[ubuntu/bionic-security] privoxy 3.0.26-5ubuntu0.3 (Accepted)

[Amir Naseredini]

privoxy (3.0.26-5ubuntu0.3) bionic-security; urgency=medium

  * SECURITY UPDATE: Denial of Service
    - debian/patches/CVE-2021-44540.patch: fixed the  get_url_spec_param() 
      by freeing memory of compiled pattern spec before bailing.
    - CVE-2021-44540
  * SECURITY UPDATE: XSS
    - debian/patches/CVE-2021-44543.patch: fixed the cgi_error_no_template()
      by encoding the template name.
    - CVE-2021-44543

Date: 2023-01-23 14:51:15.246153+00:00
Changed-By: Amir Naseredini <amir.naseredini at canonical.com>
https://launchpad.net/ubuntu/+source/privoxy/3.0.26-5ubuntu0.3
-------------- next part --------------
Sorry, changesfile not available.