Register | Log in

libproxy

Choose email to subscribe with

general

source: libproxy (main)
version: 0.4.15-14
maintainer: Debian GNOME Maintainers (archive) (DMD)
uploaders: Laurent Bigonville [DMD] – Jeremy Bicha [DMD] – Iain Lane [DMD]
arch: all any
std-ver: 4.5.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.4.11-4
oldstable: 0.4.14-2
old-sec: 0.4.14-2+deb9u1
stable: 0.4.15-5
testing: 0.4.15-14
unstable: 0.4.15-14

versioned links

0.4.11-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.4.14-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.4.14-2+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.4.15-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.4.15-13: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.4.15-14: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libproxy-dev
libproxy-tools (2 bugs: 0, 2, 0, 0)
libproxy1-plugin-gsettings
libproxy1-plugin-kconfig
libproxy1-plugin-networkmanager
libproxy1-plugin-webkit
libproxy1v5
python3-libproxy (1 bugs: 0, 1, 0, 0)

action needed

1 security issue in stretch high

There is 1 open security issue in stretch.

1 important issue:

CVE-2020-26154: url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

Please fix it.

Created: 2020-09-30 Last update: 2020-10-03 05:25

2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:

CVE-2020-25219: url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
CVE-2020-26154: url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

Please fix them.

Created: 2020-09-10 Last update: 2020-10-03 05:25

2 security issues in buster high

There are 2 open security issues in buster.

1 important issue:

CVE-2020-26154: url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

1 issue skipped by the security teams:

CVE-2020-25219: url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.

Please fix them.

Created: 2020-09-10 Last update: 2020-10-03 05:25

2 security issues in bullseye high

There are 2 open security issues in bullseye.

2 important issues:

CVE-2020-25219: url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
CVE-2020-26154: url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

Please fix them.

Created: 2020-09-10 Last update: 2020-10-03 05:25

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2020-07-29 Last update: 2020-08-22 06:04

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2020-04-29 Last update: 2020-04-29 08:04

news

[2020-10-03] libproxy 0.4.15-14 MIGRATED to testing (Debian testing watch)
[2020-09-27] Accepted libproxy 0.4.15-14 (source) into unstable (Jeremy Bicha)
[2020-09-12] Accepted libproxy 0.4.14-2+deb9u1 (source all amd64) into oldstable (Chris Lamb)
[2020-05-07] libproxy 0.4.15-13 MIGRATED to testing (Debian testing watch)
[2020-05-01] Accepted libproxy 0.4.15-13 (source) into unstable (Simon McVittie)
[2020-04-28] Accepted libproxy 0.4.15-12 (source) into unstable (Jeremy Bicha)
[2020-04-28] Accepted libproxy 0.4.15-11 (source) into unstable (Jeremy Bicha)
[2020-03-11] Accepted libproxy 0.4.15-10 (source) into experimental (Iain Lane)
[2019-11-08] libproxy 0.4.15-9 MIGRATED to testing (Debian testing watch)
[2019-11-06] Accepted libproxy 0.4.15-9 (source) into unstable (Iain Lane)
[2019-10-19] Accepted libproxy 0.4.15-8 (source) into unstable (Jeremy Bicha)
[2019-10-06] Accepted libproxy 0.4.15-7 (source) into unstable (Jeremy Bicha)
[2019-10-06] Accepted libproxy 0.4.15-6 (source) into unstable (Jeremy Bicha)
[2018-12-31] libproxy 0.4.15-5 MIGRATED to testing (Debian testing watch)
[2018-12-29] Accepted libproxy 0.4.15-5 (source) into unstable (Jeremy Bicha)
[2018-12-27] libproxy 0.4.15-4 MIGRATED to testing (Debian testing watch)
[2018-12-24] Accepted libproxy 0.4.15-4 (source all amd64) into unstable (Laurent Bigonville)
[2018-10-08] libproxy 0.4.15-3 MIGRATED to testing (Debian testing watch)
[2018-10-06] Accepted libproxy 0.4.15-3 (source all amd64) into unstable (Laurent Bigonville)
[2018-09-22] libproxy 0.4.15-2 MIGRATED to testing (Debian testing watch)
[2018-09-19] Accepted libproxy 0.4.15-2 (source) into unstable (Jeremy Bicha)
[2018-04-03] libproxy 0.4.15-1 MIGRATED to testing (Debian testing watch)
[2018-03-28] Accepted libproxy 0.4.15-1 (source) into unstable (Jeremy Bicha)
[2017-12-24] libproxy 0.4.14-4 MIGRATED to testing (Debian testing watch)
[2017-12-18] Accepted libproxy 0.4.14-4 (source) into unstable (Jeremy Bicha)
[2017-06-20] libproxy 0.4.14-3 MIGRATED to testing (Debian testing watch)
[2017-05-27] Accepted libproxy 0.4.14-3 (source all amd64) into unstable (Laurent Bigonville)
[2017-02-19] libproxy 0.4.14-2 MIGRATED to testing (Debian testing watch)
[2017-02-08] Accepted libproxy 0.4.14-2 (source all amd64) into unstable (Laurent Bigonville)
[2017-02-02] libproxy 0.4.14-1 MIGRATED to testing (Debian testing watch)

1
2

bugs [bug history graph]

all: 8
RC: 1
I&N: 7
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 1)
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.4.15-13ubuntu1
14 bugs
patches for 0.4.15-13ubuntu1

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing