=========================================================== Ubuntu Security Notice USN-251-1 February 16, 2006 libtasn1-2 vulnerability CVE-2006-0645 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) Ubuntu 5.10 (Breezy Badger) The following packages are affected: libtasn1-2 libgnutls10 libgnutls11 The problem can be corrected by upgrading the affected package to the following versions: Ubuntu 4.10: libtasn1-2: 0.2.7-2ubuntu0.1 libgnutls10: 1.0.4-3ubuntu1.2 Ubuntu 5.04: libtasn1-2: 0.2.10-4ubuntu0.0.5.04.1 libgnutls11: 1.0.16-13ubuntu0.2 Ubuntu 5.10: libtasn1-2: 0.2.10-4ubuntu0.1 libgnutls11: 1.0.16-13.1ubuntu1.1 It is highly recommended to restart your computer after a standard system upgrade to effect the necessary changes. If you cannot afford to do that then you need to restart all server processes which use TLS or SSL. Details follow: Evgeny Legerov discovered a buffer overflow in the DER format decoding function of the libtasn library. This library is mainly used by the GNU TLS library; by sending a specially crafted X.509 certificate to a server which uses TLS encryption/authentication, a remote attacker could exploit this to crash that server process and possibly even execute arbitrary code with the privileges of that server. In order to fix the vulnerability in libtasn, several internal function signatures had to be changed; some of these functions are used by the GNU TLS library, so that library needs to be updated as well. Updated packages for Ubuntu 4.10: Source archives: http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.10-4ubuntu0.0.5.04.1.diff.gz Size/MD5: 302811 f83da11298aef60134a9d9f60a531542 http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.10-4ubuntu0.0.5.04.1.dsc Size/MD5: 690 804db57299c32ab396cd82096695cc21 http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.10.orig.tar.gz Size/MD5: 113412 ae95aa75e5db7dc4d85b2837017364a6 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls10/gnutls10_1.0.4-3u buntu1.2.diff.gz Size/MD5: 51101 7469996012703c4b0d114c64d5dc68bd http://security.ubuntu.com/ubuntu/pool/main/g/gnutls10/gnutls10_1.0.4-3u buntu1.2.dsc Size/MD5: 885 4211b5ae90cf498ed4aafda803dbeb26 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls10/gnutls10_1.0.4.or ig.tar.gz Size/MD5: 1378290 565d2835b772008689476488265f4e99 Architecture independent packages: http://security.ubuntu.com/ubuntu/pool/main/g/gnutls10/libgnutls-doc_1.0 .4-3ubuntu1.2_all.deb Size/MD5: 553680 f0229ca2a099166ad6f565bb758614bc amd64 architecture (Athlon64, Opteron, EM64T Xeon) http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2-d ev_0.2.10-4ubuntu0.0.5.04.1_amd64.deb Size/MD5: 185958 45bbee6946f97f40acfa658bb82568c0 http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.10-4ubuntu0.0.5.04.1_amd64.deb Size/MD5: 44638 387a051b35fa2da3a6b34c1ad00ed5f5 http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls10/gnutls-bin_1. 0.4-3ubuntu1.2_amd64.deb Size/MD5: 193798 486d7cf57a79adee420558731135d5bb http://security.ubuntu.com/ubuntu/pool/main/g/gnutls10/libgnutls10-dev_1 .0.4-3ubuntu1.2_amd64.deb Size/MD5: 367360 a7873c8b6f0c51eaee5cafd62bfc82dc http://security.ubuntu.com/ubuntu/pool/main/g/gnutls10/libgnutls10_1.0.4 -3ubuntu1.2_amd64.deb Size/MD5: 309536 7f7e50c02ace523bec531589950ae39b i386 architecture (x86 compatible Intel/AMD) http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2-d ev_0.2.10-4ubuntu0.0.5.04.1_i386.deb Size/MD5: 181920 a590e7f46e3880313b0febc6b65a4d26 http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.10-4ubuntu0.0.5.04.1_i386.deb Size/MD5: 42696 82535e441f6b80c533cc3fc939a0d212 http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls10/gnutls-bin_1. 0.4-3ubuntu1.2_i386.deb Size/MD5: 185402 b91cd88c85e5f4351b5f64f26db699cd http://security.ubuntu.com/ubuntu/pool/main/g/gnutls10/libgnutls10-dev_1 .0.4-3ubuntu1.2_i386.deb Size/MD5: 328816 bdea2a19bc27f9ad534c5d3371729790 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls10/libgnutls10_1.0.4 -3ubuntu1.2_i386.deb Size/MD5: 279656 e4f7a519775fc0a830295962042ca93c powerpc architecture (Apple Macintosh G3/G4/G5) http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2-d ev_0.2.10-4ubuntu0.0.5.04.1_powerpc.deb Size/MD5: 188012 7bc64fc8a372430f5e1d29ac0ba92d4b http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.10-4ubuntu0.0.5.04.1_powerpc.deb Size/MD5: 43214 86e22d9cad05471106f17423eac69673 http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls10/gnutls-bin_1. 0.4-3ubuntu1.2_powerpc.deb Size/MD5: 196144 90339e5b1d5b9b9d1e4493b00545d589 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls10/libgnutls10-dev_1 .0.4-3ubuntu1.2_powerpc.deb Size/MD5: 396324 7287cefdf890c683e4aefeb676b00be7 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls10/libgnutls10_1.0.4 -3ubuntu1.2_powerpc.deb Size/MD5: 284968 f6e888674395191804960ebbbd736f76 Updated packages for Ubuntu 5.04: Source archives: http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.7-2ubuntu0.1.diff.gz Size/MD5: 9397 65421e1371910a12a2d0181ad85cc920 http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.7-2ubuntu0.1.dsc Size/MD5: 669 7a62f4a925dd9e8c905427eeaa2ff7c9 http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.7.orig.tar.gz Size/MD5: 529617 21e39cb21260116bf4a84d31063972e4 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/gnutls11_1.0.16-1 3ubuntu0.2.diff.gz Size/MD5: 339177 a461c7974e30d5d643dfe39624193c14 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/gnutls11_1.0.16-1 3ubuntu0.2.dsc Size/MD5: 830 2aec252666f1c50c3c6d42be88832a34 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/gnutls11_1.0.16.o rig.tar.gz Size/MD5: 1504638 7b410fa3c563c7988e434a8c8671b3cd amd64 architecture (Athlon64, Opteron, EM64T Xeon) http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2-d ev_0.2.7-2ubuntu0.1_amd64.deb Size/MD5: 182002 d0cded4628833103e039a4778a23616b http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.7-2ubuntu0.1_amd64.deb Size/MD5: 43622 8e2fda9ac3950b8c559acf982474e8ef http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_1. 0.16-13ubuntu0.2_amd64.deb Size/MD5: 217456 8e337aeb284177963c1616110e50e733 http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11-d bg_1.0.16-13ubuntu0.2_amd64.deb Size/MD5: 575502 45fbfd2a5dfed9a13e0bb711824a6588 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev_1 .0.16-13ubuntu0.2_amd64.deb Size/MD5: 392362 2898ee7b31d7f99dca61b8d27850c7db http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0.1 6-13ubuntu0.2_amd64.deb Size/MD5: 326894 902e0a28fe1bf3c7d396e8038dcde8f8 i386 architecture (x86 compatible Intel/AMD) http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2-d ev_0.2.7-2ubuntu0.1_i386.deb Size/MD5: 178122 9693d7954bdba6dc59040fb4560cb38b http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.7-2ubuntu0.1_i386.deb Size/MD5: 41964 9b7bba1c7979021988feb67f70c3a766 http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_1. 0.16-13ubuntu0.2_i386.deb Size/MD5: 203442 34ba50244aa67e733f211f06d0d4d03a http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11-d bg_1.0.16-13ubuntu0.2_i386.deb Size/MD5: 555604 8d5085dfa64e9a0bd1d2489a8a3825d9 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev_1 .0.16-13ubuntu0.2_i386.deb Size/MD5: 357134 42f0fe10f5943b40264faaafd785e349 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0.1 6-13ubuntu0.2_i386.deb Size/MD5: 293370 7d4b401e88668c627b7c224c6ea96398 powerpc architecture (Apple Macintosh G3/G4/G5) http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2-d ev_0.2.7-2ubuntu0.1_powerpc.deb Size/MD5: 184002 9e0c79244c7737042c270a43327dc7ca http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.7-2ubuntu0.1_powerpc.deb Size/MD5: 42284 ad68e8405ad32072f62d5d058d923358 http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_1. 0.16-13ubuntu0.2_powerpc.deb Size/MD5: 218384 0bd5da55b0b21b7b9e49f85363340de8 http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11-d bg_1.0.16-13ubuntu0.2_powerpc.deb Size/MD5: 1416000 525d1008f84aeb586250cecc133efb6a http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev_1 .0.16-13ubuntu0.2_powerpc.deb Size/MD5: 388764 d8afff0331d2bce12a7fc5e62b966260 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0.1 6-13ubuntu0.2_powerpc.deb Size/MD5: 299404 42e776d44dc90db1bc796c2c5564ac3b Updated packages for Ubuntu 5.10: Source archives: http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.10-4ubuntu0.1.diff.gz Size/MD5: 302886 1c86ff9ac73ba986e91aaf23231aa3f2 http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.10-4ubuntu0.1.dsc Size/MD5: 676 770e9f82dff36318022a1fcc963855ff http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.10.orig.tar.gz Size/MD5: 113412 ae95aa75e5db7dc4d85b2837017364a6 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/gnutls11_1.0.16-1 3.1ubuntu1.1.diff.gz Size/MD5: 339696 38b52c650f0018100c5a085ffddc2ccf http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/gnutls11_1.0.16-1 3.1ubuntu1.1.dsc Size/MD5: 829 d65ba5094be7fc67079e12da2da25dce http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/gnutls11_1.0.16.o rig.tar.gz Size/MD5: 1504638 7b410fa3c563c7988e434a8c8671b3cd amd64 architecture (Athlon64, Opteron, EM64T Xeon) http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2-d ev_0.2.10-4ubuntu0.1_amd64.deb Size/MD5: 187882 ab7100c04b67119522e6020536fad1d8 http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.10-4ubuntu0.1_amd64.deb Size/MD5: 46348 a435cac32c356140771a6a5c4207eef4 http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_1. 0.16-13.1ubuntu1.1_amd64.deb Size/MD5: 217428 02c4205d6b5fda205092a3a998dd9647 http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11-d bg_1.0.16-13.1ubuntu1.1_amd64.deb Size/MD5: 500798 d3e5feafe1ea05f1fc84a6897bb93418 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev_1 .0.16-13.1ubuntu1.1_amd64.deb Size/MD5: 398672 0b2dbfb3d19c8927da51b6ce80cac82f http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0.1 6-13.1ubuntu1.1_amd64.deb Size/MD5: 332038 6e776f87dfdf505ccbd2d72c8406bc67 i386 architecture (x86 compatible Intel/AMD) http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2-d ev_0.2.10-4ubuntu0.1_i386.deb Size/MD5: 182088 578ad92f2fa97c221698a836f8a51cb5 http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.10-4ubuntu0.1_i386.deb Size/MD5: 42356 18105b162e1b4a3ae0b259f8ecec8be9 http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_1. 0.16-13.1ubuntu1.1_i386.deb Size/MD5: 201606 e7e0d57a788d2d37087373db6f9fd1f2 http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11-d bg_1.0.16-13.1ubuntu1.1_i386.deb Size/MD5: 443546 f4576a81cec8565257de1ec5e6e93467 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev_1 .0.16-13.1ubuntu1.1_i386.deb Size/MD5: 353296 82914947d86d8fc89e78308868dcf6fb http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0.1 6-13.1ubuntu1.1_i386.deb Size/MD5: 286992 dc34ea8b46a24be8feaf8f63cae6a08a powerpc architecture (Apple Macintosh G3/G4/G5) http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2-d ev_0.2.10-4ubuntu0.1_powerpc.deb Size/MD5: 188214 0a375d921a5639958a1c37d904658fea http://security.ubuntu.com/ubuntu/pool/main/libt/libtasn1-2/libtasn1-2_0 .2.10-4ubuntu0.1_powerpc.deb Size/MD5: 43566 73654c735e38d3b19d206217fbac1ca9 http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_1. 0.16-13.1ubuntu1.1_powerpc.deb Size/MD5: 218704 a61cc659973675624da83dbb23141c7c http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11-d bg_1.0.16-13.1ubuntu1.1_powerpc.deb Size/MD5: 498388 e4687d0a5b18c45173bc3dc702b40563 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev_1 .0.16-13.1ubuntu1.1_powerpc.deb Size/MD5: 395190 1a5b4de0cb8ab1a6853a9b554b91e1c8 http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0.1 6-13.1ubuntu1.1_powerpc.deb Size/MD5: 304606 46f8fc5a3f641f36433b9f2d5759ff17 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) iD8DBQFD9LjRDecnbV4Fd/IRAt4BAJ9LK9ZkZLZQOF25Mx9BFm6fDWXe7wCgo965 7zHoyJ4tz/2HjsifAs4yRjs= =/THs -----END PGP SIGNATURE-----