Tinyproxy v1.10.0 Release Notes

Release Date: 2018-09-01 // almost 6 years ago
  • Tinyproxy version 1.10.0

    This is the new stable version of tinyproxy.

    ๐Ÿš€ Major changes in this release

    • โž• Add support for basic HTTP authentication
    • โž• Add socks upstream support
    • ๐ŸŒฒ Log to stdout if no logfile is specified
    • 0๏ธโƒฃ Activate reverse proxy by default
    • ๐Ÿ‘Œ Support bind with transparent mode
    • Install tinyproxy to bin/ instead of sbin/
    • Ship manpages as part of distribution tarball
    • ๐Ÿ‘ Allow multiple listen statements in the configuration
    • ๐Ÿ›  Coverity fixes
    • ๐Ÿ— Simplified configure and build
    • ๐Ÿ‘Œ Improved selftest environment

    ๐Ÿ”’ Included security fixes

    • ๐Ÿ›  Fix CVE-2017-11747: Create PID file before dropping privileges.
    • ๐Ÿ›  Fix CVE-2012-3505: algorithmic complexity DoS in hashmap

    ๐Ÿ›  Bugfixes

    • BB#110: fix algorithmic complexity DoS in hashmap
    • BB#106: fix CONNECT requests with IPv6 literal addresses as host
    • ๐Ÿ†“ BB#116: fix invalid free for GET requests to ipv6 literal address
    • BB#63: conf: Allow multiple Listen statements in the config
    • BB#81: allow listening on multiple families when no Listen is provided in config
    • BB#115: Drop supplementary groups
    • ๐Ÿ— BB#112: build: fix build with autoconf >= 2.69
    • ๐Ÿšš BB#103: Move files installed in /etc/ to /etc/tinyproxy/
    • ๐ŸŒฒ BB#109: Fix crash (infinite loop) when writing to log file fails
    • BB#90: Fix bug in ACL netmask generation
    • ๐Ÿ‘ BB#95: Fix FilterURLs with transparent proxy support
    • ๐Ÿ‘ BB#91: Fix upstream proxy support
    • ๐ŸŒฒ BB#74: Create log and pid files after we drop privs
    • BB#89: Don't recompile regular expressions
    • BB#83: Use output of id instead of $USER
    • โœ… BB#80: keep track of error codes in return codes in tests

    ๐ŸŒฒ Note: bugzilla.banu.com does not exist any more, so there is no reference for these any more except for the code changes in git log.