[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[debian-users:50534] [Translate] [SECURITY] [DSA 1579-1] New netpbm-free packages fix arbitrary code

From: Seiji Kaneko <skaneko@xxxxxxxxxxxx>
Subject: [debian-users:50534] [Translate] [SECURITY] [DSA 1579-1] New netpbm-free packages fix arbitrary code
Date: Sun, 18 May 2008 23:32:32 +0900
List-help: <mailto:debian-users-ctl@debian.or.jp?body=help>
List-id: debian-users.debian.or.jp
List-owner: <mailto:debian-users-admin@debian.or.jp>
List-post: <mailto:debian-users@debian.or.jp>
List-software: fml [fml 4.0.3 release (20011202/4.0.3)]
List-unsubscribe: <mailto:debian-users-ctl@debian.or.jp?body=unsubscribe>
X-ml-info: If you have a question, send e-mail with the body "help" (without quotes) to the address debian-users-ctl@debian.or.jp; help=<mailto:debian-users-ctl@debian.or.jp?body=help>
X-ml-name: debian-users
X-mlserver: fml [fml 4.0.3 release (20011202/4.0.3)]; post only (only members can post)
X-spam-checker-version: SpamAssassin 3.1.7-deb (2006-10-05) on osdn.debian.or.jp
X-spam-level:
X-spam-status: No, score=-2.4 required=10.0 tests=AWL,KI autolearn=disabled version=3.1.7-deb
Message-id: <48303DF9.3060107@xxxxxxxxxxxx>
X-mail-count: 50534
User-agent: Thunderbird 2.0.0.14 (Macintosh/20080421)

かねこです。
URL 等は Debian-security-announce メーリングリストの元記事を確認
ください。

------>8------------>8------------>8------------>8------------>8-
- ------------------------------------------------------------------------
Debian Security Advisory DSA-1579-1                  security@debian.org
http://www.debian.org/security/                           Devin Carraway
May 18, 2008                          http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package        : netpbm-free
Vulnerability  : 入力のサニタイズ漏れ
Problem type   : ローカル (リモート)
Debian-specific: いいえ
CVE Id(s)      : CVE-2008-0554

画像処理ユーティリティ群 netpbm-free の GIF リーダの実装に欠陥が発見され
ました。入力データの検証が不十分なため、悪意を持って作成された GIF ファ
イルによりスタックバッファをオーバフローさせることができるため、任意のコ
ードが実行可能な可能性があります。

安定版 (stable) ディストリビューション (etch) では、これらの問題はバージ
ョン 2:10.0-11.1+etch1 で修正されています。

不安定版 (unstable) ディストリビューション (sid) では、これらの問題はバー
ジョン 2:10.0-11.1 で修正されています。

直ぐに netpbm パッケージをアップグレードすることを勧めます。


アップグレード手順
------------------

wget url
        	でファイルを取得できます。
dpkg -i file.deb
                で参照されたファイルをインストールできます。

apt-get パッケージマネージャを用いている場合には、本メールのフッタ記載の
行を sources.list に加えて、

apt-get update
        を実行して内部データベースを更新し、
apt-get upgrade
        によって修正されたパッケージをインストールしてください。

本メールのフッタ記載の設定を自ホストの設定に加えることにより、自動更新を
行うこともできます。

Debian GNU/Linux 4.0 alias etch
- -------------------------------

ソースアーカイブ:


http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm-free_10.0-11.1+etch1.diff.gz
    Size/MD5 checksum:    49833 5e340881bb56e88ca2525c5baf3a12cf
  http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm-free_10.0.orig.tar.gz
    Size/MD5 checksum:  1926538 985e9f6d531ac0b2004f5cbebdeea87d

http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm-free_10.0-11.1+etch1.dsc
    Size/MD5 checksum:      755 e8b82a4cab1e4352faf53d6093ff02d1

alpha architecture (DEC Alpha)


http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_10.0-11.1+etch1_alpha.deb
    Size/MD5 checksum:    84206 b33236e6b1bfd895231905579583ec1c

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9-dev_10.0-11.1+etch1_alpha.deb
    Size/MD5 checksum:   139256 4dde0418859c0a44e8abbd5a8888bc97

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10_10.0-11.1+etch1_alpha.deb
    Size/MD5 checksum:    75730 5ba8dac319fcb09e6057edcf339031da

http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0-11.1+etch1_alpha.deb
    Size/MD5 checksum:  1423650 928d158de222f0aad537d2e9d5a55d1c

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10-dev_10.0-11.1+etch1_alpha.deb
    Size/MD5 checksum:   138864 d72de0e9205fafc74ed5a61574f90a89

amd64 architecture (AMD x86_64 (AMD64))


http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_10.0-11.1+etch1_amd64.deb
    Size/MD5 checksum:    75412 c87cf158e0234259584f584a9f1832b5

http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0-11.1+etch1_amd64.deb
    Size/MD5 checksum:  1241558 470cca7fe0cafa9a3ef519e45911989f

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10-dev_10.0-11.1+etch1_amd64.deb
    Size/MD5 checksum:   116838 1444d40f6022a1650c8ebcf5041ba6ef

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10_10.0-11.1+etch1_amd64.deb
    Size/MD5 checksum:    67404 c11ac33a59b828227df65f030d4b0ecd

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9-dev_10.0-11.1+etch1_amd64.deb
    Size/MD5 checksum:   117288 aa57bddc977bfcaae40c4d2e0dfab247

arm architecture (ARM)


http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10_10.0-11.1+etch1_arm.deb
    Size/MD5 checksum:    62288 4f73d9da53ef5fca46b720787b69a937

http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0-11.1+etch1_arm.deb
    Size/MD5 checksum:  1260142 3aad360491069ca71cb1fd79a54047b3

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10-dev_10.0-11.1+etch1_arm.deb
    Size/MD5 checksum:   109834 a9b24a209be2c2a05183d5a501981669

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_10.0-11.1+etch1_arm.deb
    Size/MD5 checksum:    68692 02d48f5f058f67b7d2007332c214211d

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9-dev_10.0-11.1+etch1_arm.deb
    Size/MD5 checksum:   110104 7e35448f17f029ad74902589aae0c0c5

hppa architecture (HP PA RISC)


http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0-11.1+etch1_hppa.deb
    Size/MD5 checksum:  1333920 a56ad3bc6edba6f0c8aeeb90a05b24ae

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_10.0-11.1+etch1_hppa.deb
    Size/MD5 checksum:    82594 68fa87cdf4869bc89047fe0ad48cb1cf

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10-dev_10.0-11.1+etch1_hppa.deb
    Size/MD5 checksum:   125684 7df0ea27cbd816e3c4846bd4714907c4

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9-dev_10.0-11.1+etch1_hppa.deb
    Size/MD5 checksum:   125788 49bdc7c577ccfee26adfd44187e7098d

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10_10.0-11.1+etch1_hppa.deb
    Size/MD5 checksum:    73896 5cd54f6760f1d0a74899aa5b1eeeefee

i386 architecture (Intel ia32)


http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10_10.0-11.1+etch1_i386.deb
    Size/MD5 checksum:    63758 f905f22588b614831324060426e5751d

http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0-11.1+etch1_i386.deb
    Size/MD5 checksum:  1181300 365c86b4233a807c3c6c10f800da4afa

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_10.0-11.1+etch1_i386.deb
    Size/MD5 checksum:    70202 591a522cb5cc225858e8ef59c0b0229e

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9-dev_10.0-11.1+etch1_i386.deb
    Size/MD5 checksum:   109860 c1011f89b554328ff82cd01451e667c1

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10-dev_10.0-11.1+etch1_i386.deb
    Size/MD5 checksum:   109718 c1130da9304e855827b99d4c2202a5b2

ia64 architecture (Intel ia64)


http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_10.0-11.1+etch1_ia64.deb
    Size/MD5 checksum:   101310 e695256a27385dee8fb2f8ddf1ccb151

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10_10.0-11.1+etch1_ia64.deb
    Size/MD5 checksum:    92042 a2df3ed51d279ad0191401d7db0a29de

http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0-11.1+etch1_ia64.deb
    Size/MD5 checksum:  1759566 1f58b0302e2394d09bf3fcc423ee77ec

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10-dev_10.0-11.1+etch1_ia64.deb
    Size/MD5 checksum:   149610 8458ab3ca7477d7011b815e31651a74a

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9-dev_10.0-11.1+etch1_ia64.deb
    Size/MD5 checksum:   149986 dc3f0e6f5e4511c5970a0bcd726d8f3b

mips architecture (MIPS (Big Endian))


http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10-dev_10.0-11.1+etch1_mips.deb
    Size/MD5 checksum:   124128 fad3edf3cf23f0bf7d13660bbb02795e

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9-dev_10.0-11.1+etch1_mips.deb
    Size/MD5 checksum:   123212 5331c9d21f4e49029a2d6afc8e88fbcd

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_10.0-11.1+etch1_mips.deb
    Size/MD5 checksum:    73522 ff8075e6113bf9f387798a142c8d07a8

http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0-11.1+etch1_mips.deb
    Size/MD5 checksum:  1318050 688e833af5f7ed3dcaf6c8b803acab6b

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10_10.0-11.1+etch1_mips.deb
    Size/MD5 checksum:    65826 f6f9b8c34d1fc3ecb332baf87144cc67

mipsel architecture (MIPS (Little Endian))


http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10-dev_10.0-11.1+etch1_mipsel.deb
    Size/MD5 checksum:   123410 7e7c4c3649a11e6c5d2bac60511a2608

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10_10.0-11.1+etch1_mipsel.deb
    Size/MD5 checksum:    65710 dff78e7f50f68e0e942323af94c69af5

http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0-11.1+etch1_mipsel.deb
    Size/MD5 checksum:  1297700 ed5a3f2a53460072beae27697d68bb31

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_10.0-11.1+etch1_mipsel.deb
    Size/MD5 checksum:    72604 b5a39f3389ede6a53b330e761db9d0e8

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9-dev_10.0-11.1+etch1_mipsel.deb
    Size/MD5 checksum:   123830 2593cde97437a5d9c33ac978a948bbeb

powerpc architecture (PowerPC)


http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9-dev_10.0-11.1+etch1_powerpc.deb
    Size/MD5 checksum:   119758 e917d3ac53867792653b8a7d2d090824

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_10.0-11.1+etch1_powerpc.deb
    Size/MD5 checksum:    79014 ee2fd0a785658b116b877f951b8e1531

http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0-11.1+etch1_powerpc.deb
    Size/MD5 checksum:  1448810 c24163baecf73aa5452954e1f4c04b05

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10-dev_10.0-11.1+etch1_powerpc.deb
    Size/MD5 checksum:   119366 26fc1ef0d6d24cc8c0ea956b9cc12f9c

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10_10.0-11.1+etch1_powerpc.deb
    Size/MD5 checksum:    68122 8ef7a20dc73a9e293cf5b15bf33ead0d

s390 architecture (IBM S/390)


http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0-11.1+etch1_s390.deb
    Size/MD5 checksum:  1245934 825184a22f4476b277cade23ec93cbf5

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_10.0-11.1+etch1_s390.deb
    Size/MD5 checksum:    76472 005fc9caafb6eb047701e3f5272d0bbe

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10-dev_10.0-11.1+etch1_s390.deb
    Size/MD5 checksum:   114788 ba4a56d368c612f161f3e0c983e98bd6

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9-dev_10.0-11.1+etch1_s390.deb
    Size/MD5 checksum:   115006 4c1b4a388455a0725771dfb5c73f8ddc

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10_10.0-11.1+etch1_s390.deb
    Size/MD5 checksum:    69900 bf8bf3369a29c340eb035413034cccae

sparc architecture (Sun SPARC/UltraSPARC)


http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9-dev_10.0-11.1+etch1_sparc.deb
    Size/MD5 checksum:   111782 e2553ed79f836d8fa1dc25422ba8aa95

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm9_10.0-11.1+etch1_sparc.deb
    Size/MD5 checksum:    68808 4ee6c9653cd560ec0074275b457202b7

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10-dev_10.0-11.1+etch1_sparc.deb
    Size/MD5 checksum:   111562 e126024c8567d3140c240e60ecc390dc

http://security.debian.org/pool/updates/main/n/netpbm-free/netpbm_10.0-11.1+etch1_sparc.deb
    Size/MD5 checksum:  1204234 85d633a743c51efea0122caa7e12c6ea

http://security.debian.org/pool/updates/main/n/netpbm-free/libnetpbm10_10.0-11.1+etch1_sparc.deb
    Size/MD5 checksum:    62992 efe34ea795e4c875ab65c28f413a590f


  これらのファイルは次の版の安定版リリース時そちらに移されます。


- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
------>8------------>8------------>8------------>8------------>8-
-- 
Seiji Kaneko                         skaneko@xxxxxxxxxxxx
---------------------------------------------------------

Prev by Date: [debian-users:50533] Re: 【注意喚起】 Openssl 脆弱性に伴う ssh 鍵、ssl 証明書などの問題について
Next by Date: [debian-users:50535] サウンドについて
Previous by thread: [debian-users:50531] [Translate] [SECURITY] [DSA 1578-1] New php4 packages fix several vulnerabilities
Next by thread: [debian-users:50535] サウンドについて
Index(es):
- Date
- Thread