[ubuntu/precise-security] tinyproxy 1.8.3-1ubuntu0.1 (Accepted)

[Seth Arnold]

tinyproxy (1.8.3-1ubuntu0.1) precise-security; urgency=low

  * SECURITY UPDATE: Fix for denial of service vulnerability where remote
    attackers send crafted request headers. (LP: #1154502)
    - debian/patches/001-CVE-2012-3505.patch: Limit the number of headers to
      prevent DoS attacks. Randomize hashmaps in order to avoid fake headers
      getting included in the same bucket, allowing for DoS attacks.
    - CVE-2012-3505

Date: 2013-03-16 01:00:12.863535+00:00
Changed-By: Christian Kuersteiner <ckuerste at gmx.ch>
Signed-By: Seth Arnold <seth.arnold at canonical.com>
https://launchpad.net/ubuntu/precise/+source/tinyproxy/1.8.3-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.