Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 12 Oct 2012 16:02:57 +0200
From: Matthias Weckbecker <>
Subject: Re: libproxy PAC downloading buffer overflows

On Friday 12 October 2012 15:46:47 Kurt Seifried wrote:
> On 10/12/2012 02:43 AM, Tomas Hoger wrote:
> > Hi!
> >
> > libproxy 0.4.9 fixes a buffer overflow reported by Tomas Mraz:
> >
> >
> >!topic/libproxy/VxZ8No7mT0E
> > Upstream announcement also mentions another issue - CVE-2012-4505.
> > It is related, but different problem that was found in pre-0.4
> > versions while investigating if they were affected by
> > CVE-2012-4504.
> >
> >
> Please use CVE-2012-4521 for this issue.

Wasn't this rather a CVE notification than a CVE request? At least 
it looked like this to me. The announcement mentions two CVE.


Matthias Weckbecker, Senior Security Engineer, SUSE Security Team
SUSE LINUX Products GmbH, Maxfeldstr. 5, D-90409 Nuernberg, Germany
Tel: +49-911-74053-0;
SUSE LINUX Products GmbH, GF: Jeff Hawn, HRB 16746 (AG Nuernberg) 

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.