[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[debian-users:49539] [Translate] [SECURITY] [DSA 1386-2] New wesnoth packages fix denial of service

From: Seiji Kaneko <skaneko@xxxxxxxxxxxx>
Subject: [debian-users:49539] [Translate] [SECURITY] [DSA 1386-2] New wesnoth packages fix denial of service
Date: Mon, 15 Oct 2007 18:02:50 +0900
List-help: <mailto:debian-users-ctl@debian.or.jp?body=help>
List-id: debian-users.debian.or.jp
List-owner: <mailto:debian-users-admin@debian.or.jp>
List-post: <mailto:debian-users@debian.or.jp>
List-software: fml [fml 4.0.3 release (20011202/4.0.3)]
List-unsubscribe: <mailto:debian-users-ctl@debian.or.jp?body=unsubscribe>
X-ml-info: If you have a question, send e-mail with the body "help" (without quotes) to the address debian-users-ctl@debian.or.jp; help=<mailto:debian-users-ctl@debian.or.jp?body=help>
X-ml-name: debian-users
X-mlserver: fml [fml 4.0.3 release (20011202/4.0.3)]; post only (only members can post)
X-original-to: debian-users@debian.or.jp
Message-id: <47132CBA.5010300@xxxxxxxxxxxx>
X-mail-count: 49539
User-agent: Thunderbird 2.0.0.6 (Macintosh/20070728)
かねこです。
URL 等は Debian-security-announce メーリングリストの元記事を確認
ください。

------>8------------>8------------>8------------>8------------>8-
- --------------------------------------------------------------------------
Debian Security Advisory DSA 1386-2                    security@debian.org
http://www.debian.org/security/                             Martin Schulze
October 15th, 2007                      http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : wesnoth
Vulnerability  : プログラムミス
Problem type   : リモート
Debian-specific: いいえ
CVE ID         : CVE-2007-3917

チャットメッセージの処理に欠陥が発見されました。過度に長いメッセージは、
サーバで固定長に切りつめられますが、この際にマルチバイト文字が考慮されて
いませんでした。このため、クライアントに不正な UTF-8 文字列が送信され、
例外となってしまいます。wesnoth と wesnoth server の両方に問題があること
に留意ください。

-2 版の勧告は、安定版 (stable) の MD5 sum のみが修正されています。

旧安定版 (oldstable) ディストリビューション (sarge) では、この問題はバー
ジョン 0.9.0-6 および sarge-backports のバージョン 1.2.7-1~bpo31+1 で修正
されています。

安定版 (stable) ディストリビューション (etch) では、この問題はバージョン
1.2-2 and in version 1.2.7-1~bpo40+1 of etch-backports で修正されています。

不安定版 (unstable) ディストリビューション (sid) では、この問題はバージョ
ン 1.2.7-1 で修正されています。

旧安定版向けの mips アーキテクチャ向けパッケージは後日追加予定です。

直ぐに wesnoth パッケージをアップグレードすることを勧めます。


アップグレード手順
------------------

wget url
        	でファイルを取得できます。
dpkg -i file.deb
                で参照されたファイルをインストールできます。

apt-get パッケージマネージャを用いている場合には、本メールのフッタ記載の
行を sources.list に加えて、

apt-get update
        を実行して内部データベースを更新し、
apt-get upgrade
        によって修正されたパッケージをインストールしてください。

本メールのフッタ記載の設定を自ホストの設定に加えることにより、自動更新を
行うこともできます。



Debian GNU/Linux 3.1 愛称 sarge
- --------------------------------

  ソースアーカイブ:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_0.9.0-6.dsc
      Size/MD5 checksum:      850 86291ea2c7a18b90f85eb39b53f7ca70
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_0.9.0-6.diff.gz
      Size/MD5 checksum:    35409 ece9ff9a4cf64ed981a53021194dc204
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_0.9.0.orig.tar.gz
      Size/MD5 checksum: 36051074 8dd59719631e0e6329a0a25e1dcbf302

  アーキテクチャに依存しない内容:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-data_0.9.0-6_all.deb
      Size/MD5 checksum: 14752878 ebb6d4c489fb2d407bd86420e27c8dd5
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-ei_0.9.0-6_all.deb
      Size/MD5 checksum:   681962 0b79cab0648b8724af0009c31c8cf7ad
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-httt_0.9.0-6_all.deb
      Size/MD5 checksum:  4373962 d7b166b55e9acd60c01ad236499b98ff
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-music_0.9.0-6_all.deb
      Size/MD5 checksum:  9936830 7ebc2d096866786625189ea20ea66c46
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-sotbe_0.9.0-6_all.deb
      Size/MD5 checksum:  1844794 dbf5d86593828a3e6519b442fd0ffd57
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-tdh_0.9.0-6_all.deb
      Size/MD5 checksum:    66000 b59719ef1470afa2048a9211cf7fc136
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-trow_0.9.0-6_all.deb
      Size/MD5 checksum:  1717942 7b91a835e816b3b56030f200ecde0b96

  Alpha architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_0.9.0-6_alpha.deb
      Size/MD5 checksum:  1901144 b8cff98e1a1bdbd5bab93c0e9a414116

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_0.9.0-6_alpha.deb
      Size/MD5 checksum:  1518366 2b96bd84f4b327f54a6630218070a916

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_0.9.0-6_alpha.deb
      Size/MD5 checksum:   229474 065684977aebda989fa5bc47acf06a22

  AMD64 architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_0.9.0-6_amd64.deb
      Size/MD5 checksum:  1521520 bc72757fa955b6abdbab1fdd0471a503

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_0.9.0-6_amd64.deb
      Size/MD5 checksum:  1209900 2f9b55c89ea8b102ce347c1169c154f7

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_0.9.0-6_amd64.deb
      Size/MD5 checksum:   197616 fc19ba05943d2e5dca1386c39b70075a

  ARM architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_0.9.0-6_arm.deb
      Size/MD5 checksum:  2608368 17708b565e206b6e636f71be9a137ee4
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_0.9.0-6_arm.deb
      Size/MD5 checksum:  2031758 a9381b3845b6a305716781cf9e3adf8f
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_0.9.0-6_arm.deb
      Size/MD5 checksum:   261258 473b78f19604915bcfc647afb02f5f71

  HP Precision architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_0.9.0-6_hppa.deb
      Size/MD5 checksum:  2158256 1baa5680aae24322cae58fc95f35607b

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_0.9.0-6_hppa.deb
      Size/MD5 checksum:  1711028 e6cda58fe480eb8ddf651c8fc8c1bef0

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_0.9.0-6_hppa.deb
      Size/MD5 checksum:   247362 3860037bd76d66c9f1b6f9f9c4ea1402

  Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_0.9.0-6_i386.deb
      Size/MD5 checksum:  1564748 fb1abacd6f67f44ff26328ce7518f023

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_0.9.0-6_i386.deb
      Size/MD5 checksum:  1236824 f9708b0fb024c7ecebe2228ce6407031

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_0.9.0-6_i386.deb
      Size/MD5 checksum:   199806 571df40f963bb6063a21b3384bbc0f01

  Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_0.9.0-6_ia64.deb
      Size/MD5 checksum:  2179346 c7561122c10032825635fb45ec33d9d1

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_0.9.0-6_ia64.deb
      Size/MD5 checksum:  1751082 6e614c2c4aebfc3f27c9ec3f4206d7cf

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_0.9.0-6_ia64.deb
      Size/MD5 checksum:   260296 2b48beb77863780e89b6eec625669ab8

  Motorola 680x0 architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_0.9.0-6_m68k.deb
      Size/MD5 checksum:  1752714 41f99a69afd924bce90274aadf783cd5

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_0.9.0-6_m68k.deb
      Size/MD5 checksum:  1381188 e7c3c0bc8946ca83a42f89480a5f0463

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_0.9.0-6_m68k.deb
      Size/MD5 checksum:   206340 71a4e60951fd27f8460d55329551d260

  Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_0.9.0-6_mipsel.deb
      Size/MD5 checksum:  1600034 864b17d2bafbcb149865ed73d2884339

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_0.9.0-6_mipsel.deb
      Size/MD5 checksum:  1297804 73d554e43189ac6ba73b5fa0da0b28ca

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_0.9.0-6_mipsel.deb
      Size/MD5 checksum:   218490 ec7a24163c7f7a1256d707212eabf98b

  PowerPC architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_0.9.0-6_powerpc.deb
      Size/MD5 checksum:  1572426 e4e0080b2c5315f4fd7bcb4b74623d3c

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_0.9.0-6_powerpc.deb
      Size/MD5 checksum:  1257238 78b4f7b1b9a59999d90aa15ecc5facc5

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_0.9.0-6_powerpc.deb
      Size/MD5 checksum:   205200 4eafd50a6367df679f6c5cb72183043a

  IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_0.9.0-6_s390.deb
      Size/MD5 checksum:  1290316 25eb64f921ed5249285d45b459e5796c

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_0.9.0-6_s390.deb
      Size/MD5 checksum:  1034626 5801d36272262bf2e9329f40ba9bf04c

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_0.9.0-6_s390.deb
      Size/MD5 checksum:   189230 bd78146c81a6463fce3a1b38eec33109

  Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_0.9.0-6_sparc.deb
      Size/MD5 checksum:  1527554 2affc47e6aa371a8c6827ff80eb8b9db

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_0.9.0-6_sparc.deb
      Size/MD5 checksum:  1211058 6892a9ed170ad6e7198f9c1868475cc3

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_0.9.0-6_sparc.deb
      Size/MD5 checksum:   191834 36d475617567547e8b6ed0e1f25da41f


Debian GNU/Linux 4.0 alias etch
- -------------------------------

  ソースアーカイブ:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_1.2-2.dsc
      Size/MD5 checksum:      886 9cc6980d04b201a3a7cf313e7ea88352
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_1.2-2.diff.gz
      Size/MD5 checksum:    36830 651be8966f4be3228039ec55e0281773
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_1.2.orig.tar.gz
      Size/MD5 checksum: 74823113 722a459282abe6d04dbe228d031c088e

  アーキテクチャに依存しない内容:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-data_1.2-2_all.deb
      Size/MD5 checksum: 24524112 d95db2fcdf56bc6dd4fa4cf48d8fcded
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-ei_1.2-2_all.deb
      Size/MD5 checksum:  1016494 af054c466eea76ad123d2c07f1ad799d
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-httt_1.2-2_all.deb
      Size/MD5 checksum:  4853576 e8513a5f8521f7cf908d6a9d308af8ff
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-music_1.2-2_all.deb
      Size/MD5 checksum: 25574902 87c74cd4519e180dbcd44a31befe0768
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-trow_1.2-2_all.deb
      Size/MD5 checksum:  4095152 aa65d4cb47a22b3f16aed5c7a1d5afed
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-tsg_1.2-2_all.deb
      Size/MD5 checksum:  1452670 f300c6adaacfe2ad2925602436953c76
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-ttb_1.2-2_all.deb
      Size/MD5 checksum:   343872 34c1ff868361622844f8751c1a5e26a0
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-utbs_1.2-2_all.deb
      Size/MD5 checksum:  4827554 86cb4d8ebf5ed53a1ce2167ef37cee1f

  Alpha architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_1.2-2_alpha.deb
      Size/MD5 checksum:  2276070 a9078be9da64bb1061dc040d5bb9ec59
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_1.2-2_alpha.deb
      Size/MD5 checksum:  1770682 1f638dd842a5d93d21f40dab9ab6bbf2
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_1.2-2_alpha.deb
      Size/MD5 checksum:   345802 aa93cb0618da7b038e9206b09762b2a9

  AMD64 architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_1.2-2_amd64.deb
      Size/MD5 checksum:  1984092 0d3832434abacf88fdf1f7c39b2616be
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_1.2-2_amd64.deb
      Size/MD5 checksum:  1535768 bb7cb09f6c99e8139cf08bfd5ec935f4
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_1.2-2_amd64.deb
      Size/MD5 checksum:   313844 4aa744120cfb08b8784c77877583e0e8

  ARM architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_1.2-2_arm.deb
      Size/MD5 checksum:  2362666 16a6524b3d7ca9624afda00acc79f449
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_1.2-2_arm.deb
      Size/MD5 checksum:  1844832 056f37bff71bebd35d2f3dbb773fedae
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_1.2-2_arm.deb
      Size/MD5 checksum:   345728 7bbcc836a0728bcf1441ecc8042ce2ba

  HP Precision architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_1.2-2_hppa.deb
      Size/MD5 checksum:  2222476 78d33fd2d01d3ce939161c9f1a47718c
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_1.2-2_hppa.deb
      Size/MD5 checksum:  1733236 2bf0820a9a4c5eadbca2845bffe797a3
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_1.2-2_hppa.deb
      Size/MD5 checksum:   346188 8a30a474eb20cc9e6375038a8e191b1d

  Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_1.2-2_i386.deb
      Size/MD5 checksum:  2010666 1e0b133e09a196c9ebbb72672ca9b438
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_1.2-2_i386.deb
      Size/MD5 checksum:  1554102 56e23c548bf53fa1ba43df23871c927d
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_1.2-2_i386.deb
      Size/MD5 checksum:   316174 3425ed568ee4e66a9f8875dad28c719b

  Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_1.2-2_ia64.deb
      Size/MD5 checksum:  2678392 957da2d0aa9627f9807aebbd1345f213
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_1.2-2_ia64.deb
      Size/MD5 checksum:  2101182 2fd90e03c3611184e3c2acea9cebce7d
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_1.2-2_ia64.deb
      Size/MD5 checksum:   397540 354281e0474aeb3de9bdc156213a4cec

  Big endian MIPS architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_1.2-2_mips.deb
      Size/MD5 checksum:  2007194 32edda1abb7c4812e922fabe303c41c8
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_1.2-2_mips.deb
      Size/MD5 checksum:  1561754 a4695436261c6d30e30ba800e87fd142
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_1.2-2_mips.deb
      Size/MD5 checksum:   323674 5f7c677be81088396010dab8a3b99657

  Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_1.2-2_mipsel.deb
      Size/MD5 checksum:  1994094 45dac30e850104a4d0c59c968db237ef

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_1.2-2_mipsel.deb
      Size/MD5 checksum:  1553592 0034e14c28292ba40f085cb57f3b408a

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_1.2-2_mipsel.deb
      Size/MD5 checksum:   322882 a9e65fff54d2cb4a78caca33c2dd6c0c

  PowerPC architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_1.2-2_powerpc.deb
      Size/MD5 checksum:  2003284 1151dc45cfc97968e808c473f16587ec

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_1.2-2_powerpc.deb
      Size/MD5 checksum:  1556962 557b59779635342bec32f872ed65296a

http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_1.2-2_powerpc.deb
      Size/MD5 checksum:   319738 b38852aa6abe023c4ccb705b1551a618

  IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_1.2-2_s390.deb
      Size/MD5 checksum:  1827816 f1f2963d6d612195bb36355fe75aa43c
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_1.2-2_s390.deb
      Size/MD5 checksum:  1416236 a03d1815a99e3b27717e68e0d129726f
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_1.2-2_s390.deb
      Size/MD5 checksum:   299610 40b47c05cbf92cd6b3b3011379d7adcd

  Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth_1.2-2_sparc.deb
      Size/MD5 checksum:  2094142 c1e8f77de4474d94ebf1fc8cee76f8f2
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-editor_1.2-2_sparc.deb
      Size/MD5 checksum:  1609496 6b3e9aa7eddc139eefaa611da6016e3a
    http://security.debian.org/pool/updates/main/w/wesnoth/wesnoth-server_1.2-2_sparc.deb
      Size/MD5 checksum:   312786 afee62202c747beb848bcdd49e103be8


  これらのファイルは次の版の安定版リリース時そちらに移されます。


- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
------>8------------>8------------>8------------>8------------>8-
-- 
Seiji Kaneko                         skaneko@xxxxxxxxxxxx
---------------------------------------------------------
Prev by Date: [debian-users:49538] Re: 急にrootに成れなくなった
Next by Date: [debian-users:49540] Re: 急にrootに成れなくなった
Previous by thread: [debian-users:49533] Re: 急にrootに成れなくなった
Next by thread: [debian-users:49544] DVD
Index(es):
- Date
- Thread