1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
2 "http://www.w3.org/TR/html4/loose.dtd">
6 <title>What's New in this Release</title>
7 <meta name="GENERATOR" content=
8 "Modular DocBook HTML Stylesheet Version 1.79">
9 <link rel="HOME" title="Privoxy 3.0.23 User Manual" href="index.html">
10 <link rel="PREVIOUS" title="Installation" href="installation.html">
11 <link rel="NEXT" title="Quickstart to Using Privoxy" href=
13 <link rel="STYLESHEET" type="text/css" href="../p_doc.css">
14 <meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
15 <link rel="STYLESHEET" type="text/css" href="p_doc.css">
18 <body class="SECT1" bgcolor="#EEEEEE" text="#000000" link="#0000FF" vlink=
19 "#840084" alink="#0000FF">
20 <div class="NAVHEADER">
21 <table summary="Header navigation table" width="100%" border="0"
22 cellpadding="0" cellspacing="0">
24 <th colspan="3" align="center">Privoxy 3.0.23 User Manual</th>
28 <td width="10%" align="left" valign="bottom"><a href=
29 "installation.html" accesskey="P">Prev</a></td>
31 <td width="80%" align="center" valign="bottom"></td>
33 <td width="10%" align="right" valign="bottom"><a href=
34 "quickstart.html" accesskey="N">Next</a></td>
37 <hr align="left" width="100%">
41 <h1 class="SECT1"><a name="WHATSNEW" id="WHATSNEW">3. What's New in this
44 <p><span class="APPLICATION">Privoxy 3.0.23</span> stable is a bug-fix
45 release, some of the fixed bugs are security issues:</p>
53 <p>Fixed a DoS issue in case of client requests with incorrect
54 chunk-encoded body. When compiled with assertions enabled (the
55 default) they could previously cause Privoxy to abort(). Reported
56 by Matthew Daley. CVE-2015-1380.</p>
60 <p>Fixed multiple segmentation faults and memory leaks in the
61 pcrs code. This fix also increases the chances that an invalid
62 pcrs command is rejected as such. Previously some invalid
63 commands would be loaded without error. Note that Privoxy's pcrs
64 sources (action and filter files) are considered trustworthy
65 input and should not be writable by untrusted third-parties.
70 <p>Fixed an 'invalid read' bug which could at least theoretically
71 cause Privoxy to crash. So far, no crashes have been observed.
76 <p>Compiles with --disable-force again. Reported by Kai
81 <p>Client requests with body that can't be delivered no longer
82 cause pipelined requests behind them to be rejected as invalid.
83 Reported by Basil Hussain.</p>
89 <p>General improvements:</p>
93 <p>If a pcrs command is rejected as invalid, Privoxy now logs the
94 cause of the problem as text. Previously the pcrs error code was
99 <p>The tests are less likely to cause false positives.</p>
105 <p>Action file improvements:</p>
109 <p>'.sify.com/' is no longer blocked. Apparently it is not
110 actually a pure tracking site (anymore?). Reported by Andrew on
115 <p>Unblock banners on .amnesty.de/ which aren't ads.</p>
121 <p>Documentation improvements:</p>
125 <p>The 'Would you like to donate?' section now also contains a
126 "Paypal" address.</p>
130 <p>The list of supported operating systems has been updated.</p>
134 <p>The existence of the SF support and feature trackers has been
135 deemphasized because they have been broken for months. Most of
136 the time the mailing lists still work.</p>
140 <p>The claim that default.action updates are sometimes released
141 on their own has been removed. It hasn't happened in years.</p>
145 <p>Explicitly mention that Tor's port may deviate from the
146 default when using a bundle. Requested by Andrew on
154 <h2 class="SECT2"><a name="UPGRADERSNOTE" id="UPGRADERSNOTE">3.1. Note
155 to Upgraders</a></h2>
157 <p>A quick list of things to be aware of before upgrading from earlier
158 versions of <span class="APPLICATION">Privoxy</span>:</p>
162 <p>The recommended way to upgrade <span class=
163 "APPLICATION">Privoxy</span> is to backup your old configuration
164 files, install the new ones, verify that <span class=
165 "APPLICATION">Privoxy</span> is working correctly and finally merge
166 back your changes using <span class="APPLICATION">diff</span> and
167 maybe <span class="APPLICATION">patch</span>.</p>
169 <p>There are a number of new features in each <span class=
170 "APPLICATION">Privoxy</span> release and most of them have to be
171 explicitly enabled in the configuration files. Old configuration
172 files obviously don't do that and due to syntax changes using old
173 configuration files with a new <span class=
174 "APPLICATION">Privoxy</span> isn't always possible anyway.</p>
178 <p>Note that some installers remove earlier versions completely,
179 including configuration files, therefore you should really save any
180 important configuration files!</p>
184 <p>On the other hand, other installers don't overwrite existing
185 configuration files, thinking you will want to do that
190 <p>In the default configuration only fatal errors are logged now.
191 You can change that in the <a href="config.html#DEBUG">debug
192 section</a> of the configuration file. You may also want to enable
193 more verbose logging until you verified that the new <span class=
194 "APPLICATION">Privoxy</span> version is working as expected.</p>
198 <p>Three other config file settings are now off by default:
199 <a href="config.html#ENABLE-REMOTE-TOGGLE">enable-remote-toggle</a>,
201 "config.html#ENABLE-REMOTE-HTTP-TOGGLE">enable-remote-http-toggle</a>,
203 "config.html#ENABLE-EDIT-ACTIONS">enable-edit-actions</a>. If you
204 use or want these, you will need to explicitly enable them, and be
205 aware of the security issues involved.</p>
211 <div class="NAVFOOTER">
212 <hr align="left" width="100%">
214 <table summary="Footer navigation table" width="100%" border="0"
215 cellpadding="0" cellspacing="0">
217 <td width="33%" align="left" valign="top"><a href="installation.html"
218 accesskey="P">Prev</a></td>
220 <td width="34%" align="center" valign="top"><a href="index.html"
221 accesskey="H">Home</a></td>
223 <td width="33%" align="right" valign="top"><a href="quickstart.html"
224 accesskey="N">Next</a></td>
228 <td width="33%" align="left" valign="top">Installation</td>
230 <td width="34%" align="center" valign="top"> </td>
232 <td width="33%" align="right" valign="top">Quickstart to Using