Debian GNU/Linux
Debian Security Advisory DSA 609-1 security@debian.org
http://www.debian.org/security/
Martin Schulze
December 14th, 2004 http://www.debian.org/security/faq
Package : atari800
Vulnerability : buffer overflows
Problem-Type : local
Debian-specific: no
CVE ID : CAN-2004-1076
Adam Zabrocki discovered multiple buffer overflows in atari800,
an Atari emulator. In order to directly access graphics hardware,
one of the affected programs is installed setuid root. A local
attacker could exploit this vulnerability to gain root
privileges.
For the stable distribution (woody) these problems have been
fixed in version 1.2.2-1woody3.
For the unstable distribution (sid) these problems will be fixed
soon.
We recommend that you upgrade your atari800 package
immediately.
Upgrade Instructions
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 3.0 alias woody
Source archives:
http://security.debian.org/pool/updates/contrib/a/atari800/atari800_1.2.2-1woody3.dsc
Size/MD5 checksum: 652 ca843252c5698eb4df665ba61a26f449
http://security.debian.org/pool/updates/contrib/a/atari800/atari800_1.2.2-1woody3.diff.gz
Size/MD5 checksum: 17761 2ffbb3a4956a7ad09e59562345f9bef2
http://security.debian.org/pool/updates/contrib/a/atari800/atari800_1.2.2.orig.tar.gz
Size/MD5 checksum: 460211 17f40bab7f2cdf2968df46e37285dcd1
Alpha architecture:
http://security.debian.org/pool/updates/contrib/a/atari800/atari800_1.2.2-1woody3_alpha.deb
Size/MD5 checksum: 298862 a6fd1bdaba8d397f1774906671361ca4
ARM architecture:
http://security.debian.org/pool/updates/contrib/a/atari800/atari800_1.2.2-1woody3_arm.deb
Size/MD5 checksum: 236750 5994fb6118295471dd2892e81189c98b
Intel IA-32 architecture:
http://security.debian.org/pool/updates/contrib/a/atari800/atari800_1.2.2-1woody3_i386.deb
Size/MD5 checksum: 281702 0f3196118b5d4a69a42330de0a6a32d1
Intel IA-64 architecture:
http://security.debian.org/pool/updates/contrib/a/atari800/atari800_1.2.2-1woody3_ia64.deb
Size/MD5 checksum: 339510 179a1fa280a1233dad44166a636b0982
HP Precision architecture:
http://security.debian.org/pool/updates/contrib/a/atari800/atari800_1.2.2-1woody3_hppa.deb
Size/MD5 checksum: 257144 4c72048930a2cebba2d758447b144c4d
Motorola 680×0 architecture:
http://security.debian.org/pool/updates/contrib/a/atari800/atari800_1.2.2-1woody3_m68k.deb
Size/MD5 checksum: 197016 a171957e3de9101bc498fa06cd5774e7
Big endian MIPS architecture:
http://security.debian.org/pool/updates/contrib/a/atari800/atari800_1.2.2-1woody3_mips.deb
Size/MD5 checksum: 259956 7c548633fe1a7419f673d35e692d0f3d
Little endian MIPS architecture:
http://security.debian.org/pool/updates/contrib/a/atari800/atari800_1.2.2-1woody3_mipsel.deb
Size/MD5 checksum: 258570 707384b7d7779775a072f2cb224eeb26
PowerPC architecture:
http://security.debian.org/pool/updates/contrib/a/atari800/atari800_1.2.2-1woody3_powerpc.deb
Size/MD5 checksum: 238792 999117105a05f60ea65e037bc41570aa
IBM S/390 architecture:
http://security.debian.org/pool/updates/contrib/a/atari800/atari800_1.2.2-1woody3_s390.deb
Size/MD5 checksum: 235058 76acc2c010652f6a15881786df8d093f
Sun Sparc architecture:
http://security.debian.org/pool/updates/contrib/a/atari800/atari800_1.2.2-1woody3_sparc.deb
Size/MD5 checksum: 239854 ac895137cfa772120ec5149823b8a8ea
These files will probably be moved into the stable distribution
on its next update.
Debian Security Advisory DSA 608-1 security@debian.org
http://www.debian.org/security/
Martin Schulze
December 14th, 2004 http://www.debian.org/security/faq
Package : zgv
Vulnerability : integer overflows, unsanitised input
Problem-Type : remote
Debian-specific: no
CVE ID : CAN-2004-1095 CAN-2004-0999
BugTraq ID : 11556
Several vulnerabilities have been discovered in zgv, an SVGAlib
graphics viewer for the i386 architecture. The Common
Vulnerabilities and Exposures Project identifies the following
problems:
CAN-2004-1095
Luke Macken and “infamous41md” independently discoverd multiple
integer overflows in zgv. Remote exploitation of an integer
overflow vulnerability could allow the execution of arbitrary
code.
CAN-2004-0999
Mikulas Patocka discovered that malicious multiple-image (e.g.
animated) GIF images can cause a segmentation fault in zgv.
For the stable distribution (woody) these problems have been
fixed in version 5.5-3woody1.
For the unstable distribution (sid) these problems will be fixed
soon.
We recommend that you upgrade your zgv package immediately.
Upgrade Instructions
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 3.0 alias woody
Source archives:
http://security.debian.org/pool/updates/main/z/zgv/zgv_5.5-3woody2.dsc
Size/MD5 checksum: 601 f6114a026863db918a6bd9a6cc201a97
http://security.debian.org/pool/updates/main/z/zgv/zgv_5.5-3woody2.diff.gz
Size/MD5 checksum: 8541 f501ad407808235577b2bc746ddfe4e6
http://security.debian.org/pool/updates/main/z/zgv/zgv_5.5.orig.tar.gz
Size/MD5 checksum: 329235 629386a4df72f6ec007319bf12db1374
Intel IA-32 architecture:
http://security.debian.org/pool/updates/main/z/zgv/zgv_5.5-3woody2_i386.deb
Size/MD5 checksum: 211772 36e675c74bafb546e5f6fb0da36385c3
These files will probably be moved into the stable distribution
on its next update.
For apt-get: deb http://security.debian.org/
stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security
dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>’ and http://packages.debian.org/<pkg>
Gentoo Linux
Gentoo Linux Security Advisory GLSA 200412-07
Severity: Normal
Title: file: Arbitrary code execution
Date: December 13, 2004
Bugs: #72521
ID: 200412-07
Synopsis
The code for parsing ELF headers in file contains a flaw which
may allow an attacker to execute arbitrary code.
Background
file is a utility used to identify the type of a file.
Affected packages
Package / Vulnerable / Unaffected
1 sys-apps/file < 4.12 >= 4.12
Description
A possible stack overflow has been found in the ELF header
parsing code of file.
Impact
An attacker may be able to create a specially crafted ELF file
which, when processed with file, may allow the execution of
arbitrary code.
Workaround
There is no known workaround at this time.
Resolution
All file users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=sys-apps/file-4.12"
References
[ 1 ] SecurityTracker Alert ID 1012433
http://securitytracker.com/id?1012433
Availability
This GLSA and any updates to it are available for viewing at the
Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200412-07.xml
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or
alternatively, you may file a bug at http://bugs.gentoo.org.
License
Copyright 2004 Gentoo Foundation, Inc; referenced text belongs
to its owner(s).
The contents of this document are licensed under the Creative
Commons – Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.0
Gentoo Linux Security Advisory GLSA 200412-08
Severity: High
Title: nfs-utils: Multiple remote vulnerabilities
Date: December 14, 2004
Bugs: #72113
ID: 200412-08
Synopsis
Multiple vulnerabilities have been discovered in nfs-utils that
could lead to a Denial of Service, or the execution of arbitrary
code.
Background
nfs-utils is a package containing the client and daemon
implementations for the NFS protocol.
Affected packages
Package / Vulnerable / Unaffected 1 net-fs/nfs-utils < 1.0.6-r6 >= 1.0.6-r6
Description
Arjan van de Ven has discovered a buffer overflow on 64-bit
architectures in ‘rquota_server.c’ of nfs-utils (CAN-2004-0946). A
remotely exploitable flaw on all architectures also exists in the
‘statd.c’ file of nfs-utils (CAN-2004-1014), which can be triggered
by a mishandled SIGPIPE.
Impact
A remote attacker could potentially cause a Denial of Service,
or even execute arbitrary code (64-bit architectures only) on a
remote NFS server.
Workaround
There is no known workaround at this time.
Resolution
All nfs-utils users should upgarde to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-fs/nfs-utils-1.0.6-r6"
References
[ 1 ] CAN-2004-0946
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0946
[ 2 ] CAN-2004-1014
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1014
Availability
This GLSA and any updates to it are available for viewing at the
Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200412-08.xml
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or
alternatively, you may file a bug at http://bugs.gentoo.org.
License
Copyright 2004 Gentoo Foundation, Inc; referenced text belongs
to its owner(s).
The contents of this document are licensed under the Creative
Commons – Attribution / Share Alike license.