tinyproxy (1.8.3-1ubuntu0.1) precise-security; urgency=low
* SECURITY UPDATE: Fix for denial of service vulnerability where remote
attackers send crafted request headers. (LP: #1154502)
- debian/patches/001-CVE-2012-3505.patch: Limit the number of headers to
prevent DoS attacks. Randomize hashmaps in order to avoid fake headers
getting included in the same bucket, allowing for DoS attacks.
- CVE-2012-3505
Date: 2013-03-16 01:00:12.863535+00:00
Changed-By: Christian Kuersteiner <[email protected]>
Signed-By: Ubuntu Archive Robot
<[email protected]>
https://launchpad.net/ubuntu/precise/+source/tinyproxy/1.8.3-1ubuntu0.1
Sorry, changesfile not available.
--
Precise-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/precise-changes
