Debian: New hashcash packages fix arbitrary code execution
Summary
For the unstable distribution (sid) this problem has been fixed in
version 1.21-1.
We recommend that you upgrade your hashcash package.
Upgrade Instructions
- --------------------wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given at the end of this advisory:
apt-get update
will update the internal database
apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 3.1 alias sarge
Size/MD5 checksum: 571 0e6e1272eaec884fa66ae84e962f51cc
Size/MD5 checksum: 3604 bb43fcc72e1c40cfd7e8a337902c7c89
Size/MD5 checksum: 185522 9e5a8a35941c0cdccac93f41bd943593
Alpha architecture:
Size/MD5 checksum: 168504 b0ee6dc37c1fbcc9d9084cecfbb9f5e6
AMD64 architecture:
Size/MD5 checksum: 131586 34e12310aa9e4c8016df21af7c5ee4f0
ARM architecture:
Size/MD5 checksum: 129036 8ef6ad2e6f6ce729893381aa72a6af77
Intel IA-32 architecture:
Size/MD5 checksum: 125388 f478094512ce7fbcc0ea7f43c7942cda
Intel IA-64 architecture:
Size/MD5 checksum: 180272 aa2465a8d3209bc7f60966c8077fba2f
HP Precision architecture:
Size/MD5 checksum: 148194 2bf6d28a30e6f287b9f92ff7aad958db
Motorola 680x0 architecture:
Size/MD5 checksum: 113598 09d1c3002b95945e66464de441bd6875
Big endian MIPS architecture:
Size/MD5 checksum: 153776 fbd29b41912a027feec7cf0c10c858c9
Little endian MIPS architecture:
Size/MD5 checksum: 153382 2d231cd9aecdd9751c0dc1981c77b652
PowerPC architecture:
Size/MD5 checksum: 140396 1e2bf003d9165dc91558d9a4109c48b3
IBM S/390 architecture:
Size/MD5 checksum: 139680 57adea417e98c12c7e1512b00e40148c
Sun Sparc architecture:
Size/MD5 checksum: 156978 1fd5a5647dfb17bb223b783561f1e95e
These files will probably be moved into the stable distribution on
its next update.
For dpkg-ftp: dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org