| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Mon, 9 Aug 2010 15:16:44 -0700
From: Steve Beattie <sbeattie@...ntu.com>
To: ubuntu-security-announce@...ts.ubuntu.com
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: [USN-967-1] w3m vulnerability
===========================================================
Ubuntu Security Notice USN-967-1 August 09, 2010
w3m vulnerability
CVE-2010-2074
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 9.04
Ubuntu 9.10
Ubuntu 10.04 LTS
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 6.06 LTS:
w3m 0.5.1-4ubuntu2.6.06.1
Ubuntu 8.04 LTS:
w3m 0.5.1-5.1ubuntu1.1
Ubuntu 9.04:
w3m 0.5.2-2ubuntu0.1
Ubuntu 9.10:
w3m 0.5.2-2ubuntu1.1
Ubuntu 10.04 LTS:
w3m 0.5.2-2.1ubuntu1.1
After a standard system update you need to restart any running instances
of w3m to effect the necessary changes.
Details follow:
Ludwig Nussel discovered w3m does not properly handle SSL/TLS
certificates with NULL characters in the certificate name. An
attacker could exploit this to perform a man in the middle
attack to view sensitive information or alter encrypted
communications. (CVE-2010-2074)
Updated packages for Ubuntu 6.06 LTS:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.1-4ubuntu2.6.06.1.diff.gz
Size/MD5: 36950 61af8116989ea20fc9de2bc2035bff27
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.1-4ubuntu2.6.06.1.dsc
Size/MD5: 1355 c63dfd7a3190d33b6a8bf3faf00cd142
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.1.orig.tar.gz
Size/MD5: 1892121 0678b72e07e69c41709d71ef0fe5da13
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.1-4ubuntu2.6.06.1_amd64.deb
Size/MD5: 1126754 b720fb3c60139097a5c5edd9d897b87c
http://security.ubuntu.com/ubuntu/pool/universe/w/w3m/w3m-img_0.5.1-4ubuntu2.6.06.1_amd64.deb
Size/MD5: 88686 f55ffb8f155ca56e20be538ac07e6fee
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.1-4ubuntu2.6.06.1_i386.deb
Size/MD5: 1068634 434395522c44f645a31c114209dd1c2a
http://security.ubuntu.com/ubuntu/pool/universe/w/w3m/w3m-img_0.5.1-4ubuntu2.6.06.1_i386.deb
Size/MD5: 87694 6a0dad78d29a994fdf68b67b88671ae4
powerpc architecture (Apple Macintosh G3/G4/G5):
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.1-4ubuntu2.6.06.1_powerpc.deb
Size/MD5: 1127384 b6901e8fb952d3bdb3fbb0509b5f9a5d
http://security.ubuntu.com/ubuntu/pool/universe/w/w3m/w3m-img_0.5.1-4ubuntu2.6.06.1_powerpc.deb
Size/MD5: 90024 094ae7b60a014e5a618cb8ce7d703a94
sparc architecture (Sun SPARC/UltraSPARC):
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.1-4ubuntu2.6.06.1_sparc.deb
Size/MD5: 1091422 1ba881612fbd9485a867236f1d11b7dd
http://security.ubuntu.com/ubuntu/pool/universe/w/w3m/w3m-img_0.5.1-4ubuntu2.6.06.1_sparc.deb
Size/MD5: 88080 25fb4183bccb613a8488a95cb62bb3c4
Updated packages for Ubuntu 8.04 LTS:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.1-5.1ubuntu1.1.diff.gz
Size/MD5: 66475 4a2a88d49cf5ab546a6982a99898c58b
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.1-5.1ubuntu1.1.dsc
Size/MD5: 1464 65975db4cabadca4c9bec3f29809c74b
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.1.orig.tar.gz
Size/MD5: 1892121 0678b72e07e69c41709d71ef0fe5da13
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.1-5.1ubuntu1.1_amd64.deb
Size/MD5: 1135768 32c8b4569c5b58a09bd64f56282ec654
http://security.ubuntu.com/ubuntu/pool/universe/w/w3m/w3m-img_0.5.1-5.1ubuntu1.1_amd64.deb
Size/MD5: 96198 1137f5eeb518741972967557945e3258
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.1-5.1ubuntu1.1_i386.deb
Size/MD5: 1089658 109a28386eae068081eeb146d4925e56
http://security.ubuntu.com/ubuntu/pool/universe/w/w3m/w3m-img_0.5.1-5.1ubuntu1.1_i386.deb
Size/MD5: 94568 6da0f035169b3bf4fd4400c8acac72ca
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/w/w3m/w3m_0.5.1-5.1ubuntu1.1_lpia.deb
Size/MD5: 1090736 9bfff0a2b71d4aa37b4b28cdb5e61582
http://ports.ubuntu.com/pool/universe/w/w3m/w3m-img_0.5.1-5.1ubuntu1.1_lpia.deb
Size/MD5: 90628 358b504f48d6d172dfbb1945804c4bf7
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/w/w3m/w3m_0.5.1-5.1ubuntu1.1_powerpc.deb
Size/MD5: 1146328 20445145a9b1bc1e2b8d77f6e4a349ee
http://ports.ubuntu.com/pool/universe/w/w3m/w3m-img_0.5.1-5.1ubuntu1.1_powerpc.deb
Size/MD5: 98408 b292393ea87c7c4af64e962eba0f4def
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/w/w3m/w3m_0.5.1-5.1ubuntu1.1_sparc.deb
Size/MD5: 1102868 0349f127140948bf9138633aa7e14b81
http://ports.ubuntu.com/pool/universe/w/w3m/w3m-img_0.5.1-5.1ubuntu1.1_sparc.deb
Size/MD5: 95032 0f57e7c9d6316376841b333696c54f0e
Updated packages for Ubuntu 9.04:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.2-2ubuntu0.1.diff.gz
Size/MD5: 37423 f9c79d46cdf642203df8f9867be41b98
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.2-2ubuntu0.1.dsc
Size/MD5: 1937 3f60110a2c58344bafd61cf1863f4346
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.2.orig.tar.gz
Size/MD5: 1906812 ba06992d3207666ed1bf2dcf7c72bf58
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.2-2ubuntu0.1_amd64.deb
Size/MD5: 1148486 0a0afd4fc3e428aa769b0accee982c2f
http://security.ubuntu.com/ubuntu/pool/universe/w/w3m/w3m-img_0.5.2-2ubuntu0.1_amd64.deb
Size/MD5: 97846 d6b9ad66d995620113ab184e37fc55a0
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.2-2ubuntu0.1_i386.deb
Size/MD5: 1101060 a518ef4f702cbe2efbb688a1b8fe57c5
http://security.ubuntu.com/ubuntu/pool/universe/w/w3m/w3m-img_0.5.2-2ubuntu0.1_i386.deb
Size/MD5: 96398 40ad5e711321e2c634a63daa92a5686b
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/w/w3m/w3m_0.5.2-2ubuntu0.1_lpia.deb
Size/MD5: 1103342 0c37ef9df76f00333c84f1a50b068c15
http://ports.ubuntu.com/pool/universe/w/w3m/w3m-img_0.5.2-2ubuntu0.1_lpia.deb
Size/MD5: 92336 44ee9a7564bd1bf4d6a75f687a45ad87
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/w/w3m/w3m_0.5.2-2ubuntu0.1_powerpc.deb
Size/MD5: 1151018 ce85e8a091ed9f8056994090f390900a
http://ports.ubuntu.com/pool/universe/w/w3m/w3m-img_0.5.2-2ubuntu0.1_powerpc.deb
Size/MD5: 99444 827a9275bb181723b3ad96f89f525588
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/w/w3m/w3m_0.5.2-2ubuntu0.1_sparc.deb
Size/MD5: 1111604 596d221abad7062a0761d149e8d461e4
http://ports.ubuntu.com/pool/universe/w/w3m/w3m-img_0.5.2-2ubuntu0.1_sparc.deb
Size/MD5: 96710 4d62bc85313b1410137d02f6d7b03101
Updated packages for Ubuntu 9.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.2-2ubuntu1.1.diff.gz
Size/MD5: 38057 33741d01f9123e2ac4b001b5965a138f
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.2-2ubuntu1.1.dsc
Size/MD5: 1937 67fd371f8f538cc9da75fd1f40117138
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.2.orig.tar.gz
Size/MD5: 1906812 ba06992d3207666ed1bf2dcf7c72bf58
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.2-2ubuntu1.1_amd64.deb
Size/MD5: 1150762 ee4b7f030484b3f3c82f3ea60c4f1796
http://security.ubuntu.com/ubuntu/pool/universe/w/w3m/w3m-img_0.5.2-2ubuntu1.1_amd64.deb
Size/MD5: 98118 91bee71d56786bbe73c8f6ae1238951e
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.2-2ubuntu1.1_i386.deb
Size/MD5: 1103128 39d85b0b193ca5d9e69715e48274cdb4
http://security.ubuntu.com/ubuntu/pool/universe/w/w3m/w3m-img_0.5.2-2ubuntu1.1_i386.deb
Size/MD5: 96774 15ef3b3fb97297448af1897a0f44fa22
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/w/w3m/w3m_0.5.2-2ubuntu1.1_lpia.deb
Size/MD5: 1105262 c76bfae2336b8f471d1c44a8b288c144
http://ports.ubuntu.com/pool/universe/w/w3m/w3m-img_0.5.2-2ubuntu1.1_lpia.deb
Size/MD5: 92824 7e87ecc07fb95c7b1ede3d500b147c6c
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/w/w3m/w3m_0.5.2-2ubuntu1.1_powerpc.deb
Size/MD5: 1147542 338a4b4598416c4ecf4719b53f2f65eb
http://ports.ubuntu.com/pool/universe/w/w3m/w3m-img_0.5.2-2ubuntu1.1_powerpc.deb
Size/MD5: 97778 29626ad65098a96d57f105c7b0dcb8a2
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/w/w3m/w3m_0.5.2-2ubuntu1.1_sparc.deb
Size/MD5: 1113262 a00f705f6878a81a8a10038278556355
http://ports.ubuntu.com/pool/universe/w/w3m/w3m-img_0.5.2-2ubuntu1.1_sparc.deb
Size/MD5: 96812 5dfef2c4d1cfe12959e15d385962ab65
Updated packages for Ubuntu 10.04:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.2-2.1ubuntu1.1.diff.gz
Size/MD5: 38392 cfbd215d8a95d51e06ab3d72a879863a
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.2-2.1ubuntu1.1.dsc
Size/MD5: 1940 c18dc9fcb5667e45486d62d69fb411d8
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.2.orig.tar.gz
Size/MD5: 1906812 ba06992d3207666ed1bf2dcf7c72bf58
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.2-2.1ubuntu1.1_amd64.deb
Size/MD5: 1151090 ae18fccc687875c58e6576a7e327d7e4
http://security.ubuntu.com/ubuntu/pool/universe/w/w3m/w3m-img_0.5.2-2.1ubuntu1.1_amd64.deb
Size/MD5: 98324 c4b5ef5d809bf943281f227dc87da1d7
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/w/w3m/w3m_0.5.2-2.1ubuntu1.1_i386.deb
Size/MD5: 1103332 404cffbd005ddec39219472b00d49875
http://security.ubuntu.com/ubuntu/pool/universe/w/w3m/w3m-img_0.5.2-2.1ubuntu1.1_i386.deb
Size/MD5: 96974 2835f76d90b03d30a81dd77021f7edd9
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/w/w3m/w3m_0.5.2-2.1ubuntu1.1_powerpc.deb
Size/MD5: 1147860 924efbbb4dd2a8d85819e26a3bb6cd49
http://ports.ubuntu.com/pool/universe/w/w3m/w3m-img_0.5.2-2.1ubuntu1.1_powerpc.deb
Size/MD5: 98012 db7bb2da4a5ed140d2d80d5f7446d6ba
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/w/w3m/w3m_0.5.2-2.1ubuntu1.1_sparc.deb
Size/MD5: 1130804 f0b2cfa9cda748b3a0170c5befac81f2
http://ports.ubuntu.com/pool/universe/w/w3m/w3m-img_0.5.2-2.1ubuntu1.1_sparc.deb
Size/MD5: 97348 8919be99fd6a450fec6b9cf57ab7f2fd
Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists