-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 22 Jan 2016 17:09:48 +0100 Source: privoxy Binary: privoxy Architecture: source amd64 Version: 3.0.21-7+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Roland Rosenfeld <roland@debian.org> Changed-By: Roland Rosenfeld <roland@debian.org> Description: privoxy - Privacy enhancing HTTP Proxy Changes: privoxy (3.0.21-7+deb8u1) jessie-security; urgency=high . * 40_CVE-2016-1982: Prevent invalid reads in case of corrupt chunk-encoded content. * 41_CVE-2016-1983: Remove empty Host headers in client requests. Previously they would result in invalid reads. Checksums-Sha1: 7e835ce92be6e184662de158166f1128451f0d23 1852 privoxy_3.0.21-7+deb8u1.dsc 2d73a9146e87218b25989096f63ab0772ce24109 1733120 privoxy_3.0.21.orig.tar.gz 4ccc153c7c15307b395f98918bd55b2d8fdb8f6b 21816 privoxy_3.0.21-7+deb8u1.debian.tar.xz 963b3802fd6d37a1e9a11fc5fb7460d5b20fdc53 494380 privoxy_3.0.21-7+deb8u1_amd64.deb Checksums-Sha256: d14d0a8107fe9a26cecae6602c0468c1e16a71f242fca48d116e3c94bdb5ab88 1852 privoxy_3.0.21-7+deb8u1.dsc 5ec7e601948d2bd0ebf0ebe90eed7d49e7663c395ce16d0403e91ea2d459ddb8 1733120 privoxy_3.0.21.orig.tar.gz 47e074a2266248257a935f1aa221f333f77e16186b928114aaee84161620b78f 21816 privoxy_3.0.21-7+deb8u1.debian.tar.xz 7a9808d5c65b5061a71a38ad7e19bccec41ecda13422d8ea221ff11f635292c3 494380 privoxy_3.0.21-7+deb8u1_amd64.deb Files: 98aeba707a2e786ec0cf804fd1ccee0f 1852 web optional privoxy_3.0.21-7+deb8u1.dsc 79558f2545cfcf9731f7de611646d837 1733120 web optional privoxy_3.0.21.orig.tar.gz 17fd3ca543b292c2fe07aa658297adaf 21816 web optional privoxy_3.0.21-7+deb8u1.debian.tar.xz 83fda06d2c530d791c7e1c082ecfa467 494380 web optional privoxy_3.0.21-7+deb8u1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJWolk/AAoJEAJxO8/KVBCygB4P/j5Su/pXZgSIiunpbYzbRg0F 3GFLvoEp7M5lZYnHs8DDDV5zRPGniNjkXgxHmtMyGX9IzDBNUgtZ6uA1GtWAhzVC nMjTChxyTgsPh50+ERDuPjab2Ojq2VW6znjMGlgsrr9q+yc0nerDnL80C2NEUb3I mg7+M5n40ATduHGmvSUlUL0tSdmTG/EHU0l+3WhM2YT/ILIQAp4xoc4EN3HT6Mhx 8puZXqRVg3aByYZ9YEoN+tEs6D3PHnADEGNLGdTRDAQ/hzeTDecAJlyFcpcZKr6N XsD6vccsrCzWT2I5ntYlHRnT0I2Ili3bs+hiS492mldsobFMJFPIdDONdtYzoL/u UJGUrKZVdfW9AXr88fowqc3qbcy4Uyea0ITJwsxuLNQN0Pk8s+FX4V6jQY2eil3+ Xw/x6QeRntQqGRDz/Waazq/QHU0lqRJzjdvxG6/r+qk8IUbe8A8RLrdEHt6rUV6O KqEd3EQ9LSF6N/qwyMjfTya9NLLa2ZbKJRGFZ+0nC0JdqcRFq2JnaIe5Uh/KWdea wnd2ZAcHFPhM94rfeOHzRxUxmar0E28hm0mvQ+jilcTYZjaF5lNieH98MiNfRUls dCX2Is2IlBB4B50eduQmWDhQa5XyE1sXW0vl7meHaAmLI6h5twsvYvwcmufFA2c8 J/0Thr9gb1lLS/ukEoJM =7PyF -----END PGP SIGNATURE-----