[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[debian-users:41844] [Translate] [SECURITY] [DSA 579-1] New abiword packages fix arbitrary code execution

From: Seiji Kaneko <skaneko@xxxxxxxxxxxx>
Subject: [debian-users:41844] [Translate] [SECURITY] [DSA 579-1] New abiword packages fix arbitrary code execution
Date: Tue, 2 Nov 2004 23:43:50 +0900
List-help: <mailto:debian-users-ctl@debian.or.jp?body=help>
List-id: debian-users.debian.or.jp
List-owner: <mailto:debian-users-admin@debian.or.jp>
List-post: <mailto:debian-users@debian.or.jp>
List-software: fml [fml 4.0.3 release (20011202/4.0.3)]
List-unsubscribe: <mailto:debian-users-ctl@debian.or.jp?body=unsubscribe>
X-ml-info: If you have a question, send e-mail with the body "help" (without quotes) to the address debian-users-ctl@debian.or.jp; help=<mailto:debian-users-ctl@debian.or.jp?body=help>
X-ml-name: debian-users
X-mlserver: fml [fml 4.0.3 release (20011202/4.0.3)]; post only (only members can post)
X-original-to: debian-users@debian.or.jp
X-spam-level:
X-spam-status: No, hits=-2.1 required=10.0 tests=ISO2022JP_BODY,ISO2022JP_CHARSET,SIGNATURE_SHORT_DENSE, SPAM_PHRASE_00_01 version=2.44
Message-id: <p04320406bdad4d3648ec@[192.168.200.6]>
X-mail-count: 41844
X-mailer: Macintosh Eudora Version 4.3.2-J

かねこです。
URL 等は元記事を確認ください。

------>8------------>8------------>8------------>8------------>8
- --------------------------------------------------------------------------
Debian Security Advisory DSA 579-1                     security@debian.org
http://www.debian.org/security/                             Martin Schulze
November 1st, 2004                      http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : abiword
Vulnerability  : バッファオーバフロー
Problem-Type   : リモート
Debian-specific: いいえ
CVE ID         : CAN-2004-0645

Microsoft Word 文書の変換とプレビューで使用するライブラリ wv にバッファオ
ーバフローバグが発見されました。攻撃により、脆弱性のあるアプリケーション
の利用者の権限で任意のコードを実行させることができます。

安定版 (stable) ディストリビューション (woody) では、この問題はバージョン
1.0.2+cvs.2002.06.05-1woody2 で修正されています。

不安定版 (unstable) ディストリビューション (sid) には、この問題はありませ
ん。

直ぐに abiword パッケージをアップグレードすることを勧めます。

アップグレード手順
------------------

wget url
	でファイルを取得できます。
dpkg -i file.deb
        で参照されたファイルをインストールできます。

を用いて、apt-get パッケージマネージャに以下記載の sources.list を与えて
次のコマンドを使ってください。

apt-get update
        これは内部データベースを更新します。
apt-get upgrade
        これで修正されたパッケージをインストールします。

本メールのフッタ記載の設定を自ホストの設定に加えることにより、自動更新を
行うこともできます。

Debian GNU/Linux 3.0 愛称 woody
- ------------------------------------

  ソースアーカイブ:

    http://security.debian.org/pool/updates/main/a/abiword/abiword_1.0.2+cvs.2002.06.05-1woody2.dsc
      Size/MD5 checksum:     1159 85bb20f96162736e29ade8d6558799d6
    http://security.debian.org/pool/updates/main/a/abiword/abiword_1.0.2+cvs.2002.06.05-1woody2.diff.gz
      Size/MD5 checksum:    48982 12356a29a3185ef367fd7a18a7374be0
    http://security.debian.org/pool/updates/main/a/abiword/abiword_1.0.2+cvs.2002.06.05.orig.tar.gz
      Size/MD5 checksum: 16407034 0b0e1f3e42a0627a28cea970b099049d

  Architecture independent components:

    http://security.debian.org/pool/updates/main/a/abiword/abiword-doc_1.0.2+cvs.2002.06.05-1woody2_all.deb
      Size/MD5 checksum:   950160 e102efac6a16ded87e5e437f687a0310
    http://security.debian.org/pool/updates/main/a/abiword/xfonts-abi_1.0.2+cvs.2002.06.05-1woody2_all.deb
      Size/MD5 checksum:   189372 96b1fd88bd7c779e692d1f97f4884992

  Alpha architecture:

    http://security.debian.org/pool/updates/main/a/abiword/abiword_1.0.2+cvs.2002.06.05-1woody2_alpha.deb
      Size/MD5 checksum:    12324 db3b4b84b9fe45dcbd3c2e50bdf3ea08
    http://security.debian.org/pool/updates/main/a/abiword/abiword-common_1.0.2+cvs.2002.06.05-1woody2_alpha.deb
      Size/MD5 checksum:   538558 745ddd234eebaba2d94b4dcb8482eb58
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_1.0.2+cvs.2002.06.05-1woody2_alpha.deb
      Size/MD5 checksum:  2069076 b15d6f04af7fe12637fbf3f98bff3570
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gtk_1.0.2+cvs.2002.06.05-1woody2_alpha.deb
      Size/MD5 checksum:  1873718 f3c06b0ab36204d17bd7f35b8aaa9d9c
    http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins_1.0.2+cvs.2002.06.05-1woody2_alpha.deb
      Size/MD5 checksum:   228192 0f93acbe004457b96665dfd404eb7a0d

  ARM architecture:

    http://security.debian.org/pool/updates/main/a/abiword/abiword_1.0.2+cvs.2002.06.05-1woody2_arm.deb
      Size/MD5 checksum:    12324 d79bb97457548ab36052e0e311168ac5
    http://security.debian.org/pool/updates/main/a/abiword/abiword-common_1.0.2+cvs.2002.06.05-1woody2_arm.deb
      Size/MD5 checksum:   536122 c9a40134dad59a82a902e734c8011f78
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_1.0.2+cvs.2002.06.05-1woody2_arm.deb
      Size/MD5 checksum:  1716898 e16c92223a1d79b11e13723dfe440b70
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gtk_1.0.2+cvs.2002.06.05-1woody2_arm.deb
      Size/MD5 checksum:  1533466 519589fac25720cb9932949a16e435e9
    http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins_1.0.2+cvs.2002.06.05-1woody2_arm.deb
      Size/MD5 checksum:   154748 69f4844084b35e02af75d2350970ae5f

  Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/a/abiword/abiword_1.0.2+cvs.2002.06.05-1woody2_i386.deb
      Size/MD5 checksum:    12316 56e899f5073f4ecf10b6cb29802da76f
    http://security.debian.org/pool/updates/main/a/abiword/abiword-common_1.0.2+cvs.2002.06.05-1woody2_i386.deb
      Size/MD5 checksum:   533908 f3d4e7035c0d0e9fcf6c53386f9305f6
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_1.0.2+cvs.2002.06.05-1woody2_i386.deb
      Size/MD5 checksum:  1677628 bafc31f34a7f940268acb69e708db7c8
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gtk_1.0.2+cvs.2002.06.05-1woody2_i386.deb
      Size/MD5 checksum:  1491442 a87d8c81b54987eee14cfa5ad4cfa599
    http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins_1.0.2+cvs.2002.06.05-1woody2_i386.deb
      Size/MD5 checksum:   219836 2de08d80c8581d9814047c11e41d98fc

  Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/a/abiword/abiword_1.0.2+cvs.2002.06.05-1woody2_ia64.deb
      Size/MD5 checksum:    12326 16aae240a8308465fcc04e7f9697d64a
    http://security.debian.org/pool/updates/main/a/abiword/abiword-common_1.0.2+cvs.2002.06.05-1woody2_ia64.deb
      Size/MD5 checksum:   542536 e9fcc8cb137cde1015f854c6383e803f
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_1.0.2+cvs.2002.06.05-1woody2_ia64.deb
      Size/MD5 checksum:  2121940 fb962d5debe790b0a9ea5da9b82f1500
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gtk_1.0.2+cvs.2002.06.05-1woody2_ia64.deb
      Size/MD5 checksum:  1939620 d84fc2069f1af2ce581f6a876179c567
    http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins_1.0.2+cvs.2002.06.05-1woody2_ia64.deb
      Size/MD5 checksum:   311806 1664fc9ec9ed17f7c355aa2b27c9cb27

  HP Precision architecture:

    http://security.debian.org/pool/updates/main/a/abiword/abiword_1.0.2+cvs.2002.06.05-1woody2_hppa.deb
      Size/MD5 checksum:    12322 fbe7366ac7c2d84eaa840c29bb0f0870
    http://security.debian.org/pool/updates/main/a/abiword/abiword-common_1.0.2+cvs.2002.06.05-1woody2_hppa.deb
      Size/MD5 checksum:   537778 0e13ea49a4bf688b99297c6fa60ddbe0
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_1.0.2+cvs.2002.06.05-1woody2_hppa.deb
      Size/MD5 checksum:  2039786 f91d12d4d6ba552a42cf4562d358f5f3
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gtk_1.0.2+cvs.2002.06.05-1woody2_hppa.deb
      Size/MD5 checksum:  1821044 ed470c31af565d3a836dbaed6b5956c9
    http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins_1.0.2+cvs.2002.06.05-1woody2_hppa.deb
      Size/MD5 checksum:   195742 8f70554c0e9fab92c733e084ac435796

  Motorola 680x0 architecture:

    http://security.debian.org/pool/updates/main/a/abiword/abiword_1.0.2+cvs.2002.06.05-1woody2_m68k.deb
      Size/MD5 checksum:    12326 fda3aee08b6c7a36552c44c9e18dc2f3
    http://security.debian.org/pool/updates/main/a/abiword/abiword-common_1.0.2+cvs.2002.06.05-1woody2_m68k.deb
      Size/MD5 checksum:   533074 623de2757f85e5f40404ad7178600900
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_1.0.2+cvs.2002.06.05-1woody2_m68k.deb
      Size/MD5 checksum:  1602602 71341f13227b14ebebbdab7307170e5e
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gtk_1.0.2+cvs.2002.06.05-1woody2_m68k.deb
      Size/MD5 checksum:  1416262 4123606f88103837cb0b1716e5332edc
    http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins_1.0.2+cvs.2002.06.05-1woody2_m68k.deb
      Size/MD5 checksum:   199616 c8cbb04072b54b12e5d790d190ed5e20

  Big endian MIPS architecture:

    http://security.debian.org/pool/updates/main/a/abiword/abiword_1.0.2+cvs.2002.06.05-1woody2_mips.deb
      Size/MD5 checksum:    12324 2a9e9d8590cbff7e6eae6210dcda5963
    http://security.debian.org/pool/updates/main/a/abiword/abiword-common_1.0.2+cvs.2002.06.05-1woody2_mips.deb
      Size/MD5 checksum:   536334 34b58292b19a97c7caf03fa8649f9588
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_1.0.2+cvs.2002.06.05-1woody2_mips.deb
      Size/MD5 checksum:  1701150 4233b20af6d518aef680721c6e9d224f
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gtk_1.0.2+cvs.2002.06.05-1woody2_mips.deb
      Size/MD5 checksum:  1513420 4e9ff72a764e615974d97bd1078955b6
    http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins_1.0.2+cvs.2002.06.05-1woody2_mips.deb
      Size/MD5 checksum:   205038 d02601a4bf14e98e8b43f0773b25e0c4

  Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/a/abiword/abiword_1.0.2+cvs.2002.06.05-1woody2_mipsel.deb
      Size/MD5 checksum:    12322 33fbc540d53404e519a6696930e94193
    http://security.debian.org/pool/updates/main/a/abiword/abiword-common_1.0.2+cvs.2002.06.05-1woody2_mipsel.deb
      Size/MD5 checksum:   536470 367d3892a482f12e69f4a78ab94925b9
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_1.0.2+cvs.2002.06.05-1woody2_mipsel.deb
      Size/MD5 checksum:  1663230 72a084359b72dbb54d77ccf5fc2dbc5f
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gtk_1.0.2+cvs.2002.06.05-1woody2_mipsel.deb
      Size/MD5 checksum:  1480868 f3e424b1b36eef3bcb52c422e36393ec
    http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins_1.0.2+cvs.2002.06.05-1woody2_mipsel.deb
      Size/MD5 checksum:   202908 a145263d08da2e5dad0d611869180def

  PowerPC architecture:

    http://security.debian.org/pool/updates/main/a/abiword/abiword_1.0.2+cvs.2002.06.05-1woody2_powerpc.deb
      Size/MD5 checksum:    12316 e4d9763a95a99175919c1da05fbd35d7
    http://security.debian.org/pool/updates/main/a/abiword/abiword-common_1.0.2+cvs.2002.06.05-1woody2_powerpc.deb
      Size/MD5 checksum:   534710 596bbd310236e97c3d967ff6fac45e2a
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_1.0.2+cvs.2002.06.05-1woody2_powerpc.deb
      Size/MD5 checksum:  1716300 a77a54353c0f17ae35f363931dae7d47
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gtk_1.0.2+cvs.2002.06.05-1woody2_powerpc.deb
      Size/MD5 checksum:  1527752 1d6a0d11fb0a4c0d59e3a84b9457964d
    http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins_1.0.2+cvs.2002.06.05-1woody2_powerpc.deb
      Size/MD5 checksum:   211422 bdf81bbb6ad1e18ba5140a06d4ba6493

  IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/a/abiword/abiword_1.0.2+cvs.2002.06.05-1woody2_s390.deb
      Size/MD5 checksum:    12322 41066489465b7dc84e7512a8b2467215
    http://security.debian.org/pool/updates/main/a/abiword/abiword-common_1.0.2+cvs.2002.06.05-1woody2_s390.deb
      Size/MD5 checksum:   535134 7bee77890a9237f6a45d44c9a6fa3fb0
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_1.0.2+cvs.2002.06.05-1woody2_s390.deb
      Size/MD5 checksum:  1603758 13a836f504b4698bce96b010e6c6a1ef
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gtk_1.0.2+cvs.2002.06.05-1woody2_s390.deb
      Size/MD5 checksum:  1417836 da47311e33507bccba7da3ff9eb9a890
    http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins_1.0.2+cvs.2002.06.05-1woody2_s390.deb
      Size/MD5 checksum:   203140 bdaa7fe49b1fb7097e9bf7d8fec42d5c

  Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/a/abiword/abiword_1.0.2+cvs.2002.06.05-1woody2_sparc.deb
      Size/MD5 checksum:    12326 af26ffe3a8a0c96f62f5a93003e11c77
    http://security.debian.org/pool/updates/main/a/abiword/abiword-common_1.0.2+cvs.2002.06.05-1woody2_sparc.deb
      Size/MD5 checksum:   537396 0b7459a387b34d02fcdf200948022936
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_1.0.2+cvs.2002.06.05-1woody2_sparc.deb
      Size/MD5 checksum:  1656854 67a1f7d6d4cc1d0a2c120a61e9983ac2
    http://security.debian.org/pool/updates/main/a/abiword/abiword-gtk_1.0.2+cvs.2002.06.05-1woody2_sparc.deb
      Size/MD5 checksum:  1470270 36c383eec00251183eab2e4cd3add41d
    http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins_1.0.2+cvs.2002.06.05-1woody2_sparc.deb
      Size/MD5 checksum:   193240 c86d477d0eda07aa9822817933b4413d


  これらのファイルは次の版の安定版リリース時そちらに移されます。

- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
------>8------------>8------------>8------------>8------------>8
-- 
Seiji Kaneko                         skaneko@xxxxxxxxxxxx
---------------------------------------------------------

Prev by Date: [debian-users:41843] [Translate] [SECURITY] [DSA 580-1] New iptables packages fix modprobe failure
Next by Date: [debian-users:41845] カーネル再構築でエラーになります
Previous by thread: [debian-users:41843] [Translate] [SECURITY] [DSA 580-1] New iptables packages fix modprobe failure
Next by thread: [debian-users:41845] カーネル再構築でエラーになります
Index(es):
- Date
- Thread