| From: |
| Martin Pitt <martin.pitt@canonical.com> |
| To: |
| ubuntu-security-announce@lists.ubuntu.com |
| Subject: |
| [USN-201-1] SqWebmail vulnerabilities |
| Date: |
| Tue, 11 Oct 2005 18:14:05 +0200 |
| Cc: |
| full-disclosure@lists.grok.org.uk, bugtraq@securityfocus.com |
===========================================================
Ubuntu Security Notice USN-201-1 October 11, 2005
courier vulnerabilities
CAN-2005-2724, CAN-2005-2769, CAN-2005-2820
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 4.10 (Warty Warthog)
Ubuntu 5.04 (Hoary Hedgehog)
The following packages are affected:
sqwebmail
The problem can be corrected by upgrading the affected package to
version 0.45.6-1ubuntu0.1 (for Ubuntu 4.10), or 0.47-3ubuntu1.3 (for
Ubuntu 5.04). In general, a standard system upgrade is sufficient to
effect the necessary changes.
Details follow:
Several Cross Site Scripting vulnerabilities were discovered in
SqWebmail. A remote attacker could exploit this to execute arbitrary
JavaScript or other active HTML embeddable content in the web browser
of an SqWebmail user by sending specially crafted emails to him.
Please note that the "sqwebmail" package is not officially supported
by Ubuntu (it is in the "universe" section of the archive).
Updated packages for Ubuntu 4.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 92533 1af79a4e0fc1f3d7b880a31d6efa2e6e
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 1207 ce7ecaf02fadbdefe498fabee84fc888
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 6388279 7ae1f4236b4a28432af9e720a3718329
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 367832 d3c9e43010e818c14765b3dc1cde73bc
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 60884 70aff249f96725df683aa60c0fee57a5
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 55638 91d2eb7f63675f2fd70d9be5f8d8c7c9
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 55816 1cfeca185a72d727a54ef04492c8f5f9
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 250354 2ace2eba0f079e3c70324923b6292d08
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 27470 519d55e12efe6f71f262922fc172dcbf
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 19704 6952f906d2c2409cda32b9988645e1a2
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 948750 c135d73cb98533a25a8879e49f314e19
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 72462 49201a97b380667686e4943f87c0e1a3
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 942622 6d8f93d3d02f46ca971b09c069921807
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 121130 99fc506af803356a349fbc05af4a4596
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 18004 e950273c23870a676b0d8a6c6f4de2a2
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 2142484 d83083cfa386b432986298303c3fa551
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 65320 c0aae94c5091e55bfb16263dfbaa2eb7
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 19520 d1324398b873d9e2080fc78d04228dcc
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 421900 b7c1398685465fc3b1f0b2ce3de126b3
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 194124 8edf0088cc656ec0d7e6280d94773d69
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 33660 ceb92e24e960a246dde448b312018c6d
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 795962 5f48aa61cab301ba2ca4e78b2932f7ff
i386 architecture (x86 compatible Intel/AMD)
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 55088 12539ef65620c5021ae178a868324247
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 51166 5b2cbf990593f2b26d9ab04c7c944e30
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 51244 85e282b711f881ce54b4bd78a779b45f
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 228190 cc425f462b51c1b673682f837ac92608
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 27478 dd505a50f9b1202de62c20129e753e14
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 19716 373d213ade7b99e1029f0bdcde019aae
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 922968 f2e0403ade7e00d25a7fd8c40dbac93a
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 66366 ca3819f44e28745d1d2759955cc1148b
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 916544 bf0e01beb89312127fb823ed35b1c10a
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 116280 51d634229365061a135c143851de9d2c
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 18002 6bdf446b50f5373905a6bf1334d84d9c
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 2044678 6dc487d7ba7d0c14dd2b188dccf7cfa6
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 58858 1cfb5c66d08ba68def30c782dce99f92
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 19512 7d60ae790f64649212f5b363c41bfbec
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 413814 daf8e32abe1733093690a56c105a2fc0
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 190912 71e07f5c1324b5b4c65f5850d258713f
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 33490 16e7afc5945d9074ecc995926ffbba58
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 761714 ca9bbb48da022316c0e89d10caa4cdd5
powerpc architecture (Apple Macintosh G3/G4/G5)
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 61258 17f3e293f78e2a1a8a166f60e23edd82
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 56522 c3b46757069702d28eaf8ee8e67bb25c
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 56702 105ea1d177d68b13545fb71180894dce
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 249136 5aa5ba899082b0753336f5e5232b479c
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 27482 bab76a312ea6277f880b14e866e86f4c
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 19716 f53d285904b31cbb64a869cb26f47dc3
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 1063306 1688182d85ccc9c8885c81c8f88ea191
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 73434 27890f34c08936ae38c311e79a9017f1
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 1058674 d2f5c661bf138043a2999a0f99942bea
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 127362 1760416f053bd69aa88543a3e933ac4b
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 18010 174a4845beb6ab58dedb6268047209cc
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 2365870 8c8ebcb3d3b7f65430f922b8d0047dd9
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 65482 5ba7631378a6af31c0c82d87d305f783
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 19522 df92195b385dc3a0a435c98e712248e8
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 478020 0de0dd212095d8902db4750215f3f28c
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 195114 5df45e0402727d01f231708c67105315
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 33836 ca5b53a892a58067f16166fea533573c
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 857846 f036f7db9ce01d833d833242316b7694
Updated packages for Ubuntu 5.04:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 108158 d74c91202d1cf3a5d867d4062a15cbde
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 1204 3fc6b1b675afac4cbf79fa465b0ccdec
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 6350808 361a84e497148ce557c150d3576ec24b
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 370382 bfa633fcc0e67aedf3ee94ba786f1829
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 62086 de4964952881c1dc2514117da3c49894
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 56804 41fef45933b55a3db423a37a263a3048
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 56998 da1aab7635b7d94c7d02d7e8919de454
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 257030 d5d4639ca9c120384b508aa1f2ccf5f2
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 28610 aae40b2217ba41266b410377c11a140a
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 21152 aeaa3fbae8d85a147b910f2088959335
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 950504 aed518bc4b76c554608a7b15a16ff4d6
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 73908 e0bd92f9ed080c679708459e0da24c6f
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 942862 46b80c28441eb8bb2d69a14635b4c0b4
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 122550 0fa1e1b0ec4c2c0ffb6bd1711583ddd4
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 19200 681cdef6de540114f3c0748b11e1f24c
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 2157340 f41b2492a8d827dc5b3a0b233f3958d3
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 66376 03489a7f2650911b95facb7b2d943182
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 20952 d1a1e9b9e6a1f123404fa7f750e0277c
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 423060 5bcad19f3cfbda9b6499fdedd19f7856
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 195488 5130f80bc29b0a83be659710ac78e457
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 34286 efd492485398d6f2f55c00189e6364e5
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 798010 92df72c7dbf9a73a27ba65eeb48ada26
i386 architecture (x86 compatible Intel/AMD)
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 55928 ef1ca8c42f5762380956df66c7540151
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 51862 3ac19fc911691a5fd8266bde800070b4
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 51966 eb4ad854f6405468165976617e7cdbd8
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 233306 5ab15c071cb46a3cc69611988e6b038f
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 28610 78ad6f50c57b30d5806e00946461133e
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 21162 ae421bca5d288a7449cc7389ab2dac0e
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 925174 0dc79b2e5f6215bd5fd93a760487697c
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 67352 1137c844af6bc94da5367e1004cb2c25
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 916604 d644b08c60e01b51ced6ba78c4e14b3c
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 117204 5acf24ccf9b535c1200774135b947309
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 19204 c5cb748a52c3fb1f56b1c21725bd6190
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 2051870 a5fd3d361c866a029375957d5e72cf56
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 59674 5ac10f9bc9bda91128b7e4c777c70656
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 20954 90589c5fc8807e7491d0e30a09f28eac
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 414848 c2dd8ea3c429bc443e3e73d7848de9fa
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 191836 953fa1058e6e8ca3f2a446672aed1d49
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 34088 59b8cbc39e4a63346803ae9d3646b69d
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 764868 3e723bb05c2091a3fbdd125b3331239f
powerpc architecture (Apple Macintosh G3/G4/G5)
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 62388 b02b24c2b0aa2383d707a22321b9ef27
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 57586 e19bdd041069159dd3da29239c8e5d19
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 57782 86ab37a4f6a155c97e0d74a63744264c
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 251270 f3900b05a2d437598863cf1607223a4b
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 28612 a1ec23747eb6103cb16612b7ebc7bd0f
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 21164 33357a3efddf8f75f3463815a375bf07
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 1066994 d12857e39abbf982861978cf376c1d9e
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 74890 db3c21639b9cf0d5fba5f644f6f56f63
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 1059592 8b90e8c723cc449f80de628f7c6f3d72
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 128774 39bd2bc6b1a75578a91606549c6ca46b
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 19202 9afa7a283edcf76bf87a226a46bdd5f8
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 2381736 9e6b7ac2cd157975b16b079d7d7078a4
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 66476 29660d7146a8f0733c51aaf0a2444fc3
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 20972 55ae177d04cef514ec993a3c13b9e1c2
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 478814 8b2e50df9b59bf0c9a204da6adedf373
http://security.ubuntu.com/ubuntu/pool/main/c/courier/cou...
Size/MD5: 196502 b05431c1eec3518342771c6b7b28c2c9
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 34474 ca82a052795cfd3195871bac41ec07df
http://security.ubuntu.com/ubuntu/pool/universe/c/courier...
Size/MD5: 861174 9224ce6d845bd98de95f6dfd3d0bf70b
--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
http://lists.ubuntu.com/mailman/listinfo/ubuntu-security-...
(
Log in to post comments)