1 Announcing Privoxy 3.0.23 stable
2 --------------------------------------------------------------------
4 Privoxy 3.0.23 stable is a bug-fix release, some of the fixed bugs
5 are security issues (CVE requests pending):
7 --------------------------------------------------------------------
9 --------------------------------------------------------------------
10 *** Version 3.0.23 stable ***
13 - Fixed a DoS issue in case of client requests with incorrect
14 chunk-encoded body. When compiled with assertions enabled
15 (the default) they could previously cause Privoxy to abort().
16 Reported by Matthew Daley.
17 - Fixed multiple segmentation faults and memory leaks in the
18 pcrs code. This fix also increases the chances that an invalid
19 pcrs command is rejected as such. Previously some invalid commands
20 would be loaded without error. Note that Privoxy's pcrs sources
21 (action and filter files) are considered trustworthy input and
22 should not be writable by untrusted third-parties.
23 - Fixed an 'invalid read' bug which could at least theoretically
24 cause Privoxy to crash. So far, no crashes have been observed.
25 - Compiles with --disable-force again. Reported by Kai Raven.
26 - Client requests with body that can't be delivered no longer
27 cause pipelined requests behind them to be rejected as invalid.
28 Reported by Basil Hussain.
30 - General improvements:
31 - If a pcrs command is rejected as invalid, Privoxy now logs
32 the cause of the problem as text. Previously the pcrs error
34 - The tests are less likely to cause false positives.
36 - Action file improvements:
37 - '.sify.com/' is no longer blocked. Apparently it is not actually
38 a pure tracking site (anymore?). Reported by Andrew on ijbswa-users@.
39 - Unblock banners on .amnesty.de/ which aren't ads.
41 - Documentation improvements:
42 - The 'Would you like to donate?' section now also contains
44 - The list of supported operating systems has been updated.
45 - The existence of the SF support and feature trackers has been
46 deemphasized because they have been broken for months.
47 Most of the time the mailing lists still work.
48 - The claim that default.action updates are sometimes released
49 on their own has been removed. It hasn't happened in years.
50 - Explicitly mention that Tor's port may deviate from the default
51 when using a bundle. Requested by Andrew on ijbswa-users@.
53 -----------------------------------------------------------------
55 -----------------------------------------------------------------
57 Privoxy is a non-caching web proxy with advanced filtering capabilities for
58 enhancing privacy, modifying web page data and HTTP headers, controlling
59 access, and removing ads and other obnoxious Internet junk. Privoxy has a
60 flexible configuration and can be customized to suit individual needs and
61 tastes. It has application for both stand-alone systems and multi-user
64 Privoxy is Free Software and licensed under the GNU GPLv2.
66 Our TODO list is rather long. Helping hands and donations are welcome:
68 * http://www.privoxy.org/faq/general.html#PARTICIPATE
70 * http://www.privoxy.org/faq/general.html#DONATE
72 At present, Privoxy is known to run on Windows 95 and later versions
73 (98, ME, 2000, XP, Vista, Windows 7 etc.), GNU/Linux (RedHat, SuSE,
74 Debian, Fedora, Gentoo, Slackware and others), Mac OS X (10.4 and
75 upwards on PPC and Intel processors), OS/2, Haiku, DragonFly, ElectroBSD,
76 FreeBSD, NetBSD, OpenBSD, Solaris, and various other flavors of Unix.
78 In addition to the core features of ad blocking and cookie management,
79 Privoxy provides many supplemental features, that give the end-user
80 more control, more privacy and more freedom:
82 * Supports "Connection: keep-alive". Outgoing connections can be kept
83 alive independently from the client. Currently not available on all
86 * Supports IPv6, provided the operating system does so too,
87 and the configure script detects it.
89 * Supports tagging which allows to change the behaviour based on client
92 * Can be run as an "intercepting" proxy, which obviates the need to
93 configure browsers individually.
95 * Sophisticated actions and filters for manipulating both server and
98 * Can be chained with other proxies.
100 * Integrated browser based configuration and control utility at
101 http://config.privoxy.org/ (shortcut: http://p.p/). Browser-based
102 tracing of rule and filter effects. Remote toggling.
104 * Web page filtering (text replacements, removes banners based on size,
105 invisible "web-bugs" and HTML annoyances, etc.)
107 * Modularized configuration that allows for standard settings and user
108 settings to reside in separate files, so that installing updated actions
109 files won't overwrite individual user settings.
111 * Support for Perl Compatible Regular Expressions in the configuration
112 files, and a more sophisticated and flexible configuration syntax.
116 * Bypass many click-tracking scripts (avoids script redirection).
118 * User-customizable HTML templates for most proxy-generated pages (e.g.
121 * Auto-detection and re-reading of config file changes.
123 * Most features are controllable on a per-site or per-location basis.
127 http://sourceforge.net/project/showfiles.php?group_id=11118
130 http://www.privoxy.org/
132 - Privoxy Developers <ijbswa-developers@lists.sourceforge.net>