ALT-PU-2026-6071-1

Package update tinyproxy in branch sisyphus_loongarch64

Version1.11.3-alt1

Task#0

Published2026-04-09

Max severityHIGH

Severity:

Closed issues (3)

MEDIUM6.5

Уязвимость HTTP-прокси-сервера Tinyproxy, связанная с целочисленным переполнением, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2026-03-25

CVSS 3.xMEDIUM 6.5

CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CVSS 2.0MEDIUM 6.4

CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:N

References

CVE-2025-63938

HIGH7.5

Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in process_request() function.

Published: 2022-09-19Modified: 2025-11-04

CVSS 3.xHIGH 7.5

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

MEDIUM6.5

Tinyproxy through 1.11.2 contains an integer overflow vulnerability in the strip_return_port() function within src/reqs.c.

Published: 2025-11-26Modified: 2026-01-02

CVSS 3.xMEDIUM 6.5

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

References