This update for tinyproxy fixes the following issues:
Changes in tinyproxy:
- Fixed failure to reconcile conflicting Content-Length and Transfer-Encoding [boo#1268474, CVE-2026-54387]
- Fixed failure to reject requests containing multiple Content-Length headers with differing values [boo#1268475, CVE-2026-54388]
- Fixed failure to properly validate the Host header during stathost detection [boo#1268476, CVE-2026-55202]
This update for tinyproxy fixes the following issues:
Changes in tinyproxy:
- CVE-2026-3945: Fixed denial of service by unauthenticated remote attacker (boo#1261024)
- Update to release 1.11.3
* conf: add BasicAuthRealm feature
* basic auth: fix error status 401 vs 407
* tinyproxy.conf.5: explain what a site_spec looks like
* tinyproxy.conf.5: add an IPv6 example to allow/deny section
* reqs: fix integer overflow in port number processing