Login
Newsletter
Werbung

Sicherheit: Fehlerhafte Schlüssel in iTALC
Aktuelle Meldungen Distributionen
Name: Fehlerhafte Schlüssel in iTALC
ID: USN-1061-1
Distribution: Ubuntu
Plattformen: Edubuntu 8.04 LTS, Edubuntu 10.04 LTS, Edubuntu 10.10
Datum: Sa, 12. Februar 2011, 22:03
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0724
https://wiki.ubuntu.com/iTalc/Keys
Applikationen: iTALC

Originalnachricht


--===============5650089104696355853==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature";
boundary="HlL+5n6rz5pIUxbD"
Content-Disposition: inline


--HlL+5n6rz5pIUxbD
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inlin
Content-Transfer-Encoding: quoted-printable

===========================================================
Ubuntu Security Notice USN-1061-1 February 11, 2011
italc vulnerability
CVE-2011-0724
===========================================================

A security issue affects the following Edubuntu releases:

Edubuntu 9.10
Edubuntu 10.04 LTS
Edubuntu 10.10

This advisory does not apply to the corresponding versions of
Ubuntu, Kubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Edubuntu 9.10:
italc-client 1:1.0.9.1-0ubuntu16.1

Edubuntu 10.04 LTS:
italc-client 1:1.0.9.1-0ubuntu18.10.04.1

Edubuntu 10.10:
italc-client 1:1.0.9.1-0ubuntu18.10.10.1

After a standard system update, if you had originally installed from
the Edubuntu Live DVD and the bad keys were found, you will need to
redistribute the newly generated public keys to your iTALC clients and
restart each session. For more details, see:
https://wiki.ubuntu.com/iTalc/Keys

Details follow:

Stéphane Graber discovered that the iTALC private keys shipped with the
Edubuntu Live DVD were not correctly regenerated once Edubuntu was
installed. If an iTALC client was installed with the vulnerable keys, a
remote attacker could gain control of the system. Only systems using keys
from the Edubuntu Live DVD were affected.


Updated packages for Edubuntu 9.10:

Source archives:

italc_1.0.9.1-0ubuntu16.1.diff.gz
Size/MD5: 16671 1463aaba5c51b8cec0d60b95f748604e
italc_1.0.9.1-0ubuntu16.1.dsc
Size/MD5: 1920 08011f20c0f1ef67bc9585cb1e7b1afd
italc_1.0.9.1.orig.tar.gz
Size/MD5: 3294206 5acc6bd10139bc3e05e7106d27410e46

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

italc-client_1.0.9.1-0ubuntu16.1_amd64.deb
Size/MD5: 542156 64fb51a7bc9f270430816c26d9975087
italc-master_1.0.9.1-0ubuntu16.1_amd64.deb
Size/MD5: 1104570 3ec712ffb519e2d435049fef207fd2c6
libitalc_1.0.9.1-0ubuntu16.1_amd64.deb
Size/MD5: 203938 2f304ef75066085440e3d212a8b369cb

i386 architecture (x86 compatible Intel/AMD):

italc-client_1.0.9.1-0ubuntu16.1_i386.deb
Size/MD5: 511854 8a7275b9a5d0bd04c72f3eb9ca1b331d
italc-master_1.0.9.1-0ubuntu16.1_i386.deb
Size/MD5: 1107262 d7cfffe6dac606775375e924a30e26f3
libitalc_1.0.9.1-0ubuntu16.1_i386.deb
Size/MD5: 205602 2cf1ef5e65abe30128c079c3f1449384

armel architecture (ARM Architecture):

italc-client_1.0.9.1-0ubuntu16.1_armel.deb
Size/MD5: 538896 eb7379ae546c8536ca02c89e2bca4ef8
italc-master_1.0.9.1-0ubuntu16.1_armel.deb
Size/MD5: 1091678 5b7b38132f58ecc7888c1c1f2be2ec69
libitalc_1.0.9.1-0ubuntu16.1_armel.deb
Size/MD5: 193496 3c34296c12cf3196c4461c5fb466e26d

lpia architecture (Low Power Intel Architecture):

italc-client_1.0.9.1-0ubuntu16.1_lpia.deb
Size/MD5: 517964 58315714b8f7ac8947d10c006e2338b7
italc-master_1.0.9.1-0ubuntu16.1_lpia.deb
Size/MD5: 1112450 1e07a33fd32a2b39e2f98247fea1fd91
libitalc_1.0.9.1-0ubuntu16.1_lpia.deb
Size/MD5: 207090 a8de2ff7e3a63d7941c907c6f7662327

powerpc architecture (Apple Macintosh G3/G4/G5):

italc-client_1.0.9.1-0ubuntu16.1_powerpc.deb
Size/MD5: 509256 6d3ab8b223c052daf61505e3699c548c
italc-master_1.0.9.1-0ubuntu16.1_powerpc.deb
Size/MD5: 1104256 a60f8f7864eaccd3925ed159f9922a52
libitalc_1.0.9.1-0ubuntu16.1_powerpc.deb
Size/MD5: 207212 3f17a9133c795d574afbcaab646c0a6a

sparc architecture (Sun SPARC/UltraSPARC):

italc-client_1.0.9.1-0ubuntu16.1_sparc.deb
Size/MD5: 535652 3b4d443d9c446be018420f8d24660ec7
italc-master_1.0.9.1-0ubuntu16.1_sparc.deb
Size/MD5: 1113496 a69b5373083c72ae1f7fee5a8ec1ad2d
libitalc_1.0.9.1-0ubuntu16.1_sparc.deb
Size/MD5: 199270 1d46750c6fdb042ebbc3fc8da0b87cc3

Updated packages for Edubuntu 10.04 LTS:

Source archives:

italc_1.0.9.1-0ubuntu18.10.04.1.diff.gz
Size/MD5: 17359 01b5b5b9b20a3318de6eebff121bc060
italc_1.0.9.1-0ubuntu18.10.04.1.dsc
Size/MD5: 1944 462055fb0ec328c3bc732189bb9b78ff
italc_1.0.9.1.orig.tar.gz
Size/MD5: 3294206 5acc6bd10139bc3e05e7106d27410e46

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

italc-client_1.0.9.1-0ubuntu18.10.04.1_amd64.deb
Size/MD5: 540436 adf3a38bca52cfec45c0062451ae58e3
italc-master_1.0.9.1-0ubuntu18.10.04.1_amd64.deb
Size/MD5: 1116274 8bf410d86837d1bd44afce17a7c3259b
libitalc_1.0.9.1-0ubuntu18.10.04.1_amd64.deb
Size/MD5: 205174 4182e5ce1528aeb2892f9cc6dc551bec

i386 architecture (x86 compatible Intel/AMD):

italc-client_1.0.9.1-0ubuntu18.10.04.1_i386.deb
Size/MD5: 509254 fc058ac14090555b5b9a5b6258021506
italc-master_1.0.9.1-0ubuntu18.10.04.1_i386.deb
Size/MD5: 1118644 4bb71f3d4d5b8ef2e77d5c9d37d340a2
libitalc_1.0.9.1-0ubuntu18.10.04.1_i386.deb
Size/MD5: 206942 c875777d44d896765f38daea53b48449

armel architecture (ARM Architecture):

italc-client_1.0.9.1-0ubuntu18.10.04.1_armel.deb
Size/MD5: 514320 fc6ee6aeda4a44b55170b1e12935548d
italc-master_1.0.9.1-0ubuntu18.10.04.1_armel.deb
Size/MD5: 1096032 eecadd401d07293479828fd46119184a
libitalc_1.0.9.1-0ubuntu18.10.04.1_armel.deb
Size/MD5: 190692 ddfcda169a7002e70271b28c4ef0a719

powerpc architecture (Apple Macintosh G3/G4/G5):

italc-client_1.0.9.1-0ubuntu18.10.04.1_powerpc.deb
Size/MD5: 506784 480566c62a80d3e1a031e663b82cd227
italc-master_1.0.9.1-0ubuntu18.10.04.1_powerpc.deb
Size/MD5: 1115134 f622aaae7105494eff7c18f6bc69aba4
libitalc_1.0.9.1-0ubuntu18.10.04.1_powerpc.deb
Size/MD5: 208300 a54eb8025c139551ed43c58560e3c90f

sparc architecture (Sun SPARC/UltraSPARC):

italc-client_1.0.9.1-0ubuntu18.10.04.1_sparc.deb
Size/MD5: 558922 bba1195414cc2683a0726c27bfd24916
italc-master_1.0.9.1-0ubuntu18.10.04.1_sparc.deb
Size/MD5: 1126202 bf3a680e3a0d2d51fc936490fb7a1e0f
libitalc_1.0.9.1-0ubuntu18.10.04.1_sparc.deb
Size/MD5: 200984 67e38faf389fa0b4aaad118d00dd99e6

Updated packages for Edubuntu 10.10:

Source archives:

italc_1.0.9.1-0ubuntu18.10.10.1.diff.gz
Size/MD5: 18083 39a981929bf84da42a97a54864228949
italc_1.0.9.1-0ubuntu18.10.10.1.dsc
Size/MD5: 1944 24f547e0d9d843a7840bad3a9175819c
italc_1.0.9.1.orig.tar.gz
Size/MD5: 3294206 5acc6bd10139bc3e05e7106d27410e46

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

italc-client_1.0.9.1-0ubuntu18.10.10.1_amd64.deb
Size/MD5: 532426 8d13c2c03230c8122d7bf3a0f1d5dbfd
italc-master_1.0.9.1-0ubuntu18.10.10.1_amd64.deb
Size/MD5: 1117386 9eaa534098d4c5493fff03517c7b9545
libitalc_1.0.9.1-0ubuntu18.10.10.1_amd64.deb
Size/MD5: 203276 bf0bc8803ea8bf6b516ddaab9577a881

i386 architecture (x86 compatible Intel/AMD):

italc-client_1.0.9.1-0ubuntu18.10.10.1_i386.deb
Size/MD5: 501438 ff1bcd699abfcc7901238a393441eb10
italc-master_1.0.9.1-0ubuntu18.10.10.1_i386.deb
Size/MD5: 1120146 384a7eec9820349758c14026b11ce4ad
libitalc_1.0.9.1-0ubuntu18.10.10.1_i386.deb
Size/MD5: 205172 afce197eedd356c41c0363578247a815

armel architecture (ARM Architecture):

italc-client_1.0.9.1-0ubuntu18.10.10.1_armel.deb
Size/MD5: 570806 87388b75705ac4b3215b03d7233159fa
italc-master_1.0.9.1-0ubuntu18.10.10.1_armel.deb
Size/MD5: 1105250 51a40f0a7e63051a169f1c8dfc36b89e
libitalc_1.0.9.1-0ubuntu18.10.10.1_armel.deb
Size/MD5: 194404 e654aee0c1608fdbd939e854e694134a

powerpc architecture (Apple Macintosh G3/G4/G5):

italc-client_1.0.9.1-0ubuntu18.10.10.1_powerpc.deb
Size/MD5: 499942 1ff63b28c25c2127e45d3bedbd1bbbae
italc-master_1.0.9.1-0ubuntu18.10.10.1_powerpc.deb
Size/MD5: 1117620 a7ca6291800aeb99410b39056fd58982
libitalc_1.0.9.1-0ubuntu18.10.10.1_powerpc.deb
Size/MD5: 206704 669dbbfde3b0fe231bb05d4522d95165


--HlL+5n6rz5pIUxbD
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Kees Cook <kees@outflux.net>
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=K0rY
-----END PGP SIGNATURE-----

--HlL+5n6rz5pIUxbD--


--===============5650089104696355853==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============5650089104696355853==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung