===========================================================
Ubuntu Security Notice USN-1044-1 January 18, 2011
dbus vulnerability
CVE-2010-4352
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 8.04 LTS
Ubuntu 9.10
Ubuntu 10.04 LTS
Ubuntu 10.10
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 8.04 LTS:
libdbus-1-3 1.1.20-1ubuntu3.4
Ubuntu 9.10:
libdbus-1-3 1.2.16-0ubuntu9.1
Ubuntu 10.04 LTS:
libdbus-1-3 1.2.16-2ubuntu4.1
Ubuntu 10.10:
libdbus-1-3 1.4.0-0ubuntu1.1
After a standard system update you need to reboot your computer to make
all the necessary changes.
Details follow:
Remi Denis-Courmont discovered that D-Bus did not properly validate the
number of nested variants when validating D-Bus messages. A local attacker
could exploit this to cause a denial of service.
Updated packages for Ubuntu 8.04 LTS:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.1.20-1ubuntu3.4.diff.gz
Size/MD5: 30731 14911ba9f71e4c7a457441a0654c1568
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.1.20-1ubuntu3.4.dsc
Size/MD5: 1915 7132713f4351d60638d2f9a7c7b50187
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.1.20.orig.tar.gz
Size/MD5: 1401902 c552b9bc4b69e4c602644abc21b7661e
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus-1-doc_1.1.20-1ubuntu3.4_all.deb
Size/MD5: 1708168 3b87103f06e0403c75856b86b4cce718
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus-x11_1.1.20-1ubuntu3.4_amd64.deb
Size/MD5: 44442 3018cb6b9b2838fcacea60476f98f0a4
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.1.20-1ubuntu3.4_amd64.deb
Size/MD5: 317708 1a8e7a344f84a12de61ecdeb2099440e
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-3_1.1.20-1ubuntu3.4_amd64.deb
Size/MD5: 138820 9bfe5ebd1a7793956f6821d2bc418d51
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-dev_1.1.20-1ubuntu3.4_amd64.deb
Size/MD5: 187868 bdef41bd842beb25cbf8c7e846171843
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus-x11_1.1.20-1ubuntu3.4_i386.deb
Size/MD5: 43258 633cd8cbc86fda64f5f78e6b0111e8c0
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.1.20-1ubuntu3.4_i386.deb
Size/MD5: 281652 719a502a85474c3e7607471a37c9f99c
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-3_1.1.20-1ubuntu3.4_i386.deb
Size/MD5: 124192 e68a0a17512af8ee45396ea517d4e51e
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-dev_1.1.20-1ubuntu3.4_i386.deb
Size/MD5: 169420 2c6d14b7d1de8d68b970b617c5c47b68
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/d/dbus/dbus-x11_1.1.20-1ubuntu3.4_lpia.deb
Size/MD5: 43174 2194b9c64cb1bc255de8be73ebe31e40
http://ports.ubuntu.com/pool/main/d/dbus/dbus_1.1.20-1ubuntu3.4_lpia.deb
Size/MD5: 276086 81ed1ac740b7f911035273218dcd9e00
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-3_1.1.20-1ubuntu3.4_lpia.deb
Size/MD5: 122094 111edd4908d03f7906f528b723fe1fac
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-dev_1.1.20-1ubuntu3.4_lpia.deb
Size/MD5: 165250 a79260e5a2da3bbca39ff9cf26fa1957
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/d/dbus/dbus-x11_1.1.20-1ubuntu3.4_powerpc.deb
Size/MD5: 46744 73a49bd17d06aec4cdcf892c14065701
http://ports.ubuntu.com/pool/main/d/dbus/dbus_1.1.20-1ubuntu3.4_powerpc.deb
Size/MD5: 306740 ef7f3173bb1e121b7795c177326738b6
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-3_1.1.20-1ubuntu3.4_powerpc.deb
Size/MD5: 132242 45b1673cc89d40564721128f5b4667a0
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-dev_1.1.20-1ubuntu3.4_powerpc.deb
Size/MD5: 176450 8863c504a26182f079caa25e38e068dc
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/d/dbus/dbus-x11_1.1.20-1ubuntu3.4_sparc.deb
Size/MD5: 43456 42ea7238fbd0e3d63f104a8f333b23ce
http://ports.ubuntu.com/pool/main/d/dbus/dbus_1.1.20-1ubuntu3.4_sparc.deb
Size/MD5: 274954 ede65aab32b7c224c45e7b87de151485
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-3_1.1.20-1ubuntu3.4_sparc.deb
Size/MD5: 122558 b3e0b14c5d5f42626236dd17a4dc2497
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-dev_1.1.20-1ubuntu3.4_sparc.deb
Size/MD5: 172258 f9871f7143fa33a4194a44530a326388
Updated packages for Ubuntu 9.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.2.16-0ubuntu9.1.dsc
Size/MD5: 2126 67a2122d18da6e374ef6d0bf60cfa622
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.2.16-0ubuntu9.1.tar.gz
Size/MD5: 1538983 af74c79fd8c46912f6f04aebd100a55f
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus-1-doc_1.2.16-0ubuntu9.1_all.deb
Size/MD5: 1739058 14d9282d92bb2ba513d4090b143d0ecd
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus-x11_1.2.16-0ubuntu9.1_amd64.deb
Size/MD5: 45770 4b05355ca1fa77808ef8d73b733ef50c
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.2.16-0ubuntu9.1_amd64.deb
Size/MD5: 210700 b2028fbd0fc4af84afbd9235b19b914f
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-3_1.2.16-0ubuntu9.1_amd64.deb
Size/MD5: 146092 5893422f9af1105c77aaf18ec47c725f
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-dev_1.2.16-0ubuntu9.1_amd64.deb
Size/MD5: 220940 7e6c69e91021a39bc6c8304e8b78117a
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus-x11_1.2.16-0ubuntu9.1_i386.deb
Size/MD5: 44456 790a2972ffcf0972f4a25c158873c45a
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.2.16-0ubuntu9.1_i386.deb
Size/MD5: 188600 a2993580f7875fe8cafcc7b631b7704b
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-3_1.2.16-0ubuntu9.1_i386.deb
Size/MD5: 131040 f853d5f055ed5eb89e792edf6df9c4d8
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-dev_1.2.16-0ubuntu9.1_i386.deb
Size/MD5: 196314 358dc8d26718d58b8b0202617597862c
armel architecture (ARM Architecture):
http://ports.ubuntu.com/pool/main/d/dbus/dbus-x11_1.2.16-0ubuntu9.1_armel.deb
Size/MD5: 44184 81959575e5f5ce1cdc277be99f12273e
http://ports.ubuntu.com/pool/main/d/dbus/dbus_1.2.16-0ubuntu9.1_armel.deb
Size/MD5: 184056 92e222d19ece0e2801a1177ee3466f75
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-3_1.2.16-0ubuntu9.1_armel.deb
Size/MD5: 127198 a2a4bb7b0aa0d318d16f4d770bb67512
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-dev_1.2.16-0ubuntu9.1_armel.deb
Size/MD5: 200750 c2befc0c184acdd97f89be9b655ed3a4
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/d/dbus/dbus-x11_1.2.16-0ubuntu9.1_lpia.deb
Size/MD5: 44740 c77a6b2284d8f9721b0aec1d800b8939
http://ports.ubuntu.com/pool/main/d/dbus/dbus_1.2.16-0ubuntu9.1_lpia.deb
Size/MD5: 187526 2435c64887aaba64d8b9079df0e809c3
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-3_1.2.16-0ubuntu9.1_lpia.deb
Size/MD5: 129978 4fac6f10aaeb5afc585cb8945c430fe3
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-dev_1.2.16-0ubuntu9.1_lpia.deb
Size/MD5: 194100 111cdaf812925267c913eb015bc5cae2
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/d/dbus/dbus-x11_1.2.16-0ubuntu9.1_powerpc.deb
Size/MD5: 45428 e0b492ffde6461e5d2fe3bfebdb962d8
http://ports.ubuntu.com/pool/main/d/dbus/dbus_1.2.16-0ubuntu9.1_powerpc.deb
Size/MD5: 208238 90fd81067c6b05c32389d05f5f47490f
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-3_1.2.16-0ubuntu9.1_powerpc.deb
Size/MD5: 139250 13858dff3836be134add9d96dc617dc5
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-dev_1.2.16-0ubuntu9.1_powerpc.deb
Size/MD5: 202790 e67c05cf6fece288f7af0f2a16575691
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/d/dbus/dbus-x11_1.2.16-0ubuntu9.1_sparc.deb
Size/MD5: 44718 f1e4bbfe8144d1d84a254a199b7fae1d
http://ports.ubuntu.com/pool/main/d/dbus/dbus_1.2.16-0ubuntu9.1_sparc.deb
Size/MD5: 184226 793710369c28bd9e464ff7c7a73f05c2
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-3_1.2.16-0ubuntu9.1_sparc.deb
Size/MD5: 128702 ee2db1b8d4db5a86b39fb53debae165b
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-dev_1.2.16-0ubuntu9.1_sparc.deb
Size/MD5: 193702 1baaf3e2ea5d3824a8c491fd606a748c
Updated packages for Ubuntu 10.04 LTS:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.2.16-2ubuntu4.1.diff.gz
Size/MD5: 33308 2cff23d217dd81eb8d906c77e9b1e922
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.2.16-2ubuntu4.1.dsc
Size/MD5: 2360 1e891a07e45ecb29f39b502daf28c0b5
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.2.16.orig.tar.gz
Size/MD5: 1576209 c7a47b851ebe02f6726b65b78d1b730b
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus-1-doc_1.2.16-2ubuntu4.1_all.deb
Size/MD5: 1730750 d88daea04100ff09c6fb24581847fa92
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus-x11_1.2.16-2ubuntu4.1_amd64.deb
Size/MD5: 43156 f3de762eb0713a1ed4a9688fcf7e9d73
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.2.16-2ubuntu4.1_amd64.deb
Size/MD5: 209722 a46d048f145b5c4a921ff24ff7e485b9
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-3_1.2.16-2ubuntu4.1_amd64.deb
Size/MD5: 143450 dac584fc18981e5fd78b2788cbac37e7
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-dev_1.2.16-2ubuntu4.1_amd64.deb
Size/MD5: 25342 b9faf49ec8e09b21efde6c99c342e3f9
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus-x11_1.2.16-2ubuntu4.1_i386.deb
Size/MD5: 41802 dc8f69948f798f3a027b20acdc52059e
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.2.16-2ubuntu4.1_i386.deb
Size/MD5: 188972 fb68bd6aceaa6c93f402168748fc3e1c
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-3_1.2.16-2ubuntu4.1_i386.deb
Size/MD5: 128248 c2dc036456c7d33e2beddaf669e8de86
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-dev_1.2.16-2ubuntu4.1_i386.deb
Size/MD5: 25340 08fa5b2372cb48999432a80da361e37d
armel architecture (ARM Architecture):
http://ports.ubuntu.com/pool/main/d/dbus/dbus-x11_1.2.16-2ubuntu4.1_armel.deb
Size/MD5: 41818 85f23ff854769f007930da1d13220e1e
http://ports.ubuntu.com/pool/main/d/dbus/dbus_1.2.16-2ubuntu4.1_armel.deb
Size/MD5: 172634 62e950f28018ab0e55ed8e1efe6113ad
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-3_1.2.16-2ubuntu4.1_armel.deb
Size/MD5: 118692 99e366692bb3ba25bdbe6bf403c4c7a8
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-dev_1.2.16-2ubuntu4.1_armel.deb
Size/MD5: 25248 532bb7ac5d53bbedcd24e3380006269b
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/d/dbus/dbus-x11_1.2.16-2ubuntu4.1_powerpc.deb
Size/MD5: 42776 c460ce063a13ca99143e60ec2834189a
http://ports.ubuntu.com/pool/main/d/dbus/dbus_1.2.16-2ubuntu4.1_powerpc.deb
Size/MD5: 208684 92808853d3dd44e153c2e1308da712dc
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-3_1.2.16-2ubuntu4.1_powerpc.deb
Size/MD5: 136318 19dcdcc1f7396dfd1dc183e32a990e3b
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-dev_1.2.16-2ubuntu4.1_powerpc.deb
Size/MD5: 25344 377a75b2c05d842451fa85c744ae4a88
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/d/dbus/dbus-x11_1.2.16-2ubuntu4.1_sparc.deb
Size/MD5: 42266 a2fcf1af4cc1f3e9a6e76050ca1c3a3d
http://ports.ubuntu.com/pool/main/d/dbus/dbus_1.2.16-2ubuntu4.1_sparc.deb
Size/MD5: 190192 f66b4efe660ca381b11c5d4e9b9acbc5
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-3_1.2.16-2ubuntu4.1_sparc.deb
Size/MD5: 129382 afb0f3aa70a48d2b64c24a4be7f44e03
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-dev_1.2.16-2ubuntu4.1_sparc.deb
Size/MD5: 25340 2172b68707287e8880baf4af416f6cb4
Updated packages for Ubuntu 10.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.4.0-0ubuntu1.1.debian.tar.gz
Size/MD5: 33459 f2ee34cb8a11cbf5d64143e5ab74883b
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.4.0-0ubuntu1.1.dsc
Size/MD5: 2335 5c1fc6828cecde5732b7205422760593
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.4.0.orig.tar.gz
Size/MD5: 1800347 f59618b18d2fb2bd1fce9e1c5a2a3282
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus-1-doc_1.4.0-0ubuntu1.1_all.deb
Size/MD5: 1942586 ad0fa350b9428b6cf116aeb0f2457732
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus-1-dbg_1.4.0-0ubuntu1.1_amd64.deb
Size/MD5: 831724 4b07bc6d76f0231b91d4219f50e78068
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus-x11_1.4.0-0ubuntu1.1_amd64.deb
Size/MD5: 39222 df3255faec6afd8a71209e3b36e1fc53
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.4.0-0ubuntu1.1_amd64.deb
Size/MD5: 218792 f7b1d7635e7a790da5d97199af671cc3
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-3_1.4.0-0ubuntu1.1_amd64.deb
Size/MD5: 145234 74359a633c6d72755b9d482bb35f3d21
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-dev_1.4.0-0ubuntu1.1_amd64.deb
Size/MD5: 25956 87a0b15cf7f19c401deabdf9878fbb82
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus-1-dbg_1.4.0-0ubuntu1.1_i386.deb
Size/MD5: 837350 14853bfc4e0e3b3f7872e45c563c14e6
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus-x11_1.4.0-0ubuntu1.1_i386.deb
Size/MD5: 37824 1b9513c37557f8797b01c4305b42014f
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/dbus_1.4.0-0ubuntu1.1_i386.deb
Size/MD5: 195714 f81f233d7b6309ddb70eba7bb54ecdc7
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-3_1.4.0-0ubuntu1.1_i386.deb
Size/MD5: 130006 6fa60d5c3ef722232ca79415354f4825
http://security.ubuntu.com/ubuntu/pool/main/d/dbus/libdbus-1-dev_1.4.0-0ubuntu1.1_i386.deb
Size/MD5: 25952 08fb32b2c05fbda78b26a7e9bf2eb0b3
armel architecture (ARM Architecture):
http://ports.ubuntu.com/pool/main/d/dbus/dbus-1-dbg_1.4.0-0ubuntu1.1_armel.deb
Size/MD5: 837100 1cdb6df9c5976b2a789fde5baad0d393
http://ports.ubuntu.com/pool/main/d/dbus/dbus-x11_1.4.0-0ubuntu1.1_armel.deb
Size/MD5: 37202 240497fe96f1e4d0cb304c7a618071ea
http://ports.ubuntu.com/pool/main/d/dbus/dbus_1.4.0-0ubuntu1.1_armel.deb
Size/MD5: 190110 35903da49ec6e68d1edd3ed276ce9819
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-3_1.4.0-0ubuntu1.1_armel.deb
Size/MD5: 126020 115cc77e978eb5cb04d44fd6bdf8fb6f
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-dev_1.4.0-0ubuntu1.1_armel.deb
Size/MD5: 26214 22f6093535cfb196f5015bd795d409c5
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/d/dbus/dbus-1-dbg_1.4.0-0ubuntu1.1_powerpc.deb
Size/MD5: 875648 48bc3df72a32b3d3d385ba46ed814855
http://ports.ubuntu.com/pool/main/d/dbus/dbus-x11_1.4.0-0ubuntu1.1_powerpc.deb
Size/MD5: 38830 ccdfebcf91df68df2f8d28036447baf8
http://ports.ubuntu.com/pool/main/d/dbus/dbus_1.4.0-0ubuntu1.1_powerpc.deb
Size/MD5: 217680 1d3f9f69c78f03eb2111268f0bfeccbe
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-3_1.4.0-0ubuntu1.1_powerpc.deb
Size/MD5: 140022 8d71802411f69193acbd30d26c7926a1
http://ports.ubuntu.com/pool/main/d/dbus/libdbus-1-dev_1.4.0-0ubuntu1.1_powerpc.deb
Size/MD5: 25948 e9276a8fea728258210c3832ee55faea
Attachment:
signature.asc
Description: This is a digitally signed message part
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/