Debian: DSA-1854-1: New APR packages fix arbitrary code execution
Summary
Matt Lewis discovered that the memory management code in the Apache
Portable Runtime (APR) library does not guard against a wrap-around
during size computations. This could cause the library to return a
memory area which smaller than requested, resulting a heap overflow
and possibly arbitrary code execution.
For the old stable distribution (etch), this problem has been fixed in
version 1.2.7-9 of the apr package, and version 1.2.7+dfsg-2+etch3 of
the apr-util package.
For the stable distribution (lenny), this problem has been fixed in
version 1.2.12-5+lenny1 of the apr package and version 1.2.12-5+lenny1
of the apr-util package.
For the unstable distribution (sid), this problem will be fixed soon.
We recommend that you upgrade your APR packages.
Upgrade instructions
- --------------------
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database
apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 4.0 alias etch
Source archives:
Size/MD5 checksum: 643328 a3117be657f99e92316be40add59b9ff
Size/MD5 checksum: 1036 9dc256c005a7f544c4d5c410b226fb74
Size/MD5 checksum: 26613 021ef3aa5b3a9fc021779a0b6a6a4ec9
Size/MD5 checksum: 21651 e090ebfd7174c90bae4e4935a3d3db15
Size/MD5 checksum: 1102370 aea926cbe588f844ad9e317157d60175
Size/MD5 checksum: 856 89662625fd7a34ceb514087de869d918
alpha architecture (DEC Alpha)
Size/MD5 checksum: 121726 df1e2d6e8bf9ed485ad417fe274eb0e3
Size/MD5 checksum: 83690 b5873275f420b15f9868ea0dde699c60
Size/MD5 checksum: 371668 4e8bd42151f3cdf8cee91c49599aab42
Size/MD5 checksum: 129158 5074639b4b0d9877ff29b96540fdfaec
Size/MD5 checksum: 185420 ddf84849ff3bee792dc187c6d21958bd
Size/MD5 checksum: 148140 079cff06535a7e3f4e9a5d682d80bb1b
amd64 architecture (AMD x86_64 (AMD64))
Size/MD5 checksum: 72946 6b11e4b65bdf67981a091177d9644007
Size/MD5 checksum: 126156 b420f555d02504e0497a0ba3c27e0cac
Size/MD5 checksum: 127742 1606857f3291ccb10e038219f1f2eab3
Size/MD5 checksum: 187302 bb1a4aa5768fa012201ad1e72bc27e93
Size/MD5 checksum: 348120 b5d6b4e7c628dffe867159b54b6c82f1
Size/MD5 checksum: 111664 6b51dc29ea4defa975902d246188086f
arm architecture (ARM)
Size/MD5 checksum: 121504 3ba789c274f2ed7030aa286ea57dbb3d
Size/MD5 checksum: 175146 86ff258e9181fa424cb043dc22e2c0e0
Size/MD5 checksum: 117302 97d701c8f9d6746eb14448bfde8e8588
Size/MD5 checksum: 104934 45a976662beb7ec3b15ee7c7a45f3de7
Size/MD5 checksum: 66110 09c54142359236f50654bd9c7b375781
Size/MD5 checksum: 335520 14d06ecfb54247718b780c893df8f4cc
hppa architecture (HP PA RISC)
Size/MD5 checksum: 126186 9494353aa42e983a245af2890dd2c6d7
Size/MD5 checksum: 78668 60c87b0e86c1ed31deecddd88cdf5fa5
Size/MD5 checksum: 133918 ae993c733053a326603c5b750505bee9
i386 architecture (Intel ia32)
Size/MD5 checksum: 116052 6238f10eb5077bb53b9664b82b985c40
Size/MD5 checksum: 338694 262cec472ec3aaeb1b4d38eebaa940c8
Size/MD5 checksum: 68854 78ab4f6425153d8b746b99842994d555
Size/MD5 checksum: 109138 4aa254cacd4e95785ae823cedb1cce2f
Size/MD5 checksum: 122136 4a16475bb5780625902c79069681ae74
Size/MD5 checksum: 180654 481471d06045a2e348b55de6dbdf5f94
ia64 architecture (Intel ia64)
Size/MD5 checksum: 156562 52761fff3e82e21728e0c6a79bf4508f
Size/MD5 checksum: 99446 3ad58d882e434e39be525e7aa41d9e93
Size/MD5 checksum: 141894 5b7351a6b4c3765e3d76b9d22e04cf0e
Size/MD5 checksum: 118716 8c73712293cd4d9a5935aefd18a3e4c9
Size/MD5 checksum: 171514 f474001e4f852a44af517b5d6f737a65
Size/MD5 checksum: 385514 76d0bbda16c749f6a5b40fd6297a180a
mips architecture (MIPS (Big Endian))
Size/MD5 checksum: 188816 de1ecb467042d2c1891cc1d2f5db83d9
Size/MD5 checksum: 130394 fc34d9b137c080b63374d809c1d6bf8b
Size/MD5 checksum: 130492 4d7cdffabbef214eeea0c02a346d0eb8
Size/MD5 checksum: 70776 6fe66f5cb81c2a3af2fa0cd64a85cfd8
Size/MD5 checksum: 357368 aab08f1596aead97cc48924ebf99c80e
Size/MD5 checksum: 112644 9c6d720999259453daaa13e8ec3c8336
mipsel architecture (MIPS (Little Endian))
Size/MD5 checksum: 186464 5b2392a143ff8a173a771b819377ab47
Size/MD5 checksum: 128052 02e3c278190e92d7131c275aab5f5c44
Size/MD5 checksum: 358010 480087a77642a8ff99a32bb323b62600
Size/MD5 checksum: 130712 50da703a75deb2ba87d4be171e80bd5b
Size/MD5 checksum: 113352 d363370bcba834268202db5271b20aa3
Size/MD5 checksum: 70794 1f57c4362c286bd0d2df40d775690612
powerpc architecture (PowerPC)
Size/MD5 checksum: 125106 92d5d46effd18aaa8e849254d9da8acd
Size/MD5 checksum: 348504 2f4f96652c28e3f5f1cfae8e5265ec83
Size/MD5 checksum: 130380 dacdce767bcff6b0ecbe66add6838e8b
Size/MD5 checksum: 189780 ae1e23e3080fbfe3ba26b8acf9561d6c
Size/MD5 checksum: 113956 1e2ba4da9ee0775325b351887c182f52
Size/MD5 checksum: 72472 3a47c9eca3ec7b6f4e87609b3aca7f65
s390 architecture (IBM S/390)
Size/MD5 checksum: 124802 cdd46922b57a51fedb25ae401d8dc753
Size/MD5 checksum: 121978 71edc1d101933b1a43a9c395427a4aed
Size/MD5 checksum: 128570 f0f7d5dfecb61c6212e0803a325e8a01
Size/MD5 checksum: 186320 cca313c55848e6161810ff16fb71390f
Size/MD5 checksum: 349848 b9cbaa0a70b9bfa28d74ac4a6e107428
Size/MD5 checksum: 76668 f6b5e093ae1c3c5d4442e223115052de
sparc architecture (Sun SPARC/UltraSPARC)
Size/MD5 checksum: 338056 ab06437e18c1cc36dab35779cc4102d8
Size/MD5 checksum: 103200 1c6f94d15f4e3052e9ed80fc232f96b5
Size/MD5 checksum: 117840 5f0671d301a9e2ea8020d0dcaa71a42b
Size/MD5 checksum: 66374 668815a44c99c366ae8e3f624613932e
Size/MD5 checksum: 167962 f338f71eeb38be58c67d1ac0fd92d1ff
Size/MD5 checksum: 117510 63dd9c471f24472eb46a5fd9dcb92077
Debian GNU/Linux 5.0 alias lenny
Source archives:
Size/MD5 checksum: 1127522 020ea947446dca2d1210c099c7a4c837
Size/MD5 checksum: 12398 b407ff7dac7363278f4f060e121aa611
Size/MD5 checksum: 658687 4ef3e41037fe0cdd3a0d107335a008eb
Size/MD5 checksum: 1530 dccceaa89d58074be3b7b7738a99756b
Size/MD5 checksum: 23138 a2222477de9ad92015416542a2c250ed
Size/MD5 checksum: 1284 4330306f892fd7c0950b1ccf2537b38d
alpha architecture (DEC Alpha)
Size/MD5 checksum: 806236 3689d5ee779d3846fe67c9dad2f213dc
Size/MD5 checksum: 53204 92bb2e8a7c48e6f8437680e08607a3f7
Size/MD5 checksum: 147658 edba141e93c382fbf0ab2bbec1dba899
Size/MD5 checksum: 158060 b80ad32790c6c8d89f0007a69d9ce0b8
Size/MD5 checksum: 90740 c715b55d060a2d4e8d7684477d0b9014
Size/MD5 checksum: 121774 565a4fdd123d04698907456e40d4df0b
amd64 architecture (AMD x86_64 (AMD64))
Size/MD5 checksum: 54232 3f23cc38f68bbf926b801b82b3fea917
Size/MD5 checksum: 80046 f6158018f26ddd6369687b8f9f64aa75
Size/MD5 checksum: 114326 851cc08504589c09f08ec9e6efa52ef1
Size/MD5 checksum: 147928 136a5a5c0d558d8f252d1ed44efed217
Size/MD5 checksum: 133850 6b71ac477650c688863ef33fc58216a0
Size/MD5 checksum: 825740 bf80dbc726c5b691b023e96e463ba88c
arm architecture (ARM)
Size/MD5 checksum: 818438 8e6c8a9964650a793e4a0e5ec51a8619
Size/MD5 checksum: 54912 a853d8175d2bee56c6f37aada02fc2ca
Size/MD5 checksum: 107790 85e0815ff8f340d99052a9c9f604cccd
Size/MD5 checksum: 71112 20a4c9fd130c188166c0ebc6ceff5fcf
Size/MD5 checksum: 138982 c84f95cff9713ed403fae7b712456ade
Size/MD5 checksum: 124090 c4fc3663255a416725a69818e3523731
armel architecture (ARM EABI)
Size/MD5 checksum: 109676 e26ebffcc101ffc87963c9a65b3543f6
Size/MD5 checksum: 124626 4c34337eb3d1d55900a067f2c8412abc
Size/MD5 checksum: 821990 19c68f5f904bb3bbdfd44349f8544e83
Size/MD5 checksum: 55820 f39b0928bc4b91fb60bd6259c6ae6e02
Size/MD5 checksum: 70086 1d3032e0879ed1ea6fa2f04c34af1782
Size/MD5 checksum: 139434 e802e42577998c62fadfc335edb3b81a
hppa architecture (HP PA RISC)
Size/MD5 checksum: 83668 3c8893214d7375303eaf1eec6e27212b
Size/MD5 checksum: 827762 2fd0d8dd54c92c828e42100bb8816b00
Size/MD5 checksum: 142916 14e1e2f8fa50b0eb1772f1e4bbc26e50
Size/MD5 checksum: 140872 7fef63f2cd282e44c51b5e69d94d8706
Size/MD5 checksum: 113954 926b8c39fee1787a94b3d6cc1c6d420b
Size/MD5 checksum: 54332 18751dc2275828a126b2dbe568678f32
i386 architecture (Intel ia32)
Size/MD5 checksum: 73814 2ef03972ed5b2232fe5782c4960bc362
Size/MD5 checksum: 54582 edc98ca59cebd14195602929def1da31
Size/MD5 checksum: 141438 5a54e1cac30640ca5e9922586d9983a8
Size/MD5 checksum: 108882 075f37cd43e483d27ff0b94ad01f2d08
Size/MD5 checksum: 121138 fc2411e049936d12702713c82377c9e5
Size/MD5 checksum: 809460 a5648e0404f1cb4244c156cf85bfe0f5
ia64 architecture (Intel ia64)
Size/MD5 checksum: 135404 8f7a4964b22e5e9e5297380c15d8818d
Size/MD5 checksum: 170110 412b51e1e3c1ed4e309459dd17844e68
Size/MD5 checksum: 154362 2fc1441f28ef4f90446464627c8ef36d
Size/MD5 checksum: 837496 6862607faf59e42525f5205d8a967818
Size/MD5 checksum: 111140 12f0bf9e6264cc9c170c2b8365428cc0
Size/MD5 checksum: 53428 a6a55d644fb58a0f7ea6a9b509cb71d0
mips architecture (MIPS (Big Endian))
Size/MD5 checksum: 110932 feb666e4f402bcb1954bc194c37496d7
Size/MD5 checksum: 147482 e2508cc75520518ccbe4c3a5cf0cc50c
Size/MD5 checksum: 56582 5134a012017e629239cc543fedf4edf3
Size/MD5 checksum: 74584 2fbb1b76079126fd701f32e45a9cf7f0
Size/MD5 checksum: 792650 126585d9fe0def77f7632f9d098eb11d
Size/MD5 checksum: 136438 ae62dc1d5a32fac11615f4b67cfa4a6b
mipsel architecture (MIPS (Little Endian))
Size/MD5 checksum: 56414 ecca7e3643ccb91fc962b886bdddbc0e
Size/MD5 checksum: 136390 d45f956c14ea9fe22b77bce3810c32b7
Size/MD5 checksum: 144740 05411f88615592531468cdd89bb4b5d0
Size/MD5 checksum: 74366 a15e15331a62f33d33481b7e53f07b48
Size/MD5 checksum: 792762 dc1e4748e106c82e9f8bf6c3ecce4a38
Size/MD5 checksum: 110974 a5dd28b5c9b3106da8e4c81abea6777d
powerpc architecture (PowerPC)
Size/MD5 checksum: 82512 f8a18fb94a4ef3cabec01c288a26eef5
Size/MD5 checksum: 55708 555d64273f15c6ebd503b7cb84f0fb29
Size/MD5 checksum: 132338 66e77820b5b9d2a05d6df5c4ec2c76b0
Size/MD5 checksum: 116238 1a291989c32ea21ac8eef9ca51831fc5
Size/MD5 checksum: 147180 cc9f274b349dbbb9ce9b69b0d0edf493
Size/MD5 checksum: 821948 fc3acf3dec16223caf6f932e8b7c0c01
s390 architecture (IBM S/390)
Size/MD5 checksum: 126058 474bddd0f3c5a69cc21fc2d403fe90f6
Size/MD5 checksum: 148614 89cc7bb2619f28e5e6e9d0042050a924
Size/MD5 checksum: 133044 fb35625937e6fae551d97df283a32dd9
Size/MD5 checksum: 787872 2dc32425bfbd17b841218064599d80ed
Size/MD5 checksum: 85496 c41f2fdebd22ec066815211768dcdc3a
Size/MD5 checksum: 54414 c36fa2538d8077a8ef09842e07bd989a
sparc architecture (Sun SPARC/UltraSPARC)
Size/MD5 checksum: 814624 613a70f3443404f5939e91e229d01d25
Size/MD5 checksum: 54370 4c12839718c73a2b96b607d77fcbc583
Size/MD5 checksum: 131706 5c2ad3da38aaaab8ac2c14656602c532
Size/MD5 checksum: 108712 c1f66be9c2daa447d5bfbd1f7639aada
Size/MD5 checksum: 72738 ec558ed4277ca676f07e3181ffad0335
Size/MD5 checksum: 124976 22385c13d934c3877ce2f9eeaa4584e3
These files will probably be moved into the stable distribution on
its next update.
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show
