[PATCH] Please fix squid3 bug #3769 and squid3 trusty package bug 1405351 in trusty

Lukas Erlacher erlacher at in.tum.de
Wed Mar 23 07:51:48 UTC 2016


Hello,

(Note: I have written this email directly to Luigi Gangitano a couple days ago who is the package maintainer according to squid-proxy.org but haven't heard back from him, so I'm posting to the list now)

in all versions of squid3 between 3.2 and 3.4.4 a pretty severe bug exists that disables the scrubbing of client IPs. Scrubbing of client IPs is extremely important for any privacy-aware and risk-aware provider.

Trusty is supported for a long time into the future, so it's clearly not EOL yet. If you do not want to keep maintaining the old 3.3 squid, maybe you could consider making a backport instead. Anyway -

Based on the bzr commit fixing the bug (http://bazaar.launchpad.net/~squid/squid/3.4/revision/squid3@treenet.co.nz-20140212085229-edx2i4es622uo0gm) I made a patch. The diff of the bzr revision doesn't apply but the differences are solely due to cosmetic refactoring of method names in squid 3.4. I'm not familiar with the debian / ubuntu package maintenance tools so the patch ended up as a two-parter.

Could you please make a release for that?

Additionally https://bugs.launchpad.net/ubuntu/+source/squid3/+bug/1405351 has a patch for the squid3 init file that is required to make caching work in squid3. It works and should be put into a release.

Best regards and many thanks for your work,
Lukas Erlacher
-------------- next part --------------
A non-text attachment was scrubbed...
Name: fix-3769.patch
Type: text/x-patch
Size: 2253 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/ubuntu-devel-discuss/attachments/20160323/5e4d3e51/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: fix-3769-2.patch
Type: text/x-patch
Size: 1563 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/ubuntu-devel-discuss/attachments/20160323/5e4d3e51/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5143 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.ubuntu.com/archives/ubuntu-devel-discuss/attachments/20160323/5e4d3e51/attachment-0002.bin>


More information about the Ubuntu-devel-discuss mailing list