Debian: courier buffer overflow
Summary
A problem in the Courier sqwebmail package, a CGI program to grant
authenticated access to local mailboxes, has been discovered. The
program did not drop permissions fast enough upon startup under
certain circumstances so a local shell user can execute the sqwebmail
binary and manage to read an arbitrary file on the local filesystem.
This problem has been fixed in version 0.37.3-2.3 for the current
stable distribution (woody) and in version 0.40.0-1 for the unstable
distribution (sid). The old stable distribution (potato) does not
contain Courier sqwebmail packages.
We recommend that you upgrade your sqwebmail package immediately.
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database
apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 3.0 alias woody
--------------------------------
Source archives:
Size/MD5 checksum: 31812 1e442e4981a72331ee5cd14c3a9b38b6
Size/MD5 checksum: 913 b0f1eca2a415ad9489fcddffc763133c
Size/MD5 checksum: 3238013 350cbb2e8b5f384409bdf2a15d605bc9
Architecture independent components:
Size/MD5 checksum: 313318 9ffb97bf4dfb7d8c81cad69a3a8e3fa9
Alpha architecture:
Size/MD5 checksum: 52090 f0c8be437fab3970abe1f85fd3d031ef
Size/MD5 checksum: 47134 5ab678174a550e0aaba0a66621bc1f4d
Size/MD5 checksum: 146116 d37e896ddceb6a22f9ab07839c58d142
Size/MD5 checksum: 18480 aca373081b7bcc49f543a0f9f22c66a3
Size/MD5 checksum: 138688 6bbf7789d3d5b922c8804b5e92ef6498
Size/MD5 checksum: 9770 011e7fa45ec87997bd350d9db9bdd5ae
Size/MD5 checksum: 61156 2d09044e391d7a093ae3575b98520f29
Size/MD5 checksum: 208022 83c5fe4793107b4844f8553b859c470e
Size/MD5 checksum: 134074 280ac1c073b271412c0932e20ec1e045
Size/MD5 checksum: 667280 35b51e45df915bf437b978613b5932e1
Size/MD5 checksum: 62176 3776eb4c75541fb0c640a3d29b58f603
Size/MD5 checksum: 40030 ef7e68249a62d103a230f4411174a1de
Size/MD5 checksum: 25174 98a826fc4b31ca9d21052a8830475ff0
Size/MD5 checksum: 329272 8088db6cdb6dd3e6f48916769329a8a1
ARM architecture:
Size/MD5 checksum: 47026 d99f2b77e05fafaa03c4fd8cc14c2d68
Size/MD5 checksum: 42244 07a25700c5180e6bc66528a5e1418e34
Size/MD5 checksum: 128422 dabd5b6b22e83e543d63ce5037b06e82
Size/MD5 checksum: 17434 add1f98ed948318ab0d903fe9a40679e
Size/MD5 checksum: 124394 9e40158fd8a3706991d519846aaf6029
Size/MD5 checksum: 53362 3b4973e062ffc1c64b4aec1afbb778e8
Size/MD5 checksum: 179910 9d8dff9a47b00f0676a043558c59637d
Size/MD5 checksum: 116014 17b071b5baea820e437756406fed408b
Size/MD5 checksum: 549508 de4ecc66d28851548c4d526c76d9a9fd
Size/MD5 checksum: 55638 9a325f0d59e1a034c47d74610f6ea1a9
Size/MD5 checksum: 35160 3b09a60a290e00d1c09cea5dedcc5618
Size/MD5 checksum: 24804 db742d640a929b7b4f9c8844b5dbe4b8
Size/MD5 checksum: 297030 e5e8b99a2000c1e2d4f335303b64cbe2
Intel IA-32 architecture:
Size/MD5 checksum: 46236 9ba95d7eff7b29817e2d778a67e2273a
Size/MD5 checksum: 41562 1ca2f2ff029cc59476a4636aaa4310ba
Size/MD5 checksum: 128632 0076e89f05a297e66637cb13133da524
Size/MD5 checksum: 17176 821da770799d205b795f32278d86dad1
Size/MD5 checksum: 120530 0b7c03c9c32e9fe9af312892646dd3b9
Size/MD5 checksum: 52768 d6589c240138f172358fb29e9ee5d22d
Size/MD5 checksum: 174782 d05f4122f8037caa69b361a48aa7f6a9
Size/MD5 checksum: 109396 a21f2c4e6cc27cc8c81dbe7a0090c3cc
Size/MD5 checksum: 538848 9168e2467d89fbd2df2451094bbcf162
Size/MD5 checksum: 54186 9c8ab0730f4b0a820728fb292a5cd579
Size/MD5 checksum: 34858 610f20aeffc4bd1d4bbb3eb6e83592a1
Size/MD5 checksum: 24924 dc52fa5b6f4581f8032ecc2f55f707fa
Size/MD5 checksum: 285380 6dadac0651357425f92596e5ff870e5d
Intel IA-64 architecture:
Size/MD5 checksum: 75438 5665f9f1d8f3078088b9538d750be2c6
Size/MD5 checksum: 70574 cbdab4a6e5f89a334fdc7ed1fe4468cd
Size/MD5 checksum: 193602 ea156836d0fe978d04a10b2da32cdb18
Size/MD5 checksum: 22810 eadd0ef0213eda0cde3554e58b6e2f73
Size/MD5 checksum: 213656 97d42da81854d96fcff0a8b2326cc3e0
Size/MD5 checksum: 87076 df2cf5e47806e46cb75c89c42e11ebfc
Size/MD5 checksum: 271196 809ea04f5d1e07c074043338edf5a987
Size/MD5 checksum: 151536 4361a1f3f8ff67f0afd931492b01093a
Size/MD5 checksum: 966688 52a45e07162d2e7c567fa393e14cdf5d
Size/MD5 checksum: 103416 1a17c5f99e1acc065007e643926186b1
Size/MD5 checksum: 53552 c58f5c938d0fe08f330fe9293318bf2b
Size/MD5 checksum: 25816 5f76386299041ae19c6dcc816858aadd
Size/MD5 checksum: 506172 97c9270f58819ed21f10331de5691210
HP Precision architecture:
Size/MD5 checksum: 47870 f981b119ce18e3387ffdcf1bc4526293
Size/MD5 checksum: 43138 ffcfcd8e2f945d55d37e26990b174140
Size/MD5 checksum: 130192 0ee34bb13a9ce572d35a0dff466f1d01
Size/MD5 checksum: 17442 b80f86eace2b1211c58726c2f85a6a14
Size/MD5 checksum: 125100 d891328aafd9a5ffbdf0c79d72d4806f
Size/MD5 checksum: 54236 42d2ac47086871b8345a76b4b8cd451a
Size/MD5 checksum: 193380 524d3e7fd9de29222b36d7237b414f4c
Size/MD5 checksum: 150962 7e19b94784dc884e119ded0e8fe28a16
Size/MD5 checksum: 643408 a94f1d6465759641ee239636a0154612
Size/MD5 checksum: 56078 a97ed3f3c351da980ddd12f125283bf9
Size/MD5 checksum: 35298 93bea6c8498840cfab65561962665310
Size/MD5 checksum: 25046 45280bafd9090ab5b197e822f76b2fe0
Size/MD5 checksum: 296158 ded272962c0abe929001135f8de30701
Motorola 680x0 architecture:
Size/MD5 checksum: 44910 2acc3c2018be05937bc121d94618a2aa
Size/MD5 checksum: 40196 bd6179b876384f204d5f9c9ab128694b
Size/MD5 checksum: 124772 a27a479f8954dbc87b009df4bba6d28f
Size/MD5 checksum: 16880 6ef5b506692e3e5531691c240d5a7a86
Size/MD5 checksum: 114722 cc2f2b43c3afb6958a772e516c9ebbf5
Size/MD5 checksum: 50930 63d8813b9423140c27aaf7f18a484267
Size/MD5 checksum: 167534 4f296e20d874270fd454dc9f731a9043
Size/MD5 checksum: 105138 b6fa254f11da5d7817e0252f64c443de
Size/MD5 checksum: 506626 d3118a405062a750ba24a2bfb02f0570
Size/MD5 checksum: 51488 6bd0c06d9ce66f41a53e14e1819a1cc8
Size/MD5 checksum: 33654 3d7003cf508c4c926b9a39d75f00d89b
Size/MD5 checksum: 24848 553a873c059c9250847ce1889e2b414a
Size/MD5 checksum: 271152 00ff03e2a463946498dd8f03100e09dc
Big endian MIPS architecture:
Size/MD5 checksum: 49178 1ac36d8dc51be2b2acac1d0b4b0e271a
Size/MD5 checksum: 44080 d6b40a066ca0f1b50a9faba0f6a1fb8b
Size/MD5 checksum: 136160 f47963ea9331e2236a61aa6682a422fa
Size/MD5 checksum: 17526 8fd1ec65019ee231c01aac828659d86d
Size/MD5 checksum: 127822 9939f717ba43ec545745c27046a61c98
Size/MD5 checksum: 55442 85f15e2e4670d84c1a8b6a86401c1cf4
Size/MD5 checksum: 185678 b639240f8687af7630c89c1d18f38770
Size/MD5 checksum: 108930 f7f7a79ea53a050c25389643c346e732
Size/MD5 checksum: 606256 0d34d1d6cd8478c87327e25112107b78
Size/MD5 checksum: 57466 33b62dc31bb652a837705739cf3af1b7
Size/MD5 checksum: 37178 e3ba9a5782e12c9940b7aef70ca4b6f7
Size/MD5 checksum: 25086 d07b0d349c8f6b7c7e93d889099e6511
Size/MD5 checksum: 302182 ea4d5b702c10d2735519d5685c961265
Little endian MIPS architecture:
Size/MD5 checksum: 48446 08f9b98f9a33821ae6d88f68c5bd5670
Size/MD5 checksum: 44042 4409ee17a4accd8a4769b0c460a3cbd5
Size/MD5 checksum: 135328 42225565a12444eec60939f71b5cb5ee
Size/MD5 checksum: 17464 f373a2061dbb247853bcb148bee582dc
Size/MD5 checksum: 127126 7e53891eef7a72a64a05f23f80cb6fcd
Size/MD5 checksum: 55376 6ed3598af8de1961ad91bf49c9061a27
Size/MD5 checksum: 185172 018278a4ef56c7b7aa460cf9e730ae26
Size/MD5 checksum: 106972 ee4e6606a8877c607f8fbb16f80afe80
Size/MD5 checksum: 601548 dd45a5a5f517bb83399d1f95c3e1b1d1
Size/MD5 checksum: 57290 a6afb9df7aa9954dc3be3fb9727d8fcb
Size/MD5 checksum: 36900 6711ce7e85079d77be6a8363d3e1528d
Size/MD5 checksum: 25022 a15f30594d1fd8318ffe09bab0699cef
Size/MD5 checksum: 301858 cbb895ef571d8f055e2c36d461d297e9
PowerPC architecture:
Size/MD5 checksum: 44974 2da63d8521c0e0922b640dcc15076168
Size/MD5 checksum: 40608 f631880537854a4a1e8dab9957bb802c
Size/MD5 checksum: 125768 ade86a0e791316ef429933418b094f54
Size/MD5 checksum: 16926 33ce156f4a597834a95a8d67e7af43c4
Size/MD5 checksum: 117442 d3da3161498e4d1396bd5c81996d35cc
Size/MD5 checksum: 50802 e652495e022ed1f37b0d5f2165fa7aa4
Size/MD5 checksum: 171966 7f736e44b32e170b9f44c0fdc180df3e
Size/MD5 checksum: 103324 c6ed0c6ff498d5cbe55458d791308409
Size/MD5 checksum: 519098 0c968ffcad7d130c547305a0d7bcbf16
Size/MD5 checksum: 52406 c305e045022cdd843f20dfcad6dc0ed7
Size/MD5 checksum: 33830 39b8efea16fc9a2bf56d13803ab11788
Size/MD5 checksum: 24834 b758ba715788feac2ac8ca38161fe46d
Size/MD5 checksum: 278690 00901026c92a4454475def98adbee2d9
IBM S/390 architecture:
Size/MD5 checksum: 46894 439787370ecdabeb0ca9d9f4953d64f0
Size/MD5 checksum: 42082 5f98ed6178f815914c964975a634e3db
Size/MD5 checksum: 129370 a7b44ce838be815e720729a7c5dd9de0
Size/MD5 checksum: 17682 371f48d49c587724ca484582c781ece2
Size/MD5 checksum: 118362 cebd591e152f138a51c31e69e631ccac
Size/MD5 checksum: 53468 09a7b22833c1a804f293ac22e63530f8
Size/MD5 checksum: 168852 85513b25fa6263ec8c0660818ee371fb
Size/MD5 checksum: 98952 a75254e707f38765cb7554603a9994ae
Size/MD5 checksum: 534784 a892c6c3f6a9defbd4e0a5aaae8d6b2c
Size/MD5 checksum: 54020 619f854a3a79ba782264c6df998d5f1b
Size/MD5 checksum: 35128 64aa43762fcbe3c889eef9dcc144ff6d
Size/MD5 checksum: 25134 97773d48ed04ad114256a8f6f755f0ff
Size/MD5 checksum: 281094 25b93ac195fe13ebb6af90c0ab26ca71
Sun Sparc architecture:
Size/MD5 checksum: 48246 b7ec754553b583e55dd4390e9bca44d3
Size/MD5 checksum: 41532 7842ae8c2264c576c9d5cbb21ff78ce5
Size/MD5 checksum: 141492 cbcef97a339f5c7307da2020eb92223c
Size/MD5 checksum: 17140 6638e55bd74444c47b4bba02a0fe1ae7
Size/MD5 checksum: 124222 0165b7aef97402bf104604fc3ff08113
Size/MD5 checksum: 54156 7e7acbafaf7e7c8398201d8087d5f2b3
Size/MD5 checksum: 178498 43c5a12b5cdd606349a3bb35e8962ae9
Size/MD5 checksum: 103616 31e89c5c6eedde32899de79068bd1302
Size/MD5 checksum: 579932 a7d6a098d6f262e5dc33b0070cd97f10
Size/MD5 checksum: 55294 be8af8b1b6e39463a05184fbefb44abf
Size/MD5 checksum: 41696 c775fb5f9a6a714f156172425d713f71
Size/MD5 checksum: 27668 f5488a26188ce529d0f55cb98e585e05
Size/MD5 checksum: 287372 a8bf135de17c5ecb1469f658087e8b1f
These files will probably be moved into the stable distribution on
its next revision.
Survey on the use of Debian GNU/Linux 2.2 alias potato:
Survey on the use of Debian 2.2 (potato)
