[Bug 480991] [NEW] privoxy 3.0.13 in 9.10 drops connections, hangs, redirects urls to wrong domain

[goto]

Public bug reported:

Binary package hint: privoxy

There are several known bugs with privoxy 3.0.13 (and 3.0.14) that
render it fairly unusable in Ubuntu 9.10:

http://sourceforge.net/tracker/?func=detail&aid=2838716&group_id=11118&atid=111118
http://sourceforge.net/tracker/?func=detail&aid=2831227&group_id=11118&atid=111118
http://sourceforge.net/tracker/?func=detail&aid=2826947&group_id=11118&atid=111118
http://sourceforge.net/tracker/?func=detail&aid=2827004&group_id=11118&atid=211118

One of these could be considered a fairly important security bug: if you
are viewing www.evil.com and you click on a link to
sensitive.site.com/myusername/mypassword/, privoxy will sometimes
redirect you to www.evil.com/myusername/mypassword.

The issues are related to privoxy's new (since 3.0.12) connection keep-
alive support, and a possible workaround may be to comment out "keep-
alive-timeout" and "connection-sharing" in /etc/privoxy/config [see
http://blog.steve.org.uk/looks_like_me_an_vincent_caught_you_boys_at_breakfast.html].
Downgrading to 3.0.12 (the last stable release) from Debian seems to
resolve these issues, and the changelog for 3.0.15 suggests they have
been improved [http://www.privoxy.org/3.0.15/user-manual/whatsnew.html].

** Affects: privoxy (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: connection connection-sharing drop hang http keep-alive privoxy proxy redirect timeout

-- 
privoxy 3.0.13 in 9.10 drops connections, hangs, redirects urls to wrong domain
https://bugs.launchpad.net/bugs/480991
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs