-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2012:172 http://www.mandriva.com/security/ _______________________________________________________________________ Package : libproxy Date : November 19, 2012 Affected: 2011. _______________________________________________________________________ Problem Description: A vulnerability has been discovered and corrected in libproxy: Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file (CVE-2012-4504). The updated packages have been patched to correct this issue. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4504 _______________________________________________________________________ Updated Packages: Mandriva Linux 2011: 053f393f41f06748e2f73c457eccbbda 2011/i586/libmodman1-0.4.6-5.1-mdv2011.0.i586.rpm 0570ffcaa00cc5d74ace63f72748fc35 2011/i586/libproxy1-0.4.6-5.1-mdv2011.0.i586.rpm 9963a27b65ee3b523365df262ce37d61 2011/i586/libproxy-devel-0.4.6-5.1-mdv2011.0.i586.rpm c4f673f55bc291c815abc19eb93ce9e6 2011/i586/libproxy-gnome-0.4.6-5.1-mdv2011.0.i586.rpm 5998b76b5668477c4106567f6a0f4b3e 2011/i586/libproxy-kde-0.4.6-5.1-mdv2011.0.i586.rpm 3dbeeeaeffb63e6bcf4f8984b14ad98b 2011/i586/libproxy-networkmanager-0.4.6-5.1-mdv2011.0.i586.rpm 556864c55bb3297a8378ead688fb855d 2011/i586/libproxy-perl-0.4.6-5.1-mdv2011.0.i586.rpm fdd62ddf2738cb29786c2730a6a9ce71 2011/i586/libproxy-utils-0.4.6-5.1-mdv2011.0.i586.rpm 3ae77b40d10b4587607c9382bba36e34 2011/i586/python-libproxy-0.4.6-5.1-mdv2011.0.i586.rpm 3be5b56c72cd1bdeb319c18de9b87065 2011/SRPMS/libproxy-0.4.6-5.1.src.rpm Mandriva Linux 2011/X86_64: c1b3ac834e3f8d4de1af1ffb79342866 2011/x86_64/lib64modman1-0.4.6-5.1-mdv2011.0.x86_64.rpm 0a9ac3642bfd17a2ad49f4f3a90d229d 2011/x86_64/lib64proxy1-0.4.6-5.1-mdv2011.0.x86_64.rpm e72232c13ffef3dd379caa4cd5d95972 2011/x86_64/lib64proxy-devel-0.4.6-5.1-mdv2011.0.x86_64.rpm 2bc8ba94bbb7836a79f52d5761d36856 2011/x86_64/libproxy-gnome-0.4.6-5.1-mdv2011.0.x86_64.rpm d9ed4d40f5f78c805c575d766350b4d3 2011/x86_64/libproxy-kde-0.4.6-5.1-mdv2011.0.x86_64.rpm ca7d48a561ee234927a84bb1d8f5bab4 2011/x86_64/libproxy-networkmanager-0.4.6-5.1-mdv2011.0.x86_64.rpm ced3cccb8b08669300366317da1c35b7 2011/x86_64/libproxy-perl-0.4.6-5.1-mdv2011.0.x86_64.rpm b76e0c991fed23f263a499a05b5998d3 2011/x86_64/libproxy-utils-0.4.6-5.1-mdv2011.0.x86_64.rpm 606c638f4fed8ae4f3c63999b1986742 2011/x86_64/python-libproxy-0.4.6-5.1-mdv2011.0.x86_64.rpm 3be5b56c72cd1bdeb319c18de9b87065 2011/SRPMS/libproxy-0.4.6-5.1.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iD8DBQFQqfTdmqjQ0CJFipgRAuTSAKDURU4aES4zBlt/P3HbzpoD8x0TvACfbn7k reiNVHav8hpmPgCDa91c8rU= =zoc1 -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
