Squid 3.3.13 is available

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The Squid HTTP Proxy team is very pleased to announce the availability
of the Squid-3.3.13 release!


This release is a security fix release resolving a major vulnerability
found in the prior Squid releases.

    REMINDER: This and older releases are already deprecated by
              Squid-3.4 availablility.


The major changes to be aware of:

* CVE-2014-3609 : SQUID-2014:2 Denial of service in request processing

  http://www.squid-cache.org/Advisories/SQUID-2014_2.txt

This vulnerability allows any client who is allowed to use the proxy to
perform a denial of service attack on Squid. This issue is particularly
impacting reverse-proxy installations.

  A simple squid.conf workaround is available for quick use and those
  unable to upgrade. See the Advisory notice for details.



 See the ChangeLog for the full list of changes in this and earlier
 releases.

 All users are urged to upgrade as soon as possible.


Please remember to run "squid -k parse" when testing upgrade to a new
version of Squid. It will audit your configuration files and report
any identifiable issues the new release will have in your installation
before you "press go". We are still removing the infamous "Bungled
Config" halting points and adding checks, so if something is not
identified please report it.



Please refer to the release notes at
http://www.squid-cache.org/Versions/v3/3.3/RELEASENOTES.html
when you are ready to make the switch to Squid-3.3

Upgrade tip:
  "squid -k parse" is starting to display even more
   useful hints about squid.conf changes.

This new release can be downloaded from our HTTP or FTP servers

 http://www.squid-cache.org/Versions/v3/3.3/
 ftp://ftp.squid-cache.org/pub/squid/
 ftp://ftp.squid-cache.org/pub/archive/3.3/

or the mirrors. For a list of mirror sites see

 http://www.squid-cache.org/Download/http-mirrors.html
 http://www.squid-cache.org/Download/mirrors.html

If you encounter any issues with this release please file a bug report.
http://bugs.squid-cache.org/


Amos Jeffries

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)

iQEcBAEBAgAGBQJT/gnoAAoJELJo5wb/XPRjXBkH/0LL4ypXZjv6OGNsGuniwjno
ttDNun0KzVTuvL1i0FiR+e4V9A+zzbP8XeLZVOmQATCEabP/1wt7Aw26f8mDbluG
g82MSfpK3ndFVybRGynblswRJfp7WKD6GCOVzQdcJ1UYOrRGPOCLMgIqAvquBNUl
A/K+78Wk9xCJSuWr9Dp1zV7aSHsXY64P4RibyYIYiwDu/nUTN1LbQYgKcAm/qqgU
Dx4WXxzXPT5nCmjIlg3uK7wGuDhZsNQU2H7Mp515C3rWFic/aDM0iPvB+Hq910F2
/PcUwFupB2riU68ihVvSI80P8jGnay+NaKBOR500EDFShSBituZwMZN997J2/6U=
=UtvD
-----END PGP SIGNATURE-----