libproxy -- stack-based buffer overflow

Tomas Hoger reports:

A buffer overflow flaw was discovered in the libproxy’s
url::get_pac() used to download proxy.pac proxy auto-configuration
file. A malicious host hosting proxy.pac, or a man in the middle
attacker, could use this flaw to trigger a stack-based buffer
overflow in an application using libproxy, if proxy configuration
instructed it to download proxy.pac file from a remote HTTP
server.