[SECURITY] Fedora 18 Update: libproxy-0.4.10-1.fc18

updates at fedoraproject.org updates at fedoraproject.org
Sun Nov 11 02:55:49 UTC 2012


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-16383
2012-10-18 03:28:11
--------------------------------------------------------------------------------

Name        : libproxy
Product     : Fedora 18
Version     : 0.4.10
Release     : 1.fc18
URL         : http://code.google.com/p/libproxy/
Summary     : A library handling all the details of proxy configuration
Description :
libproxy offers the following features:

    * extremely small core footprint (< 35K)
    * no external dependencies within libproxy core
      (libproxy plugins may have dependencies)
    * only 3 functions in the stable external API
    * dynamic adjustment to changing network topology
    * a standard way of dealing with proxy settings across all scenarios
    * a sublime sense of joy and accomplishment

--------------------------------------------------------------------------------
Update Information:

* Fix http chunk encoded PAC that was broken in previous release
* Add HTTP client unit test
* Fix coding style issues
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #864417 - CVE-2012-4504 libproxy: long proxy.pac file handling buffer overflow
        https://bugzilla.redhat.com/show_bug.cgi?id=864417
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update libproxy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list