Change log for tinyproxy package in Ubuntu

tinyproxy (1.11.1-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * No source change upload to rebuild with debhelper 13.10.

 -- Michael Biebl <email address hidden>  Sat, 15 Oct 2022 12:52:06 +0200

Available diffs

• diff from 1.11.1-2 to 1.11.1-2.1 (350 bytes)

tinyproxy (1.11.1-2) unstable; urgency=medium

  * d/tinyproxy.service: Change reload signal from SIGHUP to SIGUSR1.
  * d/p/0001-prevent-junk-from-showing-up-in-error-page-in-invali.patch:
    - Grab upstream commit to fix a potential leak of left-over heap data if
      custom error page templates are used. (Closes: #1021015, CVE-2022-40468)

 -- Unit 193 <email address hidden>  Fri, 30 Sep 2022 22:08:37 -0400

Available diffs

• diff from 1.11.1-1ubuntu1 (in Ubuntu) to 1.11.1-2 (1.2 KiB)

tinyproxy (1.11.1-1ubuntu1) devel; urgency=medium

  * d/tinyproxy.service: Change reload signal from SIGHUP to SIGUSR1.

 -- Unit 193 <email address hidden>  Thu, 01 Sep 2022 23:53:30 -0400

Available diffs

• diff from 1.11.1-1 (in Debian) to 1.11.1-1ubuntu1 (683 bytes)

tinyproxy (1.11.1-1) unstable; urgency=medium

  * New upstream version 1.11.1.
    - Drop patches, upstreamed or from upstream.
  * d/tinyproxy.conf: Re-sync with upstream.
  * d/tinyproxy.init: Pass the pidfile to start-stop-daemon if found.
  * d/tinyproxy.service: Change to simple (non-forking) service, drop pidfile.
  * Update Standards-Version to 4.6.1.

 -- Unit 193 <email address hidden>  Sat, 28 May 2022 19:47:54 -0400

Available diffs

• diff from 1.11.0-1 to 1.11.1-1 (26.8 KiB)

tinyproxy (1.11.0-1) unstable; urgency=medium

  [ Mike Gabriel ]
  * debian/control: Add "Unit 193" to Uploaders: field.

  [ Unit 193 ]
  * d/watch: Update to find new upstream releases.
  * New upstream version 1.11.0.
    - Drop patches that no longer apply, refresh remaining.
    - d/tinyproxy.conf: Re-sync to upstream.
  * d/compat, d/control: Drop d/compat in favor of debhelper-compat, bump to 13.
  * d/rules: Drop get-orig-source target, explicit --with autoreconf,
    and dh_missing override.  Either default now or obsolete.
  * d/tinyproxy.docs: Drop docs/filter-howto.txt as it no longer exists.
  * d/control:
    - R³: no.
    - Pre-Depend on ${misc:Pre-Depends} in binary packages.
  * d/control, d/tinyproxy.(maintscript,postinst):
    - Remove deprecated migration code.
  * Rename d/tinyproxy.tmpfile to d/tinyproxy.tmpfiles.
  * Update Standards-Version to 4.6.0.

 -- Unit 193 <email address hidden>  Mon, 08 Nov 2021 18:17:46 -0500

Available diffs

• diff from 1.10.0-5 to 1.11.0-1 (121.6 KiB)

tinyproxy (1.10.0-5) unstable; urgency=medium

  [ Unit 193 ]
  * d/p/0001_fix-segfault-with-socks4.patch:
    + Grab an upstream patch to fix a segfault when using socks4 with
      tor. (Closes: #990434).

  [ Mike Gabriel ]
  * debian/tinyproxy.service:
    + Use KillMode=process (instead of the default 'control-group'). The main
      tinyproxy process will stop all its workers if a SIGTERM signal is
      received. This avoids SIGTERM racing situation where the tinyproxy main
      process and systemd are trying to kill tinyproxy's workers simultaneously.
      (Closes: #968322).

 -- Mike Gabriel <email address hidden>  Fri, 02 Jul 2021 12:25:46 +0200

Available diffs

• diff from 1.10.0-4 to 1.10.0-5 (1.8 KiB)

tinyproxy (1.10.0-4) unstable; urgency=medium

  * debian/tinyproxy.init:
    + Drop unconditional creation of PIDDIR. Follow-up for Vcs-Git commit
      b186fa94. Thanks to Unit193 for spotting this and also for the
      original patch. (Closes: #948283).

 -- Mike Gabriel <email address hidden>  Tue, 21 Jan 2020 11:14:47 +0100

Available diffs

• diff from 1.10.0-2 to 1.10.0-4 (1.3 KiB)

tinyproxy (1.10.0-2) unstable; urgency=medium

  * debian/changelog:
    + Grammar fixes in previous stanza.
    + Bug number fix (missing hash) in previous stanza.
    + Fix CVE number in previous stanza. Thanks to Salvatore from the Debian
      Security Team for spotting this.
  * debian/tinyproxy.postinst:
    + Fix chmod on no files in empty log folder. (Closes: #909481).
    + Fix chown no files in empty log folder (the command was complete bogus
      before).

 -- Mike Gabriel <email address hidden>  Tue, 23 Oct 2018 12:47:18 +0200

Available diffs

• diff from 1.10.0-1 to 1.10.0-2 (1.2 KiB)

tinyproxy (1.10.0-1) unstable; urgency=medium

  [ Mike Gabriel ]
  * New upstream release.
    - Make bind option usable with transparent proxy, too. (Closes: #609095).
    - Add SOCKS5 upstream proxy support. (Closes: #392848).
    - CVE-2017-111747: Create PID file before dropping privileges. (Closes:
      #870307).
    - Prevent child from calling exit() on interrupt. Proposed fix
      for the logrotate SIGHUP issues. (Closes: 704459).
  * debian/patches:
    + Add README file that informs about patch naming scheme.
    + Drop sighup_hang.patch. Applied upstream.
    + Add 1001_fix-select.patch. Handle multiple Listen directives properly.
      (Closes: #898492).
    + Add 1002_fix-ftbfs-on-Hurd.patch. Avoid duplication of build path when
      built on hurd-i386. (Closes: #882527)."
    + Add 1003_fix-rereading-filter-conf-when-unprivileged.patch. If dropping
      privileges, read the filter config always as unprivileged user and report
      an error, if that fails. (Closes: #756040).
  * debian/tinyproxy.conf:
    + Update Debian's tinyproxy.conf default configuration file.
  * debian/control:
    + Update Vcs-*: URLs. Packaging Git has been migrated to salsa.debian.org.
    + Bump Standards-Version: to 4.2.1. No changes needed.
  * debian/{control,compat}: Bump DH compat level to version 11.
  * debian/copyright:
    + Fix some DEP-3 format issues, add comment about current maintenance
      status.
  * debian/rules:
    + Add get-orig-source target.
    + Drop --enable-transparent configure option. Enabled by default now.
    + Drop --disable-regexcheck (not supported upstream anymore. Also fixes
      FTBFS during cross builds (Closes: #865832).
    + Include architecture.mk rather than executing dpkg-architecture.
    + Don't set --sysconfdir configure option. Is now ok with latest upstream
      version.
  * debian/tinyproxy-bin.install:
    + The tinyproxy executable not installed to /usr/bin since this release,
      not /usr/sbin.
  * debian/tinyproxy.{init,service}:
    + The tinyproxy executable is in /usr/bin now.
  * debian/tinyproxy.init:
    + Let overriding the CONFIG variable /etc/default/tinyproxy have an effect.
      (Closes: #762924).
  * debian/tinyproxy.default: Add file.
  * debian/tinyproxy.service:
    + Honour environment file in /etc/default/tinyproxy.
  * debian/tinyproxy.{install,docs}:
    + Correctly install documentation files into bin:pkg.
  * debian/tinyproxy.postinst:
    + Avoid recursive chown/chmod.

 -- Mike Gabriel <email address hidden>  Tue, 04 Sep 2018 15:01:49 +0200

Available diffs

• diff from 1.8.4-5 to 1.10.0-1 (89.1 KiB)

tinyproxy (1.8.4-5) unstable; urgency=medium

  * debian/control:
    + Add B:/R: pair to tinyproxy-bin, as it breaks tinyproxy (<< 1.8.4-4~).
      (Closes: #882385).

 -- Mike Gabriel <email address hidden>  Wed, 22 Nov 2017 10:21:51 +0100

Available diffs

• diff from 1.8.4-3 to 1.8.4-5 (3.8 KiB)

tinyproxy (1.8.4-3) unstable; urgency=medium

  * Add sighup_hang.patch: Fix Tinyproxy ceasing to listen to connections
    after it receives a SIGHUP, something that happens daily in our default
    setup (closes: #880427).
  * Fix path to tinyproxy.conf in sysvinit script. Thanks, Guo Yixuan (郭溢譞)
    (closes: #870325).
  * Add Depends on adduser.
  * Update Standards-Version to 4.1.1, with no changes needed.

 -- Jordi Mallach <email address hidden>  Wed, 15 Nov 2017 02:28:58 +0100

Available diffs

• diff from 1.8.4-2 to 1.8.4-3 (1.8 KiB)

tinyproxy (1.8.4-2) unstable; urgency=medium

  * Remove obsolete preinst and postinst maintainer scripts.
  * Add a tinyproxy system user to run the daemon (LP: #590634).
  * Move tinyproxy.conf to /etc/tinyproxy, using dpkg-maintscript-helper.
  * Move filter file location to /etc/tinyproxy as well.
  * Remove obsolete README.Debian.
  * Set sysconfdir to /etc/tinyproxy.
  * Adjust tinyproxy.conf and tinyproxy.tmpfiles for tinyproxy user.
  * Make /var/log/tinyproxy owned by tinyproxy.
  * Add NEWS.Debian entry with warning about the tinyproxy user changes.
  * Remove /var/log/tinyproxy on purge.
  * Move handling of /var/log/tinyproxy permissions to postinst.
  * Stop installing templates by hand, upstream build system also does it.

 -- Jordi Mallach <email address hidden>  Sat, 21 Jan 2017 12:40:00 +0100

Available diffs

• diff from 1.8.4-1 to 1.8.4-2 (2.5 KiB)

tinyproxy (1.8.4-1) unstable; urgency=medium

  * New upstream release.
    - Drops supplementary groups on startup (thanks, Gaudenz Steinlin;
      closes: #722215).
  * Update Homepage URL again.
  * Update Vcs-* fields following migration to Git.
  * Bump to debhelper compat v10.
    Remove explicit Build-Depend on dh-autoreconf, now handled by dh.
  * Drop all patches, all merged upstream.
  * Drop no longer needed Build-Deps on bison, flex and libadns1-dev.
  * Call dh_auto_configure instead of configure directly.
  * Replace $(MAKE) call with dh_auto_install.
  * Rewrite copyright in machine-readable format version 1.0.
  * Make $DESC more descriptive in the init script.
  * Make init script source init-functions from lsb-base.
  * Update Standards-Version to 3.9.8.
  * Change /var/run references to /run.
  * Add Michael Adam's OpenPGP key to upstream/signing-key.asc.
  * Update watch file for Github releases, and check PGP signature.
  * Remove obsolete debian/source/options.
  * Add systemd service and tmpfile files.
  * Pass --fail-missing to dh_install.
  * Enable all hardening options.
  * Depend on lsb-base to ensure the utility functions are available.

 -- Jordi Mallach <email address hidden>  Thu, 12 Jan 2017 17:47:16 +0100

Available diffs

• diff from 1.8.3-3ubuntu1 (in Ubuntu) to 1.8.4-1 (108.7 KiB)

tinyproxy (1.8.3-1ubuntu0.1) precise-security; urgency=low

  * SECURITY UPDATE: Fix for denial of service vulnerability where remote
    attackers send crafted request headers. (LP: #1154502)
    - debian/patches/001-CVE-2012-3505.patch: Limit the number of headers to
      prevent DoS attacks. Randomize hashmaps in order to avoid fake headers
      getting included in the same bucket, allowing for DoS attacks.
    - CVE-2012-3505
 -- Christian Kuersteiner <email address hidden>   Wed, 13 Mar 2013 16:42:14 +0700

Available diffs

• diff from 1.8.3-1 (in Debian) to 1.8.3-1ubuntu0.1 (2.0 KiB)

tinyproxy (1.8.3-3ubuntu1) quantal; urgency=low

  * src/child.c, src/hashmap.c: Define _GNU_SOURCE to fix several implicit
    function declarations (fixes FTBFS on amd64).
 -- Michael Bienia <email address hidden>   Tue, 02 Oct 2012 10:57:21 +0200

Available diffs

• diff from 1.8.3-3 (in Debian) to 1.8.3-3ubuntu1 (995 bytes)

tinyproxy (1.8.3-3) unstable; urgency=high


  * Add patches for CVE-2012-3505 (closes: #685281):
    - CVE-2012-3505-tinyproxy-limit-headers.patch: Limit the number of
      headers to prevent DoS attacks.
    - CVE-2012-3505-tinyproxy-randomized-hashmaps.patch: Randomize hashmaps
      in order to avoid fake headers getting included in the same bucket,
      allowing for DoS attacks.
    Bug reported and patches contributed by gpernot.

 -- Jordi Mallach <email address hidden>  Mon, 24 Sep 2012 21:05:41 +0200

Available diffs

• diff from 1.8.3-2 to 1.8.3-3 (2.1 KiB)

tinyproxy (1.8.3-2) unstable; urgency=low


  * Update Homepage again: webpage is served over https.
  * Add prepend_ldflags.patch, by Moritz Muehlenhoff, to avoid overwriting
    LDFLAGS. Enable dh_autoreconf support.
  * Switch to debhelper v9 to take advantage of automatic dpkg-buildflags
    setting and enable hardened build flags (closes: #655870).
  * Bump Build-Deps to debhelper (>= 8.9.4)

 -- Jordi Mallach <email address hidden>  Mon, 23 Jan 2012 12:10:34 +0100

Available diffs

• diff from 1.8.3-1 to 1.8.3-2 (1.3 KiB)

tinyproxy (1.8.3-1) unstable; urgency=low


  * New upstream release.
  * Drop all patches, all are included upstream.
  * Add CVE number to previous changelog entry, as validate_port_number.patch
    could actually prevent a buffer overflow and access restriction bypass.
  * Fix watch file, and switch to .xz tarballs.
  * Cleanup tests/env on clean to fix a FTBFS after the first successful
    build (closes: #651323).
  * Bump to debhelper 8.
  * Update copyright years.
  * Update Vcs-* URLs.
  * Update Homepage.

 -- Jordi Mallach <email address hidden>  Mon, 02 Jan 2012 14:08:35 +0100

Available diffs

• diff from 1.8.2-2 (in Ubuntu) to 1.8.3-1 (16.2 KiB)

tinyproxy (1.8.2-1squeeze1build0.11.04.1) natty-security; urgency=low

  * fake sync from Debian

Available diffs

• diff from 1.8.2-1 (in Ubuntu) to 1.8.2-1squeeze1build0.11.04.1 (1.5 KiB)

tinyproxy (1.8.2-1squeeze1build0.10.10.1) maverick-security; urgency=low

  * fake sync from Debian

Available diffs

• diff from 1.8.2-1 (in Ubuntu) to 1.8.2-1squeeze1build0.10.10.1 (1.5 KiB)

tinyproxy (1.8.2-2) unstable; urgency=high

  * Upper case "HTTP" in package descriptions (closes: #588193).
  * Add validate_port_number.patch: exit if an invalid port is declared in
    the Port directive.
  * Add netmask_generation.patch: fix bug in ACL netmask generation, which
    could allow to use Tinyproxy as an open proxy very easily
    [CVE-2011-1499] (closes: #621493).
  * Bump Standards-Version to 3.9.2, with no changes required.
 -- Ubuntu Archive Auto-Sync <email address hidden>   Sat,  30 Apr 2011 13:51:50 +0000

Available diffs

• diff from 1.8.2-1 to 1.8.2-2 (2.6 KiB)

tinyproxy (1.8.2-1) unstable; urgency=low

  * New upstream release.
  * Drop all patches; all were taken from Git, or have been applied
    upstream.
  * Add upstream_matching_fix.patch by Daniel Piddock, to fix handling
    of upstream rules (closes: #585075).
 -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  09 Jun 2010 09:24:11 +0100

Available diffs

• diff from 1.8.1-5 to 1.8.2-1 (48.7 KiB)

tinyproxy (1.8.1-5) unstable; urgency=medium

  * Add sighup_memleak.patch, by John van der Kamp, to fix a memleak
    when reloading tinyproxy, which happens daily via logrotate
    (closes: #579427).
  * Adjust testsuite_user_var.patch to use output of "id -un" instead of
    "whoami".
 -- Ubuntu Archive Auto-Sync <email address hidden>   Sat,  05 Jun 2010 11:30:56 +0100

Available diffs

• diff from 1.8.1-4 to 1.8.1-5 (2.0 KiB)

tinyproxy (1.8.1-4) unstable; urgency=low

  * Add log_message_storage_crash.patch to fix crashes when reloading
    tinyproxy, as triggered by logrotate (thanks Dmitry Semyonov for the
    bug report and patch, closes: #578319).
 -- Ubuntu Archive Auto-Sync <email address hidden>   Sun,  09 May 2010 14:04:36 +0100

Available diffs

• diff from 1.8.1-3 to 1.8.1-4 (914 bytes)

tinyproxy (1.8.1-3) unstable; urgency=low

  * Add conf_fix_alignment.patch: fix a crash on startup on alpha
    and ia64.
  * Disable the testsuite on kfreebsd architectures, as it fails due to
    some assumptions on how loopback network interfaces work on FreeBSD.

Available diffs

• diff from 1.6.5-0ubuntu1 to 1.8.1-3 (297.1 KiB)

tinyproxy (1.6.5-0ubuntu1) karmic; urgency=low

  * New upstream bug-fix release (LP: #455744).
  * Removed all old patches, fixed upstream.
  * Fix debian/watch.

 -- Artur Rona <email address hidden>   Mon, 19 Oct 2009 22:43:49 +0200

Available diffs

• diff from 1.6.4-0ubuntu1 to 1.6.5-0ubuntu1 (98.2 KiB)

tinyproxy (1.6.4-0ubuntu1) karmic; urgency=low

  * New upstream release (LP: #386969).
  * Remove patches, fixed upstream:
    - debian/patches/scanner_debug_removal.patch
    - debian/patches/99_autoreconf.patch
  * debian/control: Update homepage.
  * debian/watch: Fix.

 -- Artur Rona <email address hidden>   Thu, 02 Jul 2009 02:05:18 +0200

Available diffs

• diff from 1.6.3-3.2 to 1.6.4-0ubuntu1 (689.3 KiB)

tinyproxy (1.6.3-3.2) unstable; urgency=low

  * Non-maintainer upload.
  * Note the Debian revision has been bumped to -3.2 instead of -2.2 to
    ease Ubuntu synchronisation, as they mistakenly uploaded -3 some time ago.
  * Bump debhelper requirement to 7 and add quilt to Build-Depends.
  * Move to debhelper compat level 7.
  * Cleanup rules a bit for debhelper v7.
  * Move patches to upstream code to log_format_string_fix.patch,
    scanner_debug_removal.patch and 99_autoreconf.patch.
  * Remove apparently old and unused patches debian/logfile.patch and
    debian/dfree-[1-4].patch.
  * Make logrotate script restart tinyproxy only if it appears to be
    running (closes: #369787). A better fix would be to improve the init
    script adding a "try-restart" option, though.
  * Apply patch from Christoph Biedl to allow tinyproxy to remove its pidfile
    when shutting down, so the logrotate change actually works. This changes
    the pidfile location to /var/run/tinyproxy.
  * Add "Short-Description" and "Description" headers to the init script.
  * Fix a typo in debian/rules so config.log gets removed on clean.
  * Remove libtool and doc/report.sh on clean, and fix the rule as suggested
    by lintian.
  * Copy upstream's default conffile as debian/tinyproxy.conf and install
    that one in the package.
  * Disable non-localhost access by default, while adding commented entries
    for all private network ranges (closes: #387721, #393236).
  * Install example configuration file in /usr/share/doc/tinyproxy/examples.
  * Remove obsolete debian/conffiles.
  * Fix reference to conffile location in README.Debian (closes: #417338).
  * Pass --enable-filter --enable-transparent-proxy --enable-upstream
    to configure to explicitly enable some missing features.
    (closes: #400931, LP #42598).
  * Add doc/filter-howto.txt to installed documentation.
  * Remove postinst and prerm script, which were used to fix an upgrade bug
    6 years ago.
  * Update upstream url in debian/copyright, and add a Homepage field to
    debian/control.
  * Extend copyright so it contains all the required information.
  * Add a Debian.source document with notes about quilt usage to obtain
    patched code.
  * Add a watch file.
  * Bump Standards-Version to 3.8.0.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  05 Nov 2008 18:01:50 +0000

Available diffs

• diff from 1.6.3-3 to 1.6.3-3.2 (390.8 KiB)

tinyproxy (1.6.3-3) dapper; urgency=low

  * debian/rules
    + enabled transparent-proxy. (Closes: Malone #24598)

 -- Chuck Short <email address hidden>   Wed,  3 May 2006 09:11:04 -0400

tinyproxy (1.6.3-2) unstable; urgency=low


  * Remove debugging grammar.[ch] and scanner.c as
    noted by upstream

 -- Ed Boraas <email address hidden>  Wed, 11 Aug 2004 12:20:18 -0600

tinyproxy (1.6.1-2) unstable; urgency=low


  * Build-depend on bison (Closes; #207579)

 -- Ed Boraas <email address hidden>  Thu, 28 Aug 2003 07:14:47 -0600