CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/tinyproxy 1.11.3,1

Small, efficient HTTP proxy server

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 1.11.3,1
Upstream
up to date
Last update
to 1.11.3,1 · 388e2a3d3a
Quarterly
2026Q4: 1.11.3,1
WWW
https://tinyproxy.github.io/
Links
cgit · VuXML

Install

Package
# pkg install tinyproxy
installs 1.11.3,1 from latest; from quarterly (2026Q4) 1.11.3,1
Port
# cd /usr/ports/www/tinyproxy && make install clean
# make -C /usr/ports/www/tinyproxy config  # change options first
Size
58 KiB download · 125 KiB installed
Depends on
nothing
License
GPLv2
Options
5 of 5 on in the package: FILTER REVERSE TRANSPARENT UPSTREAM XHEADER

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.11.3,11.11.3,1–
FreeBSD 151.11.3,11.11.3,1–
FreeBSD 141.11.3,11.11.3,11.11.3,1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.11.3,11.11.3,1–
FreeBSD 141.11.3,11.11.3,11.11.3,1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 1.11.3,1 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-318428.72026-04-07Tinyproxy through 1.11.3 is vulnerable to HTTP request parsing desynchronization due to a case-sensitive comparison of the Transfer-Encoding header in src/reqs.c. The is…

VuXML only (0)

Listed in VuXML, the packaged version 1.11.3,1 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
289302www/tinyproxy: Add capsicum supportNew2025-09-04

Commits (80)

Wesley Shields (wxs) · 1.6.4_1,1
- MASTER_SITE uses https only - Fix rc script to use the pidfile[1]

Submitted by:	Herbert J. Skuhra (private mail)
40ba82bae0
Wesley Shields (wxs) · 1.6.4,1
Update to 1.6.4
1e875a8dbe
Wesley Shields (wxs) · 1.6.3,1
Rollback to 1.6.3 per authors request.  A 1.6.4 release is in the works after a 3 year hiatus.
589d3ac659
Wesley Shields (wxs) · 1.7.0_2
Update my address.

Approved by:	garga (mentor)
ce0191e49e
Wesley Shields (wxs) · 1.7.0_2
Fix paths in the configuration file.

PR:		ports/119955
Submitted by:	Hark <cab902@yahoo.com>
Approved by:	garga (mentor)
5667cd0a2c
Ion-Mihai Tetcu (itetcu) · 1.7.0_1
Add OPTION to enable reverse proxy support.

PR:		ports/116621
Submitted by:	thompsa@
Approved by:	Wesley Shields (maintainer)
365b7a4e66
Edwin Groothuis (edwin) · 1.7.0_1
Remove always-false/true conditions based on OSVERSION 500000
b448c92411
Martin Wilke (miwi) · 1.7.0_1
- Update maintainer addresses

PR:		ports/102230
Submitted by:	Wesley Shields <wxs(at)atarininja.org>
Approved by:	krion (mentor)
50130fcfc6
Ion-Mihai Tetcu (itetcu) · 1.7.0_1
- Now users an rcNG script. - Removes the (now) un-necessary pkg-message. - Moves the configuration file to ${PREFIX}/etc/tinyproxy.conf - bump PORTREVISION for above - Pass maintainership to submiter.

Tinyproxy now installs a rcNG script.  To enable tinyproxy at boot
time, set the following in rc.conf(5):
  tinyproxy_enable="YES"
The confiration file for tinyproxy has been moved to
${PREFIX}/etc/tinyproxy.conf.  Any old configuration files will need
to be migrated over to the new location.

PR:		ports/96720
Submitted by:	Wesley Shields <wxs@csh.rit.edu> (new maintainer)
Approved by:	lawrance (mentor)
8b0082350e
Edwin Groothuis (edwin) · 1.7.0
Remove USE_REINPLACE from categories starting with W
e4aa76a9be
Edwin Groothuis (edwin) · 1.7.0
SHA256ify

Approved by: krion@
84b1517c16
Pav Lucistnik (pav) · 1.7.0
- Drop maintainership. ENOTIME for ports, so let someone else take better care   of them.

Submitted by:	Brad Davis <so14k@so14k.com>
120d63cacb
Emanuel Haupt (ehaupt) · 1.7.0
- Update to 1.7.0 - Use %%DATADIR%% - Fully respect CFLAGS

PR:		87639
Submitted by:	Jean Milanez Melo <jmelo@freebsdbrasil.com.br>
Approved by:	Brad Davis <so14k@so14k.com> (maintainer)
2be0107025
Volker Stolz (vs) · 1.6.2
- Add startup script and corresponding pkg-message - Assign maintainer to submitter.   Thanks to Mitsuru Yoshida for maintaing this port so far. - SED -> REINPLACE while here

PR:		ports/65746
Submitted by:	Brad Davis
cba2463690
Pav Lucistnik (pav) · 1.6.2
- Update to 1.6.2

PR:		ports/64923
Submitted by:	Brad Davis <so14k@so14k.com>
Approved by:	maintainer timeout (2 weeks)
fab7682ed4
Trevor Johnson (trevor) · 1.5.3_1
SIZEify (maintainer timeout)
8232e82f85
Joe Marcus Clarke (marcus) · 1.5.3_1
Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 1)
73f7c91b5d
Ying-Chieh Liao (ijliao) · 1.5.3
upgrade to 1.5.3

PR:		51993
Submitted by:	maintainer
a2824e9b0f
Akinori MUSHA (knu) · 1.5.0
De-pkg-comment.
e173f6c3ea
Daniel Harris (dannyboy) · 1.5.0
Update to 1.5.0.

PR:		38171
Submitted by:	maintainer
6be3f6fb40
Vanilla I. Shu (vanilla) · 1.4.3
Upgrade to 1.4.3.

PR:		ports/36049
Submitted by:	maintainer
cbde27d2e2
Kevin Lo (kevlo) · 1.3.3b
Upgrade to version 1.3.3b

PR: 26338
Submitted by: MAINTAINER
9864310df0
Chris D. Faulhaber (jedgar) · 1.3.3a
Update port to 1.3.3a (fixes heap overflow)
13b6d4066d
Maxim Sobolev (sobomax) · 1.3.3
Teach MASTER_SITES about new MASTER_SITE_SOURCEFORGE.
a9f22cd584
Will Andrews (will) · 1.3.3
Update to tinyproxy 1.3.3.

PR:		18203
Submitted by:	maintainer
07af0dafe6
Chris Piazza (cpiazza) · 1.2.8
Update with the new PORTNAME/PORTVERSION variables
c3bb46468e
Peter Wemm (peter)
$Id$ -> $FreeBSD$
e7aa81f1a6
Chris Piazza (cpiazza)
Update to version 1.2.8

PR:		13193
Submitted by:	maintainer
33292e0a84
Chris Piazza (cpiazza)
Update to version 1.2.7

PR:		12950
Submitted by:	maintainer
85f3cd57f6
Chris Piazza (cpiazza)
Tinyproxy: a lightweight, non-caching,optionally anonymizing http proxy that is designed to consume a minimum of system resources.

PR:		12473
Submitted by:	Mitsuru Yoshida <mitsuru@riken.go.jp>
66f878d0d5