[ubuntu/disco-proposed] squid 4.4-1ubuntu1 (Accepted)

Mon Nov 19 21:41:13 UTC 2018

squid (4.4-1ubuntu1) disco; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - Use snakeoil certificates.
    - Add an example refresh pattern for debs.
    - Add disabled by default AppArmor profile.
    - d/p/fix-uninitialized-var.patch: Workaround gcc's maybe-unitialized
      error in parse_time_t, triggered on ppc64el due to the build using -O3
      in that architecture.
    - d/rules: Add -Wno-format-truncation to CXXFLAGS as a workaround if
      building for ppc64el. On that arch, dpkg-buildflags sets -O3 instead of
      -O2 and that triggers a format-truncation error on pcon.cc. See
      See https://bugs.squid-cache.org/show_bug.cgi?id=4875
    - d/p/fix-rotate-assertion.patch: Fix assertion error when rotating logs.
      Thanks to Vitaly Lavrov <vel21ripn at gmail.com>. (LP #1794553)
  * Drop:
    - d/rules: enable cdbs parallel build
      [Fixed in 4.2-1]
    - d/t/test-squid.py: fix apparmor profile filename
      [Fixed in 4.2-1]
    - d/t/test-squid.py: fix the process name. The PID points at the parent.
      [Fixed in 4.2-1]
    - d/t/upstream-test-suite: also make libmem.la, needed by the tests.
      [Fixed in 4.2-1]
    - d/t/0003-installed-binary-for-debian-ci.patch:  use the squid
      binary from the system, instead of the one from the source tree.
      [Fixed in 4.2-1]
    - d/t/upstream-test-suite: drop the sed line, since patch
      0003-installed-binary-for-debian-ci.patch is doing this work now.
      (https://salsa.debian.org/squid-team/squid/commit/ad4372b444ba8b1587839)
      [Fixed in 4.2-1]
  * Added changes:
    - d/rules: Only use -latomic with the intended architectures, instead of
      all of them. This matches what was suggested in
      https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=907106#5
    - d/NEWS.debian: rename d/NEWS.debian to d/NEWS so that
      dh_installchangelogs can pick it up. dh_installchangelogs handles
      d/NEWS or d/<package>.NEWS, but not NEWS.debian.
    - d/usr.sbin.squid: fix the apparmor profile (LP: #1796189):
      + allow net_admin capability
      + add attach_disconnected flag

squid (4.4-1) unstable; urgency=high

  * Urgency high due to security fixes

  [ Amos Jeffries <amosjeffries at squid-cache.org> ]
  * New Upstream Release
    - Fix security issue SQUID-2018:4 (CVE: TBD) (Closes: #912293)
    - Fix security issue SQUID-2018:5 (CVE: TBD) (Closes: #912294)

  [ Luigi Gangitano ]
  * debian/squid.preinst
    - Don't parse /etc/passwd, use getent to make lintian happy

squid (4.3-1) unstable; urgency=low

  [ Amos Jeffries <amosjeffries at squid-cache.org> ]
  * New Upstream Release

  * debian/patches/
    - Remove upstream pr264 patch for systemd

  * debian/control
    - Bumped Standards-Version to 4.2.1, no change needed

squid (4.2-2) unstable; urgency=high

  [ Adrian Bunk <bunk at debian.org> ]
  * Add -latomic for rmel m68k mips mipsel powerpc powerpcspe sh4
    (Closes: #907106)

squid (4.2-1) unstable; urgency=high

  [ Amos Jeffries <amosjeffries at squid-cache.org> ]
  * New Upstream Release

  * debian/patches/
    - Patch to use installed binary for upstream config tests
    - Remove patches included upstream: 0011-upstream-pr172.patch
    - Add upstream pr264 patch for systemd (Closes: #903165)

  * debian/control
    - Bumped Standards-Version to 4.2.0.0, no change needed

  [ Andreas Hasenack ]
  * Enable CDBS parallel build
  * d/t/upstream-test-suite: also make libmem.la, needed by the tests.
  * d/t/test-squid.py: fix apparmor profile filename
  * debian/tests/control: add ssl-cert to the list of dependencies of the
    squid test, as apache is configured to load
    /etc/ssl/certs/ssl-cert-snakeoil.pem in that test.
  * d/t/test-squid.py: fix the process name. The PID points at the parent.

  [ Luigi Gangitano ]
  * debian/control
    - Fix Vcs-Git and Vcs-Browser URLs

Date: Mon, 19 Nov 2018 10:51:18 -0200
Changed-By: Andreas Hasenack <andreas at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/squid/4.4-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 19 Nov 2018 10:51:18 -0200
Source: squid
Binary: squid3 squid squid-common squidclient squid-cgi squid-purge
Architecture: source
Version: 4.4-1ubuntu1
Distribution: disco
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Andreas Hasenack <andreas at canonical.com>
Description:
 squid      - Full featured Web Proxy cache (HTTP proxy)
 squid-cgi  - Full featured Web Proxy cache (HTTP proxy) - control CGI
 squid-common - Full featured Web Proxy cache (HTTP proxy) - common files
 squid-purge - Full featured Web Proxy cache (HTTP proxy) - cache management uti
 squid3     - Transitional package
 squidclient - Full featured Web Proxy cache (HTTP proxy) - HTTP(S) message util
Closes: 903165 907106 912293 912294
Launchpad-Bugs-Fixed: 1796189
Changes:
 squid (4.4-1ubuntu1) disco; urgency=medium
 .
   * Merge with Debian unstable. Remaining changes:
     - Use snakeoil certificates.
     - Add an example refresh pattern for debs.
     - Add disabled by default AppArmor profile.
     - d/p/fix-uninitialized-var.patch: Workaround gcc's maybe-unitialized
       error in parse_time_t, triggered on ppc64el due to the build using -O3
       in that architecture.
     - d/rules: Add -Wno-format-truncation to CXXFLAGS as a workaround if
       building for ppc64el. On that arch, dpkg-buildflags sets -O3 instead of
       -O2 and that triggers a format-truncation error on pcon.cc. See
       See https://bugs.squid-cache.org/show_bug.cgi?id=4875
     - d/p/fix-rotate-assertion.patch: Fix assertion error when rotating logs.
       Thanks to Vitaly Lavrov <vel21ripn at gmail.com>. (LP #1794553)
   * Drop:
     - d/rules: enable cdbs parallel build
       [Fixed in 4.2-1]
     - d/t/test-squid.py: fix apparmor profile filename
       [Fixed in 4.2-1]
     - d/t/test-squid.py: fix the process name. The PID points at the parent.
       [Fixed in 4.2-1]
     - d/t/upstream-test-suite: also make libmem.la, needed by the tests.
       [Fixed in 4.2-1]
     - d/t/0003-installed-binary-for-debian-ci.patch:  use the squid
       binary from the system, instead of the one from the source tree.
       [Fixed in 4.2-1]
     - d/t/upstream-test-suite: drop the sed line, since patch
       0003-installed-binary-for-debian-ci.patch is doing this work now.
       (https://salsa.debian.org/squid-team/squid/commit/ad4372b444ba8b1587839)
       [Fixed in 4.2-1]
   * Added changes:
     - d/rules: Only use -latomic with the intended architectures, instead of
       all of them. This matches what was suggested in
       https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=907106#5
     - d/NEWS.debian: rename d/NEWS.debian to d/NEWS so that
       dh_installchangelogs can pick it up. dh_installchangelogs handles
       d/NEWS or d/<package>.NEWS, but not NEWS.debian.
     - d/usr.sbin.squid: fix the apparmor profile (LP: #1796189):
       + allow net_admin capability
       + add attach_disconnected flag
 .
 squid (4.4-1) unstable; urgency=high
 .
   * Urgency high due to security fixes
 .
   [ Amos Jeffries <amosjeffries at squid-cache.org> ]
   * New Upstream Release
     - Fix security issue SQUID-2018:4 (CVE: TBD) (Closes: #912293)
     - Fix security issue SQUID-2018:5 (CVE: TBD) (Closes: #912294)
 .
   [ Luigi Gangitano ]
   * debian/squid.preinst
     - Don't parse /etc/passwd, use getent to make lintian happy
 .
 squid (4.3-1) unstable; urgency=low
 .
   [ Amos Jeffries <amosjeffries at squid-cache.org> ]
   * New Upstream Release
 .
   * debian/patches/
     - Remove upstream pr264 patch for systemd
 .
   * debian/control
     - Bumped Standards-Version to 4.2.1, no change needed
 .
 squid (4.2-2) unstable; urgency=high
 .
   [ Adrian Bunk <bunk at debian.org> ]
   * Add -latomic for rmel m68k mips mipsel powerpc powerpcspe sh4
     (Closes: #907106)
 .
 squid (4.2-1) unstable; urgency=high
 .
   [ Amos Jeffries <amosjeffries at squid-cache.org> ]
   * New Upstream Release
 .
   * debian/patches/
     - Patch to use installed binary for upstream config tests
     - Remove patches included upstream: 0011-upstream-pr172.patch
     - Add upstream pr264 patch for systemd (Closes: #903165)
 .
   * debian/control
     - Bumped Standards-Version to 4.2.0.0, no change needed
 .
   [ Andreas Hasenack ]
   * Enable CDBS parallel build
   * d/t/upstream-test-suite: also make libmem.la, needed by the tests.
   * d/t/test-squid.py: fix apparmor profile filename
   * debian/tests/control: add ssl-cert to the list of dependencies of the
     squid test, as apache is configured to load
     /etc/ssl/certs/ssl-cert-snakeoil.pem in that test.
   * d/t/test-squid.py: fix the process name. The PID points at the parent.
 .
   [ Luigi Gangitano ]
   * debian/control
     - Fix Vcs-Git and Vcs-Browser URLs
Checksums-Sha1:
 da16d0dc9447283f626edc728f18f0b51574cda2 2713 squid_4.4-1ubuntu1.dsc
 f8a45921c088db2add7bead74027596f45ebc571 5167256 squid_4.4.orig.tar.gz
 f7384fb39e7b65fb7a83472b3cae04760b8950b3 40392 squid_4.4-1ubuntu1.debian.tar.xz
 611768f4d09321b6adb8d32fae1e766aa2a34ffc 9451 squid_4.4-1ubuntu1_source.buildinfo
Checksums-Sha256:
 193cf08ddf1bfd8cfd4099a453adf7bbc4bbfdde9f68243551700fe197f88130 2713 squid_4.4-1ubuntu1.dsc
 7054b51a4814391094426c51644eed81588611999aeec4b4a500cd4a8aae5e85 5167256 squid_4.4.orig.tar.gz
 10172f57a569da4851657c61537b6e11bafb5d9a0055bcb1768bba6415e45c1c 40392 squid_4.4-1ubuntu1.debian.tar.xz
 7e7827af612fbd08f26cc78ade0fb2e5ad053fa824ce6d336c6006fdfd0ddd22 9451 squid_4.4-1ubuntu1_source.buildinfo
Files:
 f5adebfe160f2cc4728cc296b1585385 2713 web optional squid_4.4-1ubuntu1.dsc
 b94eeae7e8b9778c3ecfe8488ddd25a1 5167256 web optional squid_4.4.orig.tar.gz
 840d22bbd8185a46d9c64778cc53e257 40392 web optional squid_4.4-1ubuntu1.debian.tar.xz
 38d76432af3cb102ac3ebe97d79556c0 9451 web optional squid_4.4-1ubuntu1_source.buildinfo
Original-Maintainer: Luigi Gangitano <luigi at debian.org>

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEiGZB1jWM2kalbBxyrJg+tb9ry6kFAlvzLbQACgkQrJg+tb9r
y6lvLhAAyQ4HRk8J7cmVIwSbLKfrPjiNnppiA8aGP/EADeKwYI6LLEMWZ2Ou3sms
oK/0RQFOKWhMWIObfl1R279vTsis9LYxIJJv/N9ggYN4s2LQNC9W0K8R52JnksbX
ZkZZTzMFqP1imDFGukUvybN0cqNKix7NBVbYwMgUa7yOa3wGhbSGVeZ6MwdZR7ZE
uiXDsI4J7fPt/aFkCgmJ9aDI+dDsXyoHQkzXJNUsSx0NTaQOFWIJsN1rNnpz6zs/
I7jjqh3zkBp/bjIEiiA+qIV6EZgJXY17+3QNT2LCm2kdjAEI64q9IR5q0VHaiwXi
z/bdjYFlBAllISb0OaqWwTrl0bZB0hRI0qr8I1awbe+2Lj1/urm99THx/AKzlu4a
peoUoMgVE1hcSljIownOhbaMi+KwbXKDlqtxOVIleGO5i5QhOTUTND9MMGWOGr50
/2XtM6QJ/y8yAJOfo9zJe6DUelQ1asaNkB8Mb8T7kNJ0cHUB5RF/Zsql2NLW5wZz
RjmnkQEQRWRStrKCCH7x1054YlQheVHuqyOMDDqTmc04mmBhC90+KJUpcyygQZLR
jV8GBeEYQalm+MntMgxqr569zRG1bBEKSwoYyC5GlDlrPfWYC6GstJBv1CKX8W9/
qt38oSzHxYMpo14P1Yxbs0sHzpYHoAJfrdrTSod5ZDroc4u1FIU=
=0Dny
-----END PGP SIGNATURE-----