Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Thu, 4 Feb 2021 16:46:32 +0100
From: Fabian Keil <freebsd-listen@...iankeil.de>
To: oss-security@...ts.openwall.com
Subject: Re: Two DoS issues fixed in Privoxy 3.0.31 stable

Fabian Keil <freebsd-listen@...iankeil.de> wrote on 2021-01-31:

> --------------------------------------------------------------------
> ChangeLog for Privoxy 3.0.31
> --------------------------------------------------------------------
> 
> - Security/Reliability:
>   - Prevent an assertion from getting triggered by a crafted CGI request.
>     Commit 5bba5b89193fa. OVE-20210130-0001.
>     Reported by: Joshua Rogers (Opera)

CVE-2021-20217.

>   - Fixed a memory leak when decompression fails "unexpectedly".
>     Commit f431d61740cc0. OVE-20210128-0001.

CVE-2021-20216.

Fabian

Content of type "application/pgp-signature" skipped

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.