==========================================================Ubuntu Security Notice USN-890-3           January 22, 2010
python2.4 vulnerabilities
CVE-2009-3560, CVE-2009-3720
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04
Ubuntu 9.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  python2.4                       2.4.3-0ubuntu6.4
  python2.4-minimal               2.4.3-0ubuntu6.4

Ubuntu 8.04 LTS:
  python2.4                       2.4.5-1ubuntu4.3
  python2.4-minimal               2.4.5-1ubuntu4.3

Ubuntu 8.10:
  python2.4                       2.4.5-5ubuntu1.2
  python2.4-minimal               2.4.5-5ubuntu1.2

Ubuntu 9.04:
  python2.4                       2.4.6-1ubuntu3.2.9.04.1
  python2.4-minimal               2.4.6-1ubuntu3.2.9.04.1

Ubuntu 9.10:
  python2.4                       2.4.6-1ubuntu3.2.9.10.1
  python2.4-minimal               2.4.6-1ubuntu3.2.9.10.1

After a standard system upgrade you need to restart any Python 2.4
applications that use the PyExpat module to effect the necessary changes.

Details follow:

USN-890-1 fixed vulnerabilities in Expat. This update provides the
corresponding updates for the PyExpat module in Python 2.4.

Original advisory details:

 Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did
 not properly process malformed XML. If a user or application linked against
 Expat were tricked into opening a crafted XML file, an attacker could cause
 a denial of service via application crash. (CVE-2009-2625, CVE-2009-3720)
 
 It was discovered that Expat did not properly process malformed UTF-8
 sequences. If a user or application linked against Expat were tricked into
 opening a crafted XML file, an attacker could cause a denial of service via
 application crash. (CVE-2009-3560)


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:  2664095 5de4651cbd7cde17234d4211ba2411ae
          Size/MD5:     1231 531ed5726641e53070416713ae73fc13
          Size/MD5:  9328584 fd9dd825b8c680fa04c2fc2c957964b1

  Architecture independent packages:

          Size/MD5:   243560 46eb30d3ba78d65a24942d45399ab253
          Size/MD5:  3358290 ddd3fe197e3e098f60440048d47eb887
          Size/MD5:   587756 2066487eb0f6b0c2928fc992162a77af

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  5570950 10762ebd4d1da8b3f5c154b0331e72ab
          Size/MD5:  1635738 bb3f078081d50c309edd48f768b3c731
          Size/MD5:    30414 67faa5e501c7f3dc9a3963f7048df087
          Size/MD5:   794578 9f54103d56a5f8df99c802846452c047
          Size/MD5:   114202 49798f581bc3d754a6f1f70100a4fd43
          Size/MD5:  2862842 a734f567c48c97db1a9edaab2293cd36

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  4832926 e3b2968fe756fe6afb9c71392420b906
          Size/MD5:  1466698 c8a5dbb232fdc29bc527f46729e3f68b
          Size/MD5:    29704 9006cb06f2fdf32ce673583b1908e789
          Size/MD5:   703714 fc3f12993b059cb8bfd324a15fdf16eb
          Size/MD5:   110502 07647877c6b44447c58848e7055936c8
          Size/MD5:  2740134 b8f70f1bc9b50bc3ef2e228c9ed7705a

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  5675960 cc3ee1e8e1e510584952a748c7753a35
          Size/MD5:  1632088 91caeb905d2f7359b46bfa1e46001aa7
          Size/MD5:    31620 e2fbbab09a662399e8c78b60da86b083
          Size/MD5:   783944 9208a0b5d6d6afb85ee7e531473883e9
          Size/MD5:   113410 716fe56c6ed7c5980d49640dfb4ae0e9
          Size/MD5:  2888592 0b1e942c7d04f80643dffc37111a97ec

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  5007520 7a6d11e3bfb4839d91e54163c8bc8172
          Size/MD5:  1579844 387df760a949bcfa63b00cd3eabc233e
          Size/MD5:    29842 8e916b371f894bbb0cbd44ca793e99a8
          Size/MD5:   724172 40e4e41ec21c969741c2e495f2937fd5
          Size/MD5:   111280 3e1915538ed5543abc638a0a4f4df0d8
          Size/MD5:  2805012 6e30c17ab918dbc6d45bbf04c5ccb361

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

          Size/MD5:  2669433 ce6aace302b74f10b812ad8f36396f47
          Size/MD5:     1427 750c5079f39c5f561ce0a3499f6fdcff
          Size/MD5:  9523188 9a615c6868074f60872084ecd240de3e

  Architecture independent packages:

          Size/MD5:  3369752 d69f23606f53c0807afdf5f4bf7f544c
          Size/MD5:   592130 68b924bea153282efb44b665a21720d9
          Size/MD5:    64034 34f6bbbd95e28be372d4b831a3181078

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  6875322 c2b912cfcba60070fc321cd0e11d2dac
          Size/MD5:  1626758 84336dcf71b42f89e83c7591372c9fcf
          Size/MD5:  1053418 9ce514ba9908aeb692d5e59e703f9de2
          Size/MD5:  2913244 ba231096bcd363fc942eef2c86e96e70

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  6363854 e8a3c1d21e8da7c0356737781761a304
          Size/MD5:  1487746 5cd323acc5e32389dc91159a62ef13cd
          Size/MD5:   977212 f4182b9a7a2970e38953d5d93002c961
          Size/MD5:  2813478 1e8a15bd3ddf8c6d589ef810d490086c

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:  6460568 00880e127c62fb7060a9f931ebf9294b
          Size/MD5:  1483496 a0e2c8ea61b0ec99f1becaf60b26f330
          Size/MD5:   980858 dee97559b9fb72e26b48c0e575a1224a
          Size/MD5:  2812240 43d77ea846457dffcd71cdb2b33ec571

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  7120212 d386642eadcf28905cf1becc9a203e32
          Size/MD5:  1627884 adabc45ef8d448f42b8360b25208999b
          Size/MD5:  1075804 b594ec1ca562349a109b314f500ae403
          Size/MD5:  2961624 715684171a931b636ab7ed4802c23745

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  6444750 47b37d33dee80e0383ff6d075ba05421
          Size/MD5:  1560466 74bf28afcf995bc19d13bb2219454ebc
          Size/MD5:   999354 be9d691bedfb7605f066b96389968afe
          Size/MD5:  2829928 43058a2718bf85b38bf97de324bd3615

Updated packages for Ubuntu 8.10:

  Source archives:

          Size/MD5:  2669391 86902ec46b51f8d9dee1162daa2d4f6e
          Size/MD5:     1865 02532d4ac13d12d52fc2b13ceeccf09e
          Size/MD5:  9523188 9a615c6868074f60872084ecd240de3e

  Architecture independent packages:

          Size/MD5:  3369922 9029167296dbf1ac7ddb60b177b16929
          Size/MD5:   592476 6f795d493b1f20a9f64581fb4b7d3d29
          Size/MD5:    64438 758480fba9d2d422921594e71d90a333

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  7121974 d2e6039f0c0ddf21eef95a6b2fa90b59
          Size/MD5:  1643332 98f89ccdb3f99b4025a5ad313861031e
          Size/MD5:  1062882 467302a9972896b767c90bc6a21dd350
          Size/MD5:  2952630 40adee9b87ded0abb075526ad035ac19

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  6587760 d962473da279debf68902205e8f2a19a
          Size/MD5:  1507772 1ac712b5aa90ed2b56bba34e2b2e902c
          Size/MD5:   988150 97d80f94476341c3038c16becd4128d4
          Size/MD5:  2850006 983ef320d3a3a6028912c27f5ddedc80

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:  6687174 fafaf7e6b287a6b1c3b5d657a08f3a4b
          Size/MD5:  1498700 a813ed709bd404916eea797e5f34f20c
          Size/MD5:   988962 98ca0384dc4fa1f3d97cb4972581a3fb
          Size/MD5:  2844532 a0946a995a9edfefacb6d7a57abd100a

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  7446186 366e1bd4ffbd5caf3f4144b689d7dbfa
          Size/MD5:  1634942 18779b2f2d57442c0e1a9483bebca7f4
          Size/MD5:  1079644 206a0a1b2e95397443d5cac17a6b751b
          Size/MD5:  3004894 8ee2079acc40ca83748711abfbbecd71

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  6659518 633ead67d80574eec5691b9c4242d415
          Size/MD5:  1563018 fda5813e60e2e9feb5208e4c291bffa4
          Size/MD5:  1002180 b8c3526955d1ffec8f798399b1ac6a95
          Size/MD5:  2857638 d7ad4a186a7c8a66f0ffb9a1e68f33c1

Updated packages for Ubuntu 9.04:

  Source archives:

          Size/MD5:  2713408 497a1a5759a7fd686a50004dc019ddd5
          Size/MD5:     1840 4c0b8c4b20e7fc42427eb0f06f7b6af1
          Size/MD5:  9594954 1f81e15ea22838260d5c094d31107443

  Architecture independent packages:

          Size/MD5:  3477518 2a8bc6caf988052518d613453440ac3c
          Size/MD5:   593516 1e47188a90551e2607a0792ce5d96d83
          Size/MD5:    64692 9f44e4d920f3e397cc24c56e71eb19f4

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  7086884 572f8bc5eeb9368b6faa4d1a93c99df2
          Size/MD5:  1642472 71f09d7504abdcdfe3767af5657f02b7
          Size/MD5:  1063814 c357f8b5b58892d2eb706ec985bd95e9
          Size/MD5:  2930914 fc695d93a4bb08a526c590d51c52deb1

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  6554448 81ca01e7ebc3c68ec6efa6df6bb21fdf
          Size/MD5:  1506898 64d2344cf67367a6f8a2af3230085368
          Size/MD5:   989744 af53ed5b9b15e124fc76198981381718
          Size/MD5:  2832804 e5c75a45165eca0b018e161b4ed26feb

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:  6654538 ff50fe93c787b378f1c02d3e988c24e9
          Size/MD5:  1498232 9842f54b2818a06c14f1be3022ddd9d1
          Size/MD5:   990616 8cc00956c408d9c19a21469c09eeaca5
          Size/MD5:  2827142 1ffbe79d6c8790437c2fee7fe94b6308

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  7422502 e2ad7d5fe3fa5acde774fb7af4b05572
          Size/MD5:  1634526 44c37ea3d34f9ed74def8e73408c27ba
          Size/MD5:  1081094 f8e53a50261ee09184000fc0263b989b
          Size/MD5:  2983468 59c42d9c40d799fca88d07c294a862f5

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  6641924 f946507dc596f49e64df20c26474f9be
          Size/MD5:  1562380 d85f41c86fad94132f4a2b878b80fa2e
          Size/MD5:  1002606 d0671a68353b9fcfd4a902665ce519d0
          Size/MD5:  2840280 5024c60f95c1533242f34c5f7034fc7e

Updated packages for Ubuntu 9.10:

  Source archives:

          Size/MD5:  2713410 d27a5995212e6c6f32caff9b3d586bdf
          Size/MD5:     1840 d420424b063f2ede7f64935e07e8a887
          Size/MD5:  9594954 1f81e15ea22838260d5c094d31107443

  Architecture independent packages:

          Size/MD5:  3477288 dc4f8ff50b7c8b9a3abd9e5d0aa47489
          Size/MD5:   593512 1e3a2b833745ee01a95378b05d83e715
          Size/MD5:    64694 5a875705dcfc489c10dbc4c8d0ef29c4

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  6876620 4ee4369130b0b9b12dd303b3586d0e07
          Size/MD5:  1643510 36f3b9622eba9c221e1ce90e73465149
          Size/MD5:  1066786 b7da39378023524df96e42d8c5f55d78
          Size/MD5:  2932056 38fbfa3c936e2c386427636eb439ca59

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  6467440 52d57c4475b42af86857cb8154eab656
          Size/MD5:  1492278 6ccdaaf56a34f214343eb7dd71bb0d4e
          Size/MD5:   985188 5e110175af1bfb54a58110af58aa5ffb
          Size/MD5:  2828314 bd3e56fdf77d5543a136a9b62cca7779

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:  6558038 52a6fd9d89a3c8502066b88f6090aa3d
          Size/MD5:  1495462 6afbecaf2a24295fcb38479a3b6ff1dd
          Size/MD5:   991968 297a54e24d6728ded9a065d931d951ed
          Size/MD5:  2832416 8bb2e4900bac215d5c278261af841868

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  7185436 16b7614a9db64a3d38f0e3de2b17ef0f
          Size/MD5:  1626190 93d3a1c366dd3401dda05631a4628e17
          Size/MD5:  1047022 6b6df09ca38c2e290527ca77869a78d4
          Size/MD5:  2907540 0d96ed2460c5dd669967c8aa21abfa0c

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  6569354 f695cb773324a9780438e529fbe1a5d1
          Size/MD5:  1549868 51b1f23e858f2e45e46a8e8bcd0e8d90
          Size/MD5:  1002130 3d05e578ca3ac3636da6610a3ad16a07
          Size/MD5:  2837692 60c0c15bea33864be53752c3203a5378