polipo - denial of service

Several denial of service vulnerabilities have been discovered in polipo, a
small, caching web proxy. The Common Vulnerabilities and Exposures project
identifies the following problems:

• CVE-2009-3305
  A malicous remote sever could cause polipo to crash by sending an
  invalid Cache-Control header.
• CVE-2009-4143
  A malicous client could cause polipo to crash by sending a large
  Content-Length value.

This upgrade also fixes some other bugs that could lead to a daemon crash
or an infinite loop and may be triggerable remotely.

For the stable distribution (lenny), these problems have been fixed in
version 1.0.4-1+lenny1.

For the testing distribution (squeeze) and the unstable distribution (sid),
these problems have been fixed in version 1.0.4-3.

We recommend that you upgrade your polipo packages.