Ubuntu 11.04 USN-1132-1 Moderate: Apturl Denial Of Service Threat

ubuntu

May 16, 2011

apturl could be made to cause your desktop to crash if it opened a very long URL.

Summary

apturl could be made to cause your desktop to crash if it opened a very

long URL.

Software Description:

- apturl: installs packages using the apt protocol

Details:

It was discovered that apturl incorrectly handled certain long URLs. If

a user were tricked into opening a very long URL, an attacker could cause

their desktop session to crash, leading to a denial of service.

Topics Covered

security advisory denial of service Ubuntu software issue apturl desktop crash

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  apturl-common                   0.4.2ubuntu5.1

Ubuntu 10.10:
  apturl-common                   0.4.1ubuntu7.1

Ubuntu 10.04 LTS:
  apturl-common                   0.4.1ubuntu4.1

In general, a standard system update will make all the necessary changes.