# squid Published articles for squid. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## \[CVE\] \[URGENT\] Squid v19.2.6 and Tentacle v20.2.4 released DevFeed: [\[CVE\] \[URGENT\] Squid v19.2.6 and Tentacle v20.2.4 released]() Original publisher: [Read original article]() Author: Patrick Donnelly Published: 2026-08-19T00:00:00Z Content type: release Language: en Sources: [Ceph Blog]() Topics: [releases](), [Authentication](), [Linux](), [client](), [monitor]() Tags: [authentication](), [blog-post](), [cve](), [cves](), [en-article](), [en-blog-post](), [errors](), [linux](), [process](), [release](), [releases](), [rest](), [rgw](), [squid](), [tentacle](), [upgrade]() ### AI overview The Ceph project released Tentacle 20.2.4 and Squid 19.2.6 as hotfixes addressing four CVEs. The article urgently recommends upgrading and explains changes to CephX key types, daemon-key rotation, authentication controls, recovery procedures, and multisite RGW request signing. ### Source excerpt The Ceph project has released Tentacle 20.2.4 and Squid 19.2.6 hotfixes for four CVEs across several components. This is the sixth backport release in the Squid series. This is the fourth backport release in the Tentacle series. We strongly recommend that all Ceph operators upgrade to one of these releases as soon as possible. Release Date ¶ August 19, 2026 Critical Upgrade Steps ¶ The fix for CVE-2025-30156 introduces a new CephX key type, aes256k. This is the first time Ceph has introduced a new key type for CephX credentials. Therefore, a new procedure exists for upgrading and rotating Ceph daemon keys as part of this CVE. Before upgrading a Ceph cluster, the operator should familiarize themselves with the procedure to upgrade CephX keys. These steps are for package-based deployments of Ceph. In other sections, the document also includes new information about key rotation procedures, monitor authentication controls, and emergency recovery procedures. Deployments using cephadm will automate the process except for client keys. You may notice that Cephadm spends more time than normal on the upgrade after updating all daemon images. This is due to a new process rotating the OSD and MDS keys. Please be patient. There are plans to improve this in the future. Deployments using Rook will also automate rotation of some client keys with some exclusions. Look to the Rook project's announcement for more details. Client and kernel upgrades are recommended to support aes256k. Note that upstream Linux kernel client support began in kernel 7.0 and has been backported to CentOS Stream 9 and 10. Check with your distribution vendor for backported key support before rotating client keys used by the kernel. As part of upgrading a Ceph cluster, six new health warnings and errors will be generated. This is normal. As part of the process to upgrade/rotate entity keys, you will address the warnings and errors as you go. These are documented beginning here. The CephX documentation has bee ## v19.2.5 Squid released DevFeed: [v19.2.5 Squid released]() Original publisher: [Read original article]() Author: Yuri Weinstein Published: 2026-07-14T00:00:00Z Content type: news Language: en Sources: [Ceph Blog]() Topics: [changelog](), [Amazon S3](), [bug](), [TLS (Transport Layer Security)](), [Authentication](), [Authorization](), [SSL]() Tags: [authentication](), [authorization](), [blog-post](), [bug](), [changelog](), [concurrent](), [configuration](), [en-article](), [en-blog-post](), [object-storage](), [queuing](), [release](), [s3](), [squid](), [ssl](), [tls](), [vector]() ### AI overview Ceph v19.2.5 Squid is the fifth backport release in the Squid series. It fixes issues across MDS, OSD, and RGW, including request queuing faults, rollback and erasure-coding behavior, TLS 1.3 cipher configuration, S3 ACL handling, multisite synchronization, policy evaluation, presigned URL authentication, object tagging, frontend concurrency, and bucket statistics. ### Source excerpt This is the fifth backport release in the Squid series. We recommend all users update to this release. Notable Changes ¶ MDS (Metadata Server) ¶ Fixed a segmentation fault relating to MDSContext completion and request queuing. OSD (Object Storage Daemon) ¶ Rollback & Vector Fixes: Corrected rollback logic for partial write object information (OI) and optimized Erasure Coding (EC) by ensuring Twiddle creates a full-sized vector. RGW (RADOS Gateway) ¶ TLS 1.3 Ciphersuites: Introduced the ssl_ciphersuites configuration option for the Beast front-end to support TLS 1.3 cipher customizations. S3 PutObject ACLs Fix: Fixed a bug where PutObject requests were erroneously rejected under BlockPublicAcls due to an incorrect comparison return value from canned_acl.compare(). Multisite Sync Robustness: Resolved an infinite loop scenario in RGWBucketFullSyncCR when a source bucket was deleted mid-sync by introducing a mechanism to clear stateful data in reused bucket_list_result objects. SNS Policy Evaluation: Updated ListTopics to use the account root ARN for policy evaluation when invoked by a non-root account user, preventing unexpected implicit denies from identity-based policies. Presigned URLs: Fixed an internal server error occurring during the authentication process of presigned URLs. Prerequest Hook: Restructured the order of execution so that the prerequest hook now runs after the authorization process has completed. Object Tagging: Added handling for plain-text object tags during execution of RGWObjTags::decode(). Beast Frontend Stability: Applied a strand executor to the Beast timeout timer to avoid concurrent socket access and potential race conditions. Bucket Statistics: Added a fix for bucket stats execution when the underlying bucket index does not exist. Changelog ¶ [Stretch Mode] mon: restrict changing mon election strategy post stretch mode (pr#65458, Kamoltat Sirivadhna) Check if HTTP\_X\_AMZ\_COPY\_SOURCE header is empty (pr#66028, Suyash Dongre) Fix multifs ## v19.2.4 Squid released DevFeed: [v19.2.4 Squid released]() Original publisher: [Read original article]() Author: Yuri Weinstein Published: 2026-06-01T00:00:00Z Content type: release Language: en Sources: [Ceph Blog]() Topics: [cephfs](), [Kafka](), [dashboards](), [Authorization](), [Tooling]() Tags: [blog-post](), [bug](), [cephfs](), [en-article](), [en-blog-post](), [json](), [kafka](), [release](), [squid](), [update]() ### AI overview Ceph v19.2.4 Squid is the fourth backport release in the Squid series, and the article recommends that all users update. Changes include BlueFS storage adjustments, fixes in RADOS and RADOS Gateway, Kafka 3.9.2 support, CephFS and MDS diagnostic and consistency improvements, Dashboard service and access-control fixes, and an RBD lock policy change. ### Source excerpt This is the fourth backport release in the Squid series. We recommend all users update to this release. Notable Changes ¶ OSD / BlueStore ¶ BlueFS: Increased the default WAL volume size to 1GB to prevent ENOSPC failures. Volume Selection: Fixed the usage of bluestore_volume_selection_reserved_factor and updated row naming conventions in RocksDBBlueFSVolumeSelector. Health: Added a time_added field to mon_info_t to prevent freshly added monitors from incorrectly triggering a MON_DOWN health status. Tooling: Updated monmaptool to correctly respect set features when adding addresses. RADOS / Manager (mgr) ¶ RADOS pybind: Fixed a parameter reversal bug in WriteOp.zero() where offset and length were swapped when calling the underlying C API. Daemon Health: Modified the manager to clear health metrics for down or out OSDs instead of removing them entirely from the daemon state. Autoscaler: Updated pg_autoscale_mode logic to accurately reflect the no_autoscale flag in both standard and JSON command outputs. RADOS Gateway (RGW) ¶ Notifications: Resolved a reserved_size drift in the 2pc_queue causing ENOSPC errors and fixed a leak where overhead was not properly decremented during commit/abort. Multipart Uploads: Fixed an issue where tags could not be retrieved from objects created via multipart uploads. Kafka Integration: Updated the internal Kafka version support to 3.9.2. CephFS / MDS ¶ Fragments: Simplified fragment printing and corrected frag_t endianness conversion for network and storage consistency. FUSE Client: Updated the FUSE client to clarify that fallocate disk space reservation is only supported with specific flags like FALLOC_FL_KEEP_SIZE. Metadata: Updated the MDS to dump frag_t as an object and included sysinfo in the status command output for better diagnostics. Dashboard ¶ Services: Fixed a bug where changing MDS placement to a label incorrectly triggered the creation of an entirely new MDS service. Access Control: Fixed role-based access control permissio ## Ad-blocking your iPad DevFeed: [Ad-blocking your iPad]() Original publisher: [Read original article]() Author: Graham King Published: 2011-10-25T00:01:54Z Content type: tutorial Language: en Sources: [Graham King]() Topics: [proxy](), [Network](), [Ubuntu](), [iOS](), [Monitoring]() Tags: [ads](), [guide](), [ipad](), [monitoring](), [network](), [privacy](), [proxy](), [request](), [router](), [software](), [squid](), [tcp](), [ubuntu]() ### AI overview A tutorial on routing iPad network traffic through a Squid proxy on Ubuntu, inspecting GET and POST requests with tcpdump, and blocking ad servers through a router. It also describes observed app traffic that included a device identifier and, in some cases, location data. ### Source excerpt Uncover hidden iPad traffic and block pesky ads with this tech-savvy guide.