31 January 2010: Polipo 1.0.4.1:
Cherry-picked fixes from 1.0.5
* Fixed an integer overflow that may lead to a crash
(http://secunia.com/advisories/37607/). Discovered by Jeremy Brown.
(CVE-2009-4413)
* Fixed a crash that occurs when a server sends a malformed
Cache-Control: header (CVE-2009-3305). Patch from Stefan Fritsch.
* Prevent an infinite loop when a bodyless 204 or 1xx response is encountered.
* Don't crash when we get an error while waiting for 100 continue status.
Signed-off-by: Gabriel Kerneis <kerneis@pps.jussieu.fr>
SVN-Revision: 19599
include $(TOPDIR)/rules.mk
PKG_NAME:=polipo
-PKG_VERSION:=1.0.4
+PKG_VERSION:=1.0.4.1
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
-PKG_SOURCE_URL:=http://www.pps.jussieu.fr/~jch/software/files/$(PKG_NAME)/
-PKG_MD5SUM:=defdce7f8002ca68705b6c2c36c4d096
+PKG_SOURCE_URL:=http://freehaven.net/~chrisd/polipo/
+PKG_MD5SUM:=bfc5c85289519658280e093a270d6703
include $(INCLUDE_DIR)/package.mk