Debian-LTS alert DLA-398-1 (privoxy)

From:
    	     
 
Thorsten Alteholz <debian@alteholz.de> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 398-1] privoxy security update 
Date:
    	     
 
Sat, 23 Jan 2016 23:30:37 +0100 (CET)
Message-ID:
    	     
 
<alpine.DEB.2.02.1601232330040.28013@jupiter.server.alteholz.net>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Package        : privoxy
Version        : 3.0.16-1+deb6u1
CVE ID         : CVE-2016-1982 CVE-2016-1983


CVE-2016-1982
     Prevent invalid reads in case of corrupt chunk-encoded content

CVE-2016-1983
     Remove empty Host headers in client requests; resulting in
     invalid reads.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=Qao5
-----END PGP SIGNATURE-----