openSUSE-SU-2026:22133-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2026:22133-1

Upstream

CVE (3)

Related

CVE (3)

Published

2026-10-19T16:26:02Z

Modified

2026-10-20T19:15:03Z

Summary

Security update for tinyproxy

Details

This update for tinyproxy fixes the following issues:

Changes in tinyproxy:

Fixed failure to reconcile conflicting Content-Length and Transfer-Encoding [boo#1268474, CVE-2026-54387]
Fixed failure to reject requests containing multiple Content-Length headers with differing values [boo#1268475, CVE-2026-54388]
Fixed failure to properly validate the Host header during stathost detection [boo#1268476, CVE-2026-55202]

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.11.3-bp160.2.1

{
    "binaries":  [
        {
            "tinyproxy":  "1.11.3-bp160.2.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22133-1.json"