Nicolas Dufresne
未读,2012年10月10日 12:37:062012/10/10登录即可回复作者
登录即可转发
您无权在此群组中删除帖子
要么此群组的电子邮件地址为匿名状态,要么您得查看成员电子邮件地址权限才能查看原始帖子
收件人 libproxy
Dear all,
Today we released version 0.4.9 of libproxy. This is important bug fix
release that fix a buffer overflow in the HTTP client code. Please refer
to CVE-2012-4504. This security issue has been found in all 0.4 version
of libproxy. CVE-2012-4505 has also been issued for libproxy 0.3.X. This
version of libproxy is not supported anymore, please upgrade to latest
version.
Enjoy !
ChangeLog:
* CVE-2012-4504 Fixed buffer overflow when downloading PAC
* Fix infinit loop upon network errors