UbuntuUpdates.org

Package "libproxy"

Name: libproxy

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • automatic proxy configuration management library (CLI devel)
  • automatic proxy configuration management library (devel)
  • automatic proxy configuration management library (CLI)
  • automatic proxy configuration management library (GSettings plugin)
Latest version: 0.4.11-5ubuntu1.2
Release: xenial (16.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "libproxy" in Xenial

Repository Area Version
base main 0.4.11-5ubuntu1
base universe 0.4.11-5ubuntu1
security universe 0.4.11-5ubuntu1.2
updates main 0.4.11-5ubuntu1.2
updates universe 0.4.11-5ubuntu1.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.4.11-5ubuntu1.2 2021-01-04 14:06:25 UTC

  libproxy (0.4.11-5ubuntu1.2) xenial-security; urgency=medium

  * SECURITY UPDATE: Buffer overflow
    - debian/patches/CVE-2020-26154.patch: fix buffer overflow when PAC
      is enabled in libproxy/url.cpp.
    - CVE-2020-26154

 -- Leonidas Da Silva Barbosa <email address hidden> Wed, 09 Dec 2020 08:54:59 -0300
Source diff to previous version
CVE-2020-26154 url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a

Version: 0.4.11-5ubuntu1.1 2020-09-17 17:06:54 UTC

  libproxy (0.4.11-5ubuntu1.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2020-25219.patch: rewrite url::recvline
      to be nonrecursive in libproxy/url.cpp.
    - CVE-2020-25219

 -- <email address hidden> (Leonidas S. Barbosa) Tue, 15 Sep 2020 13:06:48 -0300
CVE-2020-25219 url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an


About   -   Send Feedback to @ubuntu_updates