--===============6441228011077377125==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature";
 boundary="KN5l+BnMqAQyZLvT"
Content-Disposition: inline


--KN5l+BnMqAQyZLvT
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

===========================================================
Ubuntu Security Notice USN-919-1             March 29, 2010
emacs22, emacs23 vulnerability
CVE-2010-0825
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04
Ubuntu 9.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 8.04 LTS:
  emacs22-bin-common              22.1-0ubuntu10.2

Ubuntu 8.10:
  emacs22-bin-common              22.2-0ubuntu2.8.10.1

Ubuntu 9.04:
  emacs22-bin-common              22.2-0ubuntu2.9.04.1

Ubuntu 9.10:
  emacs22-bin-common              22.2-0ubuntu6.2
  emacs23-bin-common              23.1+1-4ubuntu3.2

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

Dan Rosenberg discovered that the email helper in Emacs did not correctly
check file permissions.  A local attacker could perform a symlink race
to read or append to another user's mailbox if it was stored under a
group-writable group-"mail" directory.


Updated packages for Ubuntu 8.04 LTS:

  Source archives:

    emacs22_22.1-0ubuntu10.2.diff.gz
      Size/MD5:    38655 cbe84aef313d2e8bd3e08599b81bdf2b
    emacs22_22.1-0ubuntu10.2.dsc
      Size/MD5:     1122 fbfe65bdf6165a8ba5583ed02e8f1cab
    emacs22_22.1.orig.tar.gz
      Size/MD5: 38172226 6949df37caec2d7a2e0eee3f1b422726

  Architecture independent packages:

    emacs22-common_22.1-0ubuntu10.2_all.deb
      Size/MD5: 18579808 d74d62011312e509476e2629f150933d
    emacs22-el_22.1-0ubuntu10.2_all.deb
      Size/MD5: 11172978 42d15ac1064967788698dd4cf4eb40a0
    emacs_22.1-0ubuntu10.2_all.deb
      Size/MD5:     6440 32e8fcf02b0ace38cc1d5a8754a3c576

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    emacs22-bin-common_22.1-0ubuntu10.2_amd64.deb
      Size/MD5:   181892 9032c6a6920a81a77142fd560ba4e45a
    emacs22-nox_22.1-0ubuntu10.2_amd64.deb
      Size/MD5:  1935066 c2d889351ab581df818063b26dcabddd
    emacs22_22.1-0ubuntu10.2_amd64.deb
      Size/MD5:  2216596 1bc65224a700c6b0598a572b09abe677
    emacs22-gtk_22.1-0ubuntu10.2_amd64.deb
      Size/MD5:  2209332 85d008c0cb14172bfffee5643d25694b

  i386 architecture (x86 compatible Intel/AMD):

    emacs22-bin-common_22.1-0ubuntu10.2_i386.deb
      Size/MD5:   163548 202c4f7ae1c50e746c1e4847b91de068
    emacs22-nox_22.1-0ubuntu10.2_i386.deb
      Size/MD5:  1708274 f267506e27da59c3f9093767e2db8401
    emacs22_22.1-0ubuntu10.2_i386.deb
      Size/MD5:  1957134 cb696888d4de2de28f371e84976dab2e
    emacs22-gtk_22.1-0ubuntu10.2_i386.deb
      Size/MD5:  1951340 781cf671c8efa3137c7bbc4ece7391b1

  lpia architecture (Low Power Intel Architecture):

    emacs22-bin-common_22.1-0ubuntu10.2_lpia.deb
      Size/MD5:   164208 0b21e188a6bc47d2c05486bfc2d05b18
    emacs22-nox_22.1-0ubuntu10.2_lpia.deb
      Size/MD5:  1720652 183dbf8108227ca5dcfb16f9b24d586a
    emacs22_22.1-0ubuntu10.2_lpia.deb
      Size/MD5:  1971638 91cee58da2c0e43d1635a7fce6f0b2a2
    emacs22-gtk_22.1-0ubuntu10.2_lpia.deb
      Size/MD5:  1964228 0740571795bbbb7b13d877fe17647724

  powerpc architecture (Apple Macintosh G3/G4/G5):

    emacs22-bin-common_22.1-0ubuntu10.2_powerpc.deb
      Size/MD5:   180684 f8bc60549bb97edf643b45ea0bd60669
    emacs22-nox_22.1-0ubuntu10.2_powerpc.deb
      Size/MD5:  1849642 8a454f033a136d8388934186b9d736b9
    emacs22_22.1-0ubuntu10.2_powerpc.deb
      Size/MD5:  2125518 17c1605189e7027b9d557ff77239243e
    emacs22-gtk_22.1-0ubuntu10.2_powerpc.deb
      Size/MD5:  2112776 0fc29037d072138fa3673cbf7c6c5ee6

  sparc architecture (Sun SPARC/UltraSPARC):

    emacs22-bin-common_22.1-0ubuntu10.2_sparc.deb
      Size/MD5:   168942 3d0cdd462f145a82039c6cb49644abf1
    emacs22-nox_22.1-0ubuntu10.2_sparc.deb
      Size/MD5:  1802114 73b59c3e17ff0b5063bdffed3d137927
    emacs22_22.1-0ubuntu10.2_sparc.deb
      Size/MD5:  2053796 ef3767734945d2a19cb45cc84c0626f5
    emacs22-gtk_22.1-0ubuntu10.2_sparc.deb
      Size/MD5:  2048560 50e2cfc034f17b74f9a45e1461fe8f38

Updated packages for Ubuntu 8.10:

  Source archives:

    emacs22_22.2-0ubuntu2.8.10.1.diff.gz
      Size/MD5:    29547 0c5f5a4ab112c90dd2e3f1bfea60fbe3
    emacs22_22.2-0ubuntu2.8.10.1.dsc
      Size/MD5:     1536 63c9cdaa4ab35bf60c53e0b6f3296043
    emacs22_22.2.orig.tar.gz
      Size/MD5: 38694318 d6ee586b8752351334ebf072904c4d51

  Architecture independent packages:

    emacs22-common_22.2-0ubuntu2.8.10.1_all.deb
      Size/MD5: 18786054 95c5bab14043d952307869a2807c4893
    emacs22-el_22.2-0ubuntu2.8.10.1_all.deb
      Size/MD5: 11341292 4feccd81f69b2c16b786133b0645df05
    emacs_22.2-0ubuntu2.8.10.1_all.deb
      Size/MD5:     6482 736f310faecd206ba850b22bc2554e87

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    emacs22-bin-common_22.2-0ubuntu2.8.10.1_amd64.deb
      Size/MD5:   186396 25ecb44a7e2faa96fa5db7c21c1f51ec
    emacs22-nox_22.2-0ubuntu2.8.10.1_amd64.deb
      Size/MD5:  1957334 8a1f10fba68dde139389d5cd40c6f925
    emacs22_22.2-0ubuntu2.8.10.1_amd64.deb
      Size/MD5:  2256898 7d05458bf546b81e57f6436b2cfe7eba
    emacs22-gtk_22.2-0ubuntu2.8.10.1_amd64.deb
      Size/MD5:  2253002 2073f6006af89daac64aafd3d150059c

  i386 architecture (x86 compatible Intel/AMD):

    emacs22-bin-common_22.2-0ubuntu2.8.10.1_i386.deb
      Size/MD5:   167798 40d23593020ed637b7c454a23817b3e4
    emacs22-nox_22.2-0ubuntu2.8.10.1_i386.deb
      Size/MD5:  1724990 b1fc2faa50ed90d40b7909645587e75a
    emacs22_22.2-0ubuntu2.8.10.1_i386.deb
      Size/MD5:  1987260 fd8a00a732872c07ca360f31a0c46199
    emacs22-gtk_22.2-0ubuntu2.8.10.1_i386.deb
      Size/MD5:  1979304 e809f77f0d286b5eee6d7f39194588cd

  lpia architecture (Low Power Intel Architecture):

    emacs22-bin-common_22.2-0ubuntu2.8.10.1_lpia.deb
      Size/MD5:   166802 4cc450f09be18b0879e6de787d4facb6
    emacs22-nox_22.2-0ubuntu2.8.10.1_lpia.deb
      Size/MD5:  1736652 46e2b67683164cdb82d87bc4eaa673e2
    emacs22_22.2-0ubuntu2.8.10.1_lpia.deb
      Size/MD5:  1997832 ffbe9f81845d2d489f9e7e7ab2b44b22
    emacs22-gtk_22.2-0ubuntu2.8.10.1_lpia.deb
      Size/MD5:  1992342 c28f92b0c098505c121df00b2f099ae7

  powerpc architecture (Apple Macintosh G3/G4/G5):

    emacs22-bin-common_22.2-0ubuntu2.8.10.1_powerpc.deb
      Size/MD5:   180558 630e134d21d3ec1b9a84aa0c890fc2f3
    emacs22-nox_22.2-0ubuntu2.8.10.1_powerpc.deb
      Size/MD5:  1869408 e3e99377f918131f1b256aef182ef63b
    emacs22_22.2-0ubuntu2.8.10.1_powerpc.deb
      Size/MD5:  2154228 5e07fb85d9c39483e6edfec44ff48dd0
    emacs22-gtk_22.2-0ubuntu2.8.10.1_powerpc.deb
      Size/MD5:  2141538 447ca48aebf9448dceb9ea5571b81e93

  sparc architecture (Sun SPARC/UltraSPARC):

    emacs22-bin-common_22.2-0ubuntu2.8.10.1_sparc.deb
      Size/MD5:   174516 4b11033d324fd6c73811640800a6cc83
    emacs22-nox_22.2-0ubuntu2.8.10.1_sparc.deb
      Size/MD5:  1819808 e4835ba72d9178e0b6f5a2cbbc51f766
    emacs22_22.2-0ubuntu2.8.10.1_sparc.deb
      Size/MD5:  2081240 50f48e66531ad7b02c1ac054aebd1595
    emacs22-gtk_22.2-0ubuntu2.8.10.1_sparc.deb
      Size/MD5:  2073432 9c5e35c71b9e3b786a436702b5e3064e

Updated packages for Ubuntu 9.04:

  Source archives:

    emacs22_22.2-0ubuntu2.9.04.1.diff.gz
      Size/MD5:    29552 8b671a3d031186e746541b08bc50341c
    emacs22_22.2-0ubuntu2.9.04.1.dsc
      Size/MD5:     1536 cf9490eb317d68e5f9d41d8db4ede9b1
    emacs22_22.2.orig.tar.gz
      Size/MD5: 38694318 d6ee586b8752351334ebf072904c4d51

  Architecture independent packages:

    emacs22-common_22.2-0ubuntu2.9.04.1_all.deb
      Size/MD5: 18784278 e6e4244719d79f2287b6fc31daaaeb94
    emacs22-el_22.2-0ubuntu2.9.04.1_all.deb
      Size/MD5: 11341306 1bd369ef196b4f4ec5437f1c0b196fbb
    emacs_22.2-0ubuntu2.9.04.1_all.deb
      Size/MD5:     6476 1458fbca336810f27c7d363834387d1c

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    emacs22-bin-common_22.2-0ubuntu2.9.04.1_amd64.deb
      Size/MD5:   186404 f5b08c4375ba1a743de3124c820405d5
    emacs22-nox_22.2-0ubuntu2.9.04.1_amd64.deb
      Size/MD5:  1957316 79b0d20e0610ba8da4f123dac603a401
    emacs22_22.2-0ubuntu2.9.04.1_amd64.deb
      Size/MD5:  2256758 d8d04f5894b78b41dba4076e12cc033c
    emacs22-gtk_22.2-0ubuntu2.9.04.1_amd64.deb
      Size/MD5:  2252796 8f350568a8af3aaf639267139ef20d73

  i386 architecture (x86 compatible Intel/AMD):

    emacs22-bin-common_22.2-0ubuntu2.9.04.1_i386.deb
      Size/MD5:   167810 2a26d0664029383ae4dbebcac4a70f0d
    emacs22-nox_22.2-0ubuntu2.9.04.1_i386.deb
      Size/MD5:  1725148 8544627294815e1d2a4c86e9e008ddc3
    emacs22_22.2-0ubuntu2.9.04.1_i386.deb
      Size/MD5:  1987130 c34ba677ce76825522dc337761865ca2
    emacs22-gtk_22.2-0ubuntu2.9.04.1_i386.deb
      Size/MD5:  1979138 55b7ee8ca0a8453dd73123870858fee9

  lpia architecture (Low Power Intel Architecture):

    emacs22-bin-common_22.2-0ubuntu2.9.04.1_lpia.deb
      Size/MD5:   166862 eee082cd01a2e928777070243a1a1a1a
    emacs22-nox_22.2-0ubuntu2.9.04.1_lpia.deb
      Size/MD5:  1736620 abe68f2f675b32fe66e53d7778d1b921
    emacs22_22.2-0ubuntu2.9.04.1_lpia.deb
      Size/MD5:  1997670 030f2209614b2fd6659fe71f1382aa76
    emacs22-gtk_22.2-0ubuntu2.9.04.1_lpia.deb
      Size/MD5:  1992302 804c0d86965d179bab4c7e767cdca546

  powerpc architecture (Apple Macintosh G3/G4/G5):

    emacs22-bin-common_22.2-0ubuntu2.9.04.1_powerpc.deb
      Size/MD5:   180514 029ba18b8df6db6b866c60f24df90b29
    emacs22-nox_22.2-0ubuntu2.9.04.1_powerpc.deb
      Size/MD5:  1869334 6ca25c95496afbdb988401a9cab7c3d0
    emacs22_22.2-0ubuntu2.9.04.1_powerpc.deb
      Size/MD5:  2153826 820332a618c82f122479c0ec35965db4
    emacs22-gtk_22.2-0ubuntu2.9.04.1_powerpc.deb
      Size/MD5:  2141344 41291f95d69cf157136a9e28dd9dce79

  sparc architecture (Sun SPARC/UltraSPARC):

    emacs22-bin-common_22.2-0ubuntu2.9.04.1_sparc.deb
      Size/MD5:   174412 334e0598ec5eab1e59f17044bac404a3
    emacs22-nox_22.2-0ubuntu2.9.04.1_sparc.deb
      Size/MD5:  1819790 81944c050c3b327b1acac5bb4865fecc
    emacs22_22.2-0ubuntu2.9.04.1_sparc.deb
      Size/MD5:  2081204 fa0e238159781de58d0ef1fbf191436a
    emacs22-gtk_22.2-0ubuntu2.9.04.1_sparc.deb
      Size/MD5:  2075786 3bf83db227d543b01443aa5ff89ffa8e

Updated packages for Ubuntu 9.10:

  Source archives:

    emacs22_22.2-0ubuntu6.2.diff.gz
      Size/MD5:    31877 8fc012e0ec3d35e209244a79eac9baa2
    emacs22_22.2-0ubuntu6.2.dsc
      Size/MD5:     1516 155c2c690fce20a0af2684b19a185ba7
    emacs22_22.2.orig.tar.gz
      Size/MD5: 38694318 d6ee586b8752351334ebf072904c4d51
    emacs23_23.1+1-4ubuntu3.2.diff.gz
      Size/MD5:  3999845 8bfeee3f31ef2c4c318d03eefd25d667
    emacs23_23.1+1-4ubuntu3.2.dsc
      Size/MD5:     1670 fcb4dcd7d51b5330028b38d644078583
    emacs23_23.1+1.orig.tar.gz
      Size/MD5: 25487304 1706bfc4ad49a2d98c289f7b24527a56

  Architecture independent packages:

    emacs22-common_22.2-0ubuntu6.2_all.deb
      Size/MD5: 18783356 04cc3b7ffe2e92f6f808d4ba3925a188
    emacs22-el_22.2-0ubuntu6.2_all.deb
      Size/MD5: 11341772 54c9dba83919461e33eb5788cb5adbcf
    emacs_23.1+1-4ubuntu2+22.2+0ubuntu6.2_all.deb
      Size/MD5:     6968 00fe5d96053f33f9f37ccc61f5269d0f
    emacs23-common_23.1+1-4ubuntu3.2_all.deb
      Size/MD5: 20629134 33a3942565bea6743cae4585c20787bf
    emacs23-el_23.1+1-4ubuntu3.2_all.deb
      Size/MD5: 12267256 77dcf68f99350f03adfe0d7ea4f8296b

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    emacs22-bin-common_22.2-0ubuntu6.2_amd64.deb
      Size/MD5:   188360 54db1802338b6c717a70d0c40d1060e6
    emacs22-nox_22.2-0ubuntu6.2_amd64.deb
      Size/MD5:  1973824 963c76da1319a5defe13db34fc56e648
    emacs22_22.2-0ubuntu6.2_amd64.deb
      Size/MD5:  2275230 7ae9063a2dd983159ae01991496b8ffd
    emacs22-gtk_22.2-0ubuntu6.2_amd64.deb
      Size/MD5:  2270762 679b951e743e2de74361b79fc05eed3a
    emacs23-bin-common_23.1+1-4ubuntu3.2_amd64.deb
      Size/MD5:   192018 762adf13bec5f00b4e34443f9f11e945
    emacs23-lucid_23.1+1-4ubuntu3.2_amd64.deb
      Size/MD5:  3384630 4e1f2821e73b7fa644fe53d0c58a4e14
    emacs23-nox_23.1+1-4ubuntu3.2_amd64.deb
      Size/MD5:  3048918 4ddfe550941347f1e380bac235253bd0
    emacs23_23.1+1-4ubuntu3.2_amd64.deb
      Size/MD5:  3382452 22789c166880c6e55b99ae38b4d7ae87

  i386 architecture (x86 compatible Intel/AMD):

    emacs22-bin-common_22.2-0ubuntu6.2_i386.deb
      Size/MD5:   167700 710d51114014c13b5593184e6f028f31
    emacs22-nox_22.2-0ubuntu6.2_i386.deb
      Size/MD5:  1743392 086add7ddfeea9686b2b750678138544
    emacs22_22.2-0ubuntu6.2_i386.deb
      Size/MD5:  1999280 07ccc1add3ac83a44bdf4901a06ab6a4
    emacs22-gtk_22.2-0ubuntu6.2_i386.deb
      Size/MD5:  1994012 69b66b5db1fda1cd604897925d8850b4
    emacs23-bin-common_23.1+1-4ubuntu3.2_i386.deb
      Size/MD5:   170572 6d6ac0604feccad71d2936388007525b
    emacs23-lucid_23.1+1-4ubuntu3.2_i386.deb
      Size/MD5:  3043004 f5d1a8e4dd7cfebb8aa4e192b14776dd
    emacs23-nox_23.1+1-4ubuntu3.2_i386.deb
      Size/MD5:  2735468 46087e0a9d656d29d67038b5d1406c02
    emacs23_23.1+1-4ubuntu3.2_i386.deb
      Size/MD5:  3037318 20add1632fa5295cdf0e3a20e34b1993

  lpia architecture (Low Power Intel Architecture):

    emacs22-bin-common_22.2-0ubuntu6.2_lpia.deb
      Size/MD5:   167744 a42de95cc1834612cf919d4ab8db9505
    emacs22-nox_22.2-0ubuntu6.2_lpia.deb
      Size/MD5:  1752462 6358d66e3c00ffaf2f9408413185759b
    emacs22_22.2-0ubuntu6.2_lpia.deb
      Size/MD5:  2011182 a7aa44f2ee53bb838c1e65ec5f90b81d
    emacs22-gtk_22.2-0ubuntu6.2_lpia.deb
      Size/MD5:  2003744 314c0502adb83d69a91f58016cfd4f68
    emacs23-bin-common_23.1+1-4ubuntu3.2_lpia.deb
      Size/MD5:   170378 6a2175d9890ca29e49d232d298609e3f
    emacs23-lucid_23.1+1-4ubuntu3.2_lpia.deb
      Size/MD5:  3057014 5d1bd97ee574e02f5f13f00ea69d4f7e
    emacs23-nox_23.1+1-4ubuntu3.2_lpia.deb
      Size/MD5:  2752006 001f2a6f5587d351657500be90c19e0a
    emacs23_23.1+1-4ubuntu3.2_lpia.deb
      Size/MD5:  3046598 e8a0ce8bc7ff90c208eff5ce88f2cb4e

  powerpc architecture (Apple Macintosh G3/G4/G5):

    emacs22-bin-common_22.2-0ubuntu6.2_powerpc.deb
      Size/MD5:   181246 6f0afb5b7b71bfbdad4ad416ca560f56
    emacs22-nox_22.2-0ubuntu6.2_powerpc.deb
      Size/MD5:  1901462 d2fbb25b59ab918eee7bf521ac1c82fb
    emacs22_22.2-0ubuntu6.2_powerpc.deb
      Size/MD5:  2181850 7caaf30b7fdf4bdedd2e6861dc4f4ef4
    emacs22-gtk_22.2-0ubuntu6.2_powerpc.deb
      Size/MD5:  2174698 6074d299503dd7ccbee05176c0197144
    emacs23-bin-common_23.1+1-4ubuntu3.2_powerpc.deb
      Size/MD5:   184990 8a57701e7154a4ab09e50c5126c5409a
    emacs23-lucid_23.1+1-4ubuntu3.2_powerpc.deb
      Size/MD5:  3239008 2d234d0e01ad8c33d076645c98d41ea7
    emacs23-nox_23.1+1-4ubuntu3.2_powerpc.deb
      Size/MD5:  2903266 430353a2644115251613744cb96bf927
    emacs23_23.1+1-4ubuntu3.2_powerpc.deb
      Size/MD5:  3237746 b060b16972503897bdb405baf9f8943b

  sparc architecture (Sun SPARC/UltraSPARC):

    emacs22-bin-common_22.2-0ubuntu6.2_sparc.deb
      Size/MD5:   177666 79084fb2059562a44eefa63da2e95fa2
    emacs22-nox_22.2-0ubuntu6.2_sparc.deb
      Size/MD5:  1846880 ed489327cfa1a9a4e9d8e9196d001db9
    emacs22_22.2-0ubuntu6.2_sparc.deb
      Size/MD5:  2108174 a28c7e52c90a7b91ea6dbbabbb6b7ef7
    emacs22-gtk_22.2-0ubuntu6.2_sparc.deb
      Size/MD5:  2104482 369ebe0ead5355d411616efa75092de3
    emacs23-bin-common_23.1+1-4ubuntu3.2_sparc.deb
      Size/MD5:   180748 5a8f21c2afd895ab81d5c3123e955e99
    emacs23-lucid_23.1+1-4ubuntu3.2_sparc.deb
      Size/MD5:  3159098 e2cfa30ec84af5ab25c611fd66ed74b9
    emacs23-nox_23.1+1-4ubuntu3.2_sparc.deb
      Size/MD5:  2842968 4d9c13509ef6f6ccf1fe31a087d58af6
    emacs23_23.1+1-4ubuntu3.2_sparc.deb
      Size/MD5:  3150140 cba9915b6b867cb91734bc1faa563852


--KN5l+BnMqAQyZLvT
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Kees Cook <kees@outflux.net>

iEYEARECAAYFAkuxIpYACgkQH/9LqRcGPm3FNgCfUqRv9+U8UKHcNUnWH+q7duWc
q9wAn1eFySFJzqmEZ0J4QKlDycCV7Hfd
=mLkW
-----END PGP SIGNATURE-----

--KN5l+BnMqAQyZLvT--


--===============6441228011077377125==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============6441228011077377125==--