[USN-735-1] GStreamer Base Plugins vulnerability
Subject: [USN-735-1] GStreamer Base Plugins vulnerability
From: Marc Deslauriers <marc.deslauriers@canonical.com.>
Reply-To: Ubuntu Security <security@ubuntu.com.>
To: [email protected]
Cc: [email protected], [email protected]
X-Original-To: [email protected]
X-Mailcontrol-Inbound:
uq3drnD2P+ps5SfEb0fvr78+NoP1DHBZwGqKpaXB2eTgNv8D6KLIxb8+NoP1DHBZ8VSaBg0k0xw=
X-Spam-Score: -12.6
X-Scanned-By: MailControl A_08_51_00 (www.mailcontrol.com) on 10.74.0.161
Content-Type: multipart/signed; micalg="pgp-sha1"; protocol="application/pgp-signature"; boundary="=-4CWYYsn/2vgKNb8C5mJK"
Date: Mon, 16 Mar 2009 16:41:20 -0400
Message-Id: <1237236080.29190.7.camel@mdlinux.technorage.com.>
Mime-Version: 1.0
X-Mailer: Evolution 2.25.92
X-Virus-Scanned: antivirus-gw at tyumen.ru
--=-4CWYYsn/2vgKNb8C5mJK
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D
Ubuntu Security Notice USN-735-1 March 16, 2009
gst-plugins-base0.10 vulnerability
CVE-2009-0586
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D
A security issue affects the following Ubuntu releases:
Ubuntu 8.10
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 8.10:
gstreamer0.10-plugins-base 0.10.21-3ubuntu0.1
In general, a standard system upgrade is sufficient to effect the
necessary changes.
Details follow:
It was discovered that the Base64 decoding functions in GStreamer Base
Plugins did not properly handle large images in Vorbis file tags. If a user
were tricked into opening a specially crafted Vorbis file, an attacker
could possibly execute arbitrary code with user privileges.
Updated packages for Ubuntu 8.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gst-=
plugins-base0.10_0.10.21-3ubuntu0.1.diff.gz
Size/MD5: 32114 087761c1ddba86cacb5d3d13890e39c4
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gst-=
plugins-base0.10_0.10.21-3ubuntu0.1.dsc
Size/MD5: 2446 776e939b1f7f685f31bfb213ab498f50
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gst-=
plugins-base0.10_0.10.21.orig.tar.gz
Size/MD5: 2845594 69caf16640ebf2477a9197f62a5d6ee2
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gstr=
eamer0.10-plugins-base-doc_0.10.21-3ubuntu0.1_all.deb
Size/MD5: 354980 9f5ca61fa4e5875203752f666c1a9827
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gstr=
eamer0.10-alsa_0.10.21-3ubuntu0.1_amd64.deb
Size/MD5: 39630 8de3196ec056dcdc304872a5b6d7a89d
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gstr=
eamer0.10-gnomevfs_0.10.21-3ubuntu0.1_amd64.deb
Size/MD5: 17504 320de292fea8251b2508a2101fe102ff
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gstr=
eamer0.10-plugins-base-apps_0.10.21-3ubuntu0.1_amd64.deb
Size/MD5: 45050 a9b8dc4cc2f7e6d96e195f05913c40c5
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gstr=
eamer0.10-plugins-base-dbg_0.10.21-3ubuntu0.1_amd64.deb
Size/MD5: 2116530 fc2d7445d6f477ffcf82df58c1e13c49
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gstr=
eamer0.10-plugins-base_0.10.21-3ubuntu0.1_amd64.deb
Size/MD5: 574980 0561f45b70f0602a27bdca91ee9c9737
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gstr=
eamer0.10-x_0.10.21-3ubuntu0.1_amd64.deb
Size/MD5: 75554 b2018f9fb343d0e7c3a63825cfdc218b
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/libg=
streamer-plugins-base0.10-0_0.10.21-3ubuntu0.1_amd64.deb
Size/MD5: 296128 abb2d077b1ce2791accefd67f4379f52
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/libg=
streamer-plugins-base0.10-dev_0.10.21-3ubuntu0.1_amd64.deb
Size/MD5: 57920 29e9dd111a8611f66ed8d0c4dbbdd451
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gstr=
eamer0.10-alsa_0.10.21-3ubuntu0.1_i386.deb
Size/MD5: 35866 98179f92f2c8e9a189e030d5ebae0c2d
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gstr=
eamer0.10-gnomevfs_0.10.21-3ubuntu0.1_i386.deb
Size/MD5: 15956 d58d756ffd81a82417ffe8ff1a99360d
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gstr=
eamer0.10-plugins-base-apps_0.10.21-3ubuntu0.1_i386.deb
Size/MD5: 45084 729ece20541d14597c65bacb4992a8af
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gstr=
eamer0.10-plugins-base-dbg_0.10.21-3ubuntu0.1_i386.deb
Size/MD5: 2012246 ff9d76f152ddaf49077c064fa3a5cf96
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gstr=
eamer0.10-plugins-base_0.10.21-3ubuntu0.1_i386.deb
Size/MD5: 545282 5306637b57c284b7b100b5e376433313
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/gstr=
eamer0.10-x_0.10.21-3ubuntu0.1_i386.deb
Size/MD5: 69244 5b3f1c7b3d22d5c228d9b515462d8fa0
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/libg=
streamer-plugins-base0.10-0_0.10.21-3ubuntu0.1_i386.deb
Size/MD5: 275338 da20ab3e25212ec17dee4a0f7a56298a
http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-base0.10/libg=
streamer-plugins-base0.10-dev_0.10.21-3ubuntu0.1_i386.deb
Size/MD5: 58476 009ba58fc2cba5aa68778c2bdf30fec0
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
alsa_0.10.21-3ubuntu0.1_lpia.deb
Size/MD5: 36370 b9d55f4942addff7a22aa7cc9ad9f5fa
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
gnomevfs_0.10.21-3ubuntu0.1_lpia.deb
Size/MD5: 15970 5e4c4bd01da1f5d549b42cceb7c504dd
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
plugins-base-apps_0.10.21-3ubuntu0.1_lpia.deb
Size/MD5: 45046 31f74e0feedf06865a15beace52aea87
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
plugins-base-dbg_0.10.21-3ubuntu0.1_lpia.deb
Size/MD5: 2050002 4dd4f9600ac6f4b56a1a50e685e11d6d
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
plugins-base_0.10.21-3ubuntu0.1_lpia.deb
Size/MD5: 544594 a60cdc88e5042f36e8f06b9a36b63d60
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
x_0.10.21-3ubuntu0.1_lpia.deb
Size/MD5: 68992 997db137876106dae7d1cea34e6cd57a
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/libgstreamer-p=
lugins-base0.10-0_0.10.21-3ubuntu0.1_lpia.deb
Size/MD5: 271472 0cca60030f41472a54160131ee0e71e2
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/libgstreamer-p=
lugins-base0.10-dev_0.10.21-3ubuntu0.1_lpia.deb
Size/MD5: 57908 971d4cd4a75f4d9f8146839d33d62597
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
alsa_0.10.21-3ubuntu0.1_powerpc.deb
Size/MD5: 39192 1cebf894b76f7c3f37146c0a89db04e0
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
gnomevfs_0.10.21-3ubuntu0.1_powerpc.deb
Size/MD5: 17736 cd7c22d8bdae65437d7cab295883d3ce
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
plugins-base-apps_0.10.21-3ubuntu0.1_powerpc.deb
Size/MD5: 45046 ff9df1bc6dadfe233d556662baf308c1
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
plugins-base-dbg_0.10.21-3ubuntu0.1_powerpc.deb
Size/MD5: 2141690 20bd1d66bd6cd4c3882c96df44706e03
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
plugins-base_0.10.21-3ubuntu0.1_powerpc.deb
Size/MD5: 619900 ac50db0473223cee0fdb75fb2cff68f4
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
x_0.10.21-3ubuntu0.1_powerpc.deb
Size/MD5: 74564 9cad9303ed1f992e419caf79ae9b83bb
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/libgstreamer-p=
lugins-base0.10-0_0.10.21-3ubuntu0.1_powerpc.deb
Size/MD5: 307694 b438c6a7d6eeda92689e69a061b19ec4
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/libgstreamer-p=
lugins-base0.10-dev_0.10.21-3ubuntu0.1_powerpc.deb
Size/MD5: 57922 6946d3b3c1ecbe2fa40f65d46b8c2384
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
alsa_0.10.21-3ubuntu0.1_sparc.deb
Size/MD5: 36182 0986c414db36aff71c2c608041473086
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
gnomevfs_0.10.21-3ubuntu0.1_sparc.deb
Size/MD5: 16170 0b297a7d77455479587e1ac852e7510d
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
plugins-base-apps_0.10.21-3ubuntu0.1_sparc.deb
Size/MD5: 45050 8d1a9a7f2b6d40bb3f4f5b0a6c466681
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
plugins-base-dbg_0.10.21-3ubuntu0.1_sparc.deb
Size/MD5: 1940702 96c0b54bb0a3f4f36db68753aad6b468
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
plugins-base_0.10.21-3ubuntu0.1_sparc.deb
Size/MD5: 554774 94e88aa061a26a67d4fb2ccc447904f5
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/gstreamer0.10-=
x_0.10.21-3ubuntu0.1_sparc.deb
Size/MD5: 69512 99a67191cd9488ff4bd7b84420ffa414
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/libgstreamer-p=
lugins-base0.10-0_0.10.21-3ubuntu0.1_sparc.deb
Size/MD5: 289030 b1302ea1e9660c9301a0baea78bbc371
http://ports.ubuntu.com/pool/main/g/gst-plugins-base0.10/libgstreamer-p=
lugins-base0.10-dev_0.10.21-3ubuntu0.1_sparc.deb
Size/MD5: 57934 4d709ac874b48de220ae56c9f0dd4bd4
--=-4CWYYsn/2vgKNb8C5mJK
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEABECAAYFAkm+uW0ACgkQLMAs/0C4zNpDLwCffnoakWgiZzlMrt5q6xb4gGcv
sMIAoIgpBF9NKiQ8Qb38Y8J2GabR/wP4
=S6WS
-----END PGP SIGNATURE-----
--=-4CWYYsn/2vgKNb8C5mJK--
