BugTraq
[ MDVSA-2012:172 ] libproxy Nov 19 2012 12:04PM
security mandriva com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2012:172
http://www.mandriva.com/security/
_______________________________________________________________________

Package : libproxy
Date : November 19, 2012
Affected: 2011.
_______________________________________________________________________

Problem Description:

A vulnerability has been discovered and corrected in libproxy:

Stack-based buffer overflow in the url::get_pac function in url.cpp
in libproxy 0.4.x before 0.4.9 allows remote servers to have an
unspecified impact via a large proxy.pac file (CVE-2012-4504).

The updated packages have been patched to correct this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4504
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2011:
053f393f41f06748e2f73c457eccbbda 2011/i586/libmodman1-0.4.6-5.1-mdv2011.0.i586.rpm
0570ffcaa00cc5d74ace63f72748fc35 2011/i586/libproxy1-0.4.6-5.1-mdv2011.0.i586.rpm
9963a27b65ee3b523365df262ce37d61 2011/i586/libproxy-devel-0.4.6-5.1-mdv2011.0.i586.rpm
c4f673f55bc291c815abc19eb93ce9e6 2011/i586/libproxy-gnome-0.4.6-5.1-mdv2011.0.i586.rpm
5998b76b5668477c4106567f6a0f4b3e 2011/i586/libproxy-kde-0.4.6-5.1-mdv2011.0.i586.rpm
3dbeeeaeffb63e6bcf4f8984b14ad98b 2011/i586/libproxy-networkmanager-0.4.6-5.1-mdv2011.0.i586.rpm
556864c55bb3297a8378ead688fb855d 2011/i586/libproxy-perl-0.4.6-5.1-mdv2011.0.i586.rpm
fdd62ddf2738cb29786c2730a6a9ce71 2011/i586/libproxy-utils-0.4.6-5.1-mdv2011.0.i586.rpm
3ae77b40d10b4587607c9382bba36e34 2011/i586/python-libproxy-0.4.6-5.1-mdv2011.0.i586.rpm
3be5b56c72cd1bdeb319c18de9b87065 2011/SRPMS/libproxy-0.4.6-5.1.src.rpm

Mandriva Linux 2011/X86_64:
c1b3ac834e3f8d4de1af1ffb79342866 2011/x86_64/lib64modman1-0.4.6-5.1-mdv2011.0.x86_64.rpm
0a9ac3642bfd17a2ad49f4f3a90d229d 2011/x86_64/lib64proxy1-0.4.6-5.1-mdv2011.0.x86_64.rpm
e72232c13ffef3dd379caa4cd5d95972 2011/x86_64/lib64proxy-devel-0.4.6-5.1-mdv2011.0.x86_64.rpm
2bc8ba94bbb7836a79f52d5761d36856 2011/x86_64/libproxy-gnome-0.4.6-5.1-mdv2011.0.x86_64.rpm
d9ed4d40f5f78c805c575d766350b4d3 2011/x86_64/libproxy-kde-0.4.6-5.1-mdv2011.0.x86_64.rpm
ca7d48a561ee234927a84bb1d8f5bab4 2011/x86_64/libproxy-networkmanager-0.4.6-5.1-mdv2011.0.x86_64.rpm
ced3cccb8b08669300366317da1c35b7 2011/x86_64/libproxy-perl-0.4.6-5.1-mdv2011.0.x86_64.rpm
b76e0c991fed23f263a499a05b5998d3 2011/x86_64/libproxy-utils-0.4.6-5.1-mdv2011.0.x86_64.rpm
606c638f4fed8ae4f3c63999b1986742 2011/x86_64/python-libproxy-0.4.6-5.1-mdv2011.0.x86_64.rpm
3be5b56c72cd1bdeb319c18de9b87065 2011/SRPMS/libproxy-0.4.6-5.1.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQFQqfTdmqjQ0CJFipgRAuTSAKDURU4aES4zBlt/P3HbzpoD8x0TvACfbn7k
reiNVHav8hpmPgCDa91c8rU=
=zoc1
-----END PGP SIGNATURE-----

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus