Fixes two CVE's:
CVE-2021-20217
Prevent an assertion from getting triggered by a crafted CGI request.
CVE-2021-20216
Fixed a memory leak when decompression fails "unexpectedly".
Feedback and OK from sthen@
CVE-2016-1982 (invalid reads in case of corrupt chunk-encoded content) and
CVE-2016-1983 (invalid reads with empty Host headers).
While there, drop MESSAGE that relates to updating from a <=2011 version
of the port, and use an autoconf version from this century (upstream
doesn't provide a generated script so there is no "right" version).
"this is a small update of privoxy to 3.0.17, plus an rc script making
use of the built-in chroot functionality. For this to work, you need to
change the home of _privoxy to /var/privoxy, the rc script will copy all
necessary files into the chroot.
Also, some additional files and scripts will be installed."
Similar diff and testing from roberth
Input and OK from sthen@
- fixes two memory leaks, one serious
- quite some filter changes, upgraders beware!
- for details, see http://www.privoxy.org/announce.txt
from MAINTAINER
submitted by Dan Weeks <danimal@danimal.org>
Privoxy is a web proxy with advanced filtering capabilities for protecting
privacy, filtering web page content, managing cookies, controlling access,
and removing ads, banners, pop-ups and other obnoxious Internet junk.
Privoxy has a very flexible configuration and can be customized to suit
individual needs and tastes. Privoxy has application for both stand-alone
systems and multi-user networks.
naddy@ OK
