Looks like there's a 1.0 release; should be worth a version bump Changelog excerpt: 6 March 2007: Polipo 1.0.0 No changes since 0.9.99.2. 7 February 2007: Polipo 0.9.99.2 Fixed a buffer overflow in urlDirname (the 0.9 branch is not vulnerable) (reported by J. P. Larocque). Implemented use of IPv6 temporary source addresses (Frank Behrens). Disabled use of unaligned range requests by default. This is controlled by the variable allowUnalignedRangeRequests (reported by Chris Moore). Fixed descriptor leaks in SOCKS error handling (reported by Roger Dingledine). Implemented maxSideBuffering.
Fixed in cvs.