===========================================================
Ubuntu Security Notice USN-980-1            August 31, 2010
bogofilter vulnerability
CVE-2010-2494
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 8.04 LTS
Ubuntu 9.04
Ubuntu 9.10
Ubuntu 10.04 LTS

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 8.04 LTS:
  bogofilter-bdb                  1.1.5-2ubuntu5.1
  bogofilter-sqlite               1.1.5-2ubuntu5.1

Ubuntu 9.04:
  bogofilter-bdb                  1.1.7-1ubuntu1.1
  bogofilter-sqlite               1.1.7-1ubuntu1.1

Ubuntu 9.10:
  bogofilter-bdb                  1.2.0-3ubuntu1.1
  bogofilter-sqlite               1.2.0-3ubuntu1.1

Ubuntu 10.04 LTS:
  bogofilter-bdb                  1.2.1-0ubuntu1.1
  bogofilter-sqlite               1.2.1-0ubuntu1.1

In general, a standard system update will make all the necessary changes.

Details follow:

Julius Plenz discovered that bogofilter incorrectly handled certain
malformed encodings. By sending a specially crafted email, a remote
attacker could exploit this and cause bogofilter to crash, resulting in a
denial of service.


Updated packages for Ubuntu 8.04 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.1.5-2ubuntu5.1.diff.gz
      Size/MD5:    13124 b6ee9d49921fa299b635a28fa18dd4be
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.1.5-2ubuntu5.1.dsc
      Size/MD5:      755 73b56da23c7163d0a8c450ef67b4fff2
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.1.5.orig.tar.gz
      Size/MD5:   941091 25558e2e72350ee2e4edfc1b617f6738

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter-common_1.1.5-2ubuntu5.1_all.deb
      Size/MD5:   140846 8b175c0cc7454fc041c8e4fa4d5c7012

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter-bdb_1.1.5-2ubuntu5.1_amd64.deb
      Size/MD5:   290240 54324e20a3957d58deb1859c2b5a75a4
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.1.5-2ubuntu5.1_amd64.deb
      Size/MD5:      990 ee300bbfc91cd72cbd9054c2ec63b98c
    http://security.ubuntu.com/ubuntu/pool/universe/b/bogofilter/bogofilter-sqlite_1.1.5-2ubuntu5.1_amd64.deb
      Size/MD5:   258212 b47ece61ffd2a3fceab8eecb5ad5a6c8

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter-bdb_1.1.5-2ubuntu5.1_i386.deb
      Size/MD5:   250502 b477ced4d57d1cce1afa423e67b3daa9
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.1.5-2ubuntu5.1_i386.deb
      Size/MD5:      992 aced72a57d01e9090975389fd5045556
    http://security.ubuntu.com/ubuntu/pool/universe/b/bogofilter/bogofilter-sqlite_1.1.5-2ubuntu5.1_i386.deb
      Size/MD5:   222082 7a00a12152e3fdc39823ba5506eef300

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter-bdb_1.1.5-2ubuntu5.1_lpia.deb
      Size/MD5:   251156 baa6f3f3080b89018b5d45290a2ef501
    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter_1.1.5-2ubuntu5.1_lpia.deb
      Size/MD5:      992 da0054089dc62499e768aea106514048
    http://ports.ubuntu.com/pool/universe/b/bogofilter/bogofilter-sqlite_1.1.5-2ubuntu5.1_lpia.deb
      Size/MD5:   223226 86bf43b9cb2d871ff5918de66de63b91

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter-bdb_1.1.5-2ubuntu5.1_powerpc.deb
      Size/MD5:   292258 93144af8f7bfdb314c76c86cf5641f74
    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter_1.1.5-2ubuntu5.1_powerpc.deb
      Size/MD5:      994 a83b40375a671dc6a75cf1f1e4be2484
    http://ports.ubuntu.com/pool/universe/b/bogofilter/bogofilter-sqlite_1.1.5-2ubuntu5.1_powerpc.deb
      Size/MD5:   260294 05f1819dc1becae65a2bfb337609fee9

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter-bdb_1.1.5-2ubuntu5.1_sparc.deb
      Size/MD5:   264080 e4079ee51a2014881151e92ce03079d0
    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter_1.1.5-2ubuntu5.1_sparc.deb
      Size/MD5:      990 acf139ff7b91b2d80f7004862a05b109
    http://ports.ubuntu.com/pool/universe/b/bogofilter/bogofilter-sqlite_1.1.5-2ubuntu5.1_sparc.deb
      Size/MD5:   234776 345c3d38f339ca34c1ee9be88f032e07

Updated packages for Ubuntu 9.04:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.1.7-1ubuntu1.1.diff.gz
      Size/MD5:    13616 c08781f9bfe6f570c1bc2307ae11161a
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.1.7-1ubuntu1.1.dsc
      Size/MD5:     1180 c8b7e5c0d3c5c243db8fff2e1d688073
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.1.7.orig.tar.gz
      Size/MD5:  1052405 fdcb770769c013110631eca4c0473cd7

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter-common_1.1.7-1ubuntu1.1_all.deb
      Size/MD5:   148564 70d3c0ab73871852654a57bfe016a08e

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter-bdb_1.1.7-1ubuntu1.1_amd64.deb
      Size/MD5:   252222 025302b891c115d6e5e897853edf8881
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.1.7-1ubuntu1.1_amd64.deb
      Size/MD5:      992 175c57bbc34a4e8c02fcd32ed96300db
    http://security.ubuntu.com/ubuntu/pool/universe/b/bogofilter/bogofilter-sqlite_1.1.7-1ubuntu1.1_amd64.deb
      Size/MD5:   221928 ba11994535768b9f81caea6ac1b32095

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter-bdb_1.1.7-1ubuntu1.1_i386.deb
      Size/MD5:   216410 93574d9b673c1390c2342b2e935d02d5
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.1.7-1ubuntu1.1_i386.deb
      Size/MD5:      988 d93e84c6199397a0ce970a876ebdf2c7
    http://security.ubuntu.com/ubuntu/pool/universe/b/bogofilter/bogofilter-sqlite_1.1.7-1ubuntu1.1_i386.deb
      Size/MD5:   189288 e44d1fd3125821eafad1dbf7ad46994a

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter-bdb_1.1.7-1ubuntu1.1_lpia.deb
      Size/MD5:   216160 8c9e4cc288978c30c1e553bf5638c39e
    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter_1.1.7-1ubuntu1.1_lpia.deb
      Size/MD5:      990 f56132ba70c63ba9948d475317f92c0c
    http://ports.ubuntu.com/pool/universe/b/bogofilter/bogofilter-sqlite_1.1.7-1ubuntu1.1_lpia.deb
      Size/MD5:   189190 90c25ec9ba11ae099e4cd11133ffaa5e

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter-bdb_1.1.7-1ubuntu1.1_powerpc.deb
      Size/MD5:   251186 3d8239fb2cfe77f60ccda8a22f1fb8d4
    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter_1.1.7-1ubuntu1.1_powerpc.deb
      Size/MD5:      992 28994fc9e054c7d2f59719c8b65c9a50
    http://ports.ubuntu.com/pool/universe/b/bogofilter/bogofilter-sqlite_1.1.7-1ubuntu1.1_powerpc.deb
      Size/MD5:   219522 485225b433d38097277acefb495b83fe

Updated packages for Ubuntu 9.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.2.0-3ubuntu1.1.diff.gz
      Size/MD5:    16725 4b85d4c5217aa510c54d1895a5cc6757
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.2.0-3ubuntu1.1.dsc
      Size/MD5:     1186 f27708f3d29cfb017795c39c8f49e72c
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.2.0.orig.tar.gz
      Size/MD5:  1115489 4bbc9adc30d4f8e3a547f9be18a1cb74

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter-common_1.2.0-3ubuntu1.1_all.deb
      Size/MD5:   143500 3d0d0e7fe445dc7ee4656dd48f0a046b

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter-bdb_1.2.0-3ubuntu1.1_amd64.deb
      Size/MD5:   261546 5e458ee93ba58ae9041075c9ad50433a
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.2.0-3ubuntu1.1_amd64.deb
      Size/MD5:      920 c48a74bde14ea70d611beb5fc6c32a33
    http://security.ubuntu.com/ubuntu/pool/universe/b/bogofilter/bogofilter-sqlite_1.2.0-3ubuntu1.1_amd64.deb
      Size/MD5:   232576 eae18c2190d6695e69ca7ae08e698182

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter-bdb_1.2.0-3ubuntu1.1_i386.deb
      Size/MD5:   238956 38157ad2bcfa643bfb5efdbb7ae51d87
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.2.0-3ubuntu1.1_i386.deb
      Size/MD5:     1162 102eb3e4b246cad57fd5e9015eee03db
    http://security.ubuntu.com/ubuntu/pool/universe/b/bogofilter/bogofilter-sqlite_1.2.0-3ubuntu1.1_i386.deb
      Size/MD5:   202762 3dfdd452b7e5f38f8f01a9e15a36af78

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter-bdb_1.2.0-3ubuntu1.1_lpia.deb
      Size/MD5:   226534 844c124739c60029de60f59db12a75ec
    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter_1.2.0-3ubuntu1.1_lpia.deb
      Size/MD5:      924 8da1b32882940069d69b16d403cfe4de
    http://ports.ubuntu.com/pool/universe/b/bogofilter/bogofilter-sqlite_1.2.0-3ubuntu1.1_lpia.deb
      Size/MD5:   200120 a63d8d2bce195fa4e2bb6dccd5981028

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter-bdb_1.2.0-3ubuntu1.1_powerpc.deb
      Size/MD5:   256624 dad26a754830cc0baea3ce81349987a8
    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter_1.2.0-3ubuntu1.1_powerpc.deb
      Size/MD5:      926 546c9c02063e49edea72b94462ebe9ca
    http://ports.ubuntu.com/pool/universe/b/bogofilter/bogofilter-sqlite_1.2.0-3ubuntu1.1_powerpc.deb
      Size/MD5:   223154 e4afbb362bf39aebb3d67b7260afa4c3

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter-bdb_1.2.0-3ubuntu1.1_sparc.deb
      Size/MD5:   242240 eff218a05c6134c9784a8f8d77f1b6a9
    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter_1.2.0-3ubuntu1.1_sparc.deb
      Size/MD5:      922 3fbb27d8e9e483c36593f7bcf46a1b8e
    http://ports.ubuntu.com/pool/universe/b/bogofilter/bogofilter-sqlite_1.2.0-3ubuntu1.1_sparc.deb
      Size/MD5:   212574 852bdffa8dd7498a865712a79b11fc7c

Updated packages for Ubuntu 10.04:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.2.1-0ubuntu1.1.diff.gz
      Size/MD5:    16946 8c6271479b997b3a974ba4667c99f2df
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.2.1-0ubuntu1.1.dsc
      Size/MD5:     1186 74fff31c493c20c30ec8c8fb8a95d06a
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.2.1.orig.tar.gz
      Size/MD5:  1038393 a12a16d88d6d565dacf2a5e6259a3337

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter-common_1.2.1-0ubuntu1.1_all.deb
      Size/MD5:   143950 ec70eb23bfa2bf5382dcfa403e3ba0d7

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter-bdb_1.2.1-0ubuntu1.1_amd64.deb
      Size/MD5:   264698 c283a3af9f8e2661e67797965b2bd259
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.2.1-0ubuntu1.1_amd64.deb
      Size/MD5:      940 6a6871e9c71187180f3be65bb82ae75d
    http://security.ubuntu.com/ubuntu/pool/universe/b/bogofilter/bogofilter-sqlite_1.2.1-0ubuntu1.1_amd64.deb
      Size/MD5:   235336 1a598a35a1cde47b15ee9b31750071b1

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter-bdb_1.2.1-0ubuntu1.1_i386.deb
      Size/MD5:   242562 f1d97b33a23dcab3383e0cdb2e76a237
    http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_1.2.1-0ubuntu1.1_i386.deb
      Size/MD5:     1238 e0a76b44f6331f761a08aae0b1308b63
    http://security.ubuntu.com/ubuntu/pool/universe/b/bogofilter/bogofilter-sqlite_1.2.1-0ubuntu1.1_i386.deb
      Size/MD5:   205758 57cfaaa35e1119f07e3ae0ca4bfb3569

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter-bdb_1.2.1-0ubuntu1.1_powerpc.deb
      Size/MD5:   260076 ad0a4af418c1c08c5908c7886f08f0b8
    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter_1.2.1-0ubuntu1.1_powerpc.deb
      Size/MD5:      942 1377ba01128cd159b5e8416e9db18c22
    http://ports.ubuntu.com/pool/universe/b/bogofilter/bogofilter-sqlite_1.2.1-0ubuntu1.1_powerpc.deb
      Size/MD5:   226964 ad6839f9cc1de76d1681ec9d155910e0

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter-bdb_1.2.1-0ubuntu1.1_sparc.deb
      Size/MD5:   250644 afa3ea4f35d95b369f8a5ff9b0951831
    http://ports.ubuntu.com/pool/main/b/bogofilter/bogofilter_1.2.1-0ubuntu1.1_sparc.deb
      Size/MD5:      940 d2605ef133f54f3442bd35de5be9c387
    http://ports.ubuntu.com/pool/universe/b/bogofilter/bogofilter-sqlite_1.2.1-0ubuntu1.1_sparc.deb
      Size/MD5:   219336 d47e239a3b57efb71700847015071b1f