openSUSE-SU-2026:22133-1
openSUSE-SU-2026:22133-1 · Security update for tinyproxy
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for tinyproxy fixes the following issues: Changes in tinyproxy: - Fixed failure to reconcile conflicting Content-Length and Transfer-Encoding [boo#1268474, CVE-2026-54387] - Fixed failure to reject requests containing multiple Content-Length headers with differing values [boo#1268475, CVE-2026-54388] - Fixed failure to properly validate the Host header during stathost detection [boo#1268476, CVE-2026-55202]
Fix available
- Published
- Updated
Stack: system
Affected products and versions
tinyproxy openSUSE:Leap 16.0
- Affected ranges
- ECOSYSTEM: < 1.11.3-bp160.2.1
Update to 1.11.3-bp160.2.1