Polipo 1.0.4.1 is released

Christopher Davis <[email protected]> Tue, 2 Feb 2010 04:13:22 +0000

Newsgroups	gmane.comp.web.polipo.user
Message-ID	<[email protected]>

Polipo 1.0.4.1 contains several security and stability fixes over 1.0.4.

Please download here:
	
http://freehaven.net/~chrisd/polipo/polipo-1.0.4.1.tar.gz
http://freehaven.net/~chrisd/polipo/polipo-1.0.4.1.tar.gz.asc

31 January 2010: Polipo 1.0.4.1:
  Cherry-picked fixes from 1.0.5
  * Fixed an integer overflow that may lead to a crash
    (http://secunia.com/advisories/37607/). Discovered by Jeremy Brown.
    (CVE-2009-4413)
  * Fixed a crash that occurs when a server sends a malformed
    Cache-Control: header (CVE-2009-3305). Patch from Stefan Fritsch.
  * Prevent an infinite loop when a bodyless 204 or 1xx response is encountered.
  * Don't crash when we get an error while waiting for 100 continue status.

Thanks,
-- 
Christopher Davis
Mangrin Remailer Admin
PGP: 0x0F8DA163

------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com

_______________________________________________
Polipo-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/polipo-users

signature.asc (application/pgp-signature, 455 B)