From: Secunia Security Advisories (sec-advsecunia.com)
Date: Wed Mar 07 2007 - 06:02:06 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

----------------------------------------------------------------------

Want a new job?
http://secunia.com/secunia_vacancies/

Secunia is looking for new researchers with a reversing background
and experience in writing exploit code:
http://secunia.com/hardcore_disassembler_and_reverse_engineer/
http://secunia.com/Disassembling_og_Reversing/

----------------------------------------------------------------------

TITLE:
Ubuntu update for modpython

SECUNIA ADVISORY ID:
SA24424

VERIFY ADVISORY:
http://secunia.com/advisories/24424/

CRITICAL:
Less critical

IMPACT:
Exposure of sensitive information

WHERE:
From remote

OPERATING SYSTEM:
Ubuntu Linux 5.10
http://secunia.com/product/6606/
Ubuntu Linux 6.06
http://secunia.com/product/10611/

DESCRIPTION:
Ubuntu has issued an update for modpython. This fixes a security
issue, which can potentially be exploited to disclose certain
sensitive information.

The problem is caused due to an error in the handling of filter
output and can cause sensitive information to be displayed when more
than 16384 bytes are handled.

SOLUTION:
Apply updated packages.

-- Ubuntu 5.10 --

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python_3.1.3-3ubuntu1.1.diff.gz
Size/MD5: 42855 1529fea7b05b869a360b6bc68d52386e
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python_3.1.3-3ubuntu1.1.dsc
Size/MD5: 810 63072c8e787515557969a57119e5d4c5
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python_3.1.3.orig.tar.gz
Size/MD5: 293548 2e1983e35edd428f308b0dfeb1c23bfe

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python-doc_3.1.3-3ubuntu1.1_all.deb
Size/MD5: 101052 02819855dfc2346b9582b8687b7ce3f3
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python_3.1.3-3ubuntu1.1_all.deb
Size/MD5: 12890 29d8f3ad95844a81ef2bac9921be4ea2

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/pool/universe/liba/libapache2-mod-python/libapache2-mod-python2.3_3.1.3-3ubuntu1.1_amd64.deb
Size/MD5: 88482 bbbc44abd50a165ae5df51d97c8b59f4
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python2.4_3.1.3-3ubuntu1.1_amd64.deb
Size/MD5: 88506 33430412a637252533673023a0eb556e

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/pool/universe/liba/libapache2-mod-python/libapache2-mod-python2.3_3.1.3-3ubuntu1.1_i386.deb
Size/MD5: 80692 43cf25dacf95697200b50280ff4b1c74
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python2.4_3.1.3-3ubuntu1.1_i386.deb
Size/MD5: 80722 7003abb20896ed3d218febd92ad176c2

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/pool/universe/liba/libapache2-mod-python/libapache2-mod-python2.3_3.1.3-3ubuntu1.1_powerpc.deb
Size/MD5: 85980 75be899b0568d8a332ac04ae820d955e
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python2.4_3.1.3-3ubuntu1.1_powerpc.deb
Size/MD5: 86010 f706350855b692417a9d32f2c1962abd

sparc architecture (Sun SPARC/UltraSPARC)

http://security.ubuntu.com/ubuntu/pool/universe/liba/libapache2-mod-python/libapache2-mod-python2.3_3.1.3-3ubuntu1.1_sparc.deb
Size/MD5: 82038 0b8d6e081d3e6506139a9fac4674d8ad
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python2.4_3.1.3-3ubuntu1.1_sparc.deb
Size/MD5: 82078 71b5c528867eb166cd140a564d3fde0b

-- Ubuntu 6.06 LTS --

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python_3.1.4-0ubuntu1.1.diff.gz
Size/MD5: 25348 f53b1e046220df8e1cdcf4cd602ac563
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python_3.1.4-0ubuntu1.1.dsc
Size/MD5: 769 41f6be106885d14e487317c57cc8e940
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python_3.1.4.orig.tar.gz
Size/MD5: 308510 607175958137b06bcda91110414c82a1

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python-doc_3.1.4-0ubuntu1.1_all.deb
Size/MD5: 113106 0b66fc0e0a15cbc6a57df85100e3ca62
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python_3.1.4-0ubuntu1.1_all.deb
Size/MD5: 13076 5488f0a55a436648c587e9a300d63881

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python2.4_3.1.4-0ubuntu1.1_amd64.deb
Size/MD5: 88678 8542060889c4b3c32a6937070911bf33

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python2.4_3.1.4-0ubuntu1.1_i386.deb
Size/MD5: 80676 13f3b9e1d7260ad8c34f7597954ed315

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python2.4_3.1.4-0ubuntu1.1_powerpc.deb
Size/MD5: 85840 684789cb3c7acbeed9064200554d8da4

sparc architecture (Sun SPARC/UltraSPARC)

http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python/libapache2-mod-python2.4_3.1.4-0ubuntu1.1_sparc.deb
Size/MD5: 82000 297ab56501345f12ee9c6c0951287980

PROVIDED AND/OR DISCOVERED BY:
Miles Egan

ORIGINAL ADVISORY:
http://www.ubuntu.com/usn/usn-430-1

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]