[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[debian-users:48971] [SECURITY] [DSA 1326-1] New fireflier-server packages fix unsafe temporary files

From: KISE Hiroshi <kise@xxxxxxxxxxx>
Subject: [debian-users:48971] [SECURITY] [DSA 1326-1] New fireflier-server packages fix unsafe temporary files
Date: Mon, 2 Jul 2007 20:51:54 +0900
List-help: <mailto:debian-users-ctl@debian.or.jp?body=help>
List-id: debian-users.debian.or.jp
List-owner: <mailto:debian-users-admin@debian.or.jp>
List-post: <mailto:debian-users@debian.or.jp>
List-software: fml [fml 4.0.3 release (20011202/4.0.3)]
List-unsubscribe: <mailto:debian-users-ctl@debian.or.jp?body=unsubscribe>
X-ml-info: If you have a question, send e-mail with the body "help" (without quotes) to the address debian-users-ctl@debian.or.jp; help=<mailto:debian-users-ctl@debian.or.jp?body=help>
X-ml-name: debian-users
X-mlserver: fml [fml 4.0.3 release (20011202/4.0.3)]; post only (only members can post)
X-original-to: debian-users@debian.or.jp
References: <20070701175628.GA22103@xxxxxxxxxxxx>
Message-id: <20070702.205136.334657731.kise@xxxxxxxxxxx>
X-mail-count: 48971
X-mailer: Mew version 5.2 on Emacs 21.4 / Mule 5.0 (SAKAKI)

代打です。

URL 等は Debian-security-announce メーリングリストの元記事を
確認ください。
-- 
喜瀬“冬猫”浩

------>8------------>8------------>8------------>8------------>8-
------------------------------------------------------------------------
Debian Security Advisory DSA-1326                    security@debian.org
http://www.debian.org/security/                               Steve Kemp
July 01, 2007
------------------------------------------------------------------------

Package        : fireflier-server
Vulnerability  : 安全でない一時ファイルの作成
Problem type   : ローカル
Debian-specific: いいえ
CVE Id(s)      : CVE-2007-2837

Debian Security Audit Project の Steve Kemp さんは、ファイアウォールの
ルールを対話的に作成するツール fireflier-server で、一時ファイルを安全
な方法で扱っていないことを発見しました。この問題により、ローカルの
システムで任意のファイルを削除できる可能性があります。

旧安定版 (oldstable) ディストリビューション (sarge) では、これらの問題は
バージョン 1.1.5-1sarge1 で修正されています。

安定版 (stable) ディストリビューション (etch) では、これらの問題は
バージョン 1.1.6-3etch1 で修正されています。

不安定版 (unstable) ディストリビューション (sid) では、この問題は近く
修正予定です。

直ぐに fireflier-server パッケージをアップグレードすることを勧めます。


アップグレード手順
------------------

wget url
        	でファイルを取得できます。
dpkg -i file.deb
                で参照されたファイルをインストールできます。

apt-get パッケージマネージャを用いている場合には、本メールのフッタ記載の
行を sources.list に加えて、

apt-get update
        を実行して内部データベースを更新し、
apt-get upgrade
        によって修正されたパッケージをインストールしてください。

本メールのフッタ記載の設定を自ホストの設定に加えることにより、自動更新を
行うこともできます。



Debian GNU/Linux 3.1 愛称 sarge
-------------------------------

旧安定版 (oldstable) の更新は、次のアーキテクチャ用が用意されています。
alpha, amd64, arm, hppa, i386, ia64, m68k, mips, mipsel, powerpc, s390, sparc.

ソースアーカイブ:

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier_1.1.5-1sarge1.dsc
    Size/MD5 checksum:      754 fd653a7d7e2c4475d1a2c2640b3e142a
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier_1.1.5-1sarge1.tar.gz
    Size/MD5 checksum:   499949 4ae52e40866c6ca977ddcbf8a8b5fd65

alpha architecture (DEC Alpha)

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.5-1sarge1_alpha.deb
    Size/MD5 checksum:    75194 8c878fe74627e6a6246333d5b14c228f
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.5-1sarge1_alpha.deb
    Size/MD5 checksum:   177850 027ca26aabb6aafae2acdc748d3f4050
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.5-1sarge1_alpha.deb
    Size/MD5 checksum:    74840 d5a498e131e51d76f4044218f9298e24
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.5-1sarge1_alpha.deb
    Size/MD5 checksum:    51402 84350d096372ab3f0aa41608adf3772f

amd64 architecture (AMD x86_64 (AMD64))

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.5-1sarge1_amd64.deb
    Size/MD5 checksum:    66538 34a5b65429e8ebdf4646d93ae8fc37c7
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.5-1sarge1_amd64.deb
    Size/MD5 checksum:    66370 6f3614d84a690531039e5b7b0adc2b6b
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.5-1sarge1_amd64.deb
    Size/MD5 checksum:    47130 68d9276db6afc61f3eec2091c6e57634
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.5-1sarge1_amd64.deb
    Size/MD5 checksum:   147046 d0aafacb99d698957a91df99ff6eddd5

arm architecture (ARM)

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.5-1sarge1_arm.deb
    Size/MD5 checksum:    61610 ad9b1e6b0d0532a3494f22e6811798a9
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.5-1sarge1_arm.deb
    Size/MD5 checksum:    64002 50b762fe9a28aa55bda45d134de95a5e
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.5-1sarge1_arm.deb
    Size/MD5 checksum:    46878 dc55fb97f5d9a4bf8fc192d7f1f22620
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.5-1sarge1_arm.deb
    Size/MD5 checksum:   163486 70254f114e19769e74a02f977e70856c

i386 architecture (Intel ia32)

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.5-1sarge1_i386.deb
    Size/MD5 checksum:    66070 f65bbd16b3b9349271dd643b67fe5fe6
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.5-1sarge1_i386.deb
    Size/MD5 checksum:    45686 d43fa251a29fde160e5be343ac18a5e8
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.5-1sarge1_i386.deb
    Size/MD5 checksum:   145080 803aa15f76f167ec61751ab4d4726011
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.5-1sarge1_i386.deb
    Size/MD5 checksum:    63804 8935c1620e21f806b72ac23567cfde7b

ia64 architecture (Intel ia64)

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.5-1sarge1_ia64.deb
    Size/MD5 checksum:    77904 c6470c91822ba6864b58f901e0ed0415
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.5-1sarge1_ia64.deb
    Size/MD5 checksum:    57184 d40677eb94d117307e0a2279d6b46b37
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.5-1sarge1_ia64.deb
    Size/MD5 checksum:    86190 785c0e110f76b92fbf9fecec864ddfdc
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.5-1sarge1_ia64.deb
    Size/MD5 checksum:   181778 6599a98a4e1bdda9350f336b38d134a5

m68k architecture (Motorola Mc680x0)

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.5-1sarge1_m68k.deb
    Size/MD5 checksum:    43666 e6bda51d4e19dc5a822d1368cb7a5950
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.5-1sarge1_m68k.deb
    Size/MD5 checksum:   153246 54e8eb7687c145a29ba5c2f831ef3f58
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.5-1sarge1_m68k.deb
    Size/MD5 checksum:    67476 656375bc297d17c24cf61287a071b858
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.5-1sarge1_m68k.deb
    Size/MD5 checksum:    64976 0a277af76d4329a96fba035fa11f951f

mipsel architecture (MIPS (Little Endian))

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.5-1sarge1_mipsel.deb
    Size/MD5 checksum:    64736 676d8b2b2937960d3f2201b4009cc728
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.5-1sarge1_mipsel.deb
    Size/MD5 checksum:    48914 42326fdf138ab674ea5ad26c9f1a6c5e
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.5-1sarge1_mipsel.deb
    Size/MD5 checksum:    65704 6131b6260d1a5804b993c06d6402607e
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.5-1sarge1_mipsel.deb
    Size/MD5 checksum:   143918 e2a4420876ce51a371b4c04daf477299

s390 architecture (IBM S/390)

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.5-1sarge1_s390.deb
    Size/MD5 checksum:    58278 915f54bb4e7bac404a189d9d303ebde1
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.5-1sarge1_s390.deb
    Size/MD5 checksum:    58024 2c6e553cbf4e7ceedaa3e68dd7c90592
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.5-1sarge1_s390.deb
    Size/MD5 checksum:   126864 a63df68efa70c549c98a72dda362000b
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.5-1sarge1_s390.deb
    Size/MD5 checksum:    46378 e3c0faeb7643582a0f86ead593ef3392

sparc architecture (Sun SPARC/UltraSPARC)

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.5-1sarge1_sparc.deb
    Size/MD5 checksum:   137770 02079ebc00539a25d28c7c3f2323087e
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.5-1sarge1_sparc.deb
    Size/MD5 checksum:    44604 1f48977051d6b684a97d3bc11849e3d3
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.5-1sarge1_sparc.deb
    Size/MD5 checksum:    63408 d5849c13c7f841f0779511628604f174
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.5-1sarge1_sparc.deb
    Size/MD5 checksum:    62406 19d9df652340d502a46bea63631c69b8


Debian GNU/Linux 4.0 愛称 etch
------------------------------

安定版 (stable) の更新は、次のアーキテクチャ用が用意されています。
alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390, sparc.

ソースアーカイブ:

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier_1.1.6-3etch1.tar.gz
    Size/MD5 checksum:   615953 7db5f641d31cf389baf0882f2f2288ef
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier_1.1.6-3etch1.dsc
    Size/MD5 checksum:      719 8ec24268cc89bb1472dcd4f023109a55

alpha architecture (DEC Alpha)

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.6-3etch1_alpha.deb
    Size/MD5 checksum:   147300 c6b3ba67a793555ec96c3714d5028d4e
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.6-3etch1_alpha.deb
    Size/MD5 checksum:    52922 4f29a555ae0c60a283054869a2deef0d
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.6-3etch1_alpha.deb
    Size/MD5 checksum:    76210 db82d7e8c25d5b778bbc22de591f23ae
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.6-3etch1_alpha.deb
    Size/MD5 checksum:    74646 f39baaca7abcf1a64b6920398d545dc0

amd64 architecture (AMD x86_64 (AMD64))

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.6-3etch1_amd64.deb
    Size/MD5 checksum:    68414 9c1c112e4535e71ea86154c861e0b688
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.6-3etch1_amd64.deb
    Size/MD5 checksum:   121268 bdf7ba3b1cce5e9b4a0563c77dc9bd38
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.6-3etch1_amd64.deb
    Size/MD5 checksum:    47430 698f016cb66f731fda7b87b1f192709e
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.6-3etch1_amd64.deb
    Size/MD5 checksum:    67766 84d8735acffe2567fc8c9739788f0fea

arm architecture (ARM)

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.6-3etch1_arm.deb
    Size/MD5 checksum:    46330 d147b04a73a65fe2966948ac58445cf7
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.6-3etch1_arm.deb
    Size/MD5 checksum:    64868 1af069cf70c678eddaa8e28802df3e89
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.6-3etch1_arm.deb
    Size/MD5 checksum:   130688 f97d13337085b8ade757c1fb10095d6f
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.6-3etch1_arm.deb
    Size/MD5 checksum:    66356 64ef68a531883b23afeacde58e7d2727

i386 architecture (Intel ia32)

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.6-3etch1_i386.deb
    Size/MD5 checksum:    46250 62dde84e79919f2b5d1b2b8a44cedcee
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.6-3etch1_i386.deb
    Size/MD5 checksum:    65748 c908187a9e144b7d3debeb43c611f168
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.6-3etch1_i386.deb
    Size/MD5 checksum:   123604 d14dd2b328d0a5f4886bae8ab388965b
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.6-3etch1_i386.deb
    Size/MD5 checksum:    66552 71aad601121e92cab60380f7d92928e6

ia64 architecture (Intel ia64)

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.6-3etch1_ia64.deb
    Size/MD5 checksum:   155964 3989a1a5b59db29ce3b0f16d074ccd6d
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.6-3etch1_ia64.deb
    Size/MD5 checksum:    59392 07e514db9113670e6931f9683efcbfbc
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.6-3etch1_ia64.deb
    Size/MD5 checksum:    85446 3ca0771eb5d1e65a80912772444edd85
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.6-3etch1_ia64.deb
    Size/MD5 checksum:    77862 c0e83adfc8826c0a944cd96786e96b5b

mipsel architecture (MIPS (Little Endian))

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.6-3etch1_mipsel.deb
    Size/MD5 checksum:    49918 8fdb8bff3171e00c81318dff7c2834bc
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.6-3etch1_mipsel.deb
    Size/MD5 checksum:    67298 15b806ed030c3a71fce8390078739f32
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.6-3etch1_mipsel.deb
    Size/MD5 checksum:   126054 51aa1ce345ea539a46ff4fc5a8353c6f
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.6-3etch1_mipsel.deb
    Size/MD5 checksum:    67824 a5e8bcabc6192397f6701ebd62466a0c

powerpc architecture (PowerPC)

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.6-3etch1_powerpc.deb
    Size/MD5 checksum:    65700 ae5de1b34ce04bdcb9f47a644b145548
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.6-3etch1_powerpc.deb
    Size/MD5 checksum:   122762 3631252bcd61ca3f01d2ee0403ee8730
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.6-3etch1_powerpc.deb
    Size/MD5 checksum:    62716 4abac4b6596b76653ca790c226095171
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.6-3etch1_powerpc.deb
    Size/MD5 checksum:    49218 e9e2fa7a61de8ad67360c5b034f83694

s390 architecture (IBM S/390)

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.6-3etch1_s390.deb
    Size/MD5 checksum:   109020 dbd1d3274cedec161eec4a25b0a79ece
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.6-3etch1_s390.deb
    Size/MD5 checksum:    59542 8a39c0ef45c9890646da6c9d5a93d3f4
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.6-3etch1_s390.deb
    Size/MD5 checksum:    47148 cd7df14ccffcdec9cb8f769777d066ee
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.6-3etch1_s390.deb
    Size/MD5 checksum:    63242 7678da0d666839e0e458c5c5c8a49e22

sparc architecture (Sun SPARC/UltraSPARC)

  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-kde_1.1.6-3etch1_sparc.deb
    Size/MD5 checksum:    63500 303fc154d47f870590584a7cc3cb7bd2
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-server_1.1.6-3etch1_sparc.deb
    Size/MD5 checksum:    44856 efdcc4126731ed16f10260e7900c697a
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-qt_1.1.6-3etch1_sparc.deb
    Size/MD5 checksum:    66338 f440f822c71d8c2ee0654390426b0207
  http://security.debian.org/pool/updates/main/f/fireflier/fireflier-client-gtk_1.1.6-3etch1_sparc.deb
    Size/MD5 checksum:   119628 cd5422a03308735ed84a6877c9dff8c6


  これらのファイルは次の版の安定版リリース時そちらに移されます。

---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
------>8------------>8------------>8------------>8------------>8-

Follow-Ups:
- [debian-users:48974] Re: [SECURITY] [DSA 1326-1] New fireflier-server packages fix unsafe temporary files
  - From: KISE Hiroshi

Prev by Date: [debian-users:48970] Forward: [SECURITY] [DSA 1328-1] New unicon-imc2 packages fix buffer overflow
Next by Date: [debian-users:48972] [Translate] [SECURITY] [DSA 1327-1] New gsambad packages fix unsafe temporary files
Previous by thread: [debian-users:48970] Forward: [SECURITY] [DSA 1328-1] New unicon-imc2 packages fix buffer overflow
Next by thread: [debian-users:48974] Re: [SECURITY] [DSA 1326-1] New fireflier-server packages fix unsafe temporary files
Index(es):
- Date
- Thread