-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 31 Mar 2020 11:27:36 +0200 Source: tinyproxy Binary: tinyproxy Architecture: source amd64 Version: 1.8.3-3+deb8u1 Distribution: jessie-security Urgency: medium Maintainer: Ed Boraas <ed@debian.org> Changed-By: Mike Gabriel <sunweaver@debian.org> Description: tinyproxy - A lightweight, non-caching, optionally anonymizing HTTP proxy Closes: 870307 948283 Changes: tinyproxy (1.8.3-3+deb8u1) jessie-security; urgency=medium . * CVE-2017-11747: Create PID file before dropping privileges to non-root account. (Closes: #870307). * debian/tinyproxy.init: + Only set PIDDIR, if PIDFILE is a non-zero length string. (Closes: #948283). Checksums-Sha1: ca939efdb1525df3b34864df564d483e9b8d7fe5 1994 tinyproxy_1.8.3-3+deb8u1.dsc 2538fbd190d3dc357a2e7c2a07ea0fbefb768a13 202430 tinyproxy_1.8.3.orig.tar.bz2 ace912ed8c5bcb1cd4a437512eedf4b2ef5af9d0 13998 tinyproxy_1.8.3-3+deb8u1.debian.tar.bz2 05b80adc6bf95c44603ac0e1e1c74384e3789556 82054 tinyproxy_1.8.3-3+deb8u1_amd64.deb Checksums-Sha256: d5e1ac317e293ca7bb4f556dfea8a2eceee60b6a179b3e992a8b2cfbc340b7a3 1994 tinyproxy_1.8.3-3+deb8u1.dsc be559b54eb4772a703ad35239d1cb59d32f7cf8a739966742622d57df88b896e 202430 tinyproxy_1.8.3.orig.tar.bz2 81de4f76a7401ebb1298473b79bb2d26e9bf6fc809efbfaa0cbee87142542fec 13998 tinyproxy_1.8.3-3+deb8u1.debian.tar.bz2 b239d5be3aa0c5b8324cbaf04cf0e59d8fafc283693af81d4f85b69ada0ddc2b 82054 tinyproxy_1.8.3-3+deb8u1_amd64.deb Files: de41b2726a78ab1a32a4f7a81fe28816 1994 web optional tinyproxy_1.8.3-3+deb8u1.dsc 292ac51da8ad6ae883d4ebf56908400d 202430 web optional tinyproxy_1.8.3.orig.tar.bz2 f629b2c0bd73e29256680154b6fe369e 13998 web optional tinyproxy_1.8.3-3+deb8u1.debian.tar.bz2 5017951fb227a658f30052b3e2997de8 82054 web optional tinyproxy_1.8.3-3+deb8u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAl6DEbgACgkQgj6WdgbD S5YQog/9G1+tFsEOiTbzPYftT15DlBhLoJJEfCHa69V4wiQuOXEYdHZ3wLiXvpMi 2215oqPJ7a5oW/pASlU0NeLKpolHiDZ0ZqFcNkpBKcABflaBj1LTwGkRwiw4AigZ OFviOjM0KEJD+GUkaWole4x84YjeNfWEqqr5WcJH8CYTfseHcHhdmHlVmqPNQmBR 2W6knIO105YQgh6MRnCgPzMJ50F0w/n7AH08lId4aNG09ZP2EsJekxs4XdoRctBR R4sJ8I4+SEYMagfYTcoUeW1Dyy4J+N7V/wwyncIbYnUArr1wu8yzBB2QC4z1YNQ6 PPLbddh5iutNV+WUsnt1jgwK07P/Zmq/byKVPOtCBDQBida1Hbd55Cj2aiBLSGEP SSeAAOqYF+8c6DjeomANaLwqrGzfqCl3axfLwT2tP/c6Y0+S++St0u+L63T/MvA5 OUqtDLy4JYGO0Qj/TX7ZIZKT9HPi7nOe88ajBOG81et9CV3145Di8+nUyzdjyf9Y WolF4xHvP3kpPQ2YuUWeG7un1ZeOl6McpnWU11VWYPqihA3fCvdSlwJZxJY/uVG7 Ojvl6ko18sLkjvBxN5+WbOqqyPkSywC7Nu/Iny5TvsB1umKro6XrHcUt7uo/WpXu 0vTv/fpWaJTT4z8bybaY24GQcXYWvNylXHMd8eqDJbQ0L9ZZI4c= =rlsU -----END PGP SIGNATURE-----