=========================================================== Ubuntu Security Notice USN-789-1 June 22, 2009 gst-plugins-good0.10 vulnerability CVE-2009-1932 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu 8.10 Ubuntu 9.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: gstreamer0.10-plugins-good 0.10.3-0ubuntu4.2 Ubuntu 8.04 LTS: gstreamer0.10-plugins-good 0.10.7-3ubuntu0.3 Ubuntu 8.10: gstreamer0.10-plugins-good 0.10.10.4-1ubuntu1.2 Ubuntu 9.04: gstreamer0.10-plugins-good 0.10.14-1ubuntu0.1 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: Tielei Wang discovered that GStreamer Good Plugins did not correctly handle malformed PNG image files. If a user were tricked into opening a crafted PNG image file with a GStreamer application, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Updated packages for Ubuntu 6.06 LTS: Source archives: http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.3-0ubuntu4.2.diff.gz Size/MD5: 27349 3a4dbe708038d20c1f2b177cbc664914 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.3-0ubuntu4.2.dsc Size/MD5: 1471 c911e769ee2f817010cebf7b7c5366fe http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.3.orig.tar.gz Size/MD5: 1782808 bfac20228cf6e9317a371a5f36feb8ae Architecture independent packages: http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-doc_0.10.3-0ubuntu4.2_all.deb Size/MD5: 75194 b275d98627d55e6b3fb258b6ef3dc55b amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.3-0ubuntu4.2_amd64.deb Size/MD5: 33052 02b3482c6da81f7cea0bbd1f85c186bf http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.3-0ubuntu4.2_amd64.deb Size/MD5: 1670366 88603470ab4c79ad7db6d2d13b59eff0 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.3-0ubuntu4.2_amd64.deb Size/MD5: 643272 9207ba28b58ad28eba3f630bf9b31cb2 i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.3-0ubuntu4.2_i386.deb Size/MD5: 32444 d0097838c14cca9d9420d806dc11efe4 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.3-0ubuntu4.2_i386.deb Size/MD5: 1524118 278d4afb0e2d8bd39ff6e6e69d5d1134 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.3-0ubuntu4.2_i386.deb Size/MD5: 577144 88d88bba56fd8593e3f480d3098e9555 powerpc architecture (Apple Macintosh G3/G4/G5): http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.3-0ubuntu4.2_powerpc.deb Size/MD5: 34704 b79b032fb76435417b0fa45dfac341d3 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.3-0ubuntu4.2_powerpc.deb Size/MD5: 1705318 4737fdad60a9d01504227d6738eb9f06 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.3-0ubuntu4.2_powerpc.deb Size/MD5: 699764 f694f469d97bef0d297f5facbdb8f5b2 sparc architecture (Sun SPARC/UltraSPARC): http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.3-0ubuntu4.2_sparc.deb Size/MD5: 32940 f28623b18f682b3e995a96c40f1a46d2 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.3-0ubuntu4.2_sparc.deb Size/MD5: 1546638 f451cb4a12cb0429a3e69c2ce213649a http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.3-0ubuntu4.2_sparc.deb Size/MD5: 619150 42a63574860e88c4fab6377f4552eb59 Updated packages for Ubuntu 8.04 LTS: Source archives: http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.7-3ubuntu0.3.diff.gz Size/MD5: 27885 0fbeda89c2b4ece6080e43f9cd1b6cf8 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.7-3ubuntu0.3.dsc Size/MD5: 2161 53c204e2d6b78ba44b58bcb09b8a7ed9 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.7.orig.tar.gz Size/MD5: 2679804 2832ded1d6be0356d77689b6ca1b5f83 Architecture independent packages: http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-doc_0.10.7-3ubuntu0.3_all.deb Size/MD5: 150412 b596937a505e07379fa570e23f4359cd amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.7-3ubuntu0.3_amd64.deb Size/MD5: 45338 b7de8f68eb12e5a621daa17b4acc179b http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.7-3ubuntu0.3_amd64.deb Size/MD5: 2409536 34397a0dfccd85d150070861387be8c9 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.7-3ubuntu0.3_amd64.deb Size/MD5: 933304 544e6799a7376275c9e522b75fa944a3 i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.7-3ubuntu0.3_i386.deb Size/MD5: 45008 8173bc4d91e793f4f7643de2da8eb02e http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.7-3ubuntu0.3_i386.deb Size/MD5: 2314164 df2398a644d53bec87342b0e24ea665b http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.7-3ubuntu0.3_i386.deb Size/MD5: 873248 fda02e5dfeaecec7a60ed642563d7a02 lpia architecture (Low Power Intel Architecture): http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.7-3ubuntu0.3_lpia.deb Size/MD5: 44830 1c44aef4dcb0a8ac853976f8cd4b2950 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.7-3ubuntu0.3_lpia.deb Size/MD5: 2344150 0fe5102f4c186a6e3b20a3c3d15b5fdb http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.7-3ubuntu0.3_lpia.deb Size/MD5: 859926 84b8b0e3148d626598e19295ef31deda powerpc architecture (Apple Macintosh G3/G4/G5): http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.7-3ubuntu0.3_powerpc.deb Size/MD5: 45958 503316da7a0f2ba4f9455a004585f541 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.7-3ubuntu0.3_powerpc.deb Size/MD5: 2441708 dfa4a820e747f62d2953c841922143cb http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.7-3ubuntu0.3_powerpc.deb Size/MD5: 992152 0b6644292b0b9ba7d2f2e9576a45b18e sparc architecture (Sun SPARC/UltraSPARC): http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.7-3ubuntu0.3_sparc.deb Size/MD5: 45034 cd07a442548532d76e20c3f335165f9f http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.7-3ubuntu0.3_sparc.deb Size/MD5: 2281342 ba5bc8d0675bd2c3c5f1c17cfca28467 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.7-3ubuntu0.3_sparc.deb Size/MD5: 905468 41f4bd6a1cc342b91ee22c040f19ae4e Updated packages for Ubuntu 8.10: Source archives: http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.10.4-1ubuntu1.2.diff.gz Size/MD5: 33802 2c2756a7edd424dd081bb39803c74f92 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.10.4-1ubuntu1.2.dsc Size/MD5: 2761 15ef48d59d3e350633052ae50ac9dcf6 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.10.4.orig.tar.gz Size/MD5: 3176916 1ed4e64beb386631a127af49a1e05946 Architecture independent packages: http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-doc_0.10.10.4-1ubuntu1.2_all.deb Size/MD5: 189464 ec6d4868fe27776140e681999c0ec6b6 amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.10.4-1ubuntu1.2_amd64.deb Size/MD5: 49240 b92b4bd4eb61a0b388f7c9ef1360446f http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.10.4-1ubuntu1.2_amd64.deb Size/MD5: 2972572 c02b82f35d22cd1c69adab5c39652683 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.10.4-1ubuntu1.2_amd64.deb Size/MD5: 1096896 4420ad63ff05e178f45eea9160d6c060 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.10.4-1ubuntu1.2_amd64.deb Size/MD5: 66966 6942e52dabb0cd50b904846d4fd1ae4a i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.10.4-1ubuntu1.2_i386.deb Size/MD5: 49050 34a1b7d42744bb1d1179c7d7ca8adb68 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.10.4-1ubuntu1.2_i386.deb Size/MD5: 2858518 c8e3173d8e0906a46b6b01d1b660aded http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.10.4-1ubuntu1.2_i386.deb Size/MD5: 1029580 b125b38ab088f72e801fa2df87afe8a5 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.10.4-1ubuntu1.2_i386.deb Size/MD5: 64636 2e561a83a96defb42c017e3596aea353 lpia architecture (Low Power Intel Architecture): http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.10.4-1ubuntu1.2_lpia.deb Size/MD5: 48974 24c3650c2936c806479dc6cd0069da0d http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.10.4-1ubuntu1.2_lpia.deb Size/MD5: 2900892 008a606339d8158213d0365f9b2cc873 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.10.4-1ubuntu1.2_lpia.deb Size/MD5: 1016718 d927a710b52fc6f046b9c3dad44cb0a2 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.10.4-1ubuntu1.2_lpia.deb Size/MD5: 64770 92a96ea72fc6035dc1ada532428fc600 powerpc architecture (Apple Macintosh G3/G4/G5): http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.10.4-1ubuntu1.2_powerpc.deb Size/MD5: 50154 0ce937ab41a1a9fda1b5eaf1a95bd493 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.10.4-1ubuntu1.2_powerpc.deb Size/MD5: 3014056 f49161a0eada3bc9e460363fa99db125 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.10.4-1ubuntu1.2_powerpc.deb Size/MD5: 1167944 6156ff68cd58252daed3d5af827de1a5 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.10.4-1ubuntu1.2_powerpc.deb Size/MD5: 66866 ced96995650e0286b400c38d8473b1ff sparc architecture (Sun SPARC/UltraSPARC): http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.10.4-1ubuntu1.2_sparc.deb Size/MD5: 49086 f65d43ab98f959c85155528c50c1ba81 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.10.4-1ubuntu1.2_sparc.deb Size/MD5: 2806342 e7eeb33767762c7bc73bd1c110033321 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.10.4-1ubuntu1.2_sparc.deb Size/MD5: 1074570 4a1ab1b21323a958e5075ec4aa5ff749 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.10.4-1ubuntu1.2_sparc.deb Size/MD5: 64424 5ec9581a6de23b54ec6bdfc7f3f80707 Updated packages for Ubuntu 9.04: Source archives: http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.14-1ubuntu0.1.diff.gz Size/MD5: 27637 1c08f11db50720025ff19e1035ae00d5 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.14-1ubuntu0.1.dsc Size/MD5: 2879 f62455d6fe7049f6eaa966454e51ecc6 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gst-plugins-good0.10_0.10.14.orig.tar.gz Size/MD5: 3276723 62f629637bcfa82d47eb1baeb22a3d25 Architecture independent packages: http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-doc_0.10.14-1ubuntu0.1_all.deb Size/MD5: 216478 288ec8124f18796c215d4debf7170ddb amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.14-1ubuntu0.1_amd64.deb Size/MD5: 52328 2636fccfee65237146501df73286a8f4 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.14-1ubuntu0.1_amd64.deb Size/MD5: 3064176 79e3245dbbecc46f770d3b67af1b8d82 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.14-1ubuntu0.1_amd64.deb Size/MD5: 1130840 3bc798ef7521214012fc79f11bc5f4ad http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.14-1ubuntu0.1_amd64.deb Size/MD5: 73240 d4304455d75a3a6fb0bf6813e482851c i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.14-1ubuntu0.1_i386.deb Size/MD5: 52130 ff75d8a2dcbf8cefa37c118162de7f5b http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.14-1ubuntu0.1_i386.deb Size/MD5: 2949808 ba444ea6fafda873627032372ec1bbe9 http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.14-1ubuntu0.1_i386.deb Size/MD5: 1064914 758b7936c41201e7d8fedbc95497a81b http://security.ubuntu.com/ubuntu/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.14-1ubuntu0.1_i386.deb Size/MD5: 70332 f0833349e6ac2ce7ca3c123886887027 lpia architecture (Low Power Intel Architecture): http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.14-1ubuntu0.1_lpia.deb Size/MD5: 52056 caac1c8098071caa1e2a671bd65830a0 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.14-1ubuntu0.1_lpia.deb Size/MD5: 2989510 77a33bce96ba901779e8eda3ae09886a http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.14-1ubuntu0.1_lpia.deb Size/MD5: 1050842 03c739d9d21c5e19a98917dadc2c9c01 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.14-1ubuntu0.1_lpia.deb Size/MD5: 70310 7e66f9006bd55d586db653b68ebf27ec powerpc architecture (Apple Macintosh G3/G4/G5): http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.14-1ubuntu0.1_powerpc.deb Size/MD5: 53200 a5e43580173b54677654a624e07539a0 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.14-1ubuntu0.1_powerpc.deb Size/MD5: 3119404 0e3f727eb6c234c72a47df9f96e0abb5 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.14-1ubuntu0.1_powerpc.deb Size/MD5: 1207890 29f538f3c4775d22880bd58a551c47d9 http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.14-1ubuntu0.1_powerpc.deb Size/MD5: 73064 ba5108dc480d67c9926888e11047a81e sparc architecture (Sun SPARC/UltraSPARC): http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-esd_0.10.14-1ubuntu0.1_sparc.deb Size/MD5: 52142 f403ac655bcf3cf816a50e910b0721fe http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good-dbg_0.10.14-1ubuntu0.1_sparc.deb Size/MD5: 2905714 5222ac761886e46e96b0339f23211d2d http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-plugins-good_0.10.14-1ubuntu0.1_sparc.deb Size/MD5: 1100384 cd8b908f962d776cb120eae0e1ebf22b http://ports.ubuntu.com/pool/main/g/gst-plugins-good0.10/gstreamer0.10-pulseaudio_0.10.14-1ubuntu0.1_sparc.deb Size/MD5: 70324 980d2ebe8f970986ac86e26ec985dafc