Version 1.10.0

obnoxxx
2018-09-02T22:44:19Z

Tinyproxy version 1.10.0

This is the new stable version of tinyproxy.

Major changes in this release

Add support for basic HTTP authentication

Add socks upstream support

Log to stdout if no logfile is specified

Activate reverse proxy by default

Support bind with transparent mode

Install tinyproxy to bin/ instead of sbin/

Ship manpages as part of distribution tarball

Allow multiple listen statements in the configuration

Coverity fixes

Simplified configure and build

Improved selftest environment

Included security fixes

Fix CVE-2017-11747: Create PID file before dropping privileges.

Fix CVE-2012-3505: algorithmic complexity DoS in hashmap

Bugfixes

BB#110: fix algorithmic complexity DoS in hashmap

BB#106: fix CONNECT requests with IPv6 literal addresses as host

BB#116: fix invalid free for GET requests to ipv6 literal address

BB#63: conf: Allow multiple Listen statements in the config

BB#81: allow listening on multiple families when no Listen is provided in config

BB#115: Drop supplementary groups

BB#112: build: fix build with autoconf >= 2.69

BB#103: Move files installed in /etc/ to /etc/tinyproxy/

BB#109: Fix crash (infinite loop) when writing to log file fails

BB#90: Fix bug in ACL netmask generation

BB#95: Fix FilterURLs with transparent proxy support

BB#91: Fix upstream proxy support

BB#74: Create log and pid files after we drop privs

BB#89: Don't recompile regular expressions

BB#83: Use output of id instead of $USER

BB#80: keep track of error codes in return codes in tests

Note: bugzilla.banu.com does not exist any more, so there is no reference for these any more except for the code changes in git log.