Login
Newsletter
Werbung

Sicherheit: Mehrere Probleme in lesstif
Aktuelle Meldungen Distributionen
Name: Mehrere Probleme in lesstif
ID: USN-83-1
Distribution: Ubuntu
Plattformen: Ubuntu 4.10
Datum: Do, 17. Februar 2005, 12:00
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0914
Applikationen: Lesstif

Originalnachricht

===========================================================
Ubuntu Security Notice USN-83-1 February 16, 2005
lesstif1-1 vulnerabilities
CAN-2004-0914
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 4.10 (Warty Warthog)

The following packages are affected:

lesstif2

The problem can be corrected by upgrading the affected package to
version 1:0.93.94-4ubuntu1.1. In general, a standard system upgrade is
sufficient to effect the necessary changes.

Details follow:

Several vulnerabilities have been found in the XPM image decoding
functions of the LessTif library. If an attacker tricked a user into
loading a malicious XPM image with an application that uses LessTif,
he could exploit this to execute arbitrary code in the context of the
user opening the image.

Ubuntu does not contain any server applications using LessTif, so
there is no possibility of privilege escalation.

Please note that this update only fixes lesstif2. The older lesstif1
version is also affected. A proper fix for lesstif1 will still take
some time and will be done in a separate USN. However, no Ubuntu
application uses lesstif1, so this could only affect you if you use
third party software which depends on this library.

Source archives:

lesstif1-1_0.93.94-4ubuntu1.1.diff.gz
Size/MD5: 106165 7862c4bca521ac44fa51ec413291a893
lesstif1-1_0.93.94-4ubuntu1.1.dsc
Size/MD5: 864 e98b3773a457fa1d31437792bc59c572
lesstif1-1_0.93.94.orig.tar.gz
Size/MD5: 4862623 9eb87b5470333ccb31425a47d24f5a96

Architecture independent packages:

lesstif-doc_0.93.94-4ubuntu1.1_all.deb
Size/MD5: 342038 dfaf44658bdd3dbc189919ddc46dd124

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

lesstif-bin_0.93.94-4ubuntu1.1_amd64.deb
Size/MD5: 176768 b87d9271f12b3429830d2ef9797c7691
lesstif-dev_0.93.94-4ubuntu1.1_amd64.deb
Size/MD5: 917162 6a7ef68078cb2688777f5bd52225ae9c
lesstif1_0.93.94-4ubuntu1.1_amd64.deb
Size/MD5: 660570 ca9223c84b259836eca8682e4657f5c8
lesstif2-dev_0.93.94-4ubuntu1.1_amd64.deb
Size/MD5: 1067970 7d62d335c729ac9de38bf064c7bacc56
lesstif2_0.93.94-4ubuntu1.1_amd64.deb
Size/MD5: 742606 db847dfc1c2b2ae2a319322bc6203afa

i386 architecture (x86 compatible Intel/AMD)

lesstif-bin_0.93.94-4ubuntu1.1_i386.deb
Size/MD5: 159374 ea4b92fdde96eb648074dbfe209b3898
lesstif-dev_0.93.94-4ubuntu1.1_i386.deb
Size/MD5: 803566 b4b46757d9e9a8135115304206cea3be
lesstif1_0.93.94-4ubuntu1.1_i386.deb
Size/MD5: 597886 554790b9bee5fe30646a873c29b4db27
lesstif2-dev_0.93.94-4ubuntu1.1_i386.deb
Size/MD5: 933332 461643cc6eb37dc1d2021242dc87cbdd
lesstif2_0.93.94-4ubuntu1.1_i386.deb
Size/MD5: 673282 9b128c9b9fb5f5a54cd16e9e87ed0082

powerpc architecture (Apple Macintosh G3/G4/G5)

lesstif-bin_0.93.94-4ubuntu1.1_powerpc.deb
Size/MD5: 171684 4ae91873e024a56f3e0176ae5d9afe44
lesstif-dev_0.93.94-4ubuntu1.1_powerpc.deb
Size/MD5: 946008 ce77211f5a1b6a2d17e0429473ef3e76
lesstif1_0.93.94-4ubuntu1.1_powerpc.deb
Size/MD5: 625936 2b5d6a5ca302cbc801c885077e14c61d
lesstif2-dev_0.93.94-4ubuntu1.1_powerpc.deb
Size/MD5: 1093972 3d0df04841498a8e5882430bd2a40b16
lesstif2_0.93.94-4ubuntu1.1_powerpc.deb
Size/MD5: 706052 fead0ca59a8901f10094e5654f5ea687





--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
http://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung