extremely long URL causes apturl to DoS window manager

[Marc Deslauriers]

Binary package hint: apturl

Visiting a web page with a extremely long (10k character) apt URL causes apturl to try and display the whole thing in a message dialog, which causes the window manager to crash when drawing the titlebar.

ProblemType: Bug
DistroRelease: Ubuntu 11.04
Package: apturl 0.4.2ubuntu5
ProcVersionSignature: Ubuntu 2.6.38-9.43-generic 2.6.38.4
Uname: Linux 2.6.38-9-generic x86_64
Architecture: amd64
Date: Mon May 16 13:48:29 2011
InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Alpha amd64 (20110302)
ProcEnviron:
 LANGUAGE=en_CA:en
 PATH=(custom, user)
 LANG=en_CA.UTF-8
 SHELL=/bin/bash
SourcePackage: apturl
UpgradeStatus: No upgrade log present (probably fresh install)

[Marc Deslauriers (mdeslaur)]

apturl fix:

http://bazaar.launchpad.net/~ubuntu-core-dev/apturl/ubuntu/revision/108
http://bazaar.launchpad.net/~ubuntu-core-dev/apturl/ubuntu/revision/109

[Launchpad Janitor (janitor)]

This bug was fixed in the package apturl - 0.4.2ubuntu5.1

---------------
apturl (0.4.2ubuntu5.1) natty-security; urgency=low

  * SECURITY UPDATE: denial of service via long apt URL (LP: #783594)
    - check URL for length and shorten it for error dialog in
      AptUrl/AptUrl.py, AptUrl/Parser.py, tests/apturlparse.py.
    - Patch thanks to Micheal Vogt
    - CVE number pending
 -- Marc Deslauriers <email address hidden> Mon, 16 May 2011 13:46:41 -0400

[Launchpad Janitor (janitor)]

This bug was fixed in the package apturl - 0.4.1ubuntu7.1

---------------
apturl (0.4.1ubuntu7.1) maverick-security; urgency=low

  * SECURITY UPDATE: denial of service via long apt URL (LP: #783594)
    - check URL for length and shorten it for error dialog in
      AptUrl/AptUrl.py, AptUrl/Parser.py, tests/apturlparse.py.
    - Patch thanks to Micheal Vogt
    - CVE number pending
 -- Marc Deslauriers <email address hidden> Mon, 16 May 2011 13:53:38 -0400

[Launchpad Janitor (janitor)]

This bug was fixed in the package apturl - 0.4.1ubuntu4.1

---------------
apturl (0.4.1ubuntu4.1) lucid-security; urgency=low

  * SECURITY UPDATE: denial of service via long apt URL (LP: #783594)
    - check URL for length and shorten it for error dialog in
      AptUrl/AptUrl.py, AptUrl/Parser.py, tests/apturlparse.py.
    - Patch thanks to Micheal Vogt
    - CVE number pending
 -- Marc Deslauriers <email address hidden> Mon, 16 May 2011 13:57:01 -0400

[zana dell (zdell4c)]

I am new to Ubuntu. How does this bug affect my computer? How do I get rid of it.

[ke1fr (ke1fr)]

i just downloaded the new 11.04 and got the bug..how can i fix it?
i was trying to received updates from update manager
thank you