==========================================================Ubuntu Security Notice USN-890-2           January 21, 2010
python2.5 vulnerabilities
CVE-2009-3560, CVE-2009-3720
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04
Ubuntu 9.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 8.04 LTS:
  python2.5                       2.5.2-2ubuntu6.1
  python2.5-minimal               2.5.2-2ubuntu6.1

Ubuntu 8.10:
  python2.5                       2.5.2-11.1ubuntu1.1
  python2.5-minimal               2.5.2-11.1ubuntu1.1

Ubuntu 9.04:
  python2.5                       2.5.4-1ubuntu4.1
  python2.5-minimal               2.5.4-1ubuntu4.1

Ubuntu 9.10:
  python2.5                       2.5.4-1ubuntu6.1
  python2.5-minimal               2.5.4-1ubuntu6.1

After a standard system upgrade you need to restart any Python applications
that use the PyExpat module to effect the necessary changes.

Details follow:

USN-890-1 fixed vulnerabilities in Expat. This update provides the
corresponding updates for the PyExpat module in Python 2.5.

Original advisory details:

 Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did
 not properly process malformed XML. If a user or application linked against
 Expat were tricked into opening a crafted XML file, an attacker could cause
 a denial of service via application crash. (CVE-2009-2625, CVE-2009-3720)
 
 It was discovered that Expat did not properly process malformed UTF-8
 sequences. If a user or application linked against Expat were tricked into
 opening a crafted XML file, an attacker could cause a denial of service via
 application crash. (CVE-2009-3560)


Updated packages for Ubuntu 8.04 LTS:

  Source archives:

          Size/MD5:  2958157 26a3d3c722defa5307e76746bfd339ee
          Size/MD5:     1598 a7d2cbb02b56a65b229490b13e4ffa90
          Size/MD5: 11577883 87619e5bf07b3506fec639b7e4d86215

  Architecture independent packages:

          Size/MD5:  3729574 42314637298e928f719bce68b225e13a
          Size/MD5:   651234 214078e3764815dc7f1779a5f0cc2341
          Size/MD5:    70240 f0b956ced59898e78899e6cf66384a8d

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  7934952 d86fe41fa748a7237e2ad5bc7137a29f
          Size/MD5:  2036646 30385ec5202cd34d0bb231b1d86c61bb
          Size/MD5:  1256980 97de161e0e6e41fd8fe43c94bd6782f2
          Size/MD5:  3018586 921d4b1ea7d0a4910591c019fda9c79c

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  7363052 6bb29d7247c3a125e42df2e8a2f83188
          Size/MD5:  1888274 a036337f6de15b85d22d0dd171fe6a4b
          Size/MD5:  1175900 48f17a41634fcb08cb6d43e481887054
          Size/MD5:  2899048 37f85e30f0a294e4acd806053981ab0f

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:  7468434 418fb12a1c64bf64e8fb5bd8decba29f
          Size/MD5:  1881626 e9340c68621fb70d53285853f2473d4d
          Size/MD5:  1180478 5e9d5877b2072bb5e86b4039b84b28ac
          Size/MD5:  2894298 54277ef80774cc7641fc2c287b507e98

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  8202616 4a6b033b43e47a8109c681a20f64313b
          Size/MD5:  2032444 0ca5b1c4dd05b0a9d464a1aeadf0ba1a
          Size/MD5:  1283126 ef041d39af09edc91d8cd7f11b002458
          Size/MD5:  3070262 0c1f0caf7e8e270ccfa63e0665b257df

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  7440860 6e1d2c9c8610560ce48438d858c7609a
          Size/MD5:  1975540 bcfd93ea74732037adb4c949ddc32a9b
          Size/MD5:  1199550 c60a359c82fcad81ac03fff3d0824691
          Size/MD5:  2922194 218794fb25eb85cf1c578d51b7bb99ff

Updated packages for Ubuntu 8.10:

  Source archives:

          Size/MD5:  3074438 b71caa93bb927930ff3849bcfeaca94c
          Size/MD5:     1974 2fb05a37b35c5184836cde0f1abc4fa3
          Size/MD5: 11577883 87619e5bf07b3506fec639b7e4d86215

  Architecture independent packages:

          Size/MD5:  3851336 b5f97db854a35280218b3f6d5a818c75
          Size/MD5:   652908 e0e3839972711fec1c3f300c0c105f5a
          Size/MD5:    71894 0d57de266e765694463c902726254c3a

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  8162082 c7fc85fb683ca6766ce4dba37ae64883
          Size/MD5:  2059168 8d5c953efe0c7bf2034530fdda5bc96d
          Size/MD5:  1271976 73e640c56e137267536be96319de8a62
          Size/MD5:  3041802 8889f8d76f1301ad21af704ebcc1d08c

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  7542900 69a5c93091bdcf21b8f145c292649878
          Size/MD5:  1904060 c2f5100a6f53f5c406eba867e539ee6f
          Size/MD5:  1189902 fddc60c76f5bec061aba5c5956332d97
          Size/MD5:  2915414 a1bed9ee1a209364fadaeed707fd19d3

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:  7653118 249c68a823e0b7ca58d1f9786604b160
          Size/MD5:  1891988 e60f4341173e1ba7633b9de587fb241c
          Size/MD5:  1188436 6204f7762b0b3c7ff693e0d090b8d64f
          Size/MD5:  2907328 f049319147ea266b39b6a1cc0840e088

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  8506058 0a3c39b6b0c80059c008df6bfe7ffbef
          Size/MD5:  2038222 0d10fb8cb69c61b893022fd1955ce0ec
          Size/MD5:  1284858 63680e3a78d0293e9c0798bd2a7f6d01
          Size/MD5:  3081828 71ec1adb0732eb223bc0d56df8093d72

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  7628468 f92f8ef540646ac0ced4deca3089555b
          Size/MD5:  1974286 e66624956bf4aff3ac29278f46fbf628
          Size/MD5:  1203152 388cc348b6ea76b059d73a36dca8fc8e
          Size/MD5:  2931070 d579a47e11bf3fc585baff76a3e0fd8b

Updated packages for Ubuntu 9.04:

  Source archives:

          Size/MD5:  2998798 c96f74cffbaec47782c41ec0ad2584fd
          Size/MD5:     1962 288816e8bb214fae5fa20323e0a8884a
          Size/MD5: 11688456 d2b7bae060d0e4ed3b5129115dbc88a1

  Architecture independent packages:

          Size/MD5:  3853616 7e15a49b26c441b840a7255a60c1434b
          Size/MD5:    72958 616c3a02abb8faf20abe547ff43f0974
          Size/MD5:   652902 f0c3f0c2837d2d490e80296d72b82a37

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  8164164 9d64163fa66eb8b58362558c2fc0f5bd
          Size/MD5:  2062678 c2036b8fa51d5045798ec3b192b44511
          Size/MD5:  1272634 b176b042f33198f8b6415ec893c34806
          Size/MD5:  3043210 36f24d84cd5dd6d59aeb06a8fd29136e

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  7549582 9cd18ca3f8a05084cf49d97d67a4a2e3
          Size/MD5:  1907948 e5399bbc58c07c1d173f29e17452cc0c
          Size/MD5:  1191256 5cc8836de4ebb344a3baa1f8e92e5022
          Size/MD5:  2917486 22b112a3b04706b41756de9495182217

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:  7659826 1ad8bebd989621bed29372b214ebe37a
          Size/MD5:  1896446 dd17e2835151e83c038167e1019a3582
          Size/MD5:  1189398 2b05e26880afe94d621c32aa466a2802
          Size/MD5:  2909594 7c944aed6dba56247d9abdb69bdc4eaa

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  8509276 f3e3ace6819d22aa0762ff97167b62c4
          Size/MD5:  2044122 e1ec3fc67ef3d0be875309b40ec8252b
          Size/MD5:  1285852 96158c18b6ff4d94fe12bb9d71bbea51
          Size/MD5:  3084714 72901e35572035322a08b7cd0d3807b5

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  7626308 5593c17f0a0d4487ae00e2dd90a2166d
          Size/MD5:  1974896 2079aeff2a9f790c3df2fc563aded904
          Size/MD5:  1204128 ce218b7538ad4d39935091ccedba17c8
          Size/MD5:  2931590 2b6355862ac44e9cb087d036cb011421

Updated packages for Ubuntu 9.10:

  Source archives:

          Size/MD5:  2999048 2ec447feb4d06b5baaa51d98a89be21f
          Size/MD5:     1961 e7a803368109b46e188292c207da6c99
          Size/MD5: 11688456 d2b7bae060d0e4ed3b5129115dbc88a1

  Architecture independent packages:

          Size/MD5:  3853346 5e54480c7691adddc402cc4ff8d0255f
          Size/MD5:    73066 9d9ea27e52d9c56586684f9afc91730f
          Size/MD5:   653054 65a968fadae42f324d1798af28fc7109

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  7911798 d8673b4807423d0791a1aad0e1655b7f
          Size/MD5:  2061394 d17b6340f15ae598ccadb45da0227bd6
          Size/MD5:  1274136 0223741707960650cda5ee5fadc5f35e
          Size/MD5:  3039990 d770e273820edb7a986e39a51b2ece51

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  7441932 0007e938eadfa3b656acfb7e0b5bc557
          Size/MD5:  1893728 c484fcd82705f5f353c2c1078b0d42c1
          Size/MD5:  1189554 2df760ae872bc24cf539e1775524aeda
          Size/MD5:  2914952 3d1959a46e3a9c788d0f594c2784b472

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:  7549740 711cc09f238ff293011f08d533366063
          Size/MD5:  1894566 6667866b60f40052b84dbad11763bfed
          Size/MD5:  1195406 598546f87c8ae3dfc8d6b2e88d681ecd
          Size/MD5:  2917712 66b69f96acb55bfbbf0a6ef256626b23

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  8237458 3dd54b2a256514622bfd346cee57b415
          Size/MD5:  2037000 21c0d5ed7fc6bb9e56bbfaaba74bc7e8
          Size/MD5:  1258318 8e872e3e4fd8ce7d9283a5ab1a0398f6
          Size/MD5:  2996826 3d4896c096532076d373eb67739e1246

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  7534920 9f3d7a3694a645f2bce37f768c7622b6
          Size/MD5:  1967430 9133a345763a39129becc7985e864efc
          Size/MD5:  1204818 6f7dc6660951a184f0c9d6af7c0a85c3
          Size/MD5:  2927230 858ff440c3f86b217e5b11b996603ae1