## % define _use_internal_dependency_generator 0

%define __perl_requires %{SOURCE98}

## % define __find_requires %{SOURCE99}

Name:     squid

Version:  3.1.1

Release:  3%{?dist}

Summary:  The Squid proxy caching server

Epoch:    7

License:  GPLv2

Group:    System Environment/Daemons

URL:      http://www.squid-cache.org

Source0:   http://www.squid-cache.org/Versions/v3/3.1/squid-%{version}.tar.bz2

Source1:   http://www.squid-cache.org/Versions/v3/3.1/squid-%{version}.tar.bz2.asc

Source2:  squid.init

Source3:  squid.logrotate

Source4:  squid.sysconfig

Source5:  squid.pam

Source6:  squid.nm

Source98: perl-requires-squid.sh

## Source99: filter-requires-squid.sh

# Upstream patches

#Patch001: http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-XXXX.patch

# Local patches

# Applying upstream patches first makes it less likely that local patches

# will break upstream ones.

Patch201: squid-3.1.0.9-config.patch

Patch202: squid-3.1.0.9-location.patch

Patch204: squid-3.0.STABLE1-perlpath.patch

Patch205: squid-3.1.0.15-smb-path.patch

Patch208: squid-3.0.STABLE7-from_manpg.patch

Patch209: squid-3.1.1-ipv6_disabled.patch

Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

Requires: bash >= 2.0

Requires(pre): shadow-utils

Requires(post): /sbin/chkconfig

Requires(preun): /sbin/service /sbin/chkconfig

Requires(postun): /sbin/service

# squid_ldap_auth and other LDAP helpers require OpenLDAP

BuildRequires: openldap-devel

# squid_pam_auth requires PAM development libs

BuildRequires: pam-devel

# SSL support requires OpenSSL

BuildRequires: openssl-devel

# squid_kerb_aut requires Kerberos development libs

BuildRequires: krb5-devel

# squid_session_auth requires DB4

BuildRequires: db4-devel

# ESI support requires Expat & libxml2

BuildRequires: expat-devel libxml2-devel

# TPROXY requires libcap, and also increases security somewhat

BuildRequires: libcap-devel

%description

Squid is a high-performance proxy caching server for Web clients,

supporting FTP, gopher, and HTTP data objects. Unlike traditional

caching software, Squid handles all requests in a single,

non-blocking, I/O-driven process. Squid keeps meta data and especially

hot objects cached in RAM, caches DNS lookups, supports non-blocking

DNS lookups, and implements negative caching of failed requests.

Squid consists of a main server program squid, a Domain Name System

lookup program (dnsserver), a program for retrieving FTP data

(ftpget), and some management and client tools.

%prep

%setup -q

#patch001 -p0 -b .3.1-XXXX

%patch201 -p1 -b .config

%patch202 -p1 -b .location

%patch204 -p1 -b .perlpath

%patch205 -p1 -b .smb-path

%patch208 -p1 -b .from_manpg

%patch209 -p1 -b .ipv6_disabled

%build

%configure \

   --exec_prefix=/usr \

   --libexecdir=%{_libdir}/squid \

   --localstatedir=/var \

   --datadir=%{_datadir}/squid \

   --sysconfdir=/etc/squid \

   --with-logdir='$(localstatedir)/log/squid' \

   --with-pidfile='$(localstatedir)/run/squid.pid' \

   --disable-dependency-tracking \

   --enable-arp-acl \

   --enable-follow-x-forwarded-for \

   --enable-auth="basic,digest,ntlm,negotiate" \

   --enable-basic-auth-helpers="LDAP,MSNT,NCSA,PAM,SMB,YP,getpwnam,multi-domain-NTLM,SASL,DB,POP3,squid_radius_auth" \

   --enable-ntlm-auth-helpers="smb_lm,no_check,fakeauth" \

   --enable-digest-auth-helpers="password,ldap,eDirectory" \

   --enable-negotiate-auth-helpers="squid_kerb_auth" \

   --enable-external-acl-helpers="ip_user,ldap_group,session,unix_group,wbinfo_group" \

   --enable-cache-digests \

   --enable-cachemgr-hostname=localhost \

   --enable-delay-pools \

   --enable-epoll \

   --enable-icap-client \

   --enable-ident-lookups \

   %ifnarch ppc64 ia64 x86_64 s390x

   --with-large-files \

   %endif

   --enable-linux-netfilter \

   --enable-referer-log \

   --enable-removal-policies="heap,lru" \

   --enable-snmp \

   --enable-ssl \

   --enable-storeio="aufs,diskd,ufs" \

   --enable-useragent-log \

   --enable-wccpv2 \

   --enable-esi \

   --with-aio \

   --with-default-user="squid" \

   --with-filedescriptors=16384 \

   --with-dl \

   --with-openssl \

   --with-pthreads

%ifarch sparcv9 sparc64 s390 s390x

   export CXXFLAGS="$RPM_OPT_FLAGS -fPIE"

   export CFLAGS="$RPM_OPT_FLAGS -fPIE"

%else

   export CXXFLAGS="$RPM_OPT_FLAGS -fpie"

   export CFLAGS="$RPM_OPT_FLAGS -fpie" 

%endif

export LDFLAGS="-pie"

make \

	DEFAULT_SWAP_DIR='$(localstatedir)/spool/squid' \

	%{?_smp_mflags}

%install

rm -rf $RPM_BUILD_ROOT

make \

	DESTDIR=$RPM_BUILD_ROOT \

	install

echo "

#

# This is /etc/httpd/conf.d/squid.conf

#

ScriptAlias /Squid/cgi-bin/cachemgr.cgi %{_libdir}/squid/cachemgr.cgi

# Only allow access from localhost by default

<Location /Squid/cgi-bin/cachemgr.cgi>

 order allow,deny

 allow from localhost.localdomain

 # Add additional allowed hosts as needed

 # allow from .example.com

</Location>" > $RPM_BUILD_ROOT/squid.httpd.tmp

mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d

mkdir -p $RPM_BUILD_ROOT/etc/logrotate.d

mkdir -p $RPM_BUILD_ROOT/etc/sysconfig

mkdir -p $RPM_BUILD_ROOT/etc/pam.d

mkdir -p $RPM_BUILD_ROOT/etc/httpd/conf.d/

mkdir -p $RPM_BUILD_ROOT/etc/NetworkManager/dispatcher.d

install -m 755 %{SOURCE2} $RPM_BUILD_ROOT/etc/rc.d/init.d/squid

install -m 644 %{SOURCE3} $RPM_BUILD_ROOT/etc/logrotate.d/squid

install -m 644 %{SOURCE4} $RPM_BUILD_ROOT/etc/sysconfig/squid

install -m 644 %{SOURCE5} $RPM_BUILD_ROOT/etc/pam.d/squid

install -m 644 $RPM_BUILD_ROOT/squid.httpd.tmp $RPM_BUILD_ROOT/etc/httpd/conf.d/squid.conf

install -m 644 %{SOURCE6} $RPM_BUILD_ROOT/etc/NetworkManager/dispatcher.d/20-squid

mkdir -p $RPM_BUILD_ROOT/var/log/squid

mkdir -p $RPM_BUILD_ROOT/var/spool/squid

chmod 644 contrib/url-normalizer.pl contrib/rredir.* contrib/user-agents.pl

iconv -f ISO88591 -t UTF8 ChangeLog -o ChangeLog.tmp

mv -f ChangeLog.tmp ChangeLog

# Move the MIB definition to the proper place (and name)

mkdir -p $RPM_BUILD_ROOT/usr/share/snmp/mibs

mv $RPM_BUILD_ROOT/usr/share/squid/mib.txt $RPM_BUILD_ROOT/usr/share/snmp/mibs/SQUID-MIB.txt

# squid.conf.documented is documentation. We ship that in doc/

rm -f $RPM_BUILD_ROOT/etc/squid/squid.conf.documented

# remove unpackaged files from the buildroot

rm -f $RPM_BUILD_ROOT%{_bindir}/{RunAccel,RunCache}

rm -f $RPM_BUILD_ROOT/squid.httpd.tmp

%clean

rm -rf $RPM_BUILD_ROOT

%files

%defattr(-,root,root,-)

%doc COPYING COPYRIGHT README ChangeLog QUICKSTART src/squid.conf.documented

%doc contrib/url-normalizer.pl contrib/rredir.* contrib/user-agents.pl

%attr(755,root,root) %dir %{_sysconfdir}/squid

%attr(755,root,root) %dir %{_libdir}/squid

%attr(750,squid,squid) %dir /var/log/squid

%attr(750,squid,squid) %dir /var/spool/squid

%config(noreplace) %attr(644,root,root) %{_sysconfdir}/httpd/conf.d/squid.conf

%config(noreplace) %attr(640,root,squid) %{_sysconfdir}/squid/squid.conf

%config(noreplace) %attr(644,root,squid) %{_sysconfdir}/squid/cachemgr.conf

%config(noreplace) %{_sysconfdir}/squid/mime.conf

%config(noreplace) %{_sysconfdir}/squid/errorpage.css

%config(noreplace) %{_sysconfdir}/sysconfig/squid

%config(noreplace) %{_sysconfdir}/squid/msntauth.conf

# These are not noreplace because they are just sample config files

%config %{_sysconfdir}/squid/msntauth.conf.default

%config %{_sysconfdir}/squid/squid.conf.default

%config %{_sysconfdir}/squid/mime.conf.default

%config %{_sysconfdir}/squid/errorpage.css.default

%config %{_sysconfdir}/squid/cachemgr.conf.default

%config(noreplace) %{_sysconfdir}/pam.d/squid

%config(noreplace) %{_sysconfdir}/logrotate.d/squid

%dir %{_datadir}/squid

%attr(-,root,root) %{_datadir}/squid/errors

%attr(755,root,root) %{_sysconfdir}/rc.d/init.d/squid

%attr(755,root,root) %{_sysconfdir}/NetworkManager/dispatcher.d/20-squid

%{_datadir}/squid/icons

%{_sbindir}/squid

%{_bindir}/squidclient

%{_mandir}/man8/*

%{_mandir}/man1/*

%{_libdir}/squid/*

%{_datadir}/snmp/mibs/SQUID-MIB.txt

%pre

if ! getent group squid >/dev/null 2>&1; then

  /usr/sbin/groupadd -g 23 squid

fi

if ! getent passwd squid >/dev/null 2>&1 ; then

  /usr/sbin/useradd -g 23 -u 23 -d /var/spool/squid -r -s /sbin/nologin squid >/dev/null 2>&1 || exit 1 

fi

for i in /var/log/squid /var/spool/squid ; do

        if [ -d $i ] ; then

                for adir in `find $i -maxdepth 0 \! -user squid`; do

                        chown -R squid:squid $adir

                done

        fi

done

exit 0

%post

/sbin/chkconfig --add squid

%preun

if [ $1 = 0 ] ; then

        service squid stop >/dev/null 2>&1

        rm -f /var/log/squid/*

        /sbin/chkconfig --del squid

fi

%postun

if [ "$1" -ge "1" ] ; then

        service squid condrestart >/dev/null 2>&1

fi

%changelog

* Mon Apr 19 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.1-3

- Bug #583489: Adjust logrotate script to changes in logrotate package.

* Fri Apr 19 2010 Jiri Skala <jskala@redhat.com>

- fixes #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled

* Tue Mar 30 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.1-2

- Update to 3.1.1 Squid bug #2827 crash with assertion failed:

  FilledChecklist.cc:90: "conn() != NULL" under high load.

* Mon Mar 15 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.18-1

- Upgrade to 3.1.0.18 fixing Digest authentication and improved HTTP/1.1 support

* Sun Feb 28 2010 Henrik Nordstrom <henrik@henriknordstrom.net> -  7:3.1.0.17-3

- Bug 569120, fails to open unbound ipv4 listening sockets

* Thu Feb 25 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.17-2

- Upgrade to 3.1.0.17

* Thu Feb 18 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.16-7

- Workaround for Fedora-13 build failure

* Sun Feb 14 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.16-6

- Patch for Squid security advisory SQUID-2010:2, denial of service

  issue in HTCP processing (CVE-2010-0639)

* Sun Feb 07 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.16-5

- Rebuild 3.1.0.16 with corrected upstream release.

* Wed Feb 03 2010 Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-4

- spec file modified to be fedora packaging guidline compliant

- little shifting lines in init script header due to rpmlint complaint

- fixes assertion during start up

* Mon Feb 01 2010 Henrik Nordstrom <henrik@henriknordstrom.net> 7:3.1.0.16-3

- Upgrade to 3.1.0.16 for DNS related DoS fix (Squid-2010:1)

* Sat Jan 09 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.15-3

- fixed #551302 PROXY needs libcap. Also increases security a little.

- merged relevant upstream bugfixes waiting for next 3.1 release

* Mon Nov 23 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.15-2

- Update to 3.1.0.15 with a number of bugfixes and a workaround for

  ICEcast/SHOUTcast streams.

* Mon Nov 23 2009 Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2

- fixed #532930 Syntactic error in /etc/init.d/squid

- fixed #528453 cannot initialize cache_dir with user specified config file

* Sun Sep 27 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.14-1

- Update to 3.1.0.14

* Sat Sep 26 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-7

- Include upstream patches fixing important operational issues

- Enable ESI support now that it does not conflict with normal operation

* Fri Sep 18 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-6

- Rotate store.log if enabled

* Wed Sep 16 2009 Tomas Mraz <tmraz@redhat.com> - 7:3.1.0.13-5

- Use password-auth common PAM configuration instead of system-auth

* Tue Sep 15 2009 Jiri Skala <jskala@redhat.com> - 7:3.1.0.13-4

- fixed #521596 - wrong return code of init script

* Tue Sep 08 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-3

- Enable squid_kerb_auth

* Mon Sep 07 2009 Henrik Nordstrom <henrik@henriknordtrom.net> - 7:3.1.0.13-2

- Cleaned up packaging to ease future maintenance

* Fri Sep 04 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-1

- Upgrade to next upstream release 3.1.0.13 with many new features

  * IPv6 support

  * NTLM-passthru

  * Kerberos/Negotiate authentication scheme support

  * Localized error pages based on browser language preferences

  * Follow X-Forwarded-For capability

  * and more..

* Mon Aug 31 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 3.0.STABLE18-3

- Bug #520445 silence logrotate when Squid is not running

* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 7:3.0.STABLE18-2

- rebuilt with new openssl

* Tue Aug 04 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE18-1

- Update to 3.0.STABLE18

* Sat Aug 01 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE17-3

- Squid Bug #2728: regression: assertion failed: http.cc:705: "!eof"

* Mon Jul 27 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE17-2

- Bug #514014, update to 3.0.STABLE17 fixing the denial of service issues

  mentioned in Squid security advisory SQUID-2009_2.

* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7:3.0.STABLE16-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

* Wed Jul 01 2009 Jiri Skala <jskala@redhat.com> 7:3.0.STABLE16-2

- fixed patch parameter of bXXX patches

* Mon Jun 29 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE16-1

- Upgrade to 3.0.STABLE16

* Sat May 23 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE15-2

- Bug #453304 - Squid requires restart after Network Manager connection setup

* Sat May 09 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE15-1

- Upgrade to 3.0.STABLE15

* Tue Apr 28 2009 Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE14-3

- fixed ambiguous condition in the init script (exit 4)

* Mon Apr 20 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE14-2

- Squid bug #2635: assertion failed: HttpHeader.cc:1196: "Headers[id].type == ftInt64"

* Sun Apr 19 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE14-1

- Upgrade to 3.0.STABLE14

* Fri Mar 06 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE13-2

- backported logfile.cc syslog parameters patch from 3.1 (b9443.patch)

- GCC-4.4 workaround in src/wccp2.cc

* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7:3.0.STABLE13-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

* Thu Feb 5 2009 Jonathan Steffan <jsteffan@fedoraproject.org> - 7:3.0.STABLE13-1

- upgrade to latest upstream

* Tue Jan 27 2009 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE12-1

- upgrade to latest upstream

* Sun Jan 18 2009 Tomas Mraz <tmraz@redhat.com> - 7:3.0.STABLE10-4

- rebuild with new openssl

* Fri Dec 19 2008 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE10-3

- actually include the upstream bugfixes in the build

* Fri Dec 19 2008 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE10-2

- upstream bugfixes for cache corruption and access.log response size errors

* Fri Oct 24 2008 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE10-1

- upgrade to latest upstream

* Sun Oct 19 2008 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE9-2

- disable coss support, not officially supported in 3.0

* Sun Oct 19 2008 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE9-1

- update to latest upstream

* Thu Oct 09 2008 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE7-4

- change logrotate to move instead of copytruncate

* Wed Oct 08 2008 Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE7-3

- fix #465052 -  FTBFS squid-3.0.STABLE7-1.fc10

* Thu Aug 14 2008 Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE7-2

- used ncsa_auth.8 from man-pages. there will be this file removed due to conflict

- fix #458593 noisy initscript

- fix #463129 init script tests wrong conf file

- fix #450352 - build.patch patches only generated files

* Wed Jul 02 2008 Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE7-1

- update to latest upstream

- fix #453214

* Mon May 26 2008 Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE6-2

- fix bad allocation

* Wed May 21 2008 Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE6-1

- upgrade to latest upstream

- fix bad allocation

* Fri May 09 2008 Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE5-2

- fix configure detection of netfilter kernel headers (#435499),

  patch by aoliva@redhat.com

- add support for negotiate authentication (#445337)

* Fri May 02 2008 Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE5-1

- upgrade to latest upstream

* Tue Apr 08 2008 Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE4-1

- upgrade to latest upstream

* Thu Apr 03 2008 Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE2-2

- add %%{optflags} to make

- remove warnings about unused return values

* Tue Mar 13 2008 Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE2-1

- upgrade to latest upstream 3.0.STABLE2

- check config file before starting (#428998)

- whitespace unification of init script

- some minor path changes in the QUICKSTART file

- configure with the --with-filedescriptors=16384 option

* Tue Feb 26 2008 Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE1-3

- change the cache_effective_group default back to none

* Mon Feb 11 2008 Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE1-2

- rebuild for 4.3

* Wed Jan 23 2008 Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE1-1

- upgrade to latest upstream 3.0.STABLE1

* Tue Dec 04 2007 Martin Bacovsky <mbacovsk@redhat.com> - 2.6.STABLE17-1

- upgrade to latest upstream 2.6.STABLE17

* Wed Oct 31 2007 Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE16-3

- arp-acl was enabled

* Tue Sep 25 2007 Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE16-2

- our fd_config patch was replaced by upstream's version 

- Source1 (FAQ.sgml) points to local source (upstream's moved to wiki)

* Fri Sep 14 2007 Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE16-1

- upgrade to latest upstream 2.6.STABLE16

* Wed Aug 29 2007 Fedora Release Engineering <rel-eng at fedoraproject dot org> - 7:2.6.STABLE14-2

- Rebuild for selinux ppc32 issue.

* Thu Jul 19 2007 Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE14-1

- update to latest upstream 2.6.STABLE14

- resolves: #247064: Initscript Review

* Tue Mar 27 2007 Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE12-1

- update to latest upstream 2.6.STABLE12

- Resolves: #233913: squid: unowned directory

* Mon Feb 19 2007 Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE9-2

- Resolves: #226431: Merge Review: squid

* Mon Jan 29 2007 Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE9-1

- update to the latest upstream

* Sun Jan 14 2007 Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE7-1

- update to the latest upstream

* Tue Dec 12 2006 Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE6-1

- update to the latest upstream

* Mon Nov  6 2006 Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE5-1

- update to the latest upstream

* Tue Oct 26 2006 Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-4

- added fix for #205568 - marked cachemgr.conf as world readable

* Tue Oct 25 2006 Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-3

- added fix for #183869 - squid can abort when getting status

- added upstream fixes:

    * Bug #1796: Assertion error HttpHeader.c:914: "str"

    * Bug #1779: Delay pools fairness, correction to first patch

    * Bug #1802: Crash on exit in certain conditions where cache.log is not writeable

    * Bug #1779: Delay pools fairness when multiple connections compete for bandwidth

    * Clarify the select/poll/kqueue/epoll configure --enable/disable options

- reworked fd patch for STABLE4

* Tue Oct 17 2006 Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2

- upstream fixes:

  * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)

  * aioDone() could be called twice

  * Squid reconfiguration (upstream BZ #1800)

* Mon Oct 2 2006 Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-1

- new upstream

- fixes from upstream bugzilla, items #1782,#1780,#1785,#1719,#1784,#1776

* Tue Sep 5 2006 Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE3-2

- added upstream patches for ACL

* Mon Aug 21 2006 Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE3-1

- the latest stable upstream

* Thu Aug 10 2006 Karsten Hopp <karsten@redhat.de> 7:2.6.STABLE2-3

- added some requirements for pre/post install scripts

* Fri Aug 04 2006 Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE2-2

- added patch for #198253 - squid: don't chgrp another pkg's

  files/directory

* Mon Jul 31 2006 Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE2-1

- the latest stable upstream

- reworked fd config patch

* Wed Jul 25 2006 Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-3

- the latest CVS upstream snapshot

* Wed Jul 19 2006 Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-2

- the latest CVS snapshot

* Mon Jul 18 2006 Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-1

- new upstream + the latest CVS snapshot from 2006/07/18

- updated fd config patch

- enabled epoll

- fixed release format (#197405)

- enabled WCCPv2 support (#198642)

* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 7:2.5.STABLE14-2.1

- rebuild

* Tue Jun 8 2006 Martin Stransky <stransky@redhat.com> - 7:2.5.STABLE14-2

- fix for squid BZ#1511 - assertion failed: HttpReply.c:105: "rep"

* Tue May 30 2006 Martin Stransky <stransky@redhat.com> - 7:2.5.STABLE14-1

- update to new upstream

* Sun May 28 2006 Martin Stransky <stransky@redhat.com> - 7:2.5.STABLE13-5

- fixed libbind patch (#193298)

* Wed May 3  2006 Martin Stransky <stransky@redhat.com> - 7:2.5.STABLE13-4

- added extra group check (#190544)

* Wed Mar 29 2006 Martin Stransky <stransky@redhat.com> - 7:2.5.STABLE13-3

- improved pre script (#187217) - added group switch

* Thu Mar 23 2006 Martin Stransky <stransky@redhat.com> - 7:2.5.STABLE13-2

- removed "--with-large-files" on 64bit arches

* Mon Mar 13 2006 Martin Stransky <stransky@redhat.com> - 7:2.5.STABLE13-1

- update to new upstream

* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 7:2.5.STABLE12-5.1

- bump again for double-long bug on ppc(64)

* Tue Feb 07 2006 Martin Stransky <stransky@redhat.com> - 7:2.5.STABLE12-5

- new upstream patches

* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 7:2.5.STABLE12-4.1

- rebuilt for new gcc4.1 snapshot and glibc changes

* Wed Dec 28 2005  Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-4

- added follow-xff patch (#176055)

- samba path fix (#176659)

* Mon Dec 19 2005  Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-3

- fd-config.patch clean-up

- SMB_BadFetch patch from upstream

* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>

- rebuilt

* Mon Nov 28 2005  Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-2

- rewriten patch squid-2.5.STABLE10-64bit.patch, it works with

  "--with-large-files" option now

- fix for #72896 - squid does not support > 1024 file descriptors,

  new "--enable-fd-config" option for it.

* Wed Nov 9 2005  Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-1

- update to STABLE12

- setenv patch

* Mon Oct 24 2005 Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-6

- fix for delay pool from upstream

* Thu Oct 20 2005 Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-5

- fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response

- more fixes from upstream

* Fri Oct 14 2005 Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-4

- enabled support for large files (#167503)

* Thu Oct 13 2005 Tomas Mraz <tmraz@redhat.com> 7:2.5.STABLE11-3

- use include instead of pam_stack in pam config

* Thu Sep 29 2005 Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-2

- added patch for delay pools and some minor fixes

* Fri Sep 23 2005 Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-1

- update to STABLE11

* Mon Sep 5 2005 Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-4

- Three upstream patches for #167414

- Spanish and Greek messages

- patch for -D_FORTIFY_SOURCE=2 

* Tue Aug 30 2005 Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-3

- removed "--enable-truncate" option (#165948)

- added "--enable-cache-digests" option (#102134)

- added "--enable-ident-lookups" option (#161640)

- some clean up (#165949)

* Fri Jul 15 2005 Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-2

- pam_auth and ncsa_auth have setuid (#162660)

* Fri Jul 7 2005 Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-1

- new upstream version

- enabled fakeauth utility (#154020)

- enabled digest authentication scheme (#155882)

- all error pages marked as config (#127836)

- patch for 64bit statvfs interface (#153274)

- added httpd config file for cachemgr.cgi (#112725)

* Mon May 16 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-7

- Upgrade the upstream -dns_query patch from -4 to -5

* Wed May 11 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-6

- More upstream patches, including a fix for

  bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks

* Tue Apr 26 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-5

- more upstream patches, including a fix for

  CVE-1999-0710 cachemgr malicious use

* Fri Apr 22 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-4

- More upstream patches, including the fixed 2GB patch.

- include the -libbind patch, which prevents squid from using the optional

  -lbind library, even if it's installed.

* Tue Mar 15 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-2

- New upstream version, with 14 upstream patches.

* Wed Feb 16 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE8-2

- new upstream version with 4 upstream patches.

- Reorganize spec file to apply upstream patches first

* Tue Feb 1 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-4

- Include two more upstream patches for security vulns:

  bz#146783 Correct handling of oversized reply headers

  bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call

* Tue Jan 25 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-3

- Include more upstream patches, including two for security holes.

* Tue Jan 18 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-2

- Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged

  accessable so that ntlm_auth will work.  It needs to be in this rpm,

  because the Samba RPM can't assume the squid user exists.

  Note that this will only work if the Samba RPM is recent enough to create

  that directory at install time instead of at winbindd startup time.

  That should be samba-common-3.0.0-15 or later.

  This fixes bugzilla #103726

- Clean up extra whitespace in this spec file.

- Add additional upstream patches. (Now 18 upstream patches).

- patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes.

- patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole.

- patch #114 closes CAN-2005-0095, a remote DOS security hole.

- Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since

  they're now fixed by upstream patches.

* Mon Oct 25 2004 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-1

- new upstream version, with 3 upstream patches.

  Updated the -build and -config patches

- Include patch from Ulrich Drepper <frepper@redhat.com> to more

  intelligently close all file descriptors.

* Mon Oct 18 2004 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3

- include patch from Ulrich Drepper <drepper@redhat.com> to stop

  problems with O_NONBLOCK.  This closes #136049

* Tue Oct 12 2004 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-2

- Include fix for CAN-2004-0918

* Tue Sep 28 2004 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1

- New upstream version, with 32 upstream patches.

  This closes #133970, #133931, #131728, #128143, #126726

- Change the permissions on /etc/squid/squid.conf to 640.  This closes

  bugzilla #125007

* Mon Jun 28 2004 Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5

- Merge current upstream patches.

- Fix the -pipe patch to have the correct name of the winbind pipe.

* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>

- rebuilt

* Mon Apr 5 2004 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2

- Include the first 10 upstream patches

- Add a patch for the correct location of the winbindd pipe.  This closes

  bugzilla #107561

- Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch

  This closes #117851

- Include /etc/pam.d/squid .  This closes #113404

- Include a patch to close #111254 (assignment in assert)

- Change squid.init to put output messages in /var/log/squid/squid.out

  This closes #104697

- Only useradd the squid user if it doesn't already exist, and error out

  if the useradd fails.  This closes #118718.

* Tue Mar 2 2004 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1

- New upstream version, obsoletes many patches.

- Fix --datadir passed to configure.  Configure automatically adds /squid

  so we shouldn't.

- Remove the problematic triggerpostun trigger, since is's broken, and FC2

  never shipped with that old version.

- add %%{?_smp_mflags} to make line.

* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>