[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[debian-users:51182] [Translate] [SECURITY] [DSA 1658-1] New dbus packages fix denial of service

From: Seiji Kaneko <skaneko@xxxxxxxxxxxx>
Subject: [debian-users:51182] [Translate] [SECURITY] [DSA 1658-1] New dbus packages fix denial of service
Date: Thu, 23 Oct 2008 22:40:48 +0900
List-help: <mailto:debian-users-ctl@debian.or.jp?body=help>
List-id: debian-users.debian.or.jp
List-owner: <mailto:debian-users-admin@debian.or.jp>
List-post: <mailto:debian-users@debian.or.jp>
List-software: fml [fml 4.0.3 release (20011202/4.0.3)]
List-unsubscribe: <mailto:debian-users-ctl@debian.or.jp?body=unsubscribe>
X-ml-info: If you have a question, send e-mail with the body "help" (without quotes) to the address debian-users-ctl@debian.or.jp; help=<mailto:debian-users-ctl@debian.or.jp?body=help>
X-ml-name: debian-users
X-mlserver: fml [fml 4.0.3 release (20011202/4.0.3)]; post only (only members can post)
X-spam-checker-version: SpamAssassin 3.1.7-deb (2006-10-05) on osdn.debian.or.jp
X-spam-level:
X-spam-status: No, score=-1.2 required=10.0 tests=AWL,DNS_FROM_SECURITYSAGE, KI autolearn=disabled version=3.1.7-deb
Message-id: <49007ED7.1060600@xxxxxxxxxxxx>
X-mail-count: 51182
User-agent: Thunderbird 2.0.0.17 (Macintosh/20080914)

かねこです。
URL 等は Debian-security-announce メーリングリストの元記事を確認
ください。

------>8------------>8------------>8------------>8------------>8-
- ------------------------------------------------------------------------
Debian Security Advisory DSA-1658-1                  security@debian.org
http://www.debian.org/security/                          Thijs Kinkhorst
October 22, 2008                      http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package        : dbus
Vulnerability  : プログラムミス
Problem type   : ローカル
Debian-specific: いいえ
CVE Id(s)      : CVE-2008-3834
Debian Bug     : 501443

Colin Walters さんにより、シンプルなプロセス間メッセージシステム dbus の
dbus_signature_validate 関数にサービス拒否攻撃脆弱性が発見されました。

安定版 (stable) ディストリビューション (etch) では、この問題はバージョン
1.0.2-1+etch2 で修正されています。

テスト版 (testing) および不安定版 (unstable) ディストリビューションでは、
これらの問題は近く修正予定です。

直ぐに dbus パッケージをアップグレードすることを勧めます。


アップグレード手順
------------------

wget url
        	でファイルを取得できます。
dpkg -i file.deb
                で参照されたファイルをインストールできます。

apt-get パッケージマネージャを用いている場合には、本メールのフッタ記載の
行を sources.list に加えて、

apt-get update
        を実行して内部データベースを更新し、
apt-get upgrade
        によって修正されたパッケージをインストールしてください。

本メールのフッタ記載の設定を自ホストの設定に加えることにより、自動更新を
行うこともできます。


Debian GNU/Linux 4.0 alias etch
- -------------------------------

ソースアーカイブ:

  http://security.debian.org/pool/updates/main/d/dbus/dbus_1.0.2-1+etch2.dsc
    Size/MD5 checksum:      824 476bb3df500c50f67b4088317482e0ef
  http://security.debian.org/pool/updates/main/d/dbus/dbus_1.0.2-1+etch2.diff.gz
    Size/MD5 checksum:    19909 27df2fd0bc5cb93069d6c10d89e0214a
  http://security.debian.org/pool/updates/main/d/dbus/dbus_1.0.2.orig.tar.gz
    Size/MD5 checksum:  1400278 0552a9b54beb4a044951b7cdbc8fc855

アーキテクチャに依存しないパッケージ:

  http://security.debian.org/pool/updates/main/d/dbus/dbus-1-doc_1.0.2-1+etch2_all.deb
    Size/MD5 checksum:  1623126 68e4e1787515928f95af670ec2677663

alpha architecture (DEC Alpha)


http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-dev_1.0.2-1+etch2_alpha.deb
    Size/MD5 checksum:   403640 fa77ef6e2fc986018a1b6074b3ae9343

http://security.debian.org/pool/updates/main/d/dbus/dbus-1-utils_1.0.2-1+etch2_alpha.deb
    Size/MD5 checksum:   184728 631b1a1ed1215eb05a696b40a72db26c
  http://security.debian.org/pool/updates/main/d/dbus/dbus_1.0.2-1+etch2_alpha.deb
    Size/MD5 checksum:   378152 662bea6b7c1db00fdf933b53a2334f7d
  http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-3_1.0.2-1+etch2_alpha.deb
    Size/MD5 checksum:   289022 3ebba7555c92b42fdfe9331c35fbafc6

amd64 architecture (AMD x86_64 (AMD64))

  http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-3_1.0.2-1+etch2_amd64.deb
    Size/MD5 checksum:   279202 dfbd440a6a800eea8ba2e46b692dd636

http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-dev_1.0.2-1+etch2_amd64.deb
    Size/MD5 checksum:   348548 ccc32fdddbaca40a7e62cffc250d493a
  http://security.debian.org/pool/updates/main/d/dbus/dbus_1.0.2-1+etch2_amd64.deb
    Size/MD5 checksum:   363840 fd13ad30b922eff52503762ba60d08e0

http://security.debian.org/pool/updates/main/d/dbus/dbus-1-utils_1.0.2-1+etch2_amd64.deb
    Size/MD5 checksum:   184096 cb1028347d48476de045ad633939119a

arm architecture (ARM)

  http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-dev_1.0.2-1+etch2_arm.deb
    Size/MD5 checksum:   331110 508d164df564a28f626b1941bf784bcd
  http://security.debian.org/pool/updates/main/d/dbus/dbus-1-utils_1.0.2-1+etch2_arm.deb
    Size/MD5 checksum:   183846 34fc9addad9e6e1858107a9382fc89e4
  http://security.debian.org/pool/updates/main/d/dbus/dbus_1.0.2-1+etch2_arm.deb
    Size/MD5 checksum:   343302 dd43eeb35c44bb838d45d6324f9842fb
  http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-3_1.0.2-1+etch2_arm.deb
    Size/MD5 checksum:   265858 e2438b408ec289d96454d30c971a1eeb

hppa architecture (HP PA RISC)

  http://security.debian.org/pool/updates/main/d/dbus/dbus-1-utils_1.0.2-1+etch2_hppa.deb
    Size/MD5 checksum:   184866 7b0aa00c72398485849a46c3a376b5a3
  http://security.debian.org/pool/updates/main/d/dbus/dbus_1.0.2-1+etch2_hppa.deb
    Size/MD5 checksum:   375644 6146db75333cc23bcf98184886e2358f

http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-dev_1.0.2-1+etch2_hppa.deb
    Size/MD5 checksum:   362346 5002551bf82c33092fdd3fee8356078d
  http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-3_1.0.2-1+etch2_hppa.deb
    Size/MD5 checksum:   285994 55964151812beb09104dadc5fe883ded

i386 architecture (Intel ia32)


http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-dev_1.0.2-1+etch2_i386.deb
    Size/MD5 checksum:   335874 116b0084af4713242092e2b07a64734f
  http://security.debian.org/pool/updates/main/d/dbus/dbus_1.0.2-1+etch2_i386.deb
    Size/MD5 checksum:   349844 cfa20eea1e6e8be195d520199e8415c6
  http://security.debian.org/pool/updates/main/d/dbus/dbus-1-utils_1.0.2-1+etch2_i386.deb
    Size/MD5 checksum:   184284 98c8270b762a20bffc194124562c2a68
  http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-3_1.0.2-1+etch2_i386.deb
    Size/MD5 checksum:   269032 ebf1993ab8d40f4d10becd43324c3fb7

ia64 architecture (Intel ia64)

  http://security.debian.org/pool/updates/main/d/dbus/dbus_1.0.2-1+etch2_ia64.deb
    Size/MD5 checksum:   439328 0e4d4761c026e5d1a1d0fec1a2e2cc59
  http://security.debian.org/pool/updates/main/d/dbus/dbus-1-utils_1.0.2-1+etch2_ia64.deb
    Size/MD5 checksum:   186576 9a83ca03b18ba3bbaa0e976c73e5ee49

http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-dev_1.0.2-1+etch2_ia64.deb
    Size/MD5 checksum:   411494 c4e44af1f20c10c57205270249f337a9
  http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-3_1.0.2-1+etch2_ia64.deb
    Size/MD5 checksum:   322378 94081937e3524ee2faecb311d0b55772

mips architecture (MIPS (Big Endian))

  http://security.debian.org/pool/updates/main/d/dbus/dbus_1.0.2-1+etch2_mips.deb
    Size/MD5 checksum:   370622 4bdcd5653af2b8d82005e4f517b9b4b4
  http://security.debian.org/pool/updates/main/d/dbus/dbus-1-utils_1.0.2-1+etch2_mips.deb
    Size/MD5 checksum:   183866 413cae07b1a9058a0c6aebdd7f8ea027
  http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-3_1.0.2-1+etch2_mips.deb
    Size/MD5 checksum:   272250 6d0e938439d3eb8ca62606630b8c3703

http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-dev_1.0.2-1+etch2_mips.deb
    Size/MD5 checksum:   359500 7f221dd76f85d4ba43e2f9de932a0e2d

mipsel architecture (MIPS (Little Endian))


http://security.debian.org/pool/updates/main/d/dbus/dbus-1-utils_1.0.2-1+etch2_mipsel.deb
    Size/MD5 checksum:   184158 fb889a6d77b704244d791a6eacc6bdd7
  http://security.debian.org/pool/updates/main/d/dbus/dbus_1.0.2-1+etch2_mipsel.deb
    Size/MD5 checksum:   369594 90c29c9d9647268f0b44b94a01de0f45

http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-dev_1.0.2-1+etch2_mipsel.deb
    Size/MD5 checksum:   358738 cd6052fccfc4fefdda2ca7bf42823922

http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-3_1.0.2-1+etch2_mipsel.deb
    Size/MD5 checksum:   272356 c61c0d2c433d4300df31bc681d0d0edd

powerpc architecture (PowerPC)


http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-3_1.0.2-1+etch2_powerpc.deb
    Size/MD5 checksum:   271688 b4fa35b2b6d5d106043064b321c62ff7
  http://security.debian.org/pool/updates/main/d/dbus/dbus_1.0.2-1+etch2_powerpc.deb
    Size/MD5 checksum:   353198 192e72c7dabd1d8d7b64a755293969b9

http://security.debian.org/pool/updates/main/d/dbus/dbus-1-utils_1.0.2-1+etch2_powerpc.deb
    Size/MD5 checksum:   184192 0a4598f9d41f45a4f8d99982258bc352

http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-dev_1.0.2-1+etch2_powerpc.deb
    Size/MD5 checksum:   335480 4267b587cd7d75ea76dc36ec679bb2d6

s390 architecture (IBM S/390)


http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-dev_1.0.2-1+etch2_s390.deb
    Size/MD5 checksum:   355016 839cfa24a74c834cba9161faaf7621e0
  http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-3_1.0.2-1+etch2_s390.deb
    Size/MD5 checksum:   285310 d7265f270c738d91c19bfaeeff8130a7
  http://security.debian.org/pool/updates/main/d/dbus/dbus-1-utils_1.0.2-1+etch2_s390.deb
    Size/MD5 checksum:   184598 86f3ad1f997139c8f2c18105417f369b
  http://security.debian.org/pool/updates/main/d/dbus/dbus_1.0.2-1+etch2_s390.deb
    Size/MD5 checksum:   373294 8e8fbab4cf0f0214dbd64e6faaf1a87a

sparc architecture (Sun SPARC/UltraSPARC)

  http://security.debian.org/pool/updates/main/d/dbus/dbus_1.0.2-1+etch2_sparc.deb
    Size/MD5 checksum:   340024 74d40edc715045d8693421b4093168c8

http://security.debian.org/pool/updates/main/d/dbus/dbus-1-utils_1.0.2-1+etch2_sparc.deb
    Size/MD5 checksum:   184162 32f294e0f8a06390053f8592cfce1f4d

http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-dev_1.0.2-1+etch2_sparc.deb
    Size/MD5 checksum:   336182 65adba9662394147aad1d34bb5ac90a4
  http://security.debian.org/pool/updates/main/d/dbus/libdbus-1-3_1.0.2-1+etch2_sparc.deb
    Size/MD5 checksum:   265080 9d47f318df9648ad5988c36e30d63016


  これらのファイルは次の版の安定版リリース時そちらに移されます。


- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
------>8------------>8------------>8------------>8------------>8-
-- 
Seiji Kaneko                         skaneko@xxxxxxxxxxxx
---------------------------------------------------------

Prev by Date: [debian-users:51181] Re: Samba VFS について
Next by Date: [debian-users:51183] cdc-acmモジュールのFOMAサポートについて（ご協力おねがい）
Previous by thread: [debian-users:51178] [Translate] [SECURITY] [DSA 1657-1] New qemu packages fix denial of service
Next by thread: [debian-users:51183] cdc-acmモジュールのFOMAサポートについて（ご協力おねがい）
Index(es):
- Date
- Thread