Login
Newsletter
Werbung

Sicherheit: Mangelnde Rechteprüfung in Emacs
Aktuelle Meldungen Distributionen
Name: Mangelnde Rechteprüfung in Emacs
ID: USN-919-1
Distribution: Ubuntu
Plattformen: Ubuntu 8.04 LTS, Ubuntu 8.10, Ubuntu 9.04, Ubuntu 9.10
Datum: Di, 30. März 2010, 07:28
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0825
Applikationen: Emacs

Originalnachricht


--===============6441228011077377125==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature";
boundary="KN5l+BnMqAQyZLvT"
Content-Disposition: inline


--KN5l+BnMqAQyZLvT
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

===========================================================
Ubuntu Security Notice USN-919-1 March 29, 2010
emacs22, emacs23 vulnerability
CVE-2010-0825
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04
Ubuntu 9.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 8.04 LTS:
emacs22-bin-common 22.1-0ubuntu10.2

Ubuntu 8.10:
emacs22-bin-common 22.2-0ubuntu2.8.10.1

Ubuntu 9.04:
emacs22-bin-common 22.2-0ubuntu2.9.04.1

Ubuntu 9.10:
emacs22-bin-common 22.2-0ubuntu6.2
emacs23-bin-common 23.1+1-4ubuntu3.2

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

Dan Rosenberg discovered that the email helper in Emacs did not correctly
check file permissions. A local attacker could perform a symlink race
to read or append to another user's mailbox if it was stored under a
group-writable group-"mail" directory.


Updated packages for Ubuntu 8.04 LTS:

Source archives:

emacs22_22.1-0ubuntu10.2.diff.gz
Size/MD5: 38655 cbe84aef313d2e8bd3e08599b81bdf2b
emacs22_22.1-0ubuntu10.2.dsc
Size/MD5: 1122 fbfe65bdf6165a8ba5583ed02e8f1cab
emacs22_22.1.orig.tar.gz
Size/MD5: 38172226 6949df37caec2d7a2e0eee3f1b422726

Architecture independent packages:

emacs22-common_22.1-0ubuntu10.2_all.deb
Size/MD5: 18579808 d74d62011312e509476e2629f150933d
emacs22-el_22.1-0ubuntu10.2_all.deb
Size/MD5: 11172978 42d15ac1064967788698dd4cf4eb40a0
emacs_22.1-0ubuntu10.2_all.deb
Size/MD5: 6440 32e8fcf02b0ace38cc1d5a8754a3c576

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

emacs22-bin-common_22.1-0ubuntu10.2_amd64.deb
Size/MD5: 181892 9032c6a6920a81a77142fd560ba4e45a
emacs22-nox_22.1-0ubuntu10.2_amd64.deb
Size/MD5: 1935066 c2d889351ab581df818063b26dcabddd
emacs22_22.1-0ubuntu10.2_amd64.deb
Size/MD5: 2216596 1bc65224a700c6b0598a572b09abe677
emacs22-gtk_22.1-0ubuntu10.2_amd64.deb
Size/MD5: 2209332 85d008c0cb14172bfffee5643d25694b

i386 architecture (x86 compatible Intel/AMD):

emacs22-bin-common_22.1-0ubuntu10.2_i386.deb
Size/MD5: 163548 202c4f7ae1c50e746c1e4847b91de068
emacs22-nox_22.1-0ubuntu10.2_i386.deb
Size/MD5: 1708274 f267506e27da59c3f9093767e2db8401
emacs22_22.1-0ubuntu10.2_i386.deb
Size/MD5: 1957134 cb696888d4de2de28f371e84976dab2e
emacs22-gtk_22.1-0ubuntu10.2_i386.deb
Size/MD5: 1951340 781cf671c8efa3137c7bbc4ece7391b1

lpia architecture (Low Power Intel Architecture):

emacs22-bin-common_22.1-0ubuntu10.2_lpia.deb
Size/MD5: 164208 0b21e188a6bc47d2c05486bfc2d05b18
emacs22-nox_22.1-0ubuntu10.2_lpia.deb
Size/MD5: 1720652 183dbf8108227ca5dcfb16f9b24d586a
emacs22_22.1-0ubuntu10.2_lpia.deb
Size/MD5: 1971638 91cee58da2c0e43d1635a7fce6f0b2a2
emacs22-gtk_22.1-0ubuntu10.2_lpia.deb
Size/MD5: 1964228 0740571795bbbb7b13d877fe17647724

powerpc architecture (Apple Macintosh G3/G4/G5):

emacs22-bin-common_22.1-0ubuntu10.2_powerpc.deb
Size/MD5: 180684 f8bc60549bb97edf643b45ea0bd60669
emacs22-nox_22.1-0ubuntu10.2_powerpc.deb
Size/MD5: 1849642 8a454f033a136d8388934186b9d736b9
emacs22_22.1-0ubuntu10.2_powerpc.deb
Size/MD5: 2125518 17c1605189e7027b9d557ff77239243e
emacs22-gtk_22.1-0ubuntu10.2_powerpc.deb
Size/MD5: 2112776 0fc29037d072138fa3673cbf7c6c5ee6

sparc architecture (Sun SPARC/UltraSPARC):

emacs22-bin-common_22.1-0ubuntu10.2_sparc.deb
Size/MD5: 168942 3d0cdd462f145a82039c6cb49644abf1
emacs22-nox_22.1-0ubuntu10.2_sparc.deb
Size/MD5: 1802114 73b59c3e17ff0b5063bdffed3d137927
emacs22_22.1-0ubuntu10.2_sparc.deb
Size/MD5: 2053796 ef3767734945d2a19cb45cc84c0626f5
emacs22-gtk_22.1-0ubuntu10.2_sparc.deb
Size/MD5: 2048560 50e2cfc034f17b74f9a45e1461fe8f38

Updated packages for Ubuntu 8.10:

Source archives:

emacs22_22.2-0ubuntu2.8.10.1.diff.gz
Size/MD5: 29547 0c5f5a4ab112c90dd2e3f1bfea60fbe3
emacs22_22.2-0ubuntu2.8.10.1.dsc
Size/MD5: 1536 63c9cdaa4ab35bf60c53e0b6f3296043
emacs22_22.2.orig.tar.gz
Size/MD5: 38694318 d6ee586b8752351334ebf072904c4d51

Architecture independent packages:

emacs22-common_22.2-0ubuntu2.8.10.1_all.deb
Size/MD5: 18786054 95c5bab14043d952307869a2807c4893
emacs22-el_22.2-0ubuntu2.8.10.1_all.deb
Size/MD5: 11341292 4feccd81f69b2c16b786133b0645df05
emacs_22.2-0ubuntu2.8.10.1_all.deb
Size/MD5: 6482 736f310faecd206ba850b22bc2554e87

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

emacs22-bin-common_22.2-0ubuntu2.8.10.1_amd64.deb
Size/MD5: 186396 25ecb44a7e2faa96fa5db7c21c1f51ec
emacs22-nox_22.2-0ubuntu2.8.10.1_amd64.deb
Size/MD5: 1957334 8a1f10fba68dde139389d5cd40c6f925
emacs22_22.2-0ubuntu2.8.10.1_amd64.deb
Size/MD5: 2256898 7d05458bf546b81e57f6436b2cfe7eba
emacs22-gtk_22.2-0ubuntu2.8.10.1_amd64.deb
Size/MD5: 2253002 2073f6006af89daac64aafd3d150059c

i386 architecture (x86 compatible Intel/AMD):

emacs22-bin-common_22.2-0ubuntu2.8.10.1_i386.deb
Size/MD5: 167798 40d23593020ed637b7c454a23817b3e4
emacs22-nox_22.2-0ubuntu2.8.10.1_i386.deb
Size/MD5: 1724990 b1fc2faa50ed90d40b7909645587e75a
emacs22_22.2-0ubuntu2.8.10.1_i386.deb
Size/MD5: 1987260 fd8a00a732872c07ca360f31a0c46199
emacs22-gtk_22.2-0ubuntu2.8.10.1_i386.deb
Size/MD5: 1979304 e809f77f0d286b5eee6d7f39194588cd

lpia architecture (Low Power Intel Architecture):

emacs22-bin-common_22.2-0ubuntu2.8.10.1_lpia.deb
Size/MD5: 166802 4cc450f09be18b0879e6de787d4facb6
emacs22-nox_22.2-0ubuntu2.8.10.1_lpia.deb
Size/MD5: 1736652 46e2b67683164cdb82d87bc4eaa673e2
emacs22_22.2-0ubuntu2.8.10.1_lpia.deb
Size/MD5: 1997832 ffbe9f81845d2d489f9e7e7ab2b44b22
emacs22-gtk_22.2-0ubuntu2.8.10.1_lpia.deb
Size/MD5: 1992342 c28f92b0c098505c121df00b2f099ae7

powerpc architecture (Apple Macintosh G3/G4/G5):

emacs22-bin-common_22.2-0ubuntu2.8.10.1_powerpc.deb
Size/MD5: 180558 630e134d21d3ec1b9a84aa0c890fc2f3
emacs22-nox_22.2-0ubuntu2.8.10.1_powerpc.deb
Size/MD5: 1869408 e3e99377f918131f1b256aef182ef63b
emacs22_22.2-0ubuntu2.8.10.1_powerpc.deb
Size/MD5: 2154228 5e07fb85d9c39483e6edfec44ff48dd0
emacs22-gtk_22.2-0ubuntu2.8.10.1_powerpc.deb
Size/MD5: 2141538 447ca48aebf9448dceb9ea5571b81e93

sparc architecture (Sun SPARC/UltraSPARC):

emacs22-bin-common_22.2-0ubuntu2.8.10.1_sparc.deb
Size/MD5: 174516 4b11033d324fd6c73811640800a6cc83
emacs22-nox_22.2-0ubuntu2.8.10.1_sparc.deb
Size/MD5: 1819808 e4835ba72d9178e0b6f5a2cbbc51f766
emacs22_22.2-0ubuntu2.8.10.1_sparc.deb
Size/MD5: 2081240 50f48e66531ad7b02c1ac054aebd1595
emacs22-gtk_22.2-0ubuntu2.8.10.1_sparc.deb
Size/MD5: 2073432 9c5e35c71b9e3b786a436702b5e3064e

Updated packages for Ubuntu 9.04:

Source archives:

emacs22_22.2-0ubuntu2.9.04.1.diff.gz
Size/MD5: 29552 8b671a3d031186e746541b08bc50341c
emacs22_22.2-0ubuntu2.9.04.1.dsc
Size/MD5: 1536 cf9490eb317d68e5f9d41d8db4ede9b1
emacs22_22.2.orig.tar.gz
Size/MD5: 38694318 d6ee586b8752351334ebf072904c4d51

Architecture independent packages:

emacs22-common_22.2-0ubuntu2.9.04.1_all.deb
Size/MD5: 18784278 e6e4244719d79f2287b6fc31daaaeb94
emacs22-el_22.2-0ubuntu2.9.04.1_all.deb
Size/MD5: 11341306 1bd369ef196b4f4ec5437f1c0b196fbb
emacs_22.2-0ubuntu2.9.04.1_all.deb
Size/MD5: 6476 1458fbca336810f27c7d363834387d1c

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

emacs22-bin-common_22.2-0ubuntu2.9.04.1_amd64.deb
Size/MD5: 186404 f5b08c4375ba1a743de3124c820405d5
emacs22-nox_22.2-0ubuntu2.9.04.1_amd64.deb
Size/MD5: 1957316 79b0d20e0610ba8da4f123dac603a401
emacs22_22.2-0ubuntu2.9.04.1_amd64.deb
Size/MD5: 2256758 d8d04f5894b78b41dba4076e12cc033c
emacs22-gtk_22.2-0ubuntu2.9.04.1_amd64.deb
Size/MD5: 2252796 8f350568a8af3aaf639267139ef20d73

i386 architecture (x86 compatible Intel/AMD):

emacs22-bin-common_22.2-0ubuntu2.9.04.1_i386.deb
Size/MD5: 167810 2a26d0664029383ae4dbebcac4a70f0d
emacs22-nox_22.2-0ubuntu2.9.04.1_i386.deb
Size/MD5: 1725148 8544627294815e1d2a4c86e9e008ddc3
emacs22_22.2-0ubuntu2.9.04.1_i386.deb
Size/MD5: 1987130 c34ba677ce76825522dc337761865ca2
emacs22-gtk_22.2-0ubuntu2.9.04.1_i386.deb
Size/MD5: 1979138 55b7ee8ca0a8453dd73123870858fee9

lpia architecture (Low Power Intel Architecture):

emacs22-bin-common_22.2-0ubuntu2.9.04.1_lpia.deb
Size/MD5: 166862 eee082cd01a2e928777070243a1a1a1a
emacs22-nox_22.2-0ubuntu2.9.04.1_lpia.deb
Size/MD5: 1736620 abe68f2f675b32fe66e53d7778d1b921
emacs22_22.2-0ubuntu2.9.04.1_lpia.deb
Size/MD5: 1997670 030f2209614b2fd6659fe71f1382aa76
emacs22-gtk_22.2-0ubuntu2.9.04.1_lpia.deb
Size/MD5: 1992302 804c0d86965d179bab4c7e767cdca546

powerpc architecture (Apple Macintosh G3/G4/G5):

emacs22-bin-common_22.2-0ubuntu2.9.04.1_powerpc.deb
Size/MD5: 180514 029ba18b8df6db6b866c60f24df90b29
emacs22-nox_22.2-0ubuntu2.9.04.1_powerpc.deb
Size/MD5: 1869334 6ca25c95496afbdb988401a9cab7c3d0
emacs22_22.2-0ubuntu2.9.04.1_powerpc.deb
Size/MD5: 2153826 820332a618c82f122479c0ec35965db4
emacs22-gtk_22.2-0ubuntu2.9.04.1_powerpc.deb
Size/MD5: 2141344 41291f95d69cf157136a9e28dd9dce79

sparc architecture (Sun SPARC/UltraSPARC):

emacs22-bin-common_22.2-0ubuntu2.9.04.1_sparc.deb
Size/MD5: 174412 334e0598ec5eab1e59f17044bac404a3
emacs22-nox_22.2-0ubuntu2.9.04.1_sparc.deb
Size/MD5: 1819790 81944c050c3b327b1acac5bb4865fecc
emacs22_22.2-0ubuntu2.9.04.1_sparc.deb
Size/MD5: 2081204 fa0e238159781de58d0ef1fbf191436a
emacs22-gtk_22.2-0ubuntu2.9.04.1_sparc.deb
Size/MD5: 2075786 3bf83db227d543b01443aa5ff89ffa8e

Updated packages for Ubuntu 9.10:

Source archives:

emacs22_22.2-0ubuntu6.2.diff.gz
Size/MD5: 31877 8fc012e0ec3d35e209244a79eac9baa2
emacs22_22.2-0ubuntu6.2.dsc
Size/MD5: 1516 155c2c690fce20a0af2684b19a185ba7
emacs22_22.2.orig.tar.gz
Size/MD5: 38694318 d6ee586b8752351334ebf072904c4d51
emacs23_23.1+1-4ubuntu3.2.diff.gz
Size/MD5: 3999845 8bfeee3f31ef2c4c318d03eefd25d667
emacs23_23.1+1-4ubuntu3.2.dsc
Size/MD5: 1670 fcb4dcd7d51b5330028b38d644078583
emacs23_23.1+1.orig.tar.gz
Size/MD5: 25487304 1706bfc4ad49a2d98c289f7b24527a56

Architecture independent packages:

emacs22-common_22.2-0ubuntu6.2_all.deb
Size/MD5: 18783356 04cc3b7ffe2e92f6f808d4ba3925a188
emacs22-el_22.2-0ubuntu6.2_all.deb
Size/MD5: 11341772 54c9dba83919461e33eb5788cb5adbcf
emacs_23.1+1-4ubuntu2+22.2+0ubuntu6.2_all.deb
Size/MD5: 6968 00fe5d96053f33f9f37ccc61f5269d0f
emacs23-common_23.1+1-4ubuntu3.2_all.deb
Size/MD5: 20629134 33a3942565bea6743cae4585c20787bf
emacs23-el_23.1+1-4ubuntu3.2_all.deb
Size/MD5: 12267256 77dcf68f99350f03adfe0d7ea4f8296b

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

emacs22-bin-common_22.2-0ubuntu6.2_amd64.deb
Size/MD5: 188360 54db1802338b6c717a70d0c40d1060e6
emacs22-nox_22.2-0ubuntu6.2_amd64.deb
Size/MD5: 1973824 963c76da1319a5defe13db34fc56e648
emacs22_22.2-0ubuntu6.2_amd64.deb
Size/MD5: 2275230 7ae9063a2dd983159ae01991496b8ffd
emacs22-gtk_22.2-0ubuntu6.2_amd64.deb
Size/MD5: 2270762 679b951e743e2de74361b79fc05eed3a
emacs23-bin-common_23.1+1-4ubuntu3.2_amd64.deb
Size/MD5: 192018 762adf13bec5f00b4e34443f9f11e945
emacs23-lucid_23.1+1-4ubuntu3.2_amd64.deb
Size/MD5: 3384630 4e1f2821e73b7fa644fe53d0c58a4e14
emacs23-nox_23.1+1-4ubuntu3.2_amd64.deb
Size/MD5: 3048918 4ddfe550941347f1e380bac235253bd0
emacs23_23.1+1-4ubuntu3.2_amd64.deb
Size/MD5: 3382452 22789c166880c6e55b99ae38b4d7ae87

i386 architecture (x86 compatible Intel/AMD):

emacs22-bin-common_22.2-0ubuntu6.2_i386.deb
Size/MD5: 167700 710d51114014c13b5593184e6f028f31
emacs22-nox_22.2-0ubuntu6.2_i386.deb
Size/MD5: 1743392 086add7ddfeea9686b2b750678138544
emacs22_22.2-0ubuntu6.2_i386.deb
Size/MD5: 1999280 07ccc1add3ac83a44bdf4901a06ab6a4
emacs22-gtk_22.2-0ubuntu6.2_i386.deb
Size/MD5: 1994012 69b66b5db1fda1cd604897925d8850b4
emacs23-bin-common_23.1+1-4ubuntu3.2_i386.deb
Size/MD5: 170572 6d6ac0604feccad71d2936388007525b
emacs23-lucid_23.1+1-4ubuntu3.2_i386.deb
Size/MD5: 3043004 f5d1a8e4dd7cfebb8aa4e192b14776dd
emacs23-nox_23.1+1-4ubuntu3.2_i386.deb
Size/MD5: 2735468 46087e0a9d656d29d67038b5d1406c02
emacs23_23.1+1-4ubuntu3.2_i386.deb
Size/MD5: 3037318 20add1632fa5295cdf0e3a20e34b1993

lpia architecture (Low Power Intel Architecture):

emacs22-bin-common_22.2-0ubuntu6.2_lpia.deb
Size/MD5: 167744 a42de95cc1834612cf919d4ab8db9505
emacs22-nox_22.2-0ubuntu6.2_lpia.deb
Size/MD5: 1752462 6358d66e3c00ffaf2f9408413185759b
emacs22_22.2-0ubuntu6.2_lpia.deb
Size/MD5: 2011182 a7aa44f2ee53bb838c1e65ec5f90b81d
emacs22-gtk_22.2-0ubuntu6.2_lpia.deb
Size/MD5: 2003744 314c0502adb83d69a91f58016cfd4f68
emacs23-bin-common_23.1+1-4ubuntu3.2_lpia.deb
Size/MD5: 170378 6a2175d9890ca29e49d232d298609e3f
emacs23-lucid_23.1+1-4ubuntu3.2_lpia.deb
Size/MD5: 3057014 5d1bd97ee574e02f5f13f00ea69d4f7e
emacs23-nox_23.1+1-4ubuntu3.2_lpia.deb
Size/MD5: 2752006 001f2a6f5587d351657500be90c19e0a
emacs23_23.1+1-4ubuntu3.2_lpia.deb
Size/MD5: 3046598 e8a0ce8bc7ff90c208eff5ce88f2cb4e

powerpc architecture (Apple Macintosh G3/G4/G5):

emacs22-bin-common_22.2-0ubuntu6.2_powerpc.deb
Size/MD5: 181246 6f0afb5b7b71bfbdad4ad416ca560f56
emacs22-nox_22.2-0ubuntu6.2_powerpc.deb
Size/MD5: 1901462 d2fbb25b59ab918eee7bf521ac1c82fb
emacs22_22.2-0ubuntu6.2_powerpc.deb
Size/MD5: 2181850 7caaf30b7fdf4bdedd2e6861dc4f4ef4
emacs22-gtk_22.2-0ubuntu6.2_powerpc.deb
Size/MD5: 2174698 6074d299503dd7ccbee05176c0197144
emacs23-bin-common_23.1+1-4ubuntu3.2_powerpc.deb
Size/MD5: 184990 8a57701e7154a4ab09e50c5126c5409a
emacs23-lucid_23.1+1-4ubuntu3.2_powerpc.deb
Size/MD5: 3239008 2d234d0e01ad8c33d076645c98d41ea7
emacs23-nox_23.1+1-4ubuntu3.2_powerpc.deb
Size/MD5: 2903266 430353a2644115251613744cb96bf927
emacs23_23.1+1-4ubuntu3.2_powerpc.deb
Size/MD5: 3237746 b060b16972503897bdb405baf9f8943b

sparc architecture (Sun SPARC/UltraSPARC):

emacs22-bin-common_22.2-0ubuntu6.2_sparc.deb
Size/MD5: 177666 79084fb2059562a44eefa63da2e95fa2
emacs22-nox_22.2-0ubuntu6.2_sparc.deb
Size/MD5: 1846880 ed489327cfa1a9a4e9d8e9196d001db9
emacs22_22.2-0ubuntu6.2_sparc.deb
Size/MD5: 2108174 a28c7e52c90a7b91ea6dbbabbb6b7ef7
emacs22-gtk_22.2-0ubuntu6.2_sparc.deb
Size/MD5: 2104482 369ebe0ead5355d411616efa75092de3
emacs23-bin-common_23.1+1-4ubuntu3.2_sparc.deb
Size/MD5: 180748 5a8f21c2afd895ab81d5c3123e955e99
emacs23-lucid_23.1+1-4ubuntu3.2_sparc.deb
Size/MD5: 3159098 e2cfa30ec84af5ab25c611fd66ed74b9
emacs23-nox_23.1+1-4ubuntu3.2_sparc.deb
Size/MD5: 2842968 4d9c13509ef6f6ccf1fe31a087d58af6
emacs23_23.1+1-4ubuntu3.2_sparc.deb
Size/MD5: 3150140 cba9915b6b867cb91734bc1faa563852


--KN5l+BnMqAQyZLvT
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Kees Cook <kees@outflux.net>

iEYEARECAAYFAkuxIpYACgkQH/9LqRcGPm3FNgCfUqRv9+U8UKHcNUnWH+q7duWc
q9wAn1eFySFJzqmEZ0J4QKlDycCV7Hfd
=mLkW
-----END PGP SIGNATURE-----

--KN5l+BnMqAQyZLvT--


--===============6441228011077377125==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============6441228011077377125==--
Pro-Linux
Traut euch!
Neue Nachrichten
Werbung