From mboxrd@z Thu Jan  1 00:00:00 1970
From: Matthias Fischer <matthias.fischer@ipfire.org>
To: development@lists.ipfire.org
Subject: [PATCH] privoxy: Update to 3.0.24
Date: Sun, 24 Jan 2016 01:11:48 +0100
Message-ID: <1453594308-7026-1-git-send-email-matthias.fischer@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============2805525149780571713=="
List-Id: <development.lists.ipfire.org>

--===============2805525149780571713==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Changelog - in short:
- Security fixes (denial of service):
  - Prevent invalid reads in case of corrupt chunk-encoded content.
    CVE-2016-1982. Bug discovered with afl-fuzz and AddressSanitizer.
  - Remove empty Host headers in client requests.
    Previously they would result in invalid reads. CVE-2016-1983.
    Bug discovered with afl-fuzz and AddressSanitizer.

Also several bug fixes as well as general, action file, and documentation imp=
rovements.

For details see:
http://www.privoxy.org/announce.txt

Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
---
 lfs/privoxy | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/lfs/privoxy b/lfs/privoxy
index bc4848a..de650a2 100644
--- a/lfs/privoxy
+++ b/lfs/privoxy
@@ -1,7 +1,7 @@
 ############################################################################=
###
 #                                                                           =
  #
 # IPFire.org - A linux based firewall                                       =
  #
-# Copyright (C) 2007-2015  IPFire Team  <info(a)ipfire.org>                 =
    #
+# Copyright (C) 2007-2016  IPFire Team  <info(a)ipfire.org>                 =
    #
 #                                                                           =
  #
 # This program is free software: you can redistribute it and/or modify      =
  #
 # it under the terms of the GNU General Public License as published by      =
  #
@@ -24,14 +24,14 @@
=20
 include Config
=20
-VER        =3D 3.0.23
+VER        =3D 3.0.24
 THISAPP    =3D privoxy-$(VER)
 DL_FILE    =3D $(THISAPP)-stable-src.tar.gz
 DL_FROM    =3D $(URL_IPFIRE)
 DIR_APP    =3D $(DIR_SRC)/$(THISAPP)
 TARGET     =3D $(DIR_INFO)/$(THISAPP)
 PROG       =3D privoxy
-PAK_VER    =3D 2
+PAK_VER    =3D 3
=20
 DEPS       =3D ""
=20
@@ -43,7 +43,7 @@ objects =3D $(DL_FILE)
=20
 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE)
=20
-$(DL_FILE)_MD5 =3D bbe47d5ff1a54d9f9fc93a160532697f
+$(DL_FILE)_MD5 =3D 44a47d1a5000db8cccd61ace0e25e7f7
=20
 install : $(TARGET)
=20
@@ -53,7 +53,7 @@ download :$(patsubst %,$(DIR_DL)/%,$(objects))
=20
 md5 : $(subst %,%_MD5,$(objects))
=20
-dist:
+dist:=20
 	$(PAK)
=20
 ############################################################################=
###
--=20
2.7.0


--===============2805525149780571713==--