Debian GNU/Linux
Debian Security Advisory DSA 1114-1 security@debian.org
http://www.debian.org/security/
Martin Schulze
July 21st, 2006 http://www.debian.org/security/faq
Package : hashcash
Vulnerability : buffer overflow
Problem type : local (remote)
Debian-specific: no
CVE ID : CVE-2006-3251
BugTraq ID : 18659
Debian Bug : 376444
Andreas Seltenreich discovered a buffer overflow in hashcash, a
postage payment scheme for email that is based on hash
calculations, which could allow attackers to execute arbitrary code
via specially crafted entries.
For the stable distribution (sarge) this problem has been fixed
in version 1.17-1sarge1.
For the unstable distribution (sid) this problem has been fixed
in version 1.21-1.
We recommend that you upgrade your hashcash package.
Upgrade Instructions
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given at the end of this advisory:
apt-get update
will update the internal database apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 3.1 alias sarge
Source archives:
http://security.debian.org/pool/updates/main/h/hashcash/hashcash_1.17-1sarge1.dsc
Size/MD5 checksum: 571
0e6e1272eaec884fa66ae84e962f51cc
http://security.debian.org/pool/updates/main/h/hashcash/hashcash_1.17-1sarge1.diff.gz
Size/MD5 checksum: 3604
bb43fcc72e1c40cfd7e8a337902c7c89
http://security.debian.org/pool/updates/main/h/hashcash/hashcash_1.17.orig.tar.gz
Size/MD5 checksum: 185522
9e5a8a35941c0cdccac93f41bd943593
Alpha architecture:
http://security.debian.org/pool/updates/main/h/hashcash/hashcash_1.17-1sarge1_alpha.deb
Size/MD5 checksum: 168504
b0ee6dc37c1fbcc9d9084cecfbb9f5e6
AMD64 architecture:
http://security.debian.org/pool/updates/main/h/hashcash/hashcash_1.17-1sarge1_amd64.deb
Size/MD5 checksum: 131586
34e12310aa9e4c8016df21af7c5ee4f0
ARM architecture:
http://security.debian.org/pool/updates/main/h/hashcash/hashcash_1.17-1sarge1_arm.deb
Size/MD5 checksum: 129036
8ef6ad2e6f6ce729893381aa72a6af77
Intel IA-32 architecture:
http://security.debian.org/pool/updates/main/h/hashcash/hashcash_1.17-1sarge1_i386.deb
Size/MD5 checksum: 125388
f478094512ce7fbcc0ea7f43c7942cda
Intel IA-64 architecture:
http://security.debian.org/pool/updates/main/h/hashcash/hashcash_1.17-1sarge1_ia64.deb
Size/MD5 checksum: 180272
aa2465a8d3209bc7f60966c8077fba2f
HP Precision architecture:
http://security.debian.org/pool/updates/main/h/hashcash/hashcash_1.17-1sarge1_hppa.deb
Size/MD5 checksum: 148194
2bf6d28a30e6f287b9f92ff7aad958db
Motorola 680×0 architecture:
http://security.debian.org/pool/updates/main/h/hashcash/hashcash_1.17-1sarge1_m68k.deb
Size/MD5 checksum: 113598
09d1c3002b95945e66464de441bd6875
Big endian MIPS architecture:
http://security.debian.org/pool/updates/main/h/hashcash/hashcash_1.17-1sarge1_mips.deb
Size/MD5 checksum: 153776
fbd29b41912a027feec7cf0c10c858c9
Little endian MIPS architecture:
http://security.debian.org/pool/updates/main/h/hashcash/hashcash_1.17-1sarge1_mipsel.deb
Size/MD5 checksum: 153382
2d231cd9aecdd9751c0dc1981c77b652
PowerPC architecture:
http://security.debian.org/pool/updates/main/h/hashcash/hashcash_1.17-1sarge1_powerpc.deb
Size/MD5 checksum: 140396
1e2bf003d9165dc91558d9a4109c48b3
IBM S/390 architecture:
http://security.debian.org/pool/updates/main/h/hashcash/hashcash_1.17-1sarge1_s390.deb
Size/MD5 checksum: 139680
57adea417e98c12c7e1512b00e40148c
Sun Sparc architecture:
http://security.debian.org/pool/updates/main/h/hashcash/hashcash_1.17-1sarge1_sparc.deb
Size/MD5 checksum: 156978
1fd5a5647dfb17bb223b783561f1e95e
These files will probably be moved into the stable distribution
on its next update.
Debian Security Advisory DSA 1115-1 security@debian.org
http://www.debian.org/security/
Martin Schulze
July 21st, 2006 http://www.debian.org/security/faq
Package : gnupg2
Vulnerability : integer overflow
Problem type : local (remote)
Debian-specific: no
CVE ID : CVE-2006-3082
Evgeny Legerov discovered that gnupg, the GNU privacy guard, a
free PGP replacement contains an integer overflow that can cause a
segmentation fault and possibly overwrite memory via a large user
ID strings.
For the stable distribution (sarge) this problem has been fixed
in version 1.4.1-1.sarge4 of GnuPG and in version 1.9.15-6sarge1 of
GnuPG2.
For the unstable distribution (sid) this problem has been fixed
in version 1.4.3-2 of GnuPG, a fix for GnuPG2 is pending.
We recommend that you upgrade your gnupg package.
Upgrade Instructions
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given at the end of this advisory:
apt-get update
will update the internal database apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 3.1 alias sarge
Source archives:
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_1.9.15-6sarge1.dsc
Size/MD5 checksum: 854
d7f54b50b8c569566cfe0b865ec20323
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_1.9.15-6sarge1.diff.gz
Size/MD5 checksum: 1859944
fbb56cbacfb82fb5666646bed3dd2944
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_1.9.15.orig.tar.gz
Size/MD5 checksum: 5454978
ee3885e2c74a9c1ae539d6f12091c30b
Alpha architecture:
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_1.9.15-6sarge1_alpha.deb
Size/MD5 checksum: 112318
e806b0cedb8ed0914e6e035d042acdd0
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_1.9.15-6sarge1_alpha.deb
Size/MD5 checksum: 886212
1763f96899b22f286232871b9b085ed6
http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_1.9.15-6sarge1_alpha.deb
Size/MD5 checksum: 453430
6dfaaea879aa17fc0dd623889a983507
AMD64 architecture:
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_1.9.15-6sarge1_amd64.deb
Size/MD5 checksum: 98464
cafa5d36dbcb21d795b6372c8293d6f8
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_1.9.15-6sarge1_amd64.deb
Size/MD5 checksum: 774560
96bf1b958e560fe17d632c26c38d9efc
http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_1.9.15-6sarge1_amd64.deb
Size/MD5 checksum: 385700
4b2b4ddc50eaf51b5701d7d47e1c9b3c
ARM architecture:
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_1.9.15-6sarge1_arm.deb
Size/MD5 checksum: 87318
d72f15b0cef0d127af34819d3ca5f14a
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_1.9.15-6sarge1_arm.deb
Size/MD5 checksum: 712814
22e92a7324e81906493140954172d5bf
http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_1.9.15-6sarge1_arm.deb
Size/MD5 checksum: 339666
1d23cfebbe8e6c7396aeff77eb9c8820
Intel IA-32 architecture:
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_1.9.15-6sarge1_i386.deb
Size/MD5 checksum: 90042
0e930e3cdcb129f1a442299f4d0540e3
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_1.9.15-6sarge1_i386.deb
Size/MD5 checksum: 731422
9a9f643a1dbc83c6b3f3dd9bfffe0a52
http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_1.9.15-6sarge1_i386.deb
Size/MD5 checksum: 351906
8282625e16ac625f67e38f39ff107652
Intel IA-64 architecture:
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_1.9.15-6sarge1_ia64.deb
Size/MD5 checksum: 130298
2eedf4cf8372007857433ca639524d9b
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_1.9.15-6sarge1_ia64.deb
Size/MD5 checksum: 1026226
e782e4b34a5b92e8096d2654b2cc5a4c
http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_1.9.15-6sarge1_ia64.deb
Size/MD5 checksum: 539910
20467693f439c077a70084dc3a97013c
HP Precision architecture:
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_1.9.15-6sarge1_hppa.deb
Size/MD5 checksum: 100568
8196f49a542cafff2df799dcf01aec82
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_1.9.15-6sarge1_hppa.deb
Size/MD5 checksum: 794658
51ccc9c508247dd4f420f6cf6573aac2
http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_1.9.15-6sarge1_hppa.deb
Size/MD5 checksum: 393956
18059987ad743bf9af518acc89657417
Motorola 680×0 architecture:
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_1.9.15-6sarge1_m68k.deb
Size/MD5 checksum: 82140
1fba5cdda78f5f5deca9627a85c04c57
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_1.9.15-6sarge1_m68k.deb
Size/MD5 checksum: 669532
92a8750d7d53e87a6400dc0dbb3d09d6
http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_1.9.15-6sarge1_m68k.deb
Size/MD5 checksum: 311950
f1a33648d91e20d5b844f5c7f7da57a9
Big endian MIPS architecture:
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_1.9.15-6sarge1_mips.deb
Size/MD5 checksum: 100504
7d791fe14e51c77d2332f56a381cf271
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_1.9.15-6sarge1_mips.deb
Size/MD5 checksum: 788588
bdec126011eee7c8d8d72eca6cfdcdc4
http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_1.9.15-6sarge1_mips.deb
Size/MD5 checksum: 395058
655dc54c72b2c0179d10c47b2f5860dd
Little endian MIPS architecture:
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_1.9.15-6sarge1_mipsel.deb
Size/MD5 checksum: 100978
56b72587ce25c10b5dcc088a15909fe0
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_1.9.15-6sarge1_mipsel.deb
Size/MD5 checksum: 790238
e607d5e8afa7a8302f53445617d0c8b8
http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_1.9.15-6sarge1_mipsel.deb
Size/MD5 checksum: 396254
470e2d93f2648e2cf6608324c1500d22
PowerPC architecture:
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_1.9.15-6sarge1_powerpc.deb
Size/MD5 checksum: 95574
d69613b8feaec3e719a6d41e01c6bbb0
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_1.9.15-6sarge1_powerpc.deb
Size/MD5 checksum: 769188
bb1d47b585a6ba73ec3ab5733c2bd9e5
http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_1.9.15-6sarge1_powerpc.deb
Size/MD5 checksum: 377318
62c7a186f295f33911233ecbe59df6b3
IBM S/390 architecture:
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_1.9.15-6sarge1_s390.deb
Size/MD5 checksum: 98696
d105f1f4f8b7f622b2353e01bccf8f60
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_1.9.15-6sarge1_s390.deb
Size/MD5 checksum: 766416
b697db437ddd9c6d66c18244b0730ef7
http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_1.9.15-6sarge1_s390.deb
Size/MD5 checksum: 384736
956245edec30fd206a7e63f58139937b
Sun Sparc architecture:
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_1.9.15-6sarge1_sparc.deb
Size/MD5 checksum: 89540
cbcc2a2dcc603baf6632446fcee75f6a
http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_1.9.15-6sarge1_sparc.deb
Size/MD5 checksum: 720868
97a6fd87caaf94c0d1ff3eb87f35b7cf
http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_1.9.15-6sarge1_sparc.deb
Size/MD5 checksum: 345146
51a1a825f01eff2085b2fddaa4394432
These files will probably be moved into the stable distribution
on its next update.
Debian Security Advisory DSA 1116-1 security@debian.org
http://www.debian.org/security/
Moritz Muehlenhoff
July 21st, 2006 http://www.debian.org/security/faq
Package : gimp
Vulnerability : buffer overflow
Problem-Type : local(remote)
Debian-specific: no
CVE ID : CVE-2006-3404
Debian Bug : 377049
Henning Makholm discovered a buffer overflow in the XCF loading
code of Gimp, an image editing program. Opening a specially crafted
XCF image might cause the application to execute arbitrary
code.
For the stable distribution (sarge) this problem has been fixed
in version 2.2.6-1sarge1.
For the unstable distribution (sid) this problem has been fixed
in version 2.2.11-3.1.
We recommend that you upgrade your gimp package.
Upgrade Instructions
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 3.1 alias sarge
Source archives:
http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge1.dsc
Size/MD5 checksum: 1089
979559b33614105fa58413378d7c204b
http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge1.diff.gz
Size/MD5 checksum: 26122
c56e7ce33568fa577bb965d91a5c9e1c
http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6.orig.tar.gz
Size/MD5 checksum: 20496404
a6450200858c59bb46ace6987f1fc6ee
Architecture independent components:
http://security.debian.org/pool/updates/main/g/gimp/gimp-data_2.2.6-1sarge1_all.deb
Size/MD5 checksum: 6276584
013c82da61ca8f0c34e7b02995f9a2dc
http://security.debian.org/pool/updates/main/g/gimp/gimp1.2_2.2.6-1sarge1_all.deb
Size/MD5 checksum: 31674
f5bf9b1c4d272b6d6a293da92ff1b4cc
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-doc_2.2.6-1sarge1_all.deb
Size/MD5 checksum: 514958
5dcc11d084fd4e79e055493205cded03
Alpha architecture:
http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge1_alpha.deb
Size/MD5 checksum: 3872520
f14c5800c1bb4da15eef57a6c9122c61
http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge1_alpha.deb
Size/MD5 checksum: 44970
2476f295f24498674678c8f21b35f26f
http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge1_alpha.deb
Size/MD5 checksum: 126646
244ae4e14a57803e0e04eed254ee845b
http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge1_alpha.deb
Size/MD5 checksum: 44794
5cc2a15a835d6649bbebdd068beaf5d3
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge1_alpha.deb
Size/MD5 checksum: 576492
bf73a2b8130cc7a945cdcccb0546ce0b
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge1_alpha.deb
Size/MD5 checksum: 98262
7ff13a929c089f127fd29836f780dd38
AMD64 architecture:
http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge1_amd64.deb
Size/MD5 checksum: 3266104
17d46a5010fb7451f6dfbd783caf73e6
http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge1_amd64.deb
Size/MD5 checksum: 43722
0956d860d60ff4394ca0c9b9aac2957f
http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge1_amd64.deb
Size/MD5 checksum: 122012
61a1ca703333bfad94692943c0e6ba86
http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge1_amd64.deb
Size/MD5 checksum: 43464
496e21eff61fedf892eb2f8a52e92857
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge1_amd64.deb
Size/MD5 checksum: 543840
224ea85332d7e525aafa14cb1a639614
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge1_amd64.deb
Size/MD5 checksum: 98234
a9f687bb252e9adbc91f81b67e42d3d9
ARM architecture:
http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge1_arm.deb
Size/MD5 checksum: 2938416
b0901f13d679d1bb41e91c56f22c41d8
http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge1_arm.deb
Size/MD5 checksum: 41934
042f39449706ba1362676520935d98a0
http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge1_arm.deb
Size/MD5 checksum: 114028
d3adb0e677eee5f8484674f1ec29ef11
http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge1_arm.deb
Size/MD5 checksum: 42280
2300ed4a4de2537e30ad4f4df2cf540d
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge1_arm.deb
Size/MD5 checksum: 507710
0592a4510f85ebb8c03e74cb2d410d95
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge1_arm.deb
Size/MD5 checksum: 98332
57de081bea0749832e5c82e6cbdb28e9
Intel IA-32 architecture:
http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge1_i386.deb
Size/MD5 checksum: 3087556
d4a3d583f932d75e1c49f72a32e9de56
http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge1_i386.deb
Size/MD5 checksum: 42692
35dedb9373d46897709de62a6ba56f22
http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge1_i386.deb
Size/MD5 checksum: 117012
0a76a982e406a236658882f2dabdf464
http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge1_i386.deb
Size/MD5 checksum: 43238
4e585d74f341874b8a31aad60d246caf
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge1_i386.deb
Size/MD5 checksum: 521758
bc33f00f99995ffd91ff9bb84c83c4c1
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge1_i386.deb
Size/MD5 checksum: 98248
a7d5db0fdf8401bdaef4a9266db6c705
Intel IA-64 architecture:
http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge1_ia64.deb
Size/MD5 checksum: 4581614
af2d82f8c7d4373286f6872709d8bca4
http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge1_ia64.deb
Size/MD5 checksum: 46600
9186a0e6efb81e461d725fa761694f07
http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge1_ia64.deb
Size/MD5 checksum: 135808
7fa53fef4e3772b8f3087e9c5e37e5a0
http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge1_ia64.deb
Size/MD5 checksum: 46852
24434b0212a6792901bc9e2fbbd2bb1f
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge1_ia64.deb
Size/MD5 checksum: 632324
c4335842b443c43c0dbe68797264d943
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge1_ia64.deb
Size/MD5 checksum: 98240
f07c6a9cd8f7941ff7fd4a93589f7973
HP Precision architecture:
http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge1_hppa.deb
Size/MD5 checksum: 3468190
e9a04a87c97ee78815a3e332dbcccff8
http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge1_hppa.deb
Size/MD5 checksum: 43394
fed2f6e699416c5a03c1d3a130554418
http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge1_hppa.deb
Size/MD5 checksum: 125686
19e8ee051e193546d55788c7b3fb1e7d
http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge1_hppa.deb
Size/MD5 checksum: 43720
b4c52c60b267751689bc57fe7f1e3ded
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge1_hppa.deb
Size/MD5 checksum: 583078
bda2acb1a3b23edcd435730ea9c6cd0c
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge1_hppa.deb
Size/MD5 checksum: 98302
618bf48bcfe82ee886ad1ec2c9da8746
Motorola 680×0 architecture:
http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge1_m68k.deb
Size/MD5 checksum: 2697910
e90af18d0136fbf8d60e2089bac3dbc0
http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge1_m68k.deb
Size/MD5 checksum: 42302
6cffc71d58aa261293428323840eadfa
http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge1_m68k.deb
Size/MD5 checksum: 118392
e533fe00cf69d53713fea16f7c3c351b
http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge1_m68k.deb
Size/MD5 checksum: 42140
b77201f3a42f7be876c13ce803833891
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge1_m68k.deb
Size/MD5 checksum: 520078
29e62d2417f9d4bd266e81a65e4d5201
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge1_m68k.deb
Size/MD5 checksum: 98478
fe3705144e976a25c49330f2d0f958ab
Big endian MIPS architecture:
http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge1_mips.deb
Size/MD5 checksum: 3448914
3236ee1f78e5d6a30cece944ea1c149e
http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge1_mips.deb
Size/MD5 checksum: 42690
e3a903955904332f1d6e14341de5c55d
http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge1_mips.deb
Size/MD5 checksum: 116280
4e4425ac5ccf0f7923aaa33817f4d3a9
http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge1_mips.deb
Size/MD5 checksum: 42960
8b6f4e92ed5b881e74fca99c4eac478f
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge1_mips.deb
Size/MD5 checksum: 524600
978e3ab35f44bd1e516ded87d0fa1a11
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge1_mips.deb
Size/MD5 checksum: 98256
b34836f926dea9bc7855c4fec1313db2
Little endian MIPS architecture:
http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge1_mipsel.deb
Size/MD5 checksum: 3445558
fa88e0923517217e1ebc47dcc9e13e91
http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge1_mipsel.deb
Size/MD5 checksum: 42626
7df6dd0e0bcf0fd800b603ff62b088e4
http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge1_mipsel.deb
Size/MD5 checksum: 115598
f5e2fa780ab32a0e8d192209f42cf22c
http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge1_mipsel.deb
Size/MD5 checksum: 42882
8f2c5ead0311336fe8f9d5f73840bd66
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge1_mipsel.deb
Size/MD5 checksum: 522138
172dad30e71dacab1aaedfbe2b9ab404
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge1_mipsel.deb
Size/MD5 checksum: 98268
b7ad697195e7a622d584caef468bf24b
PowerPC architecture:
http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge1_powerpc.deb
Size/MD5 checksum: 3341118
c3bd01a81f343030030f7285fd35a9a2
http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge1_powerpc.deb
Size/MD5 checksum: 43938
66f8bf50052e465ab6306c0f93441fc1
http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge1_powerpc.deb
Size/MD5 checksum: 118214
7b22438747c7d7eb3ff1112607f36942
http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge1_powerpc.deb
Size/MD5 checksum: 44314
1452917365ca44d0849fd8783d5dc2b9
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge1_powerpc.deb
Size/MD5 checksum: 539510
17896bbe9f778c125eed47e96f2582b0
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge1_powerpc.deb
Size/MD5 checksum: 98282
c0c35190756c7bc71306d9e32e20770e
IBM S/390 architecture:
http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge1_s390.deb
Size/MD5 checksum: 3134704
5e3ee587e3af969dbe6b2acf8add98a6
http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge1_s390.deb
Size/MD5 checksum: 43896
17adcff9df203fcee2a2eccb4a7a78f6
http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge1_s390.deb
Size/MD5 checksum: 123904
b0f18ce58f5eb93fa64033b82b64f192
http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge1_s390.deb
Size/MD5 checksum: 43512
5ec341436fcf87c883a7bdff50eba154
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge1_s390.deb
Size/MD5 checksum: 555508
eb2c9b65d19b333113a216499ca5b429
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge1_s390.deb
Size/MD5 checksum: 98226
1883143a487595484af2def276b08017
Sun Sparc architecture:
http://security.debian.org/pool/updates/main/g/gimp/gimp_2.2.6-1sarge1_sparc.deb
Size/MD5 checksum: 2929592
ab276607e00e8159b855d2d3ddbd7f49
http://security.debian.org/pool/updates/main/g/gimp/gimp-helpbrowser_2.2.6-1sarge1_sparc.deb
Size/MD5 checksum: 42236
0a2217eeb70903e12052b4111aac2c1d
http://security.debian.org/pool/updates/main/g/gimp/gimp-python_2.2.6-1sarge1_sparc.deb
Size/MD5 checksum: 116426
3eac44e9e3e28330e075385b1197a984
http://security.debian.org/pool/updates/main/g/gimp/gimp-svg_2.2.6-1sarge1_sparc.deb
Size/MD5 checksum: 42440
464fe9823e9544cce55688ed1840bd38
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0_2.2.6-1sarge1_sparc.deb
Size/MD5 checksum: 527522
ea220cad0822aaf7f580c0ad76f44cb2
http://security.debian.org/pool/updates/main/g/gimp/libgimp2.0-dev_2.2.6-1sarge1_sparc.deb
Size/MD5 checksum: 98290
b543cfe8b332246e3e33c4d785fa8957
These files will probably be moved into the stable distribution
on its next update.
Debian Security Advisory DSA 1117-1 security@debian.org
http://www.debian.org/security/
Moritz Muehlenhoff
July 21st, 2006 http://www.debian.org/security/faq
Package : libgd2
Vulnerability : insufficient input sanitising
Problem-Type : local(remote)
Debian-specific: no
CVE ID : CVE-2006-2906
Debian Bug : 372912
It was discoverd that the GD graphics library performs
insufficient checks of the validity of GIF images, which might lead
to denial of service by tricking the application into an infinite
loop.
For the stable distribution (sarge) this problem has been fixed
in version 2.0.33-1.1sarge1.
For the unstable distribution (sid) this problem has been fixed
in version 2.0.33-5.
We recommend that you upgrade your libgd2 packages.
Upgrade Instructions
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 3.1 alias sarge
Source archives:
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.33-1.1sarge1.dsc
Size/MD5 checksum: 885
e389163781898504ec6e8e0018cd1fdd
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.33-1.1sarge1.diff.gz
Size/MD5 checksum: 260955
50e0aa54bda19f06041d78a5771c7fd1
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.33.orig.tar.gz
Size/MD5 checksum: 587617
be0a6d326cd8567e736fbc75df0a5c45
Architecture independent components:
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-dev_2.0.33-1.1sarge1_all.deb
Size/MD5 checksum: 128526
bcaaacf60733a35002b999f8851ce3a7
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.33-1.1sarge1_all.deb
Size/MD5 checksum: 128500
4ef28350291c173754332cc61cb54ba1
Alpha architecture:
http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.33-1.1sarge1_alpha.deb
Size/MD5 checksum: 144914
65aa478f07315cb7e62ac6d91177b96d
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.33-1.1sarge1_alpha.deb
Size/MD5 checksum: 206668
8cded1b036579ebc7c62f1ac37824ac6
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm-dev_2.0.33-1.1sarge1_alpha.deb
Size/MD5 checksum: 357800
cc21def16f0e514da5d34c2f513b3daf
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-xpm_2.0.33-1.1sarge1_alpha.deb
Size/MD5 checksum: 208490
fa17839a6953dbd709eda8783be6ead1
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-xpm-dev_2.0.33-1.1sarge1_alpha.deb
Size/MD5 checksum: 362160
0be347a2217d06fe7ef36b002ea7c9ca
AMD64 architecture:
http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.33-1.1sarge1_amd64.deb
Size/MD5 checksum: 141774
1f54d14b016a5ad132998ff669226244
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.33-1.1sarge1_amd64.deb
Size/MD5 checksum: 196436
6ff8e6d85237e34ddd12c9aea85bd314
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm-dev_2.0.33-1.1sarge1_amd64.deb
Size/MD5 checksum: 337310
bfd77a6cdc6aaa1c64d6c4be1a8acea8
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-xpm_2.0.33-1.1sarge1_amd64.deb
Size/MD5 checksum: 198932
a084415f7c3dfc684569d626dd80aacb
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-xpm-dev_2.0.33-1.1sarge1_amd64.deb
Size/MD5 checksum: 340294
8fdc6f33e6253346c4f853db61501a21
ARM architecture:
http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.33-1.1sarge1_arm.deb
Size/MD5 checksum: 141374
b157ca4d44fffd20740c162535ca9e3f
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.33-1.1sarge1_arm.deb
Size/MD5 checksum: 188664
5b3a0e8dcb02e3fa83cb8a618a57c456
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm-dev_2.0.33-1.1sarge1_arm.deb
Size/MD5 checksum: 334316
74999431b3008c7f4820d0405a236c0f
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-xpm_2.0.33-1.1sarge1_arm.deb
Size/MD5 checksum: 191308
b29466e1a38e863dce0b1cdb535e3cfc
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-xpm-dev_2.0.33-1.1sarge1_arm.deb
Size/MD5 checksum: 337536
761e0550e4d9343d2056dba350c1cd1f
Intel IA-32 architecture:
http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.33-1.1sarge1_i386.deb
Size/MD5 checksum: 141786
1cc957c1d1cb93e2d80c85d0c84dcfd1
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.33-1.1sarge1_i386.deb
Size/MD5 checksum: 191932
f66bc591f047503e80d107458e938416
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm-dev_2.0.33-1.1sarge1_i386.deb
Size/MD5 checksum: 328576
27953838b048aab48d4eee40fc630f6f
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-xpm_2.0.33-1.1sarge1_i386.deb
Size/MD5 checksum: 193690
580d72764e8b331f9be599b45894497d
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-xpm-dev_2.0.33-1.1sarge1_i386.deb
Size/MD5 checksum: 330848
0c980ae4c5a0e93725175e69c7d8176f
Intel IA-64 architecture:
http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.33-1.1sarge1_ia64.deb
Size/MD5 checksum: 146290
a07f3ae8f234ca3e3b5e81eebf3c446d
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.33-1.1sarge1_ia64.deb
Size/MD5 checksum: 224272
c057fe07156af1945b9eab8909a28bec
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm-dev_2.0.33-1.1sarge1_ia64.deb
Size/MD5 checksum: 370376
6f8485a4f4d916d75dc21b20a113ad98
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-xpm_2.0.33-1.1sarge1_ia64.deb
Size/MD5 checksum: 227040
4983686be756f0fdd7ab03cf1cc9c195
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-xpm-dev_2.0.33-1.1sarge1_ia64.deb
Size/MD5 checksum: 373400
896aaaaec2747772779073c837fe2d84
HP Precision architecture:
http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.33-1.1sarge1_hppa.deb
Size/MD5 checksum: 143562
c4223c693e1a24336ddab5a92e3d019b
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.33-1.1sarge1_hppa.deb
Size/MD5 checksum: 204504
371343c96979ae3b6688a9471333dd20
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm-dev_2.0.33-1.1sarge1_hppa.deb
Size/MD5 checksum: 345608
267ea3ea2dedc6b7d1b991821eff0327
http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-xpm_2.0.33-1.1sarge1_hppa.deb