File tinyproxy.changes of Package tinyproxy

Overview Repositories Revisions Requests Users Attributes Meta

File tinyproxy.changes of Package tinyproxy

-------------------------------------------------------------------
Wed May  8 19:02:38 UTC 2024 - Jan Engelhardt <jengelh@inai.de>

- Update to release 1.11.2
  * Fix potential use-after-free in header handling
    [CVE-2023-49606, boo#1223746]
  * Prevent junk from showing up in error page in invalid requests
    [CVE-2022-40468, CVE-2023-40533, boo#1223743]
- Delete 0001-prevent-junk-from-showing-up-in-error-page-in-invali.patch
  (merged)

-------------------------------------------------------------------
Wed Feb  7 11:41:37 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>

- Provide user/group tinyproxy symbol as required by RPM 4.19.

-------------------------------------------------------------------
Thu Sep 21 01:54:02 UTC 2023 - Jan Engelhardt <jengelh@inai.de>

- The %pre scriptlet exercises shadow, so add a Requires for it.

-------------------------------------------------------------------
Wed Oct  5 18:21:13 UTC 2022 - Jan Engelhardt <jengelh@inai.de>

- Ship COPYING file

-------------------------------------------------------------------
Tue Sep 20 08:55:30 UTC 2022 - Jan Engelhardt <jengelh@inai.de>

- Add 0001-prevent-junk-from-showing-up-in-error-page-in-invali.patch
  [CVE-2022-40468] [boo#1203553]

-------------------------------------------------------------------
Mon Jun  6 16:38:07 UTC 2022 - Jan Engelhardt <jengelh@inai.de>

- Move tinyproxy program to /usr/bin.

-------------------------------------------------------------------
Fri May 27 14:14:39 UTC 2022 - Jan Engelhardt <jengelh@inai.de>

- Update to release 1.11.1
  * New fnmatch based filtertype
- Drop tinyproxy-conf.patch, no rationale for why those changes
  are there [boo#1200028].

-------------------------------------------------------------------
Fri Apr 16 17:31:11 UTC 2021 - Jan Engelhardt <jengelh@inai.de>

- Update to release 1.11
  * Support for multiple bind directives.

-------------------------------------------------------------------
Tue Aug 25 19:19:18 UTC 2020 - Jan Engelhardt <jengelh@inai.de>

- Do not suppress errors from groupadd/useradd

-------------------------------------------------------------------
Thu Aug 20 13:36:02 UTC 2020 - Dirk Mueller <dmueller@suse.com>

- update to 1.10.0:
  * Configuration file has moved from /etc/tinyproxy.conf to
    /etc/tinyproxy/tinyproxy.conf.
  * Add support for basic HTTP authentication
  * Add socks upstream support
  * Log to stdout if no logfile is specified
  * Activate reverse proxy by default
  * Support bind with transparent mode
  * Allow multiple listen statements in the configuration
  * Fix CVE-2017-11747: Create PID file before dropping privileges.
  * Fix CVE-2012-3505: algorithmic complexity DoS in hashmap
  * Bugfixes
  * BB#110: fix algorithmic complexity DoS in hashmap
  * BB#106: fix CONNECT requests with IPv6 literal addresses as host
  * BB#116: fix invalid free for GET requests to ipv6 literal address
  * BB#115: Drop supplementary groups
  * BB#109: Fix crash (infinite loop) when writing to log file fails
  * BB#74: Create log and pid files after we drop privs
  * BB#83: Use output of id instead of $USER
   
-------------------------------------------------------------------
Tue Jan  6 10:12:12 UTC 2015 - jengelh@inai.de

- Provide service file instead of script

-------------------------------------------------------------------
Mon Dec 29 20:34:48 UTC 2014 - jengelh@inai.de

- Update to new upstream release 1.8.4
* Fix crash (infinite loop) when logfile writing fails
* Allow listening on multiple families when no Listen is
  provided in config.
* Fix CONNECT requsts with IPv6 literal addresses as host.
* Fix invalid free when connecting to ipv6 literal address
* Limit the number of headers per request to prevent DoS
- Remove 110-seeding.diff (merged upstream), 110-headerlimit.diff
  (solved upstream)

-------------------------------------------------------------------
Fri Mar 14 11:18:41 UTC 2014 - boris@steki.net

- Remove stray chunk headers that can cause /usr/bin/patch to fail

-------------------------------------------------------------------
Thu Jul  4 00:07:06 UTC 2013 - jengelh@inai.de

- Add 110-seeding.diff, 110-headerlimit.diff to address
  CVE-2012-3505 (bnc#776506)
- Refresh tinyproxy-conf.patch to be in -p1 format rather than -p0

-------------------------------------------------------------------
Wed Feb 22 23:08:32 UTC 2012 - chris@computersalat.de

- fix init script
  * TINYPROXY_CFG=/etc/tinyproxy.conf
  * create PID DIR
- fix logrotate script
  * compress, dateext .....
- add user, group tinyproxy
- add conf patch
- add missing logdir
- add missing rc_link
- fix pre/post

-------------------------------------------------------------------
Fri Dec  2 10:15:30 UTC 2011 - chris@computersalat.de

- spec-cleaner
- fix build for suse_version 1110
  * define missing _initdir macro

-------------------------------------------------------------------
Mon Sep 19 08:51:04 UTC 2011 - toganm@opensuse.org

- Update to 1.8.3 version
  changed source format to bz2  
* Fix upstream proxy support
* Fix FilterURLs with transparent proxy support
* Fix bug in ACL netmask generation

-------------------------------------------------------------------
Fri Jul 29 12:04:39 UTC 2011 - toganm@opensuse.org

- added /etc/init.d/tinyproxy
- added tinyproxy logrotate

-------------------------------------------------------------------
Mon Jul 18 12:44:15 UTC 2011 - jengelh@medozas.de

- Initial package

Places

File tinyproxy.changes of Package tinyproxy

Places