[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[debian-users:47969] [Translate] [SECURITY] [DSA 1256-1] New gtk+2.0 packages fix denial of service

From: Seiji Kaneko <skaneko@xxxxxxxxxxxx>
Subject: [debian-users:47969] [Translate] [SECURITY] [DSA 1256-1] New gtk+2.0 packages fix denial of service
Date: Thu, 1 Feb 2007 20:42:34 +0900
List-help: <mailto:debian-users-ctl@debian.or.jp?body=help>
List-id: debian-users.debian.or.jp
List-owner: <mailto:debian-users-admin@debian.or.jp>
List-post: <mailto:debian-users@debian.or.jp>
List-software: fml [fml 4.0.3 release (20011202/4.0.3)]
List-unsubscribe: <mailto:debian-users-ctl@debian.or.jp?body=unsubscribe>
X-ml-info: If you have a question, send e-mail with the body "help" (without quotes) to the address debian-users-ctl@debian.or.jp; help=<mailto:debian-users-ctl@debian.or.jp?body=help>
X-ml-name: debian-users
X-mlserver: fml [fml 4.0.3 release (20011202/4.0.3)]; post only (only members can post)
X-original-to: debian-users@debian.or.jp
Message-id: <45C1D226.1060600@xxxxxxxxxxxx>
X-mail-count: 47969
User-agent: Thunderbird 1.5.0.9 (Macintosh/20061207)
かねこです。
URL 等は Debian-security-announce メーリングリストの元記事を確認
ください。

------>8------------>8------------>8------------>8------------>8-
- --------------------------------------------------------------------------
Debian Security Advisory DSA 1256-1                    security@debian.org
http://www.debian.org/security/                         Moritz Muehlenhoff
January 31st, 2007                      http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : gtk+2.0
Vulnerability  : プログラムミス
Problem-Type   : ローカル(remote)
Debian-specific: いいえ
CVE ID         : CVE-2007-0010

GTK+ グラフィカルユーザインターフェースライブラリの画像読み込みコードの、
不正な画像を読んだ場合のエラーハンドリングが不十分であり、サービス拒否攻撃
の可能性があることが発見されました。

安定版  (stable) ディストリビューション (sarge) では、この問題はバージョン
2.6.4-3.2 で修正されています。今回の更新には Motorola 680x0 アーキテクチャ
はビルド時の問題のため含まれていません。準備でき次第追ってリリース予定です。

次期安定版 (etch) ディストリビューションでは、この問題はバージョン
2.8.20-5 で修正されています。

不安定版 (unstable) ディストリビューション (sid) では、この問題はバージョ
ン 2.8.20-5 で修正されています。

直ぐに GTK パッケージをアップグレードすることを勧めます。


アップグレード手順
------------------

wget url
        	でファイルを取得できます。
dpkg -i file.deb
                で参照されたファイルをインストールできます。

apt-get パッケージマネージャを用いている場合には、本メールのフッタ記載の
行を sources.list に加えて、

apt-get update
        を実行して内部データベースを更新し、
apt-get upgrade
        によって修正されたパッケージをインストールしてください。

本メールのフッタ記載の設定を自ホストの設定に加えることにより、自動更新を
行うこともできます。



Debian GNU/Linux 3.1 愛称 sarge
- --------------------------------

  ソースアーカイブ:

    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk+2.0_2.6.4-3.2.dsc
      Size/MD5 checksum:     2000 924fc66562da7adbee73a2a4108234d0
    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk+2.0_2.6.4-3.2.diff.gz
      Size/MD5 checksum:    50209 d4acaa3b9b173c72a8f12e4cd4d58ad3
    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk+2.0_2.6.4.orig.tar.gz
      Size/MD5 checksum: 16354198 a3ab72c9c80384fb707b992eb8b43c13

  Architecture independent components:

    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-common_2.6.4-3.2_all.deb
      Size/MD5 checksum:  2983824 9f8755d13ddee3b68519efef0978ec7e
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-doc_2.6.4-3.2_all.deb
      Size/MD5 checksum:  2317902 c52db4b0b9eb0380773fa123fb1a2a27

  Alpha architecture:

    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2-engines-pixbuf_2.6.4-3.2_alpha.deb
      Size/MD5 checksum:    62362 8329abe98a8ef77265a3b0432348a959
    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2.0-examples_2.6.4-3.2_alpha.deb
      Size/MD5 checksum:   268654 460bc578a95bbff65548415a5dbd8ed5
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0_2.6.4-3.2_alpha.deb
      Size/MD5 checksum:  2463370 bb69500b048169b06705e7a8ccddba35
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0-dbg_2.6.4-3.2_alpha.deb
      Size/MD5 checksum: 17691526 ce653b8fc37602e34357df4700072b11
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-bin_2.6.4-3.2_alpha.deb
      Size/MD5 checksum:    20892 259d0b5099956fe0d66c91272668dfb8
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-dev_2.6.4-3.2_alpha.deb
      Size/MD5 checksum:  8474916 2ee3472499398fbb3f1af4c678e48ac2

  AMD64 architecture:

    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2-engines-pixbuf_2.6.4-3.2_amd64.deb
      Size/MD5 checksum:    55360 3dc0816c858b6647586ad3fb63aae82a
    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2.0-examples_2.6.4-3.2_amd64.deb
      Size/MD5 checksum:   263278 c8280b595f948d9a1c4a1c7d8a5b9cfe
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0_2.6.4-3.2_amd64.deb
      Size/MD5 checksum:  2199372 8aa43980bef83c37338ab162067d7b75
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0-dbg_2.6.4-3.2_amd64.deb
      Size/MD5 checksum: 17653842 ac4608896615e56dccfddb0a0d355b01
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-bin_2.6.4-3.2_amd64.deb
      Size/MD5 checksum:    19672 8cabd1fe124c2b6c6d3e04a71603ef8a
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-dev_2.6.4-3.2_amd64.deb
      Size/MD5 checksum:  7614800 b8d4a474e7b1e2ae5edcb7ec6821a577

  ARM architecture:

    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2-engines-pixbuf_2.6.4-3.2_arm.deb
      Size/MD5 checksum:    53000 d510854eb1715dd2d88e9bbf9ef349bd
    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2.0-examples_2.6.4-3.2_arm.deb
      Size/MD5 checksum:   255736 3a9dd5d0ecbd3527c7befb5cdcf69829
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0_2.6.4-3.2_arm.deb
      Size/MD5 checksum:  2042846 e70a73ee37ed16d78d5a357255ee9107
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0-dbg_2.6.4-3.2_arm.deb
      Size/MD5 checksum: 17600310 69ed671651d67bd4ae4ee991b28f24d2
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-bin_2.6.4-3.2_arm.deb
      Size/MD5 checksum:    18138 0cd346721990a27af05d0e2f8b44b845
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-dev_2.6.4-3.2_arm.deb
      Size/MD5 checksum:  7478086 c361a462643199bd2a0820eacb689db4

  HP Precision architecture:

    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2-engines-pixbuf_2.6.4-3.2_hppa.deb
      Size/MD5 checksum:    60146 94d96f02508f86bfd25754d389b39376
    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2.0-examples_2.6.4-3.2_hppa.deb
      Size/MD5 checksum:   263780 0eae29cb6a6f759b814ee87dd6fca132
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0_2.6.4-3.2_hppa.deb
      Size/MD5 checksum:  2464550 6e07695c5ed60aa1e78ca0092b7c0e73
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0-dbg_2.6.4-3.2_hppa.deb
      Size/MD5 checksum: 17799816 06bef4d2269ba875858a1a3ea382842a
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-bin_2.6.4-3.2_hppa.deb
      Size/MD5 checksum:    19742 62ce04f11cab334cb459865792c2d30e
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-dev_2.6.4-3.2_hppa.deb
      Size/MD5 checksum:  8408492 3ba1603539d75d948433d2d75fbc4141

  Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2-engines-pixbuf_2.6.4-3.2_i386.deb
      Size/MD5 checksum:    51242 6abfee5cca9f6c930ad48493e344fd1e
    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2.0-examples_2.6.4-3.2_i386.deb
      Size/MD5 checksum:   260274 e3a7fdc0529b0c3343df40e525a2f4a6
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0_2.6.4-3.2_i386.deb
      Size/MD5 checksum:  2097386 e91b7d11055b80948a9bc52009115e17
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0-dbg_2.6.4-3.2_i386.deb
      Size/MD5 checksum: 17543668 c15a4345d83d0f911df0d0d59d469f3e
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-bin_2.6.4-3.2_i386.deb
      Size/MD5 checksum:    18198 1741bd4b6d0f0b9f514858feedafc9f6
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-dev_2.6.4-3.2_i386.deb
      Size/MD5 checksum:  7234616 6a32a399f590404f9dc89ef615217b69

  Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2-engines-pixbuf_2.6.4-3.2_ia64.deb
      Size/MD5 checksum:    68604 8a2ef1af240960f37b3db020268f7d61
    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2.0-examples_2.6.4-3.2_ia64.deb
      Size/MD5 checksum:   277030 536d97b01743ec867daaa3d476e2049b
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0_2.6.4-3.2_ia64.deb
      Size/MD5 checksum:  2894772 4f315bc6c70d81eba08bd6bb0501357b
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0-dbg_2.6.4-3.2_ia64.deb
      Size/MD5 checksum: 17740612 4db7b4bd7de9db2abfa261e495aba932
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-bin_2.6.4-3.2_ia64.deb
      Size/MD5 checksum:    22398 bbbe5290b52e2eb4c1aa7c0437a73033
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-dev_2.6.4-3.2_ia64.deb
      Size/MD5 checksum:  8622502 4c4739493cb3684fcb2f1a0f2c0e8810

  Big endian MIPS architecture:

    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2-engines-pixbuf_2.6.4-3.2_mips.deb
      Size/MD5 checksum:    55786 01929f626d18789cb9884c54029f789f
    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2.0-examples_2.6.4-3.2_mips.deb
      Size/MD5 checksum:   260016 7fd9a2f1e3f92a0b63269e39d31e1584
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0_2.6.4-3.2_mips.deb
      Size/MD5 checksum:  2122748 dcfd0e6f9888ff2cb07c5008d5c22619
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0-dbg_2.6.4-3.2_mips.deb
      Size/MD5 checksum: 17886428 73169d84d449f63802d7b432179b5536
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-bin_2.6.4-3.2_mips.deb
      Size/MD5 checksum:    22852 709c36059d01add78dc19264e6ee0781
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-dev_2.6.4-3.2_mips.deb
      Size/MD5 checksum:  8298850 d5f8cec256ec2dc7d3d397f5b971aee2

  Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2-engines-pixbuf_2.6.4-3.2_mipsel.deb
      Size/MD5 checksum:    55718 7edfce371461c4b66f98d10ee8b6f6df
    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2.0-examples_2.6.4-3.2_mipsel.deb
      Size/MD5 checksum:   259914 7d221db5e02fc9429875ad569a540c66
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0_2.6.4-3.2_mipsel.deb
      Size/MD5 checksum:  2123176 5e0270b0e509d278a30b4148e8a08812
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0-dbg_2.6.4-3.2_mipsel.deb
      Size/MD5 checksum: 17655176 8edfc3ef071c3c56a8d617793cfb4a0e
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-bin_2.6.4-3.2_mipsel.deb
      Size/MD5 checksum:    22922 2abaf513ddc723b9025aedf739b4ea83
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-dev_2.6.4-3.2_mipsel.deb
      Size/MD5 checksum:  7745332 8a2e0f5550ac277092d5e6cdf9aa970f

  PowerPC architecture:

    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2-engines-pixbuf_2.6.4-3.2_powerpc.deb
      Size/MD5 checksum:    57000 3671e0e658dd7166faf9d79e518235f7
    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2.0-examples_2.6.4-3.2_powerpc.deb
      Size/MD5 checksum:   260260 e69a7b4198b91c990e5f72a78084a85d
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0_2.6.4-3.2_powerpc.deb
      Size/MD5 checksum:  2188036 14a7b08719149d6a1b8e281a62dad948
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0-dbg_2.6.4-3.2_powerpc.deb
      Size/MD5 checksum: 28599066 a5eb56399191742e2ddc583493d3d3d1
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-bin_2.6.4-3.2_powerpc.deb
      Size/MD5 checksum:    22186 278f93c9b7e12e45aae1d056578d71b2
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-dev_2.6.4-3.2_powerpc.deb
      Size/MD5 checksum:  8260218 9089ba673c623f7173d08f9737c49d62

  IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2-engines-pixbuf_2.6.4-3.2_s390.deb
      Size/MD5 checksum:    55380 d74e201e96cdd6517225f743b70812e2
    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2.0-examples_2.6.4-3.2_s390.deb
      Size/MD5 checksum:   262600 8b8a638168ddab2d581f1b0e0258d41c
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0_2.6.4-3.2_s390.deb
      Size/MD5 checksum:  2294780 ec24c79be145e2a4a658cbec5fd4a457
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0-dbg_2.6.4-3.2_s390.deb
      Size/MD5 checksum: 18179444 9e164ffb449afbb48aee5c5dbca06077
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-bin_2.6.4-3.2_s390.deb
      Size/MD5 checksum:    19570 1619385d8151f92e61bb00eae2a65e71
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-dev_2.6.4-3.2_s390.deb
      Size/MD5 checksum:  8354034 02cfaeccd47acd70e204235f610f05b6

  Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2-engines-pixbuf_2.6.4-3.2_sparc.deb
      Size/MD5 checksum:    51056 78f0c84fdc078e5e077b4b51a2a261f7
    http://security.debian.org/pool/updates/main/g/gtk+2.0/gtk2.0-examples_2.6.4-3.2_sparc.deb
      Size/MD5 checksum:   256648 cfcba8eaf83b5e337fca19ba6a55ecae
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0_2.6.4-3.2_sparc.deb
      Size/MD5 checksum:  2138170 42c3fdc3035380580ffc2a7af02ad024
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-0-dbg_2.6.4-3.2_sparc.deb
      Size/MD5 checksum: 17712686 2fe26171dddc6bbde157ef6bcf9532fc
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-bin_2.6.4-3.2_sparc.deb
      Size/MD5 checksum:    17894 ccb283bc384929708635dc6665502da0
    http://security.debian.org/pool/updates/main/g/gtk+2.0/libgtk2.0-dev_2.6.4-3.2_sparc.deb
      Size/MD5 checksum:  7951170 764770b52e0e84b9dc192a4bc2ec75f8


  これらのファイルは次の版の安定版リリース時そちらに移されます。


- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
------>8------------>8------------>8------------>8------------>8-
-- 
Seiji Kaneko                         skaneko@xxxxxxxxxxxx
---------------------------------------------------------
Next by Date: [debian-users:47970] [Translate] [SECURITY] [DSA 1255-1] New libgtop2 packages fix arbitrary code execution
Next by thread: [debian-users:47970] [Translate] [SECURITY] [DSA 1255-1] New libgtop2 packages fix arbitrary code execution
Index(es):
- Date
- Thread