Squid3/Chromium/ffmpeg Security Updates for Debian

- --------------------------------------------------------------------------
Debian Security Advisory DSA-2304-1 security@debian.org
Debian -- Security Information Nico Golde
Sep 11, 2011 Debian -- Debian security FAQ
- --------------------------------------------------------------------------

Package : squid3
Vulnerability : buffer overflow
Problem type : remote
Debian-specific: no
Debian bug : 639755
CVE IDs : CVE-2011-3205

Ben Hawkes discovered that squid3, a full featured Web Proxy cache
(HTTP proxy), is vulnerable to a buffer overflow when processing gopher
server replies. An attacker can exploit this flaw by connecting to a
gopher server that returns lines longer than 4096 bytes. This may result
in denial of service conditions (daemon crash) or the possibly the
execution of arbitrary code with rights of the squid daemon.

For the oldstable distribution (lenny), this problem has been fixed in
version 3.0.STABLE8-3+lenny5.

For the stable distribution (squeeze), this problem has been fixed in
version 3.1.6-1.2+squeeze1.

For the testing distribution (wheezy), this problem has been fixed in
version 3.1.15-1.

For the unstable distribution (sid), this problem has been fixed in
version 3.1.15-1.

We recommend that you upgrade your squid3 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: Debian -- Security Information

- -------------------------------------------------------------------------
Debian Security Advisory DSA-2307-1 security@debian.org
Debian -- Security Information Giuseppe Iuculano
September 11, 2011 Debian -- Debian security FAQ
- -------------------------------------------------------------------------

Package : chromium-browser
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE ID : CVE-2011-2359 CVE-2011-2800 CVE-2011-2818


Several vulnerabilities were discovered in the Chromium browser.
The Common Vulnerabilities and Exposures project identifies
the following problems:

CVE-2011-2818

Use-after-free vulnerability in Google Chrome allows remote attackers to
cause a denial of service or possibly have unspecified other impact via
vectors related to display box rendering.


CVE-2011-2800

Google Chrome before allows remote attackers to obtain potentially sensitive
information about client-side redirect targets via a crafted web site.


CVE-2011-2359

Google Chrome does not properly track line boxes during rendering, which
allows remote attackers to cause a denial of service or possibly have
unspecified other impact via unknown vectors that lead to a "stale pointer."


Several unauthorised SSL certificates have been found in the wild issued
for the DigiNotar Certificate Authority, obtained through a security
compromise with said company.
This update blacklists SSL certificates issued by DigiNotar-controlled
intermediate CAs used by the Dutch PKIoverheid program.


For the stable distribution (squeeze), this problem has been fixed in
version 6.0.472.63~r59945-5+squeeze6.

For the testing distribution (wheezy), this problem has been fixed in
version 13.0.782.220~r99552-1.

For the unstable distribution (sid), this problem has been fixed in
version 13.0.782.220~r99552-1.

We recommend that you upgrade your chromium-browser packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: Debian -- Security Information

- -------------------------------------------------------------------------
Debian Security Advisory DSA-2306-1 security@debian.org
Debian -- Security Information Giuseppe Iuculano
September 11, 2011 Debian -- Debian security FAQ
- -------------------------------------------------------------------------

Package : ffmpeg
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE ID : CVE-2010-3908 CVE-2010-4704 CVE-2011-0480 CVE-2011-0722
CVE-2011-0723
Debian Bug : 611495


Several vulnerabilities have been discovered in ffmpeg, a multimedia player,
server and encoder.
The Common Vulnerabilities and Exposures project identifies the following
problems:


CVE-2010-3908

FFmpeg before 0.5.4, allows remote attackers to cause a denial of service
(memory corruption and application crash) or possibly execute arbitrary code
via a malformed WMV file.


CVE-2010-4704

libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg allows remote
attackers to cause a denial of service (application crash) via a crafted
.ogg file, related to the vorbis_floor0_decode function.


CVE-2011-0480

Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg
allow remote attackers to cause a denial of service (memory corruption and
application crash) or possibly have unspecified other impact via a crafted
WebM file, related to buffers for the channel floor and the channel residue.


CVE-2011-0722

FFmpeg allows remote attackers to cause a denial of service (heap memory
corruption and application crash) or possibly execute arbitrary code via a
malformed RealMedia file.


For the stable distribution (squeeze), this problem has been fixed in
version 4:0.5.4-1.

Security support for ffmpeg has been discontinued for the oldstable
distribution (lenny).
The current version in oldstable is not supported by upstream anymore
and is affected by several security issues. Backporting fixes for these
and any future issues has become unfeasible and therefore we need to
drop our security support for the version in oldstable.


We recommend that you upgrade your ffmpeg packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: Debian -- Security Information