| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20070828215158.GC5788@outflux.net>
Date: Tue, 28 Aug 2007 14:51:58 -0700
From: Kees Cook <kees@...ntu.com>
To: ubuntu-security-announce@...ts.ubuntu.com
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: [USN-504-1] Emacs vulnerability
===========================================================
Ubuntu Security Notice USN-504-1 August 28, 2007
emacs21 vulnerability
CVE-2007-2833
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 6.06 LTS
Ubuntu 6.10
Ubuntu 7.04
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 6.06 LTS:
emacs21 21.4a-3ubuntu2.1
emacs21-nox 21.4a-3ubuntu2.1
Ubuntu 6.10:
emacs21 21.4a-6ubuntu2.1
emacs21-nox 21.4a-6ubuntu2.1
Ubuntu 7.04:
emacs21 21.4a+1-2ubuntu1.1
emacs21-nox 21.4a+1-2ubuntu1.1
After a standard system upgrade you need to restart emacs to effect the
necessary changes.
Details follow:
Hendrik Tews discovered that emacs21 did not correctly handle certain
GIF images. By tricking a user into opening a specially crafted GIF,
a remote attacker could cause emacs21 to crash, resulting in a denial
of service.
Updated packages for Ubuntu 6.06 LTS:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a-3ubuntu2.1.diff.gz
Size/MD5: 157273 6442c1cb39f77be814e38f85ea446e88
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a-3ubuntu2.1.dsc
Size/MD5: 814 ebac3d1ce4db9594f15efbc10442b2b0
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a.orig.tar.gz
Size/MD5: 18113820 0a85e242da6eb61f86fda5ad1c762d5a
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-common_21.4a-3ubuntu2.1_all.deb
Size/MD5: 10985008 456d856f752b74d2e838061c9825759c
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-el_21.4a-3ubuntu2.1_all.deb
Size/MD5: 7151846 d35f15800814f66c6389c1333a66f4e5
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-bin-common_21.4a-3ubuntu2.1_amd64.deb
Size/MD5: 154214 e772c3b4149e77ec9f01a65dbc5f7db6
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a-3ubuntu2.1_amd64.deb
Size/MD5: 2191658 1f05a263d098683c8b16bd8857d6e145
http://security.ubuntu.com/ubuntu/pool/universe/e/emacs21/emacs21-nox_21.4a-3ubuntu2.1_amd64.deb
Size/MD5: 1968288 94f08bff63c26add0b301199d418d3b4
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-bin-common_21.4a-3ubuntu2.1_i386.deb
Size/MD5: 133606 314cb24fb1bc3c6a3f8889c1903efafb
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a-3ubuntu2.1_i386.deb
Size/MD5: 1993942 3a72d9d58a30b2691bd2cb0444eb3628
http://security.ubuntu.com/ubuntu/pool/universe/e/emacs21/emacs21-nox_21.4a-3ubuntu2.1_i386.deb
Size/MD5: 1809020 a94068adb60786e8404fea83713d080b
powerpc architecture (Apple Macintosh G3/G4/G5):
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-bin-common_21.4a-3ubuntu2.1_powerpc.deb
Size/MD5: 147262 a7e46e0e7615d95155b1437f46857a91
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a-3ubuntu2.1_powerpc.deb
Size/MD5: 2110578 029ec6a85307c31372ae64b9a020c4f1
http://security.ubuntu.com/ubuntu/pool/universe/e/emacs21/emacs21-nox_21.4a-3ubuntu2.1_powerpc.deb
Size/MD5: 1898816 2cabd83c97295b21f4ed679169e11e6b
sparc architecture (Sun SPARC/UltraSPARC):
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-bin-common_21.4a-3ubuntu2.1_sparc.deb
Size/MD5: 139632 ab2e75ab6f58c7b51b577fe034efd1d3
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a-3ubuntu2.1_sparc.deb
Size/MD5: 2105040 05180a3b8d223843ec1d41d34961a384
http://security.ubuntu.com/ubuntu/pool/universe/e/emacs21/emacs21-nox_21.4a-3ubuntu2.1_sparc.deb
Size/MD5: 1907444 8ebfa96e8856ae5b4351f184ceeb6d29
Updated packages for Ubuntu 6.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a-6ubuntu2.1.diff.gz
Size/MD5: 153372 5d9cbbd8cc38c79480c8888976fb7d31
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a-6ubuntu2.1.dsc
Size/MD5: 878 4b84d1d5f69fd814b313ba989f196f0e
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a.orig.tar.gz
Size/MD5: 18113820 0a85e242da6eb61f86fda5ad1c762d5a
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-common_21.4a-6ubuntu2.1_all.deb
Size/MD5: 10937600 948967901cc660c66574c2af92f2086a
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-el_21.4a-6ubuntu2.1_all.deb
Size/MD5: 7153006 d1133af95e400bb810e5ee35b211f5e7
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-bin-common_21.4a-6ubuntu2.1_amd64.deb
Size/MD5: 152730 6613905de920116c3a136974c9c83150
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-nox_21.4a-6ubuntu2.1_amd64.deb
Size/MD5: 1960328 28b91331cc86572bb154be0474ef5004
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a-6ubuntu2.1_amd64.deb
Size/MD5: 2188418 642f6a9e264c1d80389c91b65045501b
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-bin-common_21.4a-6ubuntu2.1_i386.deb
Size/MD5: 137382 b35fd0a8849b8915bc2a94ac48b34086
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-nox_21.4a-6ubuntu2.1_i386.deb
Size/MD5: 1821666 141bb483f7053aa6f40dbeea896081ac
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a-6ubuntu2.1_i386.deb
Size/MD5: 2016810 fc95b632d8436a133147a415c9c4f07e
powerpc architecture (Apple Macintosh G3/G4/G5):
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-bin-common_21.4a-6ubuntu2.1_powerpc.deb
Size/MD5: 148838 f5d05f9624451e5a2e688e55c05822dd
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-nox_21.4a-6ubuntu2.1_powerpc.deb
Size/MD5: 1900238 8ebda50e3f0be370eaf3619d7049d502
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a-6ubuntu2.1_powerpc.deb
Size/MD5: 2112312 1a5d14c75f95d000fe6ac45a5a26391d
sparc architecture (Sun SPARC/UltraSPARC):
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-bin-common_21.4a-6ubuntu2.1_sparc.deb
Size/MD5: 140278 bc6ed9589547f46bfb2075beac625540
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-nox_21.4a-6ubuntu2.1_sparc.deb
Size/MD5: 1907120 34f9f1f91923eefb2c7d4dfeb852509b
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a-6ubuntu2.1_sparc.deb
Size/MD5: 2105618 caace7ae0c77dea3f1df38742baeb257
Updated packages for Ubuntu 7.04:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a+1-2ubuntu1.1.diff.gz
Size/MD5: 187527 a9f53d54f4a019ebe05a30cddb190d1f
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a+1-2ubuntu1.1.dsc
Size/MD5: 1007 909ee7636bfdb2d5fa30a4adeb9ce347
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a+1.orig.tar.gz
Size/MD5: 15188829 2614ad1ce5c547e682e76049717a704d
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs-el_21.4a+1-2ubuntu1.1_all.deb
Size/MD5: 24828 993e97b19e708e545d6ce969557b782e
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs-nox_21.4a+1-2ubuntu1.1_all.deb
Size/MD5: 24850 a36f289c0b5ce1157c925b56736438d4
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-common_21.4a+1-2ubuntu1.1_all.deb
Size/MD5: 9372892 34341df5a3a23fb7ca3c9eb06e5e0da0
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-el_21.4a+1-2ubuntu1.1_all.deb
Size/MD5: 7162688 a08bc6dcaabb08f22be46819d16dc520
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs_21.4a+1-2ubuntu1.1_all.deb
Size/MD5: 24896 3185faec910804a18403af7fbe56fc57
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-bin-common_21.4a+1-2ubuntu1.1_amd64.deb
Size/MD5: 162750 b3c3e6a0d9550501730a15ba5f0175b7
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-nox_21.4a+1-2ubuntu1.1_amd64.deb
Size/MD5: 1973602 d22e1fe1a9fc883fba99c87d081a1ae2
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a+1-2ubuntu1.1_amd64.deb
Size/MD5: 2198780 b7b19a9120e4db3e40c7ac35fbe1521a
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-bin-common_21.4a+1-2ubuntu1.1_i386.deb
Size/MD5: 146868 fc27aaa16128c27149bcb8fa587403a8
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-nox_21.4a+1-2ubuntu1.1_i386.deb
Size/MD5: 1828408 534b212a1df61ae41bcbf41c68875637
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a+1-2ubuntu1.1_i386.deb
Size/MD5: 2024296 c65b993759efa91bfd11f3af76fb9101
powerpc architecture (Apple Macintosh G3/G4/G5):
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-bin-common_21.4a+1-2ubuntu1.1_powerpc.deb
Size/MD5: 162578 72e515c8b7d2f5e5988590a84a9233f9
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-nox_21.4a+1-2ubuntu1.1_powerpc.deb
Size/MD5: 1907550 ab6df2decccebecdacbd23d41388256d
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a+1-2ubuntu1.1_powerpc.deb
Size/MD5: 2121602 3e3acfc026705a2aeb926352a5007e32
sparc architecture (Sun SPARC/UltraSPARC):
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-bin-common_21.4a+1-2ubuntu1.1_sparc.deb
Size/MD5: 151746 d00625451fd09256c40ad573a2d59dd8
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-nox_21.4a+1-2ubuntu1.1_sparc.deb
Size/MD5: 1916684 d216662c9176def5de71a7d0dd6a9a40
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.4a+1-2ubuntu1.1_sparc.deb
Size/MD5: 2119534 7b5e4c74aa00a0154600fc2f2303a7e7
Download attachment "signature.asc" of type "application/pgp-signature" (190 bytes)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists