Tinyproxy version 1.10.0
This is the new stable version of tinyproxy.
Major changes in this release
- Add support for basic HTTP authentication
- Add socks upstream support
- Log to stdout if no logfile is specified
- Activate reverse proxy by default
- Support bind with transparent mode
- Install tinyproxy to bin/ instead of sbin/
- Ship manpages as part of distribution tarball
- Allow multiple listen statements in the configuration
- Coverity fixes
- Simplified configure and build
- Improved selftest environment
Included security fixes
- Fix CVE-2017-11747: Create PID file before dropping privileges.
- Fix CVE-2012-3505: algorithmic complexity DoS in hashmap
Bugfixes
- BB#110: fix algorithmic complexity DoS in hashmap
- BB#106: fix CONNECT requests with IPv6 literal addresses as host
- BB#116: fix invalid free for GET requests to ipv6 literal address
- BB#63: conf: Allow multiple Listen statements in the config
- BB#81: allow listening on multiple families when no Listen is provided in config
- BB#115: Drop supplementary groups
- BB#112: build: fix build with autoconf >= 2.69
- BB#103: Move files installed in /etc/ to /etc/tinyproxy/
- BB#109: Fix crash (infinite loop) when writing to log file fails
- BB#90: Fix bug in ACL netmask generation
- BB#95: Fix FilterURLs with transparent proxy support
- BB#91: Fix upstream proxy support
- BB#74: Create log and pid files after we drop privs
- BB#89: Don't recompile regular expressions
- BB#83: Use output of id instead of $USER
- BB#80: keep track of error codes in return codes in tests
Note: bugzilla.banu.com does not exist any more, so there is no reference for these any more except for the code changes in git log.