=========================================================== 
Ubuntu Security Notice USN-561-1           January 08, 2008
pwlib vulnerability
CVE-2007-4897
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 6.10
Ubuntu 7.04
Ubuntu 7.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libpt-1.10.0                    1.10.0-1ubuntu1.1

Ubuntu 6.10:
  libpt-1.10.0                    1.10.2.dfsg-0ubuntu3.1

Ubuntu 7.04:
  libpt-1.10.0                    1.10.3-0ubuntu1.1

Ubuntu 7.10:
  libpt-1.10.0                    1.10.10-0ubuntu2.1

After a standard system upgrade you need to restart your session to effect
the necessary changes.

Details follow:

Jose Miguel Esparza discovered that pwlib did not correctly handle large
string lengths.  A remote attacker could send specially crafted packets to
applications linked against pwlib (e.g. Ekiga) causing them to crash, leading
to a denial of service.


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:    21176 4b3b12747a0d74571226f614baa9fed8
          Size/MD5:     1329 1593818b0cc37e09d2ac6f7e64b3b185
          Size/MD5:  2265821 fa1051c12d742237c6a936c3b9d61e08

  Architecture independent packages:

          Size/MD5:  3471576 a393a957468bca4e15c9364ac24f9b50

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  1469536 e2ae4f0dce4216d061661c0b1912542e
          Size/MD5:  3969246 e3ed9d749c4d4f26c3196e3fb447a6e5
          Size/MD5:  2927886 11ea5cd125b1b5f3acac2146d6430667
          Size/MD5:   244132 7d0508c236fd13d6d8a563ab7fc13371
          Size/MD5:   245388 a5c8bb513a99b666ff0f85d75b88af8b
          Size/MD5:   244810 94bdcfe8cc631ec0d7cdbee96df70dbc
          Size/MD5:   246542 9f07273879c91266205427af927eaee7
          Size/MD5:   235854 9ad04183a9cd6d489a247713ce4e9d98
          Size/MD5:   249144 ff7002866a9b38870d28a5e173ea4b32

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  1356376 e2f2988a793e75571bf5d4f3261d0978
          Size/MD5:  3337292 3a12c5a3ff1e1bd2057dd4850171ce18
          Size/MD5:  2697048 72434078610b2221b361ff91eee4bbc4
          Size/MD5:   242550 271a8bed3dfc7ca065a781f6d3d3a2e9
          Size/MD5:   244202 242aadecc1569afae206eaf56b30eff3
          Size/MD5:   243668 f2ffc781f72c7b226f9492be94a12727
          Size/MD5:   245526 df3ebe84166a652391624f4bebbde5e7
          Size/MD5:   234748 23b08a47ce04baf4ed19618b96bca1fb
          Size/MD5:   247226 473668bd513f25ee2fcde46968b7475c

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  1419918 1f314073ab661ec4afb95df100281b21
          Size/MD5:  4081432 5d41f093a695cc206799a75e5745a5ca
          Size/MD5:  3061142 31a92b50e25e1a454e4ecf8ce47b9247
          Size/MD5:   241702 c4d4c2ed8e2aebb7bdd0546788e77bee
          Size/MD5:   243188 677e302c35363561b392e725f63194ea
          Size/MD5:   242400 9c54c653daaeb35e8522b89973d8ba22
          Size/MD5:   244406 b7cac53f460e61ef6fe60c0cf025a76f
          Size/MD5:   234018 5a8df5fdc5b0882f61438643be56d615
          Size/MD5:   246374 cc4a428cb49c143fc25e9fcb2c65214b

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  1403514 c40a295f9d4ace3738b33513ffd5cd98
          Size/MD5:  3613052 5802cca8f313454bf16ee3351041b775
          Size/MD5:  2725948 614b580e5b6b0ed787948f139ef696c7
          Size/MD5:   241784 f5501f0afa8669d8f3a4196012af501b
          Size/MD5:   243368 87a0d2f469fa5eedcd4f443a044f2e31
          Size/MD5:   242628 13a3cb3b13b076a901cf0594d4b85aad
          Size/MD5:   244588 4b52568c7bb6174c3ddd2561e459d286
          Size/MD5:   233548 b2fb865a377907ab20d2f68646e2bf51
          Size/MD5:   246676 8d9067e8b3283bec576eade414094e3a

Updated packages for Ubuntu 6.10:

  Source archives:

          Size/MD5:    21854 c56c6ca2437c42f149b5a98fb0a6eec1
          Size/MD5:     1347 0371b1cff2fe0d804eb03b477c9f266f
          Size/MD5:  1398952 61658f464c5eb3f0f00d23e41dd1e1b1

  Architecture independent packages:

          Size/MD5:  3133550 66aced7213b8b5fb18cee16ae5418970

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  1188478 56af2e7c9a767b659235ff811731b658
          Size/MD5:  3819808 55c2c178d32d01cfbb3cb05ee1140b54
          Size/MD5:  2382866 990909899c612b7ea23f74f0000bf350
          Size/MD5:    46776 c87d302817c95966dcf3b520a33abf8d
          Size/MD5:    48398 f1d04b0cdc7ca1cc955d28a7ef7c1693
          Size/MD5:    47650 5693c7173933ea5cac9029342dae3277
          Size/MD5:    49446 4e7c2dce98ea818e0ebe74c696b71bac
          Size/MD5:    38338 a14d8c8a28ecee32713c64a91a3c96d5
          Size/MD5:    51736 56c6197db180be24078541c4511a96c2

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  1140710 eebc102626e5879b55aa51e7f2fbdba0
          Size/MD5:  3619198 4c0cdea5f888e0f88d3389018372f00d
          Size/MD5:  2214932 33169aed36bd10c83de804eb2cf02f41
          Size/MD5:    45304 56a86543453314fb0892cfbdcbb868db
          Size/MD5:    47524 3b5da241cf189a43f014fc041f2bd940
          Size/MD5:    46734 06d6dd4b44bee0d9f85b3da236cd1380
          Size/MD5:    48562 321b0c8bff8f65246d529e37899e5c2c
          Size/MD5:    37164 b1e9cdac0283e06129d7badd6c5a2a1c
          Size/MD5:    50232 ef54801e4d7d167e285e41a22a0c0703

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  1182410 789d306622eb8f0931cc0670c964301e
          Size/MD5:  3909432 2d356fa50a72c8c14a80c6b3d8c6ea68
          Size/MD5:  2506940 19709045e38471100825265e5d1e83c4
          Size/MD5:    44200 778f2cabe3f49c3d3cd499c10f613797
          Size/MD5:    46004 74eb0b37802e09617420cbe44faa07d7
          Size/MD5:    44958 0c75f694f96d1e550ba8666480840d7d
          Size/MD5:    47202 6d61d6c88f639523f45edbf64611932d
          Size/MD5:    36396 7ad9555da076f00384234c7088e6520d
          Size/MD5:    49358 777e1c09da8d21ab69fee0fdd832d6bd

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  1272532 fae459992fcde81d5dccf0ef2895a357
          Size/MD5:  3712720 9d775f0ce92d3f5b62ad5f910c466b68
          Size/MD5:  2155928 a1cc1b444a1c04b37c8e9cc4d4c7db44
          Size/MD5:    44200 53ef95ed00edc782e72c6d73d0f6038a
          Size/MD5:    48986 a3e789dd1cd9e61cef2b4820e9b1f336
          Size/MD5:    45412 9e7621701369ba8fe81ba8687fda8bd3
          Size/MD5:    47486 8d7f42eea270bac5c0116f29054348b1
          Size/MD5:    35694 ede6b2c4067f3b9afddb0d69e3b605cc
          Size/MD5:    49542 7683a23fe8e080b20a40c70eacbca9cd

Updated packages for Ubuntu 7.04:

  Source archives:

          Size/MD5:    21988 3beec8e38606b923816fb02df5eb7412
          Size/MD5:     1416 aa00c8886f1bd89cec69a9bbd4858e91
          Size/MD5:  2132544 7ccf7a395924b5f4452c580d21f4c2f6

  Architecture independent packages:

          Size/MD5:  3202976 4f3112b25da8483b0d456abb0045fc11

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  1243910 c76eca20246ff4ec3ffbe5fbf7b88b71
          Size/MD5:  3759664 9852a4bb91f4a0f2b98bd60042ef6033
          Size/MD5:  2632108 49d05196872918db993800220ad0c338
          Size/MD5:    49374 4584f42ca266daedc5f6f76dd06363ce
          Size/MD5:    51346 0930516e87fbd3061a5a3b050edb2c15
          Size/MD5:    50438 82b6ea1e77b44dde9a38d4fc81c6df43
          Size/MD5:    52770 e59f98acabdf35a7f736c99e538f7e80
          Size/MD5:    40256 1362e88dae61a85c9d500062aa76a14e
          Size/MD5:    54332 6ab1dec26cb2f3c70ca8025b04d30811

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  1205320 c049c03da91fc278642adaa2e1b6f391
          Size/MD5:  3545172 a603e37d7b2c04462b2bdd582f24e17f
          Size/MD5:  2465610 d70f48b6353de974610556746be1d9e7
          Size/MD5:    48062 ce6d349c5f2cffb690ec138a1b937129
          Size/MD5:    50538 c9576a527fbd5d02fc8750ee074dd2fa
          Size/MD5:    49538 b598eb98e3ff2c6066b7b7abc18f1f91
          Size/MD5:    52228 1c0af27601d213ad01e5d8dabcec4cab
          Size/MD5:    39488 138102b04d786a5f9a94b508776b92ea
          Size/MD5:    52992 aa3a121abeb079f3259e8ce2b6bec0d7

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  1300190 72795249159a1ed14816962210964a74
          Size/MD5:  3873432 706971979d4d4a5299dbbd467679ef6a
          Size/MD5:  2758092 df103b35a4d1537f2485b711b7f49789
          Size/MD5:    51084 8e913fda973900a41f15f2fe324e9f42
          Size/MD5:    53534 e88ecbf6c91d8fab916509688bf7fcb0
          Size/MD5:    52380 a1cb39220d251fa6a0e38f5e29cc328b
          Size/MD5:    55408 eb1dc317de27c2c92a566a6705372ee6
          Size/MD5:    42380 8b676536fc2ceb859c7b599a810106e2
          Size/MD5:    56640 48bb3b3ed94e57953a527483e604ba67

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  1342358 a1cd3577935ad5dc9f4d6beb1bef7095
          Size/MD5:  3676920 a9786fe0aa9b32115f58a8a331d15e8e
          Size/MD5:  2407456 6872560dfe598671fa418fee830a2f53
          Size/MD5:    46998 812a53ed4d13327a8a9fb95a15969e81
          Size/MD5:    51928 6597db623d1b2757736db833574c9e00
          Size/MD5:    48400 6946ef2c9f14f2508496ab5d4bf8d64c
          Size/MD5:    51496 d28bb914e822773066c07d743cc6f3c1
          Size/MD5:    38132 c6946f63bcc1277f531b3c1471dbef46
          Size/MD5:    52468 d453d2543c5dc65974ef976f51bf29c7

Updated packages for Ubuntu 7.10:

  Source archives:

          Size/MD5:    22417 f03474889257a87624c30fd9db9819d2
          Size/MD5:     1411 e4afc9a2f18ab5eb7c78680eaaa7ceb1
          Size/MD5:  2266255 abebf45332e70772ffa876d31975d4b9

  Architecture independent packages:

          Size/MD5:  3145182 5007fa53316edb00a6a4ed7e1f8af2cc

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  1248822 ea27ad4b468e3aa5179bf69c29a15d25
          Size/MD5:  3761688 b9cce33c8d2c8bd3ff64d9639000cae2
          Size/MD5:  2827524 db06fc2c1e19450813fbc99275c9a787
          Size/MD5:    49892 6b45a28df24e676c84bde224209119d5
          Size/MD5:    51670 80662336799d1540d8d9ecbafc9c2cda
          Size/MD5:    51388 62019f35daece7892371892d021897ae
          Size/MD5:    53060 837a73242e21b8e1bcd8b38365fb5f6b
          Size/MD5:    40434 d314670fadd4db3ab0aea34ea93ee56a
          Size/MD5:    54682 ebdf185d1a0c0b1a3d56184c0ebaa217

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  1210584 8313aaf64dadcb712ae46f877dd27dac
          Size/MD5:  3555170 2a0efd4ac2770c38fbf4c5e7b846da9a
          Size/MD5:  2660780 278e62a43433f4032d3af17287a62760
          Size/MD5:    48278 7dfe92bbde970499560ab9be624d0fab
          Size/MD5:    50700 6f6a044c8dfcda68fae454aea445339e
          Size/MD5:    50212 d5b06fc5fafbe672761b2be6785e8a9b
          Size/MD5:    52424 62eab09a85bfc42237e8f164790c56b0
          Size/MD5:    39600 f4e12a609f320b93152ff4ec29f31a80
          Size/MD5:    53128 8ed407974ce417f6fbdc467c0c171504

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  1305980 08ee71c91f70bf405408b82d175f5519
          Size/MD5:  3881632 ad589a90894e1b719f16af5f3c56194e
          Size/MD5:  2951374 0d364a46abe6e76324f15f69a858d65a
          Size/MD5:    51350 ad2710caa8b060ef17c26fedbcf37cf5
          Size/MD5:    53640 3958d070ff0c4cf8e4e67652df908a01
          Size/MD5:    52958 560f14bc746c5200d0b2f760702a01be
          Size/MD5:    55460 ef8700fa26e148143d8ee5b7b0467405
          Size/MD5:    42478 b2dd020ca1e0248010f3872629e1532c
          Size/MD5:    56706 54d9b31a86f1e0cd116caa251c6f8a2c

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  1344350 7c9d2736243f6f19181133c9cc063d40
          Size/MD5:  3681178 e06724e645e3d6908fecb92fec409d07
          Size/MD5:  2596516 ca0b249716da070b5c90b4c29c9e1fb2
          Size/MD5:    47210 82bd03255a6473f7786864d0129a79fd
          Size/MD5:    51972 aaca55478a54637f00a7c7a0d4b83b6a
          Size/MD5:    48988 601dfca1f373efaa4d622908dc2b9e46
          Size/MD5:    51526 f9e11b70b2ddd15cea40c0e121159f1b
          Size/MD5:    38126 1d95e05e15e6eec78f5932b4d492b9cf
          Size/MD5:    52494 0d61bc6bc15be5cebaca4b919ae4ff07


--ai3I8gwHc37+ASRI
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHhF2pH/9LqRcGPm0RAgfwAJ9T5kbe02kcdVhB50gjQCrZ6Lo4qgCff0Fl
hxFITpDLwTJh+WMOBBfkM9g=DlRZ
-----END PGP SIGNATURE-------ai3I8gwHc37+ASRI--
--==============#42378064503473189=Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--==============#42378064503473189==--

Ubuntu: pwlib vulnerability

January 9, 2008
Jose Miguel Esparza discovered that pwlib did not correctly handle large string lengths

Summary

Update Instructions

References

Severity
Ubuntu Security Notice USN-561-1 January 08, 2008

Package Information

Related News

23.Tablet Connections Esm H320
2 - 3 min read
The release of Ubuntu 24.04 LTS , also known as Noble Numbat, brings various security enhancements and exciting new features . These improvements
4.Lock AbstractDigital Esm H320
2 - 3 min read
Tails 6.2 is a new Linux distribution release that expands its multilingual support and improves security features. The distribution is a
19.Laptop Bed Esm H320
2 - 3 min read
AlmaLinux 9.4 beta has been released and provides compelling reasons to consider it for desktop usage. While AlmaLinux is primarily known as a
32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved