==========================================================Ubuntu Security Notice USN-991-1         September 23, 2010
quassel vulnerability
https://launchpad.net/bugs/629774
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 9.04
Ubuntu 9.10
Ubuntu 10.04 LTS

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 9.04:
  quassel                         0.4.1-0ubuntu3.1
  quassel-core                    0.4.1-0ubuntu3.1

Ubuntu 9.10:
  quassel                         0.5.0-0ubuntu1.2
  quassel-core                    0.5.0-0ubuntu1.2

Ubuntu 10.04 LTS:
  quassel                         0.6.1-0ubuntu1.1
  quassel-core                    0.6.1-0ubuntu1.1

After a standard system update you need to restart quassel or
quasselcore to make all the necessary changes.

Details follow:

Jima discovered that quassel would respond to a single privmsg
containing multiple CTCP requests with multiple NOTICEs, possibly
resulting in a denial of service against the IRC connection.


Updated packages for Ubuntu 9.04:

  Source archives:

          Size/MD5:    14652 af43ed7a72ffa090d37c2d0d00702078
          Size/MD5:     1963 5ae8d0ff60b5b06b895bb9ae171d5245
          Size/MD5:  3387386 ad02d180d013e4e802405bc0d4fbc92f

  Architecture independent packages:

          Size/MD5:   473278 ed6d2d9ce47958e33c22d53eeb130eb1

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5: 19585188 055a31fd179133cea112d8ade393af00
          Size/MD5: 16123196 4768b70faa56de99a58887eba390df0f
          Size/MD5:  5329522 59c6d37437fe451c63a57ac97e16a73e

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5: 19364706 5accb85ff4b7650cef63ea278d68240c
          Size/MD5: 15952248 61e3e2a169bd98c1ddb4e281f658588e
          Size/MD5:  5235750 6312c44c3bf5bac1db19898f335a607e

  lpia architecture (Low Power Intel Architecture):

          Size/MD5: 19463224 baa50d79d8a62f81c6864a5db776e7eb
          Size/MD5: 16028358 88bc16020301f4bfc678737932d3b199
          Size/MD5:  5263036 aca976fd07ee5ff6dbb3ee73267781c1

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5: 20086318 f5e0299a1d9419a08955f4706768f15d
          Size/MD5: 16547258 91262f19d6d83196f7124b90e5d331a7
          Size/MD5:  5444286 7628daecf48ef865fc46fee187b89815

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   901540 b050e39630f12db8759a6d0071501b6a
          Size/MD5:   748492 5d3f95e15324a98ffe371154c7846681
          Size/MD5:   286256 1451beeb70db724cab56ccc61b188600

Updated packages for Ubuntu 9.10:

  Source archives:

          Size/MD5:    17877 a7e04cda3cc45e3409eb57a4ea20148c
          Size/MD5:     1991 6ff013a9b19d1d76b87817da84d37687
          Size/MD5:  3708203 24e2733475557ba9641d83a74442a329

  Architecture independent packages:

          Size/MD5:  1118114 daef742c8ed0581b36866a6230f57279

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5: 13617108 94c8dc2426de0bad88137cfdd10157f3
          Size/MD5:   798800 84c29f58597f26952cd99af53fd20044
          Size/MD5:   643210 e9284ca8bd9338440f66f9ec9df5c144
          Size/MD5:   289588 ec455d993f45fee6fb369a428bb2d1b9

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5: 13398662 8a4946ca41efeb8e5da0d4a1de40f94c
          Size/MD5:   718874 88985af3b8b3c0ec86475603d0bd911c
          Size/MD5:   573058 24ba9f3e8c54a2184d21a8070798528a
          Size/MD5:   258348 faf03e06b48194cae6b7397e9b31d7bf

  lpia architecture (Low Power Intel Architecture):

          Size/MD5: 13484634 ea119b79c6f10c5f468f42a1261a21fe
          Size/MD5:   750220 c93f8350459ab54a67d4ed15674c161e
          Size/MD5:   598854 eecdc6c1fe079d1f91fb1ae9e75fe888
          Size/MD5:   266918 35caabd03e6e96765abf21fb3e96ba25

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5: 13362254 455876ecad334f3d47cc961f9d542882
          Size/MD5:   683910 428a6c2c5ac213f37f4be7d07d24421e
          Size/MD5:   550606 98c59f305f95b778a427eda949870e18
          Size/MD5:   240866 00f3f5d56de26f7c198f4d5b1c42a83f

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5: 12870536 0c26033e159f8fa8e0515d231ed8b5dc
          Size/MD5:   697712 5db7fc580d0a5668f57eea842e6d6d96
          Size/MD5:   562214 8017a2a7aaa61766db7669bb25610f67
          Size/MD5:   238760 e5684b9ee3244cbacf89d39efc64a864

Updated packages for Ubuntu 10.04:

  Source archives:

          Size/MD5:    17335 6ef325c343740527c723a98f2610b4b0
          Size/MD5:     2103 29587f5b391aa00a8383a0fc86aa48fb
          Size/MD5:  2955756 6bda53416187ce4d80c498ec7742a3ff

  Architecture independent packages:

          Size/MD5:   411078 142d15c7c197a5678440c8bc1663cfbc

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5: 13762064 ac4fa17c3f153b31e48710836cd04118
          Size/MD5:   848954 3dfe977c0e08d67f0e768e7ff21cbeaa
          Size/MD5:  7738614 cc022c8cb8a20d98b264d5b9071dbb2c
          Size/MD5:   689906 8620ad03d7d1b6292d8f73e38d8521e7
          Size/MD5:   300578 095fe9ebe92dcbccd68c2caae9eaddd6
          Size/MD5:  9180230 b2361610cb686f6b0fec9c12ec3b3105

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5: 13850914 f3d28f9ad948bd49511f921afd8b8c76
          Size/MD5:   775228 afe558076285e911a1d4a4f03b36d7ee
          Size/MD5:  7643656 f5545c998ff3da6a4813ad8c05379007
          Size/MD5:   624750 5b85e0ad310fbdff8f6b46cbcf1f0269
          Size/MD5:   267622 be3e9ddff363ccfbf84b026012c65716
          Size/MD5:  9092034 c141744e896c1883cf3fd16b56301e3a

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5: 13629256 b1c44c71d90612b77ac6620d31c28682
          Size/MD5:   726084 2e80db84854a26657dc2dd780b2823bc
          Size/MD5:  7503830 514e0af5679a3d50a93f520e2d6a7ae5
          Size/MD5:   591360 dbb809d80a8172cc2d4c66092c016751
          Size/MD5:   249718 6f01517af6d40a9df03c561588969219
          Size/MD5:  8903884 6f639491914209752e14b6e2e145e1fe

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5: 13122498 84562bf0f6cf99ad0b6a1f2eed93684d
          Size/MD5:   695148 1b45d6d593296d3166bad999541f7b72
          Size/MD5:  7314170 c8dcff3fce69ecc8fce569ea1b254ef6
          Size/MD5:   567846 c39e338a570d34aa267c7a4739a2d52c
          Size/MD5:   232296 d7ed93144b074fc6947ef7a0125d9c6e
          Size/MD5:  8626464 13cfeaa7f4c722cffd6042e481ae731f

Ubuntu 991-1: quassel vulnerability

September 23, 2010
Jima discovered that quassel would respond to a single privmsgcontaining multiple CTCP requests with multiple NOTICEs, possiblyresulting in a denial of service against the IRC conn...

Summary

Update Instructions

References

Severity
quassel vulnerability

Package Information

Related News