gnome-panel restarts or completely blocked

[pietroliva]

Binary package hint: gnome-panel

Gnome-panel 2.28.0 restarts or completely blocks the computer (need to turn off by removing battery). I'm using ubuntu 9.10.
This happens because gnome-panel doesn't properly check the file .gtk-bookmarks that if specially crafted produces this dos.
I've made a proof of concept so you can quickly test this bug. I don't know if this can produce code execution because i don't have time to debug but surely produces this denial of service.

[Marc Deslauriers (mdeslaur)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.

[Pedro Villavicencio (pedro)]

Please try to obtain a backtrace of that hang following the instructions at http://wiki.ubuntu.com/DebuggingProgramCrash and upload the backtrace (as an attachment) to the bug report. This will greatly help us in tracking down your problem.

[Gustavo Noronha Silva (kov)]

Reported and fixed here: https://bugzilla.gnome.org/show_bug.cgi?id=606280

[Launchpad Janitor (janitor)]

This bug was fixed in the package gnome-panel - 1:2.29.5.1-0ubuntu1

---------------
gnome-panel (1:2.29.5.1-0ubuntu1) lucid; urgency=low

  * New upstream version:
    Panel
    - Update latest EggSMClient code, which requires no panel-specific patch
    - Fix potential crash when creating a launcher with drag and drop
    - Make sure to initialize bonobo
    Clock Applet
    - Avoid unnecessary wakeups when monitoring non-existing timezone files
    Misc
    - Require gnome-desktop >= 2.24.0
    Panel
    - Use a native window for PanelWidget to fix uglyness on unhide
    - Fix crashes in various conditions with the new randr code
    - Fix important regression in very important code
    - Fix crash with malicious .gtk-bookmarks (lp: #503868)
    - Impose a limit on the size of the bookmarks file
    - Port code away from libgnome and libgnomeui
    - Do not add (deprecated) Encoding key when creating desktop files
    Clock Applet
    - Remove hack for gravity that was needed with earlier pango
    - Check errors returned by PolicyKit
    - Deprecate gmt_time gconf key
    Misc
    - Build fixes
    - Remove dependency on libgnome and libgnomeui
    - Add configure check for libcanberra-gtk
    - Add configure check for ice and sm
  * debian/control.in:
    - build-depends on libice-dev, libsm-dev, libcanberra-gtk-dev
    - don't build-depends on libgnome-dev, libgnomeui-dev
  * debian/gnome-panel.install:
    - install gnome-panel-add utility and update for build changes
  * debian/patches/70_relibtoolize.patch:
    - new version update
  * debian/patches/71_change_bookmark_submenu_limit_value.patch:
    - new version update
  * debian/patches/90_git_change_fix_xrandr_issue.patch:
    - the change is in the new version
  * debian/rules:
    - don't build in process applets during the unstable cycle so crash issues
      should be easier to debug and reported on the corresponding binary
 -- Sebastien Bacher <email address hidden> Thu, 14 Jan 2010 22:20:05 +0100