-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 28 Jan 2015 19:44:30 +0100 Source: privoxy Binary: privoxy Architecture: source amd64 Version: 3.0.16-1+deb6u1 Distribution: squeeze-lts Urgency: medium Maintainer: Roland Rosenfeld <roland@debian.org> Changed-By: Holger Levsen <holger@debian.org> Description: privoxy - Privacy enhancing HTTP Proxy Changes: privoxy (3.0.16-1+deb6u1) squeeze-lts; urgency=medium . * Non-maintainer upload by the Squeeze LTS team. * Thanks to Roland Rosenfeld for maintaining privoxy and preparing these patches: - 35_CVE-2015-1031-CID66394: unmap(): Prevent use-after-free if the map only consists of one item. CID 66394. - 36_CVE-2015-1031-CID66376: pcrs_execute(): Consistently set *result to NULL in case of errors. Should make use-after-free in the caller less likely. CID 66391, CID 66376. - 38_CVE-2015-1381: multiple segmentation faults and memory leaks in the pcrs code. - 39_CVE-2015-1382: invalid read. Checksums-Sha1: 5bfd983c485c23be089edfe2f12237470e30d8bc 1780 privoxy_3.0.16-1+deb6u1.dsc 65c458b4cf626ede72568228bbc1d9ad7f81be11 25547 privoxy_3.0.16-1+deb6u1.diff.gz a14d40812966e2167534a858a9e9e3997e72f44f 604530 privoxy_3.0.16-1+deb6u1_amd64.deb Checksums-Sha256: 4791cbec57d2a84edad54c52c54c8f113f2bea818cdc8ad0fb925a08b0e18739 1780 privoxy_3.0.16-1+deb6u1.dsc 6501f9d9321926d1792353cb12ed7ed7597ad6671bf5c571ad13150d1b0579b5 25547 privoxy_3.0.16-1+deb6u1.diff.gz df20943fd81f2904322bc04f435c3e0d3b8f3796f5c71a07470db31f4ea42716 604530 privoxy_3.0.16-1+deb6u1_amd64.deb Files: 8084d435e4aaf6ebdc81e3cc49a5ab01 1780 web optional privoxy_3.0.16-1+deb6u1.dsc d66125cc952258cd4d8ff671da93638c 25547 web optional privoxy_3.0.16-1+deb6u1.diff.gz 2da8b885c85bf7eaf3aa9979014486b2 604530 web optional privoxy_3.0.16-1+deb6u1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIVAwUBVMoAbgkauFYGmqocAQoa2Q//fQj/vmjh0xF3ni0FI1yRGbJ7lGaxdtN5 3o1Kb4z4ExVsgDBuNKfUzQMA+5J58IViRdlgWDk+/FUUx40w1ufgqH9uhxZgU8Je ZkSE6evpvSY6ULlTA03NlrerHXpJewhjBl+AtnVXJjnzkl/69OI7t4xs3ezYzSxi WWeA5/NICD0GP1abxFkqbZZA2HJMNaWjH68PWFyfeu91TbKnCJlhht+0RMpsp6L4 uPqgfRnHZD9dX9RMQqt4TMjmmxjkHiEYd9iJKXikbgbqx/Z8V5C0j2BF7ePJ7bGt /rqlM/ucSLy+i8/k2iXO7/WE8YKo8P+wVD+vbpvzjpWx5UzyJ/yE7X0Un6YtRaN6 G8Opv0s6rt+2dmiO69oQUhAXfheMoK/Miq7C3E35F6+MsIBJ71Sf9zYyqCT21mJj 4oR9srZZXqS15VXwAv5W10F6kEt5MOTol5B5JMy+f3eAz1d0X2EPwXJk3WpGxeyL YSSEIdygrm0k493mttp6FvHBOybUQSifYeG9pI3tR+xIDcKYYBLvFg4ksC/W1dMy eIouyJs2YyIk0oWH1QI+tAyiSe3/2GUIKVBojyxaRhImLFVzxUXwTYwGoVRZ6E47 kSU14SgaEesI6eeg45rUVo6JZrs8ZMPD4r28DMORnV6bra7SAcwva/dDjGQyYgfL MkTOSEUFr+c= =oetz -----END PGP SIGNATURE-----