===========================================================
Ubuntu Security Notice USN-890-3 January 22, 2010
python2.4 vulnerabilities
CVE-2009-3560, CVE-2009-3720
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04
Ubuntu 9.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
python2.4 2.4.3-0ubuntu6.4
python2.4-minimal 2.4.3-0ubuntu6.4

Ubuntu 8.04 LTS:
python2.4 2.4.5-1ubuntu4.3
python2.4-minimal 2.4.5-1ubuntu4.3

Ubuntu 8.10:
python2.4 2.4.5-5ubuntu1.2
python2.4-minimal 2.4.5-5ubuntu1.2

Ubuntu 9.04:
python2.4 2.4.6-1ubuntu3.2.9.04.1
python2.4-minimal 2.4.6-1ubuntu3.2.9.04.1

Ubuntu 9.10:
python2.4 2.4.6-1ubuntu3.2.9.10.1
python2.4-minimal 2.4.6-1ubuntu3.2.9.10.1

After a standard system upgrade you need to restart any Python 2.4
applications that use the PyExpat module to effect the necessary changes.

Details follow:

USN-890-1 fixed vulnerabilities in Expat. This update provides the
corresponding updates for the PyExpat module in Python 2.4.

Original advisory details:

Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did
not properly process malformed XML. If a user or application linked against
Expat were tricked into opening a crafted XML file, an attacker could cause
a denial of service via application crash. (CVE-2009-2625, CVE-2009-3720)

It was discovered that Expat did not properly process malformed UTF-8
sequences. If a user or application linked against Expat were tricked into
opening a crafted XML file, an attacker could cause a denial of service via
application crash. (CVE-2009-3560)


Updated packages for Ubuntu 6.06 LTS:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4.3-0ubuntu6.4.diff.gz
Size/MD5: 2664095 5de4651cbd7cde17234d4211ba2411ae
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4.3-0ubuntu6.4.dsc
Size/MD5: 1231 531ed5726641e53070416713ae73fc13
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4.3.orig.tar.gz
Size/MD5: 9328584 fd9dd825b8c680fa04c2fc2c957964b1

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/idle-python2.4_2.4.3-0ubuntu6.4_all.deb
Size/MD5: 243560 46eb30d3ba78d65a24942d45399ab253
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-doc_2.4.3-0ubuntu6.4_all.deb
Size/MD5: 3358290 ddd3fe197e3e098f60440048d47eb887
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-examples_2.4.3-0ubuntu6.4_all.deb
Size/MD5: 587756 2066487eb0f6b0c2928fc992162a77af

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dbg_2.4.3-0ubuntu6.4_amd64.deb
Size/MD5: 5570950 10762ebd4d1da8b3f5c154b0331e72ab
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dev_2.4.3-0ubuntu6.4_amd64.deb
Size/MD5: 1635738 bb3f078081d50c309edd48f768b3c731
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-gdbm_2.4.3-0ubuntu6.4_amd64.deb
Size/MD5: 30414 67faa5e501c7f3dc9a3963f7048df087
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-minimal_2.4.3-0ubuntu6.4_amd64.deb
Size/MD5: 794578 9f54103d56a5f8df99c802846452c047
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-tk_2.4.3-0ubuntu6.4_amd64.deb
Size/MD5: 114202 49798f581bc3d754a6f1f70100a4fd43
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4.3-0ubuntu6.4_amd64.deb
Size/MD5: 2862842 a734f567c48c97db1a9edaab2293cd36

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dbg_2.4.3-0ubuntu6.4_i386.deb
Size/MD5: 4832926 e3b2968fe756fe6afb9c71392420b906
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dev_2.4.3-0ubuntu6.4_i386.deb
Size/MD5: 1466698 c8a5dbb232fdc29bc527f46729e3f68b
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-gdbm_2.4.3-0ubuntu6.4_i386.deb
Size/MD5: 29704 9006cb06f2fdf32ce673583b1908e789
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-minimal_2.4.3-0ubuntu6.4_i386.deb
Size/MD5: 703714 fc3f12993b059cb8bfd324a15fdf16eb
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-tk_2.4.3-0ubuntu6.4_i386.deb
Size/MD5: 110502 07647877c6b44447c58848e7055936c8
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4.3-0ubuntu6.4_i386.deb
Size/MD5: 2740134 b8f70f1bc9b50bc3ef2e228c9ed7705a

powerpc architecture (Apple Macintosh G3/G4/G5):

http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dbg_2.4.3-0ubuntu6.4_powerpc.deb
Size/MD5: 5675960 cc3ee1e8e1e510584952a748c7753a35
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dev_2.4.3-0ubuntu6.4_powerpc.deb
Size/MD5: 1632088 91caeb905d2f7359b46bfa1e46001aa7
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-gdbm_2.4.3-0ubuntu6.4_powerpc.deb
Size/MD5: 31620 e2fbbab09a662399e8c78b60da86b083
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-minimal_2.4.3-0ubuntu6.4_powerpc.deb
Size/MD5: 783944 9208a0b5d6d6afb85ee7e531473883e9
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-tk_2.4.3-0ubuntu6.4_powerpc.deb
Size/MD5: 113410 716fe56c6ed7c5980d49640dfb4ae0e9
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4.3-0ubuntu6.4_powerpc.deb
Size/MD5: 2888592 0b1e942c7d04f80643dffc37111a97ec

sparc architecture (Sun SPARC/UltraSPARC):

http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dbg_2.4.3-0ubuntu6.4_sparc.deb
Size/MD5: 5007520 7a6d11e3bfb4839d91e54163c8bc8172
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dev_2.4.3-0ubuntu6.4_sparc.deb
Size/MD5: 1579844 387df760a949bcfa63b00cd3eabc233e
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-gdbm_2.4.3-0ubuntu6.4_sparc.deb
Size/MD5: 29842 8e916b371f894bbb0cbd44ca793e99a8
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-minimal_2.4.3-0ubuntu6.4_sparc.deb
Size/MD5: 724172 40e4e41ec21c969741c2e495f2937fd5
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-tk_2.4.3-0ubuntu6.4_sparc.deb
Size/MD5: 111280 3e1915538ed5543abc638a0a4f4df0d8
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4.3-0ubuntu6.4_sparc.deb
Size/MD5: 2805012 6e30c17ab918dbc6d45bbf04c5ccb361

Updated packages for Ubuntu 8.04 LTS:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4.5-1ubuntu4.3.diff.gz
Size/MD5: 2669433 ce6aace302b74f10b812ad8f36396f47
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4.5-1ubuntu4.3.dsc
Size/MD5: 1427 750c5079f39c5f561ce0a3499f6fdcff
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4.5.orig.tar.gz
Size/MD5: 9523188 9a615c6868074f60872084ecd240de3e

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-doc_2.4.5-1ubuntu4.3_all.deb
Size/MD5: 3369752 d69f23606f53c0807afdf5f4bf7f544c
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-examples_2.4.5-1ubuntu4.3_all.deb
Size/MD5: 592130 68b924bea153282efb44b665a21720d9
http://security.ubuntu.com/ubuntu/pool/universe/p/python2.4/idle-python2.4_2.4.5-1ubuntu4.3_all.deb
Size/MD5: 64034 34f6bbbd95e28be372d4b831a3181078

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dbg_2.4.5-1ubuntu4.3_amd64.deb
Size/MD5: 6875322 c2b912cfcba60070fc321cd0e11d2dac
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dev_2.4.5-1ubuntu4.3_amd64.deb
Size/MD5: 1626758 84336dcf71b42f89e83c7591372c9fcf
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-minimal_2.4.5-1ubuntu4.3_amd64.deb
Size/MD5: 1053418 9ce514ba9908aeb692d5e59e703f9de2
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4.5-1ubuntu4.3_amd64.deb
Size/MD5: 2913244 ba231096bcd363fc942eef2c86e96e70

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dbg_2.4.5-1ubuntu4.3_i386.deb
Size/MD5: 6363854 e8a3c1d21e8da7c0356737781761a304
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dev_2.4.5-1ubuntu4.3_i386.deb
Size/MD5: 1487746 5cd323acc5e32389dc91159a62ef13cd
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-minimal_2.4.5-1ubuntu4.3_i386.deb
Size/MD5: 977212 f4182b9a7a2970e38953d5d93002c961
http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4.5-1ubuntu4.3_i386.deb
Size/MD5: 2813478 1e8a15bd3ddf8c6d589ef810d490086c

lpia architecture (Low Power Intel Architecture):

http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dbg_2.4.5-1ubuntu4.3_lpia.deb
Size/MD5: 6460568 00880e127c62fb7060a9f931ebf9294b
http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dev_2.4.5-1ubuntu4.3_lpia.deb
Size/MD5: 1483496 a0e2c8ea61b0ec99f1becaf60b26f330
http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-minimal_2.4.5-1ubuntu4.3_lpia.deb
Size/MD5: 980858 dee97559b9fb72e26b48c0e575a1224a
http://ports.ubuntu.com/pool/main/p/python2.4/python2.4_2.4.5-1ubuntu4.3_lpia.deb
Size/MD5: 2812240 43d77ea846457dffcd71cdb2b33ec571

powerpc architecture (Apple Macintosh G3/G4/G5):

http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dbg_2.4.5-1ubuntu4.3_powerpc.deb
Size/MD5: 7120212 d386642eadcf28905cf1becc9a203e32
http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dev_2.4.5-1ubuntu4.3_powerpc.deb
Size/MD5: 1627884 adabc45ef8d448f42b8360b25208999b
http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-minimal_2.4.5-1ubuntu4.3_powerpc.deb
Size/MD5: 1075804 b594ec1ca562349a109b314f500ae403
http://ports.ubuntu.com/pool/main/p/python2.4/python2.4_2.4.5-1ubuntu4.3_powerpc.deb
Size/MD5: 2961624 715684171a931b636ab7ed4802c23745

sparc architecture (Sun SPARC/UltraSPARC):

http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dbg_2.4.5-1ubuntu4.3_sparc.deb
Size/MD5: 6444750 47b37d33dee80e0383ff6d075ba05421
http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dev_2.4.5-1ubuntu4.3_sparc.deb
Size/MD5: 1560466 74bf28afcf995bc19d13bb2219454ebc
http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-minimal_2.4.5-1ubuntu4.3_sparc.deb
Size/MD5: 999354 be9d691bedfb7605f066b96389968afe
http://ports.ubuntu.com/pool/main/p/python2.4/python2.4_2.4.5-1ubuntu4.3_sparc.deb
Size/MD5: 2829928 43058a2718bf85b38bf97de324bd3615

 (大璞不完)