bug 5316: Release note says version 6 still for testing - Bug 5489: Fix "make check" linking on Solaris - Do not duplicate received Surrogate-Capability in sent requests - Fix GCC v13 LTO build [-Walloc-size-larger-than=] - Fix OpenSSL build with GCC v15.1.1 [-Wformat-truncation=] - Fix tls-d…
Changes in squid-7.0.1 (2 Feb 2025): - Remove Edge Side Include (ESI) protocol - Remove Ident protocol support - Remove cache_object protocol support - Remove cachemgr.cgi tool - Remove tool 'purge' for management of UFS/AUFS/DiskD caches - Remove squidclient - Remove disabled classful networks code - Remove dead Multicast Miss Stream feature - Remove broken and disabled icpPktDump() - Remove depr…
Changes in squid-6.13 (31 Jan 2025): - Bug 5352: Do not get stuck when RESPMOD is slower than read(2) - Bug 5405: Large uploads fill request buffer and die - Bug 5093: List http_port params that https_port/ftp_port lack - Bug 5311: clarify configuration byte units - Bug 5091: document that changes to workers require restart - Bug 5481: Fix GCC v14 build [-Wmaybe-uninitialized] - Nil request derefe…