Tomas Mraz discovered that libproxy incorrectly handled certain PAC files. A remote attacker could use this issue to cause libproxy to crash, or to possibly execute arbitrary code.
Updated packages are available from security.ubuntu.com.
========================================================================== Ubuntu Security Notice USN-1629-1 November 12, 2012 libproxy vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS - Ubuntu 11.10 - Ubuntu 10.04 LTS Summary: libproxy could be made to crash or run programs if it received specially crafted network traffic. Software Description: - libproxy: automatic proxy configuration management library Details: Tomas Mraz discovered that libproxy incorrectly handled certain PAC files. A remote attacker could use this issue to cause libproxy to crash, or to possibly execute arbitrary code. (CVE-2012-4504, CVE-2012-4505) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: libproxy1 0.4.7-0ubuntu4.1 Ubuntu 11.10: libproxy0 0.3.1-2ubuntu6.1 Ubuntu 10.04 LTS: libproxy0 0.3.1-1ubuntu1.1 After a standard system update you need to restart your session to make all the necessary changes. References: http://www.ubuntu.com/usn/usn-1629-1 CVE-2012-4504, CVE-2012-4505 Package Information: https://launchpad.net/ubuntu/+source/libproxy/0.4.7-0ubuntu4.1 https://launchpad.net/ubuntu/+source/libproxy/0.3.1-2ubuntu6.1 https://launchpad.net/ubuntu/+source/libproxy/0.3.1-1ubuntu1.1