===========================================================
Ubuntu Security Notice USN-789-1 June 22, 2009
gst-plugins-good0.10 vulnerability
CVE-2009-1932
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 6.06 LTS:
gstreamer0.10-plugins-good 0.10.3-0ubuntu4.2
Ubuntu 8.04 LTS:
gstreamer0.10-plugins-good 0.10.7-3ubuntu0.3
Ubuntu 8.10:
gstreamer0.10-plugins-good 0.10.10.4-1ubuntu1.2
Ubuntu 9.04:
gstreamer0.10-plugins-good 0.10.14-1ubuntu0.1
In general, a standard system upgrade is sufficient to effect the
necessary changes.
Details follow:
Tielei Wang discovered that GStreamer Good Plugins did not correctly handle
malformed PNG image files. If a user were tricked into opening a crafted
PNG image file with a GStreamer application, an attacker could cause a
denial of service via application crash, or possibly execute arbitrary code
with the privileges of the user invoking the program.
Updated packages for Ubuntu 6.06 LTS:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.3-0ubuntu4.2.diff.gz
Size/MD5: 27349 3a4dbe708038d20c1f2b177cbc664914
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.3-0ubuntu4.2.dsc
Size/MD5: 1471 c911e769ee2f817010cebf7b7c5366fe
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.3.orig.tar.gz
Size/MD5: 1782808 bfac20228cf6e9317a371a5f36feb8ae
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-doc_0.10.3-0ubuntu4.2_all.deb
Size/MD5: 75194 b275d98627d55e6b3fb258b6ef3dc55b
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.3-0ubuntu4.2_amd64.deb
Size/MD5: 33052 02b3482c6da81f7cea0bbd1f85c186bf
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.3-0ubuntu4.2_amd64.deb
Size/MD5: 1670366 88603470ab4c79ad7db6d2d13b59eff0
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.3-0ubuntu4.2_amd64.deb
Size/MD5: 643272 9207ba28b58ad28eba3f630bf9b31cb2
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.3-0ubuntu4.2_i386.deb
Size/MD5: 32444 d0097838c14cca9d9420d806dc11efe4
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.3-0ubuntu4.2_i386.deb
Size/MD5: 1524118 278d4afb0e2d8bd39ff6e6e69d5d1134
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.3-0ubuntu4.2_i386.deb
Size/MD5: 577144 88d88bba56fd8593e3f480d3098e9555
powerpc architecture (Apple Macintosh G3/G4/G5):
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.3-0ubuntu4.2_powerpc.deb
Size/MD5: 34704 b79b032fb76435417b0fa45dfac341d3
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.3-0ubuntu4.2_powerpc.deb
Size/MD5: 1705318 4737fdad60a9d01504227d6738eb9f06
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.3-0ubuntu4.2_powerpc.deb
Size/MD5: 699764 f694f469d97bef0d297f5facbdb8f5b2
sparc architecture (Sun SPARC/UltraSPARC):
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.3-0ubuntu4.2_sparc.deb
Size/MD5: 32940 f28623b18f682b3e995a96c40f1a46d2
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.3-0ubuntu4.2_sparc.deb
Size/MD5: 1546638 f451cb4a12cb0429a3e69c2ce213649a
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.3-0ubuntu4.2_sparc.deb
Size/MD5: 619150 42a63574860e88c4fab6377f4552eb59
Updated packages for Ubuntu 8.04 LTS:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.7-3ubuntu0.3.diff.gz
Size/MD5: 27885 0fbeda89c2b4ece6080e43f9cd1b6cf8
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.7-3ubuntu0.3.dsc
Size/MD5: 2161 53c204e2d6b78ba44b58bcb09b8a7ed9
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.7.orig.tar.gz
Size/MD5: 2679804 2832ded1d6be0356d77689b6ca1b5f83
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-doc_0.10.7-3ubuntu0.3_all.deb
Size/MD5: 150412 b596937a505e07379fa570e23f4359cd
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.7-3ubuntu0.3_amd64.deb
Size/MD5: 45338 b7de8f68eb12e5a621daa17b4acc179b
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.7-3ubuntu0.3_amd64.deb
Size/MD5: 2409536 34397a0dfccd85d150070861387be8c9
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.7-3ubuntu0.3_amd64.deb
Size/MD5: 933304 544e6799a7376275c9e522b75fa944a3
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.7-3ubuntu0.3_i386.deb
Size/MD5: 45008 8173bc4d91e793f4f7643de2da8eb02e
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.7-3ubuntu0.3_i386.deb
Size/MD5: 2314164 df2398a644d53bec87342b0e24ea665b
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.7-3ubuntu0.3_i386.deb
Size/MD5: 873248 fda02e5dfeaecec7a60ed642563d7a02
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.7-3ubuntu0.3_lpia.deb
Size/MD5: 44830 1c44aef4dcb0a8ac853976f8cd4b2950
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.7-3ubuntu0.3_lpia.deb
Size/MD5: 2344150 0fe5102f4c186a6e3b20a3c3d15b5fdb
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.7-3ubuntu0.3_lpia.deb
Size/MD5: 859926 84b8b0e3148d626598e19295ef31deda
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.7-3ubuntu0.3_powerpc.deb
Size/MD5: 45958 503316da7a0f2ba4f9455a004585f541
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.7-3ubuntu0.3_powerpc.deb
Size/MD5: 2441708 dfa4a820e747f62d2953c841922143cb
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.7-3ubuntu0.3_powerpc.deb
Size/MD5: 992152 0b6644292b0b9ba7d2f2e9576a45b18e
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.7-3ubuntu0.3_sparc.deb
Size/MD5: 45034 cd07a442548532d76e20c3f335165f9f
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.7-3ubuntu0.3_sparc.deb
Size/MD5: 2281342 ba5bc8d0675bd2c3c5f1c17cfca28467
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.7-3ubuntu0.3_sparc.deb
Size/MD5: 905468 41f4bd6a1cc342b91ee22c040f19ae4e
Updated packages for Ubuntu 8.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.10.4-1ubuntu1.2.diff.gz
Size/MD5: 33802 2c2756a7edd424dd081bb39803c74f92
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.10.4-1ubuntu1.2.dsc
Size/MD5: 2761 15ef48d59d3e350633052ae50ac9dcf6
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.10.4.orig.tar.gz
Size/MD5: 3176916 1ed4e64beb386631a127af49a1e05946
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-doc_0.10.10.4-1ubuntu1.2_all.deb
Size/MD5: 189464 ec6d4868fe27776140e681999c0ec6b6
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.10.4-1ubuntu1.2_amd64.deb
Size/MD5: 49240 b92b4bd4eb61a0b388f7c9ef1360446f
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.10.4-1ubuntu1.2_amd64.deb
Size/MD5: 2972572 c02b82f35d22cd1c69adab5c39652683
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.10.4-1ubuntu1.2_amd64.deb
Size/MD5: 1096896 4420ad63ff05e178f45eea9160d6c060
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.10.4-1ubuntu1.2_amd64.deb
Size/MD5: 66966 6942e52dabb0cd50b904846d4fd1ae4a
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.10.4-1ubuntu1.2_i386.deb
Size/MD5: 49050 34a1b7d42744bb1d1179c7d7ca8adb68
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.10.4-1ubuntu1.2_i386.deb
Size/MD5: 2858518 c8e3173d8e0906a46b6b01d1b660aded
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.10.4-1ubuntu1.2_i386.deb
Size/MD5: 1029580 b125b38ab088f72e801fa2df87afe8a5
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.10.4-1ubuntu1.2_i386.deb
Size/MD5: 64636 2e561a83a96defb42c017e3596aea353
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.10.4-1ubuntu1.2_lpia.deb
Size/MD5: 48974 24c3650c2936c806479dc6cd0069da0d
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.10.4-1ubuntu1.2_lpia.deb
Size/MD5: 2900892 008a606339d8158213d0365f9b2cc873
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.10.4-1ubuntu1.2_lpia.deb
Size/MD5: 1016718 d927a710b52fc6f046b9c3dad44cb0a2
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.10.4-1ubuntu1.2_lpia.deb
Size/MD5: 64770 92a96ea72fc6035dc1ada532428fc600
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.10.4-1ubuntu1.2_powerpc.deb
Size/MD5: 50154 0ce937ab41a1a9fda1b5eaf1a95bd493
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.10.4-1ubuntu1.2_powerpc.deb
Size/MD5: 3014056 f49161a0eada3bc9e460363fa99db125
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.10.4-1ubuntu1.2_powerpc.deb
Size/MD5: 1167944 6156ff68cd58252daed3d5af827de1a5
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.10.4-1ubuntu1.2_powerpc.deb
Size/MD5: 66866 ced96995650e0286b400c38d8473b1ff
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.10.4-1ubuntu1.2_sparc.deb
Size/MD5: 49086 f65d43ab98f959c85155528c50c1ba81
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.10.4-1ubuntu1.2_sparc.deb
Size/MD5: 2806342 e7eeb33767762c7bc73bd1c110033321
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.10.4-1ubuntu1.2_sparc.deb
Size/MD5: 1074570 4a1ab1b21323a958e5075ec4aa5ff749
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.10.4-1ubuntu1.2_sparc.deb
Size/MD5: 64424 5ec9581a6de23b54ec6bdfc7f3f80707
Updated packages for Ubuntu 9.04:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.14-1ubuntu0.1.diff.gz
Size/MD5: 27637 1c08f11db50720025ff19e1035ae00d5
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.14-1ubuntu0.1.dsc
Size/MD5: 2879 f62455d6fe7049f6eaa966454e51ecc6
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.14.orig.tar.gz
Size/MD5: 3276723 62f629637bcfa82d47eb1baeb22a3d25
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-doc_0.10.14-1ubuntu0.1_all.deb
Size/MD5: 216478 288ec8124f18796c215d4debf7170ddb
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.14-1ubuntu0.1_amd64.deb
Size/MD5: 52328 2636fccfee65237146501df73286a8f4
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.14-1ubuntu0.1_amd64.deb
Size/MD5: 3064176 79e3245dbbecc46f770d3b67af1b8d82
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.14-1ubuntu0.1_amd64.deb
Size/MD5: 1130840 3bc798ef7521214012fc79f11bc5f4ad
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.14-1ubuntu0.1_amd64.deb
Size/MD5: 73240 d4304455d75a3a6fb0bf6813e482851c
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.14-1ubuntu0.1_i386.deb
Size/MD5: 52130 ff75d8a2dcbf8cefa37c118162de7f5b
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.14-1ubuntu0.1_i386.deb
Size/MD5: 2949808 ba444ea6fafda873627032372ec1bbe9
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.14-1ubuntu0.1_i386.deb
Size/MD5: 1064914 758b7936c41201e7d8fedbc95497a81b
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.14-1ubuntu0.1_i386.deb
Size/MD5: 70332 f0833349e6ac2ce7ca3c123886887027
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.14-1ubuntu0.1_lpia.deb
Size/MD5: 52056 caac1c8098071caa1e2a671bd65830a0
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.14-1ubuntu0.1_lpia.deb
Size/MD5: 2989510 77a33bce96ba901779e8eda3ae09886a
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.14-1ubuntu0.1_lpia.deb
Size/MD5: 1050842 03c739d9d21c5e19a98917dadc2c9c01
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.14-1ubuntu0.1_lpia.deb
Size/MD5: 70310 7e66f9006bd55d586db653b68ebf27ec
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.14-1ubuntu0.1_powerpc.deb
Size/MD5: 53200 a5e43580173b54677654a624e07539a0
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.14-1ubuntu0.1_powerpc.deb
Size/MD5: 3119404 0e3f727eb6c234c72a47df9f96e0abb5
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.14-1ubuntu0.1_powerpc.deb
Size/MD5: 1207890 29f538f3c4775d22880bd58a551c47d9
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.14-1ubuntu0.1_powerpc.deb
Size/MD5: 73064 ba5108dc480d67c9926888e11047a81e
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.14-1ubuntu0.1_sparc.deb
Size/MD5: 52142 f403ac655bcf3cf816a50e910b0721fe
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.14-1ubuntu0.1_sparc.deb
Size/MD5: 2905714 5222ac761886e46e96b0339f23211d2d
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.14-1ubuntu0.1_sparc.deb
Size/MD5: 1100384 cd8b908f962d776cb120eae0e1ebf22b
http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.14-1ubuntu0.1_sparc.deb
Size/MD5: 70324 980d2ebe8f970986ac86e26ec985dafc
Attachment:
signature.asc
Description: This is a digitally signed message part
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/