 Ankur Tyagi
|
fca616e1ef
|
tinyproxy: patch CVE-2026-54388
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-54388
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
|
2026-10-14 16:30:55 +13:00 |
|
|
Ankur Tyagi
|
7c8cd0805f
|
tinyproxy: patch CVE-2026-55202
Backport commit identified by Debian[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55202
[1]https://security-tracker.debian.org/tracker/CVE-2026-55202
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 233e6a56e5)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
|
2026-10-13 11:50:55 +13:00 |
|
|
Ankur Tyagi
|
1247ca6a89
|
tinyproxy: patch CVE-2026-54387
Backport commit identified by Debian[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-54387
[1]https://security-tracker.debian.org/tracker/CVE-2026-54387
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 33649b0657)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
|
2026-10-13 11:50:55 +13:00 |
|
|
Ankur Tyagi
|
53ec96a06c
|
tinyproxy: patch CVE-2026-31842
Backport commit identified by Debian[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-31842
[1]https://security-tracker.debian.org/tracker/CVE-2026-31842
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 985acd9e7c)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
|
2026-10-13 11:50:55 +13:00 |
|
|
Ankur Tyagi
|
4e4d00c205
|
tinyproxy: add UPSTREAM_CHECK_REGEX variable
Fixes:
$ devtool latest-version tinyproxy
...
INFO: Current version: 1.11.3
INFO: Latest version:
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
|
2026-08-17 22:32:06 -07:00 |
|
 Gyorgy Sarvari
|
c789281ecf
|
tinyproxy: patch CVE-2026-3945
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-3945
Backport the patches which are references by the NVD avisory.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
|
2026-04-06 10:03:48 -07:00 |
|
|
Gyorgy Sarvari
|
d8c66c4428
|
tinyproxy: upgrade 1.11.2 -> 1.11.3
Drop patch that was merged upstream.
Shortlog: https://github.com/tinyproxy/tinyproxy/compare/1.11.2...1.11.3
Ptests passed successfully:
root@qemux86-64:~# ptest-runner
START: ptest-runner
2026-04-06T15:25
BEGIN: /usr/lib/tinyproxy/ptest
starting web server... done. listening on 127.0.0.3:32123
starting tinyproxy... done (listening on 127.0.0.2:12321)
waiting for 1 seconds. 1 done
checking direct connection to web server... ok
testing connection through tinyproxy... ok
requesting statspage via stathost url... ok
signaling tinyproxy to reload config...ok
checking direct connection to web server... ok
testing connection through tinyproxy... ok
requesting statspage via stathost url... ok
checking bogus request... ok, got expected error code 400
testing connection to filtered domain... ok, got expected error code 403
requesting connect method to denied port... ok, got expected error code 403
testing unavailable backend... ok, got expected error code 502
0 errors
killing tinyproxy... ok
killing webserver... ok
done
PASS: run_tests.sh
DURATION: 2
END: /usr/lib/tinyproxy/ptest
2026-04-06T15:25
STOP: ptest-runner
TOTAL: 1 FAIL: 0
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
|
2026-04-06 10:03:48 -07:00 |
|