Format: 1.8
Date: Wed, 13 Mar 2013 16:42:14 +0700
Source: tinyproxy
Binary: tinyproxy
Architecture: armhf
Version: 1.8.3-1ubuntu0.1
Distribution: precise
Urgency: low
Maintainer: Ubuntu/armhf Build Daemon <buildd@iara.buildd>
Changed-By: Christian Kuersteiner <ckuerste@gmx.ch>
Description: 
 tinyproxy  - A lightweight, non-caching, optionally anonymizing HTTP proxy
Launchpad-Bugs-Fixed: 1154502
Changes: 
 tinyproxy (1.8.3-1ubuntu0.1) precise-security; urgency=low
 .
   * SECURITY UPDATE: Fix for denial of service vulnerability where remote
     attackers send crafted request headers. (LP: #1154502)
     - debian/patches/001-CVE-2012-3505.patch: Limit the number of headers to
       prevent DoS attacks. Randomize hashmaps in order to avoid fake headers
       getting included in the same bucket, allowing for DoS attacks.
     - CVE-2012-3505
Checksums-Sha1: 
 573e355138c58ac5e2711f718c45207951de1f6f 54400 tinyproxy_1.8.3-1ubuntu0.1_armhf.deb
Checksums-Sha256: 
 681c54147e91cdd26a08ba70ba59584c169462a161f27425b467bf217a0e0fce 54400 tinyproxy_1.8.3-1ubuntu0.1_armhf.deb
Files: 
 f60415cf2c35e8d8c455b7a014abcb72 54400 web optional tinyproxy_1.8.3-1ubuntu0.1_armhf.deb
Original-Maintainer: Ed Boraas <ed@debian.org>