[Bug 1059887] [NEW] Sync tinyproxy 1.8.3-3 (universe) from Debian unstable (main)

Launchpad Bug Tracker 1059887 at bugs.launchpad.net
Mon Oct 1 23:05:46 UTC 2012


You have been subscribed to a public bug by Logan Rosen (logan):

Please sync tinyproxy 1.8.3-3 (universe) from Debian unstable (main)

Changelog entries since current quantal version 1.8.3-2:

tinyproxy (1.8.3-3) unstable; urgency=high

  * Add patches for CVE-2012-3505 (closes: #685281):
    - CVE-2012-3505-tinyproxy-limit-headers.patch: Limit the number of
      headers to prevent DoS attacks.
    - CVE-2012-3505-tinyproxy-randomized-hashmaps.patch: Randomize hashmaps
      in order to avoid fake headers getting included in the same bucket,
      allowing for DoS attacks.
    Bug reported and patches contributed by gpernot.

 -- Jordi Mallach <jordi at debian.org>  Mon, 24 Sep 2012 21:05:41 +0200

** Affects: tinyproxy (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Sync tinyproxy 1.8.3-3 (universe) from Debian unstable (main)
https://bugs.launchpad.net/bugs/1059887
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.



More information about the Ubuntu-sponsors mailing list