Gentoo Linux
Gentoo Linux Security Advisory GLSA 200601-01
Severity: Normal
Title: pinentry: Local privilege escalation
Date: January 03, 2006
Bugs: #116822
ID: 200601-01
Synopsis
pinentry is vulnerable to privilege escalation.
Background
pinentry is a collection of simple PIN or passphrase entry
dialogs which utilize the Assuan protocol.
Affected packages
Package / Vulnerable / Unaffected
1 app-crypt/pinentry < 0.7.2-r2 >= 0.7.2-r2
Description
Tavis Ormandy of the Gentoo Linux Security Audit Team has
discovered that the pinentry ebuild incorrectly sets the
permissions of the pinentry binaries upon installation, so that the
sgid bit is set making them execute with the privileges of group ID
0.
Impact
A user of pinentry could potentially read and overwrite files
with a group ID of 0.
Workaround
There is no known workaround at this time.
Resolution
All pinentry users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-crypt/pinentry-0.7.2-r2"
Availability
This GLSA and any updates to it are available for viewing at the
Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200601-01.xml
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or
alternatively, you may file a bug at http://bugs.gentoo.org.
License
Copyright 2006 Gentoo Foundation, Inc; referenced text belongs
to its owner(s).
The contents of this document are licensed under the Creative
Commons – Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.0
Ubuntu Linux
Ubuntu Security Notice USN-233-1 January 02, 2006
fetchmail vulnerability
CVE-2005-4348
A security issue affects the following Ubuntu releases:
Ubuntu 4.10 (Warty Warthog)
Ubuntu 5.04 (Hoary Hedgehog)
Ubuntu 5.10 (Breezy Badger)
The following packages are affected:
fetchmail
The problem can be corrected by upgrading the affected package
to version 6.2.5-8ubuntu2.3 (for Ubuntu 4.10), 6.2.5-12ubuntu1.3
(for Ubuntu 5.04), or 6.2.5-13ubuntu3.2 (for Ubuntu 5.10). In
general, a standard system upgrade is sufficient to effect the
necessary changes.
Details follow:
Steve Fosdick discovered a remote Denial of Service
vulnerability in fetchmail. When using fetchmail in ‘multidrop’
mode, a malicious email server could cause a crash by sending an
email without any headers. Since fetchmail is commonly called
automatically (with cron, for example), this crash could go
unnoticed.
Updated packages for Ubuntu 4.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5-12ubuntu1.3.diff.gz
Size/MD5: 151315
a832d3536f810689cfb51904577afe31
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5-12ubuntu1.3.dsc
Size/MD5: 656
90dd7402e4cec15abe0bf45e6c274503
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5.orig.tar.gz
Size/MD5: 1257376
9956b30139edaa4f5f77c4d0dbd80225
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/universe/f/fetchmail/fetchmail-ssl_6.2.5-12ubuntu1.3_all.deb
Size/MD5: 42434
a7ef705546ce8f4e603075f39a6dde4b
http://security.ubuntu.com/ubuntu/pool/universe/f/fetchmail/fetchmailconf_6.2.5-12ubuntu1.3_all.deb
Size/MD5: 101538
389cd71986280ab56fcbba0e404604f6
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5-12ubuntu1.3_amd64.deb
Size/MD5: 297028
067506bbeffaadd42306539a4997e370
i386 architecture (x86 compatible Intel/AMD)
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5-12ubuntu1.3_i386.deb
Size/MD5: 286240
d5c068f89b48562716e016450e2248df
powerpc architecture (Apple Macintosh G3/G4/G5)
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5-12ubuntu1.3_powerpc.deb
Size/MD5: 296246
544f5b58795c986c7a252cc2e2a8727f
Updated packages for Ubuntu 5.04:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5-8ubuntu2.3.diff.gz
Size/MD5: 137257
f0ceaf752282a062c999b384b8b7ff55
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5-8ubuntu2.3.dsc
Size/MD5: 639
85458cbf69ba7f067527d80ac7ceb4b3
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5.orig.tar.gz
Size/MD5: 1257376
9956b30139edaa4f5f77c4d0dbd80225
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/universe/f/fetchmail/fetchmailconf_6.2.5-8ubuntu2.3_all.deb
Size/MD5: 101674
8a30c5316f2ea1fcce14b3c36ba370bf
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5-8ubuntu2.3_amd64.deb
Size/MD5: 555760
8d4672ed29e7dbe60d9a4f473158aa61
i386 architecture (x86 compatible Intel/AMD)
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5-8ubuntu2.3_i386.deb
Size/MD5: 546362
0cbed65c2404592f5e1bd055574fe53b
powerpc architecture (Apple Macintosh G3/G4/G5)
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5-8ubuntu2.3_powerpc.deb
Size/MD5: 556200
3927a92d2deba7534c5a67bbdecc77fc
Updated packages for Ubuntu 5.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5-13ubuntu3.2.diff.gz
Size/MD5: 131595
f8ee0c74b53ffb107a8f9b8d9ded75d1
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5-13ubuntu3.2.dsc
Size/MD5: 830
64e499d812a87ad755bcd32b352f2b00
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5.orig.tar.gz
Size/MD5: 1257376
9956b30139edaa4f5f77c4d0dbd80225
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/universe/f/fetchmail/fetchmail-ssl_6.2.5-13ubuntu3.2_all.deb
Size/MD5: 42940
7a6644925b26ac82e571c8a191df1d3e
http://security.ubuntu.com/ubuntu/pool/universe/f/fetchmail/fetchmailconf_6.2.5-13ubuntu3.2_all.deb
Size/MD5: 102024
36fe4801b83466c7b4aad98fd64505b7
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5-13ubuntu3.2_amd64.deb
Size/MD5: 299512
5b3da4915bcff58587ba8d7f8262a09c
i386 architecture (x86 compatible Intel/AMD)
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5-13ubuntu3.2_i386.deb
Size/MD5: 286284
bd2eb14e845caaec8f157c5591e7ee5e
powerpc architecture (Apple Macintosh G3/G4/G5)
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.2.5-13ubuntu3.2_powerpc.deb
Size/MD5: 297134
9b60cdcc559a884589943c136359b336
Ubuntu Security Notice USN-234-1 January 02, 2006
cpio vulnerability
CVE-2005-4268
A security issue affects the following Ubuntu releases:
Ubuntu 4.10 (Warty Warthog)
Ubuntu 5.04 (Hoary Hedgehog)
Ubuntu 5.10 (Breezy Badger)
The following packages are affected:
cpio
The problem can be corrected by upgrading the affected package
to version 2.5-1.1ubuntu0.3 (for Ubuntu 4.10), 2.5-1.1ubuntu1.2
(for Ubuntu 5.04), or 2.5-1.2ubuntu1.1 (for Ubuntu 5.10). In
general, a standard system upgrade is sufficient to effect the
necessary changes.
Details follow:
Richard Harms discovered that cpio did not sufficiently validate
file properties when creating archives. Files with e. g. a very
large size caused a buffer overflow. By tricking a user or an
automatic backup system into putting a specially crafted file into
a cpio archive, a local attacker could probably exploit this to
execute arbitrary code with the privileges of the target user
(which is likely root in an automatic backup system).
Updated packages for Ubuntu 4.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5-1.1ubuntu0.3.diff.gz
Size/MD5: 27861
30d956e1d7c6169dd30bcf4f85e198ec
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5-1.1ubuntu0.3.dsc
Size/MD5: 551
9cca8af73c1661423f75b5ca39dc3fd5
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5.orig.tar.gz
Size/MD5: 185480
e02859af1bbbbd73fcbf757acb57e0a4
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5-1.1ubuntu0.3_amd64.deb
Size/MD5: 68856
253028eac0406c5742831edd9f7cc2e7
i386 architecture (x86 compatible Intel/AMD)
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5-1.1ubuntu0.3_i386.deb
Size/MD5: 64370
96ef06af0acb7eba610bab20b6552aa8
powerpc architecture (Apple Macintosh G3/G4/G5)
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5-1.1ubuntu0.3_powerpc.deb
Size/MD5: 67910
2b3012a5c0529d6589d779285455e444
Updated packages for Ubuntu 5.04:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5-1.1ubuntu1.2.diff.gz
Size/MD5: 27858
6d167bf59160bb49a356ad63aaf46ddd
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5-1.1ubuntu1.2.dsc
Size/MD5: 551
671b6542bb14aff13d27c5ff20e048e8
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5.orig.tar.gz
Size/MD5: 185480
e02859af1bbbbd73fcbf757acb57e0a4
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5-1.1ubuntu1.2_amd64.deb
Size/MD5: 68910
1fa1ee8b327076ac4f7ba78c4f31f46d
i386 architecture (x86 compatible Intel/AMD)
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5-1.1ubuntu1.2_i386.deb
Size/MD5: 64192
a7fb45e72550bc1d5ec14bb073ffc000
powerpc architecture (Apple Macintosh G3/G4/G5)
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5-1.1ubuntu1.2_powerpc.deb
Size/MD5: 67938
3128b5006e24b0ab36fe8658b27bd15e
Updated packages for Ubuntu 5.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5-1.2ubuntu1.1.diff.gz
Size/MD5: 27910
67535b38785a093b63e96989d15ce73b
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5-1.2ubuntu1.1.dsc
Size/MD5: 551
4831459b57acf5981235835a47f9e91b
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5.orig.tar.gz
Size/MD5: 185480
e02859af1bbbbd73fcbf757acb57e0a4
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5-1.2ubuntu1.1_amd64.deb
Size/MD5: 70568
cb8fa678380262c7f36a5eca7f75a8bf
i386 architecture (x86 compatible Intel/AMD)
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5-1.2ubuntu1.1_i386.deb
Size/MD5: 64630
882a2257d4658556bd0782f51ce49884
powerpc architecture (Apple Macintosh G3/G4/G5)
http://security.ubuntu.com/ubuntu/pool/main/c/cpio/cpio_2.5-1.2ubuntu1.1_powerpc.deb
Size/MD5: 68776
1d761237abc915aa6bdd3b5d7ad5e5f3