openSUSE-SU-2026:20456-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20456-1

Upstream

Related

Published

2026-04-01T16:15:06Z

Modified

2026-04-03T07:45:52Z

Summary

Security update for tinyproxy

Details

This update for tinyproxy fixes the following issues:

Changes in tinyproxy:

CVE-2026-3945: Fixed denial of service by unauthenticated remote attacker (boo#1261024)
Update to release 1.11.3
- conf: add BasicAuthRealm feature
- basic auth: fix error status 401 vs 407
- tinyproxy.conf.5: explain what a site_spec looks like
- tinyproxy.conf.5: add an IPv6 example to allow/deny section
- reqs: fix integer overflow in port number processing

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.11.3-bp160.1.1

{
    "binaries":  [
        {
            "tinyproxy":  "1.11.3-bp160.1.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20456-1.json"