mirror of
https://git.FreeBSD.org/ports.git
synced 2024-11-29 01:13:08 +00:00
dec093e215
This update fixes a couple of security issues. Quoting the ChangeLog:
- Security/Reliability:
- cgi_error_no_template(): Encode the template name to prevent
XSS (cross-side scripting) when Privoxy is configured to servce
the user-manual itself.
Commit 0e668e9409c. OVE-20211102-0001. CVE-2021-44543.
Reported by: Artem Ivanov
- get_url_spec_param(): Free memory of compiled pattern spec
before bailing.
Reported by Joshua Rogers (Opera) who also provided the fix.
Commit 652b4b7cb0. OVE-20211201-0003. CVE-2021-44540.
- process_encrypted_request_headers(): Free header memory when
failing to get the request destination.
Reported by Joshua Rogers (Opera) who also provided the fix.
Commit 0509c58045. OVE-20211201-0002. CVE-2021-44541.
- send_http_request(): Prevent memory leaks when handling errors
Reported by Joshua Rogers (Opera) who also provided the fix.
Commit c48d1d6d08. OVE-20211201-0001. CVE-2021-44542.
The complete list of changes is available at:
https://lists.privoxy.org/pipermail/privoxy-announce/2021-December/000009.html
PR: 260290
MFH: 2021Q4
Security: 897e1962-5d5a-11ec-a3ed-040e3c3cf7e7
72 lines
2.8 KiB
Plaintext
72 lines
2.8 KiB
Plaintext
%%PRIVOXY_TOOLS%%bin/privoxy-log-parser.pl
|
|
%%PRIVOXY_TOOLS%%bin/privoxy-regression-test.pl
|
|
%%PRIVOXY_TOOLS%%bin/uagen.pl
|
|
%%PRIVOXY_TOOLS%%bin/url-pattern-translator.pl
|
|
sbin/privoxy
|
|
man/man8/privoxy.8.gz
|
|
etc/privoxy/default.action
|
|
etc/privoxy/default.filter
|
|
etc/privoxy/regression-tests.action
|
|
etc/privoxy/templates/blocked
|
|
etc/privoxy/templates/cgi-error-404
|
|
etc/privoxy/templates/cgi-error-bad-param
|
|
etc/privoxy/templates/cgi-error-disabled
|
|
etc/privoxy/templates/cgi-error-file
|
|
etc/privoxy/templates/cgi-error-file-read-only
|
|
etc/privoxy/templates/cgi-error-modified
|
|
etc/privoxy/templates/cgi-error-parse
|
|
etc/privoxy/templates/cgi-style.css
|
|
etc/privoxy/templates/client-tags
|
|
etc/privoxy/templates/connect-failed
|
|
etc/privoxy/templates/connection-timeout
|
|
etc/privoxy/templates/default
|
|
etc/privoxy/templates/edit-actions-add-url-form
|
|
etc/privoxy/templates/edit-actions-for-url
|
|
etc/privoxy/templates/edit-actions-for-url-filter
|
|
etc/privoxy/templates/edit-actions-for-url-string-action
|
|
etc/privoxy/templates/edit-actions-list
|
|
etc/privoxy/templates/edit-actions-list-button
|
|
etc/privoxy/templates/edit-actions-list-section
|
|
etc/privoxy/templates/edit-actions-list-url
|
|
etc/privoxy/templates/edit-actions-remove-url-form
|
|
etc/privoxy/templates/edit-actions-url-form
|
|
etc/privoxy/templates/forwarding-failed
|
|
etc/privoxy/templates/mod-local-help
|
|
etc/privoxy/templates/mod-support-and-service
|
|
etc/privoxy/templates/mod-title
|
|
etc/privoxy/templates/mod-unstable-warning
|
|
etc/privoxy/templates/no-server-data
|
|
etc/privoxy/templates/no-such-domain
|
|
etc/privoxy/templates/show-request
|
|
etc/privoxy/templates/show-status
|
|
etc/privoxy/templates/show-status-file
|
|
etc/privoxy/templates/show-url-info
|
|
etc/privoxy/templates/toggle
|
|
etc/privoxy/templates/toggle-mini
|
|
etc/privoxy/templates/untrusted
|
|
etc/privoxy/templates/url-info-osd.xml
|
|
etc/privoxy/templates/wpad.dat
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/actions-file.html
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/appendix.html
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/config.html
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/configuration.html
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/contact.html
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/copyright.html
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/files-in-use.jpg
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/filter-file.html
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/index.html
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/installation.html
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/introduction.html
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/p_doc.css
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/proxy2.jpg
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/proxy_setup.jpg
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/quickstart.html
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/seealso.html
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/startup.html
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/templates.html
|
|
%%PORTDOCS%%%%DOCSDIR%%/user-manual/whatsnew.html
|
|
%%EXAMPLESDIR%%/config
|
|
%%EXAMPLESDIR%%/match-all.action
|
|
%%EXAMPLESDIR%%/trust
|
|
%%EXAMPLESDIR%%/user.action
|