Login
Newsletter
Werbung

Sicherheit: Pufferüberlauf in Python und Gnumeric
Aktuelle Meldungen Distributionen
Name: Pufferüberlauf in Python und Gnumeric
ID: USN-173-4
Distribution: Ubuntu
Plattformen: Ubuntu 4.10, Ubuntu 5.04
Datum: Mi, 31. August 2005, 13:00
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2491
Applikationen: PCRE

Originalnachricht

--===============0636473722=	protocol="application/pgp-signature";
boundary="1yeeQ81UyVL57Vl7"
Content-Disposition: inline


--1yeeQ81UyVL57Vl7
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

===========================================================
Ubuntu Security Notice USN-173-4 August 31, 2005
python2.1, python2.2, python2.3, gnumeric vulnerabilities
CAN-2005-2491
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 4.10 (Warty Warthog)
Ubuntu 5.04 (Hoary Hedgehog)

The following packages are affected:

gnumeric
python2.1
python2.2
python2.3

On Ubuntu 4.10, the problem can be corrected by upgrading the affected
package to version 1.2.13-1ubuntu2.1 (gnumeric), 2.1.3-24.ubuntu0.1
(python2.1), 2.2.3-10.ubuntu0.2 (python2.2), and 2.3.4-2.ubuntu0.2
(python2.3).

On Ubuntu 5.04, the problem can be corrected by upgrading the affected
package to version 1.4.2-1ubuntu3.1 (gnumeric), 2.2.3dfsg-1ubuntu0.1
(python2.2), and 2.3.5-2ubuntu0.1 (python2.3).

After performing a standard system upgrade you need to restart
gnumeric and all python server applications to effect the necessary
changes.


Details follow:

USN-173-1 fixed a buffer overflow vulnerability in the PCRE library.
However, it was found that the various python packages and gnumeric
contain static copies of the library code, so these packages need to
be updated as well.

In gnumeric this bug could be exploited to execute arbitrary code with
the privileges of the user if the user was tricked into opening a
specially crafted spreadsheet document.

In python, the impact depends on the particular application that uses
python's "re" (regular expression) module. In python server
applications that process unchecked arbitrary regular expressions with
the "re" module, this could potentially be exploited to remotely
execute arbitrary code with the privileges of the server.


Updated packages for Ubuntu 4.10 (Warty Warthog):

Source archives:

gnumeric_1.2.13-1ubuntu2.1.diff.gz
Size/MD5: 33857 c78010c94d212d03be2cfe3fc6415836
gnumeric_1.2.13-1ubuntu2.1.dsc
Size/MD5: 1210 41de559a09cbadb6a2db904f0ecc4f57
gnumeric_1.2.13.orig.tar.gz
Size/MD5: 17871448 df9a06755f31628cb0114a9d9d471cdc
python2.1_2.1.3-24.ubuntu0.1.diff.gz
Size/MD5: 2647135 be5397b455d7a93c1a19d8b69ae0a13e
python2.1_2.1.3-24.ubuntu0.1.dsc
Size/MD5: 1182 15a09602d0d4ba3be5d236f3d07be277
python2.1_2.1.3.orig.tar.gz
Size/MD5: 6194246 1ae739aa5824de263923df3516eeaf80
python2.2_2.2.3-10.ubuntu0.2.diff.gz
Size/MD5: 1933978 9dd9ef4e4a3dc989b68103d4f98c83b7
python2.2_2.2.3-10.ubuntu0.2.dsc
Size/MD5: 1186 774f971ae87abba08ae8396f3f7034d8
python2.2_2.2.3.orig.tar.gz
Size/MD5: 6711816 c23fbe6a0cdf800734f5813b9f7cb1d0
python2.3_2.3.4-2.ubuntu0.2.diff.gz
Size/MD5: 2288017 7aabe8e2c585e4ecc74ea19e6f93d5ac
python2.3_2.3.4-2.ubuntu0.2.dsc
Size/MD5: 1143 b7825b605318bb1decd0f249487dc2a7
python2.3_2.3.4.orig.tar.gz
Size/MD5: 8502596 d68a6a490c04b2c8f664ba4f2192e2fb

Architecture independent packages:

gnumeric-common_1.2.13-1ubuntu2.1_all.deb
Size/MD5: 4112364 e74e8ff0796c5f3638bd779bf6359574
gnumeric-doc_1.2.13-1ubuntu2.1_all.deb
Size/MD5: 3194284 ab9c162d34510d89b13581d8eb089404
idle-python2.1_2.1.3-24.ubuntu0.1_all.deb
Size/MD5: 117140 e752beb6f4173d6aba77e32fb36e4a37
idle-python2.2_2.2.3-10.ubuntu0.2_all.deb
Size/MD5: 116236 0e0c1ec8e0bf28d8664a402578df2a81
idle-python2.3_2.3.4-2.ubuntu0.2_all.deb
Size/MD5: 228562 177c9fb86ad25ddaba1aa62dfab585f6
python2.1-doc_2.1.3-24.ubuntu0.1_all.deb
Size/MD5: 1893880 61a818781a4351ebda6c9db1e72c3f3a
python2.1-examples_2.1.3-24.ubuntu0.1_all.deb
Size/MD5: 507384 5750bf7a13138ec9a5ba3f61a1918b26
python2.2-doc_2.2.3-10.ubuntu0.2_all.deb
Size/MD5: 2268520 a95e714b870e40bd5ea3df888098bbba
python2.2-examples_2.2.3-10.ubuntu0.2_all.deb
Size/MD5: 479280 d2250c89677aee9291ed5844bb95ca31
python2.3-doc_2.3.4-2.ubuntu0.2_all.deb
Size/MD5: 2817076 abd5f87234194a68da758b94bb9bd82e
python2.3-examples_2.3.4-2.ubuntu0.2_all.deb
Size/MD5: 507896 c55f9a431d1725a213eb404e2f0c5071

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

gnumeric-plugins-extra_1.2.13-1ubuntu2.1_amd64.deb
Size/MD5: 185932 edd736beefccf52dac5ea9e6f52bd145
gnumeric_1.2.13-1ubuntu2.1_amd64.deb
Size/MD5: 4192468 ee5e3580ba960e8ce43bf6b7707687ef
python2.1-dev_2.1.3-24.ubuntu0.1_amd64.deb
Size/MD5: 1052756 ea469ffc8182f0897cbe4ce922f2eb71
python2.1-gdbm_2.1.3-24.ubuntu0.1_amd64.deb
Size/MD5: 20820 d5cc9e9134eb3e95da554be4330db5d6
python2.1-mpz_2.1.3-24.ubuntu0.1_amd64.deb
Size/MD5: 24358 ff5a23efeb90e2b484ba6abefa5e3f84
python2.1-tk_2.1.3-24.ubuntu0.1_amd64.deb
Size/MD5: 92002 4e3fc5b225013172da2665a9587335fa
python2.1-xmlbase_2.1.3-24.ubuntu0.1_amd64.deb
Size/MD5: 53336 5f84a1b8fa93430448c1a2fda61f7fdf
python2.1_2.1.3-24.ubuntu0.1_amd64.deb
Size/MD5: 1720142 ccaa19066fcf47d4ba65a56a27bd4cdb
python2.2-dev_2.2.3-10.ubuntu0.2_amd64.deb
Size/MD5: 1402630 4c3a2ec6451a297af0c7b429fb5f55ee
python2.2-gdbm_2.2.3-10.ubuntu0.2_amd64.deb
Size/MD5: 20370 99aead1f3f664d20e0f641039cc8fc05
python2.2-mpz_2.2.3-10.ubuntu0.2_amd64.deb
Size/MD5: 25158 431133a29f0e852558fb33b68df202f7
python2.2-tk_2.2.3-10.ubuntu0.2_amd64.deb
Size/MD5: 96320 c21815800983231139f76db7dcb921a0
python2.2-xmlbase_2.2.3-10.ubuntu0.2_amd64.deb
Size/MD5: 55134 1b8f1647c1e6235b8abaef499235e899
python2.2_2.2.3-10.ubuntu0.2_amd64.deb
Size/MD5: 2241032 394bc333193daaa7c0e40de3f7d1b283

i386 architecture (x86 compatible Intel/AMD)

gnumeric-plugins-extra_1.2.13-1ubuntu2.1_i386.deb
Size/MD5: 182070 0844c84924efa52921a8c4313686af18
gnumeric_1.2.13-1ubuntu2.1_i386.deb
Size/MD5: 3892102 5b060bee9c56d28b58c6c6aa698cc34e
python2.1-dev_2.1.3-24.ubuntu0.1_i386.deb
Size/MD5: 956452 3a35544c5fc3b7f23efe4549639daaed
python2.1-gdbm_2.1.3-24.ubuntu0.1_i386.deb
Size/MD5: 20258 56f19c064f9a04a3d88e8f51f40dd9a3
python2.1-mpz_2.1.3-24.ubuntu0.1_i386.deb
Size/MD5: 23234 a8fd014be346da649da859832de1b6a7
python2.1-tk_2.1.3-24.ubuntu0.1_i386.deb
Size/MD5: 89994 5e2c511695f5fea8eaa661acd478091e
python2.1-xmlbase_2.1.3-24.ubuntu0.1_i386.deb
Size/MD5: 51242 8744692a2ad59729b4f0fa99f7728eed
python2.1_2.1.3-24.ubuntu0.1_i386.deb
Size/MD5: 1626818 a448b4f5ba5dc502f1dac7120006e5f4
python2.2-dev_2.2.3-10.ubuntu0.2_i386.deb
Size/MD5: 1272336 bb0d1b7019de7a9fe5eebb7b850b8d24
python2.2-gdbm_2.2.3-10.ubuntu0.2_i386.deb
Size/MD5: 20028 95d90229f4c811c1a5ef0e3192214961
python2.2-mpz_2.2.3-10.ubuntu0.2_i386.deb
Size/MD5: 23894 dc88194bead2f122d8d320b610253401
python2.2-tk_2.2.3-10.ubuntu0.2_i386.deb
Size/MD5: 93606 2fea9e3394781df4cad124a99a08ce24
python2.2-xmlbase_2.2.3-10.ubuntu0.2_i386.deb
Size/MD5: 53402 23d3393f0304b8f763bfb98c06e283e1
python2.2_2.2.3-10.ubuntu0.2_i386.deb
Size/MD5: 2114764 e5104e1354dcf9d7f5a6773ebe4eeb1b
python2.3-dev_2.3.4-2.ubuntu0.2_i386.deb
Size/MD5: 1601432 0cd4eba908a4364f365f8dcca11880e2
python2.3-gdbm_2.3.4-2.ubuntu0.2_i386.deb
Size/MD5: 22114 ac0f61ccfe27a01ca92133ce77bb4744
python2.3-mpz_2.3.4-2.ubuntu0.2_i386.deb
Size/MD5: 26004 1d29f9bdfc71e68be6abbd50c1e3b604
python2.3-tk_2.3.4-2.ubuntu0.2_i386.deb
Size/MD5: 102248 5722f07f4539f9e54f95ea6bd14af12c
python2.3_2.3.4-2.ubuntu0.2_i386.deb
Size/MD5: 2688504 f907e1b6ba6f472cfd058a9ee9601344

powerpc architecture (Apple Macintosh G3/G4/G5)

gnumeric-plugins-extra_1.2.13-1ubuntu2.1_powerpc.deb
Size/MD5: 184904 e8b18b64a0b133d5476527d2e357f661
gnumeric_1.2.13-1ubuntu2.1_powerpc.deb
Size/MD5: 4106336 77672c8a098ada8c9c4c48d0c681760f
python2.1-dev_2.1.3-24.ubuntu0.1_powerpc.deb
Size/MD5: 1070454 10a2e9998ffb506a4709ca310612788a
python2.1-gdbm_2.1.3-24.ubuntu0.1_powerpc.deb
Size/MD5: 22054 b8cb8fd8fdacc5c0109b583065087383
python2.1-mpz_2.1.3-24.ubuntu0.1_powerpc.deb
Size/MD5: 25456 9ce6082b68c2cfd5ec27118ab5c984f7
python2.1-tk_2.1.3-24.ubuntu0.1_powerpc.deb
Size/MD5: 92018 e555cfc7938e71ed7dac40c19a814beb
python2.1-xmlbase_2.1.3-24.ubuntu0.1_powerpc.deb
Size/MD5: 53570 a5d3321dc5b459ee53d1f91c4f9ce430
python2.1_2.1.3-24.ubuntu0.1_powerpc.deb
Size/MD5: 1758586 dab13ce35848b83fa740019896d7e945
python2.2-dev_2.2.3-10.ubuntu0.2_powerpc.deb
Size/MD5: 1503360 4080fcd15d98d7f28a68ff26d6d3d968
python2.2-gdbm_2.2.3-10.ubuntu0.2_powerpc.deb
Size/MD5: 21880 1aac2d7c5fff4e9d349497c00f46c3b8
python2.2-mpz_2.2.3-10.ubuntu0.2_powerpc.deb
Size/MD5: 26254 a844ec92debcceeab31e3ba8834d48cc
python2.2-tk_2.2.3-10.ubuntu0.2_powerpc.deb
Size/MD5: 96948 36bab2ebf4ab59dfc3f6b38815ab39b5
python2.2-xmlbase_2.2.3-10.ubuntu0.2_powerpc.deb
Size/MD5: 56138 81f263601488807c9d7869381382e11f
python2.2_2.2.3-10.ubuntu0.2_powerpc.deb
Size/MD5: 2358486 22d4316e37304bdb706ab7b73689f515
python2.3-dev_2.3.4-2.ubuntu0.2_powerpc.deb
Size/MD5: 1863842 4b9638c6015e346745a5eaf48d68e013
python2.3-gdbm_2.3.4-2.ubuntu0.2_powerpc.deb
Size/MD5: 23890 427f562bee9b3976cc9d83ec929c71c5
python2.3-mpz_2.3.4-2.ubuntu0.2_powerpc.deb
Size/MD5: 28378 012d0ebf6d52692947b00d652307ddd8
python2.3-tk_2.3.4-2.ubuntu0.2_powerpc.deb
Size/MD5: 105490 eaffe2398c80d3806a4793a8b64897ab
python2.3_2.3.4-2.ubuntu0.2_powerpc.deb
Size/MD5: 2999884 0d6be4323b03d0838c5e029cf20fdded

Updated packages for Ubuntu 5.04 (Hoary Hedgehog):

Source archives:

gnumeric_1.4.2-1ubuntu3.1.diff.gz
Size/MD5: 32138 400108f111b36f2f8ccd7f3bbc64fa7d
gnumeric_1.4.2-1ubuntu3.1.dsc
Size/MD5: 1310 b5e008f52e201118baeee73edb20c2e8
gnumeric_1.4.2.orig.tar.gz
Size/MD5: 20804765 b0bd8f8e6e844865df2d9563ab4e0842
python2.2_2.2.3dfsg-1ubuntu0.1.diff.gz
Size/MD5: 1945638 ba6f7afce1b7e95d6d59658af665e480
python2.2_2.2.3dfsg-1ubuntu0.1.dsc
Size/MD5: 1194 c5415d8f8929f3f6843164b82761305d
python2.2_2.2.3dfsg.orig.tar.gz
Size/MD5: 6691331 8ed6e66f125308f55115e7df8cc9f18a
python2.3_2.3.5-2ubuntu0.1.diff.gz
Size/MD5: 2356495 18b4e3eab7f8dd00d55d1f1eeec82a97
python2.3_2.3.5-2ubuntu0.1.dsc
Size/MD5: 1152 c69c937d00a0cfc15afee8c582e7d11a
python2.3_2.3.5.orig.tar.gz
Size/MD5: 8512566 9c35e5ca3c487e1c1f70f2fb1ccbfffe

Architecture independent packages:

gnumeric-common_1.4.2-1ubuntu3.1_all.deb
Size/MD5: 360810 24ad68ce9a7f34e9325331ede29fddaf
gnumeric-doc_1.4.2-1ubuntu3.1_all.deb
Size/MD5: 4131840 2e9bd51794200a24bfd2d04d2069a112
idle-python2.2_2.2.3dfsg-1ubuntu0.1_all.deb
Size/MD5: 119582 647350bbf3a14dbbffbbe457e02d5846
idle-python2.3_2.3.5-2ubuntu0.1_all.deb
Size/MD5: 235484 6c7f247c0a1f7bb68fb14946d2c052ca
python2.2-doc_2.2.3dfsg-1ubuntu0.1_all.deb
Size/MD5: 2272380 b17a34962a623b56bc5c0e15e6710e4b
python2.2-examples_2.2.3dfsg-1ubuntu0.1_all.deb
Size/MD5: 482994 41aea3c2aa17deb6ba89b8e8e00f3a75
python2.3-doc_2.3.5-2ubuntu0.1_all.deb
Size/MD5: 2860552 2a4e1e57ef375a20de4a18b217d781a8
python2.3-examples_2.3.5-2ubuntu0.1_all.deb
Size/MD5: 512778 87b3739090bba3ed89a0a75075f8d56b

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

gnumeric-plugins-extra_1.4.2-1ubuntu3.1_amd64.deb
Size/MD5: 114352 ddda292f0ea93414ebeda83e7314fe39
gnumeric_1.4.2-1ubuntu3.1_amd64.deb
Size/MD5: 4051580 66c384a5fd37f20e3af0b0a30164cbd5
python2.2-dev_2.2.3dfsg-1ubuntu0.1_amd64.deb
Size/MD5: 1257178 7f78bac3f3f8fbf0591afc58ce344d73
python2.2-gdbm_2.2.3dfsg-1ubuntu0.1_amd64.deb
Size/MD5: 24036 c1feba5a90ae6e9e4f0721333479d3fd
python2.2-mpz_2.2.3dfsg-1ubuntu0.1_amd64.deb
Size/MD5: 28734 8dfae74e5f566aff9660c561efcd01d1
python2.2-tk_2.2.3dfsg-1ubuntu0.1_amd64.deb
Size/MD5: 100066 33f50f331d76f72ca37241bd700773b0
python2.2-xmlbase_2.2.3dfsg-1ubuntu0.1_amd64.deb
Size/MD5: 58366 92056c7ab0c3df2d6fe47f37f884bb2c
python2.2_2.2.3dfsg-1ubuntu0.1_amd64.deb
Size/MD5: 2373260 4f6a324a6077293ff781264940d6d593
python2.3-dev_2.3.5-2ubuntu0.1_amd64.deb
Size/MD5: 1593756 867289b4d5e0ec05bc5c699c31e323e0
python2.3-gdbm_2.3.5-2ubuntu0.1_amd64.deb
Size/MD5: 26946 9acb96c22904aceb9a1d2625a1458dd8
python2.3-mpz_2.3.5-2ubuntu0.1_amd64.deb
Size/MD5: 31738 891b6ae1e03026066d7c33c8d5d831e8
python2.3-tk_2.3.5-2ubuntu0.1_amd64.deb
Size/MD5: 109572 70b53b862b0f1df109407262bc7c41d4
python2.3_2.3.5-2ubuntu0.1_amd64.deb
Size/MD5: 3036180 f59fc1ee50cea427189216e256d1bbd1

i386 architecture (x86 compatible Intel/AMD)

gnumeric-plugins-extra_1.4.2-1ubuntu3.1_i386.deb
Size/MD5: 109700 68569e4d920c67bc8a3d0970392c6ec1
gnumeric_1.4.2-1ubuntu3.1_i386.deb
Size/MD5: 3711580 eda932e26047101415ed94b65bbee9de
python2.2-dev_2.2.3dfsg-1ubuntu0.1_i386.deb
Size/MD5: 1128658 a5cfa2a17053ad2119402d133bf279c8
python2.2-gdbm_2.2.3dfsg-1ubuntu0.1_i386.deb
Size/MD5: 23712 e98853db830757297634371050299ab6
python2.2-mpz_2.2.3dfsg-1ubuntu0.1_i386.deb
Size/MD5: 27508 0366a4d2de04db4ae6d1651a721093c2
python2.2-tk_2.2.3dfsg-1ubuntu0.1_i386.deb
Size/MD5: 97502 153a92ba3e6d87e04e9342c98e4a11c1
python2.2-xmlbase_2.2.3dfsg-1ubuntu0.1_i386.deb
Size/MD5: 56716 7cd8d503facf66520107355b9eac23fa
python2.2_2.2.3dfsg-1ubuntu0.1_i386.deb
Size/MD5: 2243472 f8d527181bc4af2c298a442e59bed8f6
python2.3-dev_2.3.5-2ubuntu0.1_i386.deb
Size/MD5: 1447254 e6a170e8caa064ebcdcba4006891d307
python2.3-gdbm_2.3.5-2ubuntu0.1_i386.deb
Size/MD5: 26572 69051ddf4013e998d460ec0f04629f0b
python2.3-mpz_2.3.5-2ubuntu0.1_i386.deb
Size/MD5: 30430 aad7e7ff4f9ec61ab40b2bdce8bb02c4
python2.3-tk_2.3.5-2ubuntu0.1_i386.deb
Size/MD5: 107132 f7cc8ccebd66f84c1fd5dcd440fdea4b
python2.3_2.3.5-2ubuntu0.1_i386.deb
Size/MD5: 2863726 dd492544a70069d3f1376b9752865961

powerpc architecture (Apple Macintosh G3/G4/G5)

gnumeric-plugins-extra_1.4.2-1ubuntu3.1_powerpc.deb
Size/MD5: 115984 7d5f76b3437d312e1d3e7ac8c8a4bb13
gnumeric_1.4.2-1ubuntu3.1_powerpc.deb
Size/MD5: 3966394 b7b78f9cae2eac2b36624de85df9951c
python2.2-dev_2.2.3dfsg-1ubuntu0.1_powerpc.deb
Size/MD5: 1358376 8ed3f43f532729abe53a6b9cf1bba529
python2.2-gdbm_2.2.3dfsg-1ubuntu0.1_powerpc.deb
Size/MD5: 25534 afe595296c62670f340ea990fb0781ca
python2.2-mpz_2.2.3dfsg-1ubuntu0.1_powerpc.deb
Size/MD5: 29810 5dc5ad16f291d1044bf958ecfee6aa37
python2.2-tk_2.2.3dfsg-1ubuntu0.1_powerpc.deb
Size/MD5: 100706 98d0ebefba21a8685d7e6fc2e78e6b6c
python2.2-xmlbase_2.2.3dfsg-1ubuntu0.1_powerpc.deb
Size/MD5: 59352 f93915f5eff1e7593138067c76963659
python2.2_2.2.3dfsg-1ubuntu0.1_powerpc.deb
Size/MD5: 2488976 c331080dbc03cad1cd97e6f34932ac75
python2.3-dev_2.3.5-2ubuntu0.1_powerpc.deb
Size/MD5: 1709220 c34c96c4a7a1c16044371b99cece2315
python2.3-gdbm_2.3.5-2ubuntu0.1_powerpc.deb
Size/MD5: 28402 b0b4bfc8441a9449e546292bc5023f9d
python2.3-mpz_2.3.5-2ubuntu0.1_powerpc.deb
Size/MD5: 32786 b3d504306241b564632754acef0331c6
python2.3-tk_2.3.5-2ubuntu0.1_powerpc.deb
Size/MD5: 110222 ca431cddd130dc0b93dcbd7012783617
python2.3_2.3.5-2ubuntu0.1_powerpc.deb
Size/MD5: 3184102 8e4cfc78d540a78c5db14cbb9fc0ed67

--1yeeQ81UyVL57Vl7
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDFaKrDecnbV4Fd/IRAkABAKDBq6UtnPA9/8rEm7M3Ni2MBdXgOACg7Wqk
NA9vsLVz5SvmAuNJpXnAfUY=
=+EQU
-----END PGP SIGNATURE-----

--1yeeQ81UyVL57Vl7--


--===============0636473722=MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
http://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce



--===============0636473722==--
Pro-Linux
Traut euch!
Neue Nachrichten
Werbung