=========================================================== 
Ubuntu Security Notice USN-628-1              July 23, 2008
php5 vulnerabilities
CVE-2007-4782, CVE-2007-4850, CVE-2007-5898, CVE-2007-5899,
CVE-2008-0599, CVE-2008-1384, CVE-2008-2050, CVE-2008-2051,
CVE-2008-2107, CVE-2008-2108, CVE-2008-2371, CVE-2008-2829
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 7.04
Ubuntu 7.10
Ubuntu 8.04 LTS

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libapache2-mod-php5             5.1.2-1ubuntu3.12
  php5-cgi                        5.1.2-1ubuntu3.12
  php5-cli                        5.1.2-1ubuntu3.12
  php5-curl                       5.1.2-1ubuntu3.12

Ubuntu 7.04:
  libapache2-mod-php5             5.2.1-0ubuntu1.6
  php5-cgi                        5.2.1-0ubuntu1.6
  php5-cli                        5.2.1-0ubuntu1.6
  php5-curl                       5.2.1-0ubuntu1.6

Ubuntu 7.10:
  libapache2-mod-php5             5.2.3-1ubuntu6.4
  php5-cgi                        5.2.3-1ubuntu6.4
  php5-cli                        5.2.3-1ubuntu6.4
  php5-curl                       5.2.3-1ubuntu6.4

Ubuntu 8.04 LTS:
  libapache2-mod-php5             5.2.4-2ubuntu5.3
  php5-cgi                        5.2.4-2ubuntu5.3
  php5-cli                        5.2.4-2ubuntu5.3
  php5-curl                       5.2.4-2ubuntu5.3

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

It was discovered that PHP did not properly check the length of the
string parameter to the fnmatch function. An attacker could cause a
denial of service in the PHP interpreter if a script passed untrusted
input to the fnmatch function. (CVE-2007-4782)

Maksymilian Arciemowicz discovered a flaw in the cURL library that
allowed safe_mode and open_basedir restrictions to be bypassed. If a
PHP application were tricked into processing a bad file:// request,
an attacker could read arbitrary files. (CVE-2007-4850)

Rasmus Lerdorf discovered that the htmlentities and htmlspecialchars
functions did not correctly stop when handling partial multibyte
sequences. A remote attacker could exploit this to read certain areas
of memory, possibly gaining access to sensitive information. This
issue affects Ubuntu 8.04 LTS, and an updated fix is included for
Ubuntu 6.06 LTS, 7.04 and 7.10. (CVE-2007-5898)

It was discovered that the output_add_rewrite_var function would
sometimes leak session id information to forms targeting remote URLs.
Malicious remote sites could use this information to gain access to a
PHP application user's login credentials. This issue only affects
Ubuntu 8.04 LTS. (CVE-2007-5899)

It was discovered that PHP did not properly calculate the length of
PATH_TRANSLATED. If a PHP application were tricked into processing
a malicious URI, and attacker may be able to execute arbitrary code
with application privileges. (CVE-2008-0599)

An integer overflow was discovered in the php_sprintf_appendstring
function. Attackers could exploit this to cause a denial of service.
(CVE-2008-1384)

Andrei Nigmatulin discovered stack-based overflows in the FastCGI SAPI
of PHP. An attacker may be able to leverage this issue to perform
attacks against PHP applications. (CVE-2008-2050)

It was discovered that the escapeshellcmd did not properly process
multibyte characters. An attacker may be able to bypass quoting
restrictions and possibly execute arbitrary code with application
privileges. (CVE-2008-2051)

It was discovered that the GENERATE_SEED macro produced a predictable
seed under certain circumstances. Attackers may by able to easily
predict the results of the rand and mt_rand functions.
(CVE-2008-2107, CVE-2008-2108)

Tavis Ormandy discovered that the PCRE library did not correctly
handle certain in-pattern options. An attacker could cause PHP
applications using pcre to crash, leading to a denial of service.
USN-624-1 fixed vulnerabilities in the pcre3 library. This update
provides the corresponding update for PHP. (CVE-2008-2371)

It was discovered that php_imap used obsolete API calls. If a PHP
application were tricked into processing a malicious IMAP request,
an attacker could cause a denial of service or possibly execute code
with application privileges. (CVE-2008-2829)


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:   128516 db354a570b80b7e665fa1cbb28f7e732
          Size/MD5:     1768 5de6a6aa79ebad6581d58ea6e5df60b5
          Size/MD5:  8064193 b5b6564e8c6a0d5bc1d2b4787480d792

  Architecture independent packages:

          Size/MD5:   301976 293cb4777d3933924a0e2e94300ebc05
          Size/MD5:     1040 7d0c6846ce7029c7ea1b9365cd4a1866

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  2433982 1eb9718bd9f6bab9996e6d1ada86ee3e
          Size/MD5:  4757850 4b809ae0244079e77aa8b55c97fd24e8
          Size/MD5:  2389108 aa6ce2531ae45b7a9718d0fd652c9ae9
          Size/MD5:   135246 e9cb2b67c8dba9b24cf470eb16e3e98f
          Size/MD5:    24618 286aa0db6005d2dc990e080890078f07
          Size/MD5:   312574 b4db058f837d06985fb795b4eba5a5b0
          Size/MD5:    36802 442953a5b03b1867cc588d1de6fec53f
          Size/MD5:    22130 107f280ef0e3ee8d9ae9627f5e1a7e20
          Size/MD5:     8784 cce09b9f2fba2a49cd37501252b43b54
          Size/MD5:    25242 0b8e7f547078045c500cad5acb35911d
          Size/MD5:    43910 ce5a2af806f41f57411ce4a2a5c717fe
          Size/MD5:    30134 cc622dad1c269f3e92ae4262065e7103
          Size/MD5:    44392 4782e840679780428e2c23af20aab8c1
          Size/MD5:     8340 80c204793c667ac847f0e30346ca1e72
          Size/MD5:    15306 b1c3757b4a786c953613c0c9cfe67138
          Size/MD5:    29152 467bdca2612da3b8c0e841c4b237610f
          Size/MD5:    22710 6157f9584cc3c4d2bbc90fb73c8fcb8a
          Size/MD5:    42306 395d3f32427683b1b4f910f41313abe2
          Size/MD5:    16394 aeb8b0bf4645992d0a0110528b764e5c

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  2262802 a2654d682051967bc1273adc3174115b
          Size/MD5:  4473830 a2fad8fc3e970e90c674834d9f570f7e
          Size/MD5:  2246970 ebad396321764be6534215f6ea4d56b2
          Size/MD5:   135260 2ff40a87aaaa3e604f3327a54ce58994
          Size/MD5:    22836 2fde8f40469b78b33fd5d0674e538b25
          Size/MD5:   312600 562fe8f0dbb4ae9ab0cbc20959759964
          Size/MD5:    32836 279ef21b38216b7f8c6fc71ee5a65960
          Size/MD5:    19792 8ed19159c9973d1f3f31989e4e247542
          Size/MD5:     8376 e4683f7943c15f025a6d53bda7550a2b
          Size/MD5:    21998 a7fd3b1832479c11dbd9f5a27495a952
          Size/MD5:    37374 5d60708874f4d98866d6571ebea6e4a0
          Size/MD5:    27038 977b93ad3f87474802411dafb2726eeb
          Size/MD5:    39782 0134bf83b370c31f1aaf0f7bda141122
          Size/MD5:     8060 f2a6d46d938b89c6fb46d125d720499a
          Size/MD5:    14166 9859c8b03bad1408110c3ff502ee0dc1
          Size/MD5:    25606 14394245f2766bcbc41f03e862783c0f
          Size/MD5:    20546 174225d401d232b46b9480646f52ef80
          Size/MD5:    37814 8a92b2862d8dc570d422821694eea855
          Size/MD5:    15130 7c65e1122b0331f25eba17e8931b3853

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  2397982 a0598313740f712716d7f1ff4767a441
          Size/MD5:  4693522 b69f8e682214478002ca67684e24e84a
          Size/MD5:  2355668 ff2934a67fcc143d30d0480562bd9b18
          Size/MD5:   135272 4dc235af81ef5f385925c648dfabb709
          Size/MD5:    26604 6faf89979d5259e5e5af5a77a2419c80
          Size/MD5:   312620 8e16e234ccf3f440207b86bc9fcf7df2
          Size/MD5:    36440 2edafeeaa1cb0f2f66e7a0c41cbe6561
          Size/MD5:    22546 08e4fbd0ce08379df96f7b7900c8a8c4
          Size/MD5:    10126 01d511255139e823f1ea63d617a44297
          Size/MD5:    24820 d5eb3aee5d3e53868ce40dc6c803cd60
          Size/MD5:    41772 f7609fb7c3fd6a45e5a639ca92214b8a
          Size/MD5:    30078 f9de38ea9b239f219c83ab947f47f5bb
          Size/MD5:    43418 63ea60af404dd5560a85a8c2ebe98a8a
          Size/MD5:     9792 e6f492812d438d2fd46986c6e39a1ba3
          Size/MD5:    15940 c1c995565e846e43245443dec98cec37
          Size/MD5:    29398 770f0728ce745ac115df3d3ccd130e05
          Size/MD5:    23584 2c7e7fc92016f9522811881d52afccd2
          Size/MD5:    40900 c21b1e1d896f95ecd4c228c3e61fd3d8
          Size/MD5:    17242 65903c1f21cebcb7c36620b8db66430e

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  2323792 bdf39a6083dfb8f06bf8eb5834663b46
          Size/MD5:  4532528 02a9a1a4b47187f8181144543077c496
          Size/MD5:  2277350 f7dad7c472df9a155ded83664f35fff8
          Size/MD5:   135240 09cfaa5c043a159a919b936def3935b1
          Size/MD5:    24558 8f6dd42d20c16f0a5c56ae1f814caf6e
          Size/MD5:   312596 e36ac0cde16899a5168a6ddf089ffaa5
          Size/MD5:    33244 0b9be7cf535531d87273ba2f299813b5
          Size/MD5:    20086 c01348a0ce3c9c6b491ddd371d98b93e
          Size/MD5:     8372 9afbea5b0be611f8c9ad5b6dee0f7189
          Size/MD5:    22360 4536fbc781bb045369fe1beb38014966
          Size/MD5:    38654 6865fff1cdbeceb669ce1d4af19abc85
          Size/MD5:    26836 b481c96580dca45d24eb8b34d7ed1d77
          Size/MD5:    40604 7867acfdfc03e02d475b7155e606346b
          Size/MD5:     8106 28b67210d027b09858192aff4190d261
          Size/MD5:    14058 647ba90b00d3471e8731be59b92d6d79
          Size/MD5:    25954 acbd607a5ae0552e37404ed969a5bc2a
          Size/MD5:    20794 304f0b587643beba85f7cc180e46a02c
          Size/MD5:    38040 e5030ff1509441e48998a7f7f95843ea
          Size/MD5:    15090 ca6c429fcc28a8f4b2324f387dbb6f47

Updated packages for Ubuntu 7.04:

  Source archives:

          Size/MD5:   110302 dea0b2f47610b9fad925ca293c0d53a3
          Size/MD5:     1925 89c97f9d14cd25380b816556fa2c4cc4
          Size/MD5:  9010594 604eaee2b834bb037d2c83e53e300d3f

  Architecture independent packages:

          Size/MD5:   307874 2769f174f2739b129478dcab14e83521
          Size/MD5:     1080 99071201ae01265ba44330bfed40940d

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  2654880 60008f565599a7745f61dbbb5a1639bc
          Size/MD5:  5159290 45cd8b8183acbb7902923bf2825e8385
          Size/MD5:  2598776 f93e551336b5468d9ca28db9c7da06fe
          Size/MD5:   227506 3322d0086d2f1767d2c41de527ca3eed
          Size/MD5:    25432 d3b2713970f62ee662133cacde4d8f8b
          Size/MD5:   348664 a6cf800af5c828fda9ebfc34bdd2778e
          Size/MD5:    37810 7b99642ffb75dc9383e24f52c5badf33
          Size/MD5:    19214 0f49d06965a64fa616e7081090769ee1
          Size/MD5:     5524 64e7bda9439b2beb2bcdf0dcf5b1f50d
          Size/MD5:    73776 7d1ced586e72c2826f46e6cf25514310
          Size/MD5:    37366 f2d800bfc216764bcbaa67eb5a6ae03e
          Size/MD5:    55792 83c0f786ea1e54d5f3cc2b9c286238cd
          Size/MD5:     9626 d4199091c83450f01b1be7e2c7689668
          Size/MD5:     5004 2de0eb07041b447fdf0584e98e0c364f
          Size/MD5:    12458 95def3f858c631b76ea3ab4bdab2fe17
          Size/MD5:    38990 5df37dc014154d08e43a1151a1e0c39d
          Size/MD5:    19822 8872eaff932115ad49824f2b60b1068c
          Size/MD5:    17746 db619ccdcfbe7375d6b0660072f12595
          Size/MD5:    40582 463eead1d551e7abede88695e2a9d467
          Size/MD5:    13378 9eb9c929dd8f2b2c1af55d9f4b19615b

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  2531194 4c23c2608fd9eea5d80fcce5a8ee4a52
          Size/MD5:  5003618 76dffc0de78a536f7e2434e814d9a483
          Size/MD5:  2520410 ea99f9f0e110df469bbdba1973352cde
          Size/MD5:   224180 b1aca90f5eb47aa76ab6f7367cacc29b
          Size/MD5:    24324 498bedb69490b636936805d94bdddfcb
          Size/MD5:   348692 4a45e2b9db5ca73d11960f1331462578
          Size/MD5:    33524 fd1df15e4dd0e5b8f4907bd12b6b562e
          Size/MD5:    17360 5741f4b2f127e6f736ac73bba7a33f43
          Size/MD5:     5232 f2b8d7fb2e8dcde7e2aa1702dda133d8
          Size/MD5:    65456 07175877b9ea3f7aa4bf9106ec2f0ce6
          Size/MD5:    34522 a99976020df68ceb4182fe2c1ae8eef6
          Size/MD5:    51344 73e4ea05c649daaa1b5e8518bf67d70d
          Size/MD5:     8730 a4d6e77748417522b8bd861c45190f5f
          Size/MD5:     4812 4971e712bd990d521b467cb5f3a82b84
          Size/MD5:    11594 e264eb385f0ac736c8c4dce09c39852e
          Size/MD5:    34400 79895619d658b5d5438aa830cc08bf5a
          Size/MD5:    18406 af8948afad0de67f425c1c4dcc4a9f17
          Size/MD5:    16246 51a719baa680cd3209412b66ca602a9a
          Size/MD5:    37720 8cf05030c3b7f17869a7f4e8b0c64b19
          Size/MD5:    12456 e75c90dc39b933ac1fce4979e87702e5

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  2728666 aa28b17a9557090e18642b90752a9fe0
          Size/MD5:  5241756 7b563c2e7944fbc18ff9de2e00cf5759
          Size/MD5:  2640956 59ada3e24959d89494c8262766073aa1
          Size/MD5:   230556 df43e8b60bfbaa1b99332b2107614055
          Size/MD5:    28666 e979d9e666eccae2ff9ecf7e5bb4a73f
          Size/MD5:   348700 e64cb1d1476a2e7119d031c9e419640a
          Size/MD5:    39146 d3c6a8d0c688badec4c968176faf5215
          Size/MD5:    21088 f4e10cdd89d2d9c47cfa24e14431093e
          Size/MD5:     7674 ffa909b6d7d6f10301dda2fa0e16df25
          Size/MD5:    78118 973fc5f58e73a0712c8c3a8d52465ad0
          Size/MD5:    41004 24380684ba45487f104edb5bc4453214
          Size/MD5:    59610 05b5c6585f18a7d955392f09e5908b84
          Size/MD5:    11276 e6ecd3068926d9245acd0742b523e6aa
          Size/MD5:     7220 f81b35c6f9d21fe155e315e4e2c69137
          Size/MD5:    14144 e93ccf7b6c8ee3fe3114c1d3a56c20fe
          Size/MD5:    42586 d78a06947ffce1bda0376b023d98f4e7
          Size/MD5:    21916 8f373e432178a71783de00efff46086a
          Size/MD5:    20106 ca84fbe03bef58863ea40345d54fc14f
          Size/MD5:    43132 9a9f3bce00b42dc67a663dbcf3ed3ff7
          Size/MD5:    15506 39508780fafc674d7b875215191ecc96

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  2563730 b748f7625e6c89996d57749a71f3139f
          Size/MD5:  4996920 17022359f64590c950f5c76593e50594
          Size/MD5:  2517158 cddb96cd4962a8a10e32661be6e1b1b4
          Size/MD5:   224736 5ce8025b3f118a48d3a047448de07f03
          Size/MD5:    25116 8946717b19055435a12c2369f35f4e3a
          Size/MD5:   348722 e7659e42a1aaa2a764e2f83955f78170
          Size/MD5:    34298 467af36ae4076a7fa57df7c58fbfb105
          Size/MD5:    17202 58be4eaaf973edb244f947e5fb622507
          Size/MD5:     5072 9b349b20e7e8d40a4b2a7df1a29bee06
          Size/MD5:    64862 b2a46033b5b7174b35e0935f4f94131e
          Size/MD5:    32714 03d93df198779bdd58a0eec05c2758a8
          Size/MD5:    50086 fd9e58886630f0cbc9d9eb75399b36c7
          Size/MD5:     8608 bd8e9aed780554deead1f22a9024ef50
          Size/MD5:     4770 3c5bfeef355b8919465382369444154c
          Size/MD5:    11412 dab3631f9466aed9ee97c2e98b5cdfd6
          Size/MD5:    33068 22c9230903ed37938b5b3e2258104ecf
          Size/MD5:    17994 48aed269a3ca81c84938b3a32ea03ae7
          Size/MD5:    16380 662e61f9f7dda2e62da27b7526567813
          Size/MD5:    36512 2b1b11aec0b0d4c6d7dfe010f3cdfb99
          Size/MD5:    11960 a4c42a4b4a42f93c94e7e427b5ab51d7

Updated packages for Ubuntu 7.10:

  Source archives:

          Size/MD5:   131675 fc0e424de4e6c299d18fc8bc4f6491e3
          Size/MD5:     1921 bf7aaa768c6b334bd19fc3c8a2699be2
          Size/MD5:  9341653 df79b04d63fc4c1ccb6d8ea58a9cf3ac

  Architecture independent packages:

          Size/MD5:   351412 9d9e6b617ca4761b556ad0f9391a2245
          Size/MD5:     1082 98ab2516c35fb35acf93165d507f0a38

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  2669884 bf485dd963e9f74b7cfc47543d31abb0
          Size/MD5:  5191310 346658592046e73c610eb1e01c16a6bd
          Size/MD5:  2618082 9e5db8d98adc4235a4069590992d59ff
          Size/MD5:   223072 e116397f2379687ffb69ca6da1f33219
          Size/MD5:    24886 7b95b3a2e238a5c5077e59047f5e7244
          Size/MD5:   355048 c52a18f4cf60f0c7d4d810b0698e540e
          Size/MD5:    37858 4ec76d2d8eade170c8191c5158a98dce
          Size/MD5:    19986 2815a955c4a33d1ac92fa61ed0103d59
          Size/MD5:     5548 d99a769282d9687687c002403d97300e
          Size/MD5:    73930 7eeb006cec80c986067c52a70d825066
          Size/MD5:    37408 5000a31fe82943e2907bcf49da390147
          Size/MD5:    55950 90a977d5059151207328c44e489e7cb7
          Size/MD5:     9666 7d3c532260a5eb60db925328ee3432f3
          Size/MD5:     5024 74ae7465f061865857102df37a246c6c
          Size/MD5:    12386 7393b30a9029e318afb41adf52cafe08
          Size/MD5:    39570 b8d591f039139038108feab3ccdd7e71
          Size/MD5:    19856 26904836243f1d54907c9c892982450c
          Size/MD5:    17916 6d7513f2eef79b3ae534190f332b47f5
          Size/MD5:    40838 c3218f655162a48d0c8568bdb109543b
          Size/MD5:    13402 ef747d45f9d32ea8efdcdd3d86ae0408

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  2543028 712621532b008aa722202f5b0c9c6922
          Size/MD5:  5026460 34e4bc36eb85a4edd278a5c242e516c3
          Size/MD5:  2531302 ba32c6765aded5904956fc6443d38383
          Size/MD5:   219368 0018f772f4b7d6da0c0bbfe45c943d04
          Size/MD5:    23830 d1182ccce1e61fc94328aeae130f68d8
          Size/MD5:   355082 569f0e203ca410ecfff6d2d18697c945
          Size/MD5:    33518 d4e8933f0e2ef7f2dd8297822f376f6d
          Size/MD5:    17996 d224996de48055e8411b4315a3af89b3
          Size/MD5:     5216 a1c4b015bc7753a8271e24375f9d3a41
          Size/MD5:    65282 2b7fc6f56a866ac95092044855589931
          Size/MD5:    34486 7fa189fa44c4ec27be786a9cd6af1642
          Size/MD5:    51360 a7645d8367e3ab03fcd51917b1f742eb
          Size/MD5:     8718 f7d6db998bc1f033330f0ea957660a92
          Size/MD5:     4794 27a6a63f78bbc4b7a4ed1c809700c907
          Size/MD5:    11590 0ddb2970902b04fb2dc3c42a27621c02
          Size/MD5:    34538 02eb91c8e966bc13bc0bd5eac5b99564
          Size/MD5:    18162 9e1c0b0319700e05036bc2c7a5c02fe9
          Size/MD5:    16376 eede357ac2aed35e36e56d0e7ccb2b06
          Size/MD5:    37746 bbde01020bcf880ac0d39ab0dd19e21f
          Size/MD5:    12424 a92cfc71e2f83a666d106b4d0ebb5e1c

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:  2515028 ffe659f769afa4961fb240ad062309a7
          Size/MD5:  4971436 38c30094d77cbc001587aacb8696c6f9
          Size/MD5:  2502474 97c84d7483480fee90837b930de830cd
          Size/MD5:   218830 b5ce5563906b1faa34dfc52e62a5fb8b
          Size/MD5:    23226 2b870da7f5f365757cfc309a6097cb73
          Size/MD5:   355056 8d65c36aa1db43ada49038f79cbcf979
          Size/MD5:    32838 dd84184fe1d4a945aae41f6cf61dbd56
          Size/MD5:    17864 fe7c2cc8dff9f67dfbc5c60054cc0f98
          Size/MD5:     5090 b97d5b84a2ef445e944666f8454d0442
          Size/MD5:    64042 26402082b5b4eb1b9b71c9722c6fd7df
          Size/MD5:    33962 2dec2467ca0fc69810888f0e11d240ca
          Size/MD5:    50760 825badafe3d71fffad1f8bcbb12e9f34
          Size/MD5:     8640 2a3b3b716a1d6d53e947c96e4239b779
          Size/MD5:     4708 2fee66422fc0c25b5086b857f6636a09
          Size/MD5:    11498 3f193d6a7054d0e74fbec176ef6597e8
          Size/MD5:    33726 bc1fea449ccb1298f21b3c5621dab3e9
          Size/MD5:    18072 0eaf24e88263e98451b5124962f1b931
          Size/MD5:    16026 752d4876b26c198f2e673c8d89f10a86
          Size/MD5:    36802 0efdc6a5ac5178736ba669402a4823d8
          Size/MD5:    12220 bd3f061e5a5b33a1f1f2bc9c88fa4bd9

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  2742874 f454d9193a677361ec134827f169dd05
          Size/MD5:  5271622 42f33ec870baf9d574a0a71f7588e712
          Size/MD5:  2654468 0bf71b2a2ba05e68ad68f93537dd675e
          Size/MD5:   226468 e0f2c3cde483e713516dc089ef7e1748
          Size/MD5:    28108 2be8ede2f3ad7a12c206f2975e7e5809
          Size/MD5:   355086 cffd3ed7d9ae1ce149141a9893993332
          Size/MD5:    39150 4a88663a33a7556193992a0c771a5cb4
          Size/MD5:    21754 9f514d09a6a78155867c375e18475380
          Size/MD5:     7664 8418708b28be36521fbc167ed2f7a124
          Size/MD5:    78124 55abc3d12007dab0d75c702b4844e090
          Size/MD5:    41028 4765c96a5f5ad11532b0b0b50e0f47d6
          Size/MD5:    59634 b2c7c77d851ba37dae3de6c964836e62
          Size/MD5:    11286 b96e0591bea2e185c74c39e852bca276
          Size/MD5:     7202 7db467857d23707b25e58f3919063b48
          Size/MD5:    14152 2cef49f86732b8cc461a723577b2b51b
          Size/MD5:    42744 e15f70e3d00a3a12bdcb17af255499ce
          Size/MD5:    21900 ae96c93286ef3dbf3b62689eb6e068ab
          Size/MD5:    20240 07b2f0bc69a0a507a01b8750c2fde970
          Size/MD5:    43170 151ee4ef6074723c9c8efd1fdd82a866
          Size/MD5:    15502 1d1a723ed535e13ef748a2b725023866

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  2577300 f914dfe03f3a43591eeb5520b7709ff7
          Size/MD5:  5022134 306ae5dfe1480004c3c07646c3145bf5
          Size/MD5:  2530068 2fff02e8f7af2aa4a1e9ed01e242857d
          Size/MD5:   219342 58f872256a4cd111befce8f371f7d62c
          Size/MD5:    24522 c7ed2bde1ca4fb2d38a4819fc0bd077d
          Size/MD5:   355084 dc687ac4adc6aa934659c9083403b219
          Size/MD5:    34362 62621d08e1c7bf0e5a6d23f2956fc352
          Size/MD5:    17996 3fe706eeeca2b5e56f170e943ec6b710
          Size/MD5:     5104 a965464785d5c42ee11a4db2e5e451c2
          Size/MD5:    64832 cc6fe8b5c32be246c7f030214488e6ce
          Size/MD5:    32914 d8e4d6801abe2117a7e8ac02b12fee36
          Size/MD5:    50192 f0a36a53af98c907db09051c4349fa94
          Size/MD5:     8648 c2e1465a899118e77394b62e0a524274
          Size/MD5:     4788 7d97acd059691a235d5df87ea3843219
          Size/MD5:    11462 a0c216965c4c4bdf7849e1fdbb885e3b
          Size/MD5:    33314 47575500e83e67189ec80eb6a5a3af64
          Size/MD5:    17956 4b3183ed42bc18342f4ec3baa2fbaa43
          Size/MD5:    16526 3c8fe3610ff6bf066b4344e95035e90a
          Size/MD5:    36612 2e6899cfc04a8d942dcbe7b7b87db13f
          Size/MD5:    11992 ef323dfa76dfc4b601966914bccba25c

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

          Size/MD5:   131350 86c71f2e2d267f76add93ce88aa191d1
          Size/MD5:     1961 de2640f0e4415bbba1c48c809f7c5696
          Size/MD5:  9705468 0826e231c3148b29fd039d7a8c893ad3

  Architecture independent packages:

          Size/MD5:   355252 a1b98ee5919b7d6854e208def73e1094
          Size/MD5:     1078 db80700d65d5d297a95e0face0f59918

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  2684756 100dc9fc66101c06c9d848dc4019fc99
          Size/MD5:  5231220 a8cf22ca597c2ca3b07f931537226c2a
          Size/MD5:  2640802 c1268195e93dae5c5303ce352ed3f1b7
          Size/MD5:   318178 bd4ccfd355c893b90c25c6edcd8b90c0
          Size/MD5:    25026 df697b1f6b6150760a43bb7e2bf06b87
          Size/MD5:   364308 01b55d2d346a786be52384ec857c5e7b
          Size/MD5:    37222 981976f2522b8dd1c398f6ade499d1cc
          Size/MD5:    17616 e6c317fb9c064d43107896ccdf216a03
          Size/MD5:    20264 6fb07018e620a792499d1e50037a1025
          Size/MD5:     5548 c49a1ce22ecc14d9378a1bdc8b810a40
          Size/MD5:    74414 80959a2bbfb1e7181520ef77d7734c78
          Size/MD5:    37700 2bdade14a4b912086be323e0ea53933a
          Size/MD5:    56190 82ca9ff0cc0cefd495ea59d8f0edbad6
          Size/MD5:     9540 e851a349d648de939b3b73af835b2590
          Size/MD5:     5032 2250e2de3b4b2cd938c6629aa462d61a
          Size/MD5:    12416 04f23c31e07a5fee6ee5e4bbfb5da6c7
          Size/MD5:    39640 2893eb9fa7b19d32f24e2095a8873c14
          Size/MD5:    28670 9648c8b60ffad6086ed910492df36bd3
          Size/MD5:    17884 fb8e87d3f105f82bce5c466e7b65220b
          Size/MD5:    38534 ffdc5929f33d1183a4415abe28442b42
          Size/MD5:    13542 199af56337796f6e76b4aea936514ac1

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  2542990 4294842168d6e6e2362c1cd2864c8e96
          Size/MD5:  5054302 c30bbaabe26568dc2405e239c689f97f
          Size/MD5:  2550116 70498206e3a00fa9db84461091d7780d
          Size/MD5:   314056 f89a6d8cabbc1e6088549d9df0102f56
          Size/MD5:    23636 f2dea7f09166cc16a69cba8efeb3fb97
          Size/MD5:   364350 a3c0255451899207d55f4329bf387450
          Size/MD5:    32808 fe8ab13dd052c7dca7ccf47a167ae848
          Size/MD5:    14760 7fe55e50a929f92da92f5e9cdbdc0f94
          Size/MD5:    18112 22c6055db90569cbb41e5cd4a717c30d
          Size/MD5:     5218 a29a7aba8f06fde8d5fdbb693fc86fba
          Size/MD5:    65242 003114b8d97dd35d435763338b3113f7
          Size/MD5:    34276 1bce95540b91f6ff8c14d10b568cc350
          Size/MD5:    51314 190d3e7a3a4143ba34d7fa1c059b22a8
          Size/MD5:     8622 a0c4fe83562de581eb7841a8f9e1a171
          Size/MD5:     4788 de86ce68a04551c2189c524cc36f697b
          Size/MD5:    11732 2522f8efbdced55d339505a69a263aa6
          Size/MD5:    34364 0e07a5d5d7f7d17f344ef609a463da18
          Size/MD5:    26246 632596d0f4c7dd54388e5aa307e06135
          Size/MD5:    16270 4a1c8ed63b010f47e29571d7708c30ed
          Size/MD5:    35572 31723a8b3b0b949537522c84db37fe2b
          Size/MD5:    12586 522a5e5815d8bf44f5a7c09aaaa7aa23

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:  2524642 f2919b03707c5d6f8afba52abfee46ff
          Size/MD5:  5014634 345cb47b8633e74950e52626b62b5185
          Size/MD5:  2529248 fa71f73c84a1048d2fe64376f6bfeef8
          Size/MD5:   313738 95e7b5762cfabfde067002719f93bc69
          Size/MD5:    23274 06b6e864af23cb54bd48ba2d3b09d389
          Size/MD5:   364338 a6626d3f16a3771613fa7ce6eaf0ed25
          Size/MD5:    32962 d4e14b225bfae609e78a15d7e165af67
          Size/MD5:    15030 51b8098feddda99021e563c932e5cc0c
          Size/MD5:    18102 abee001ae4242323a4755d947051158b
          Size/MD5:     5106 6344a39982933b1e478e4744a07037fc
          Size/MD5:    64310 4860abccef7c191fa9c01de3945739ee
          Size/MD5:    33938 b44d499c441e5e20b00a68cc85b57839
          Size/MD5:    50874 d2d0a2c7ab375787fc9439000012e79d
          Size/MD5:     8642 930259d9e79a11fe6544168f422aa8d2
          Size/MD5:     4724 eb6ff6337b111851ad35df04bf218402
          Size/MD5:    11578 3dde2719d87f2032b808f452aacbf302
          Size/MD5:    33766 6e0f777487d14502058356b96a028d63
          Size/MD5:    26134 bb0d7c9ee566b306eea0e05b856179ed
          Size/MD5:    16056 5a91b00eac70919203dda963bf200c90
          Size/MD5:    35312 ea08ccf2e0ee5ba43077a08207506eea
          Size/MD5:    12438 d0d535ffb03ef5f89a61bfc4c0bed41d

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  2696884 85ce13c6588a44281885602dbb90c47e
          Size/MD5:  5249388 20ef242825eb51623a3f07b5b6b86c5b
          Size/MD5:  2648680 d43ccfd5c59b1cfe1b1383169c0ff959
          Size/MD5:   321182 089d9416dff9ef124c60d3e49e6a3aa9
          Size/MD5:    28238 f1cfb6d6b6dd72cd71ff3a5b8b08e87f
          Size/MD5:   364370 1f9f0a9663dcde410d6d3917429e48b6
          Size/MD5:    38630 789afdcd3c4d5ade78b09042d70de4b0
          Size/MD5:    17624 fc134fc549e450b7d85a5f41110a4a11
          Size/MD5:    21732 abbf4c473c24206575a69188dd176f2c
          Size/MD5:     7670 be5fdbf8451c568de282f6612ba849e0
          Size/MD5:    78008 01bb70211e3c74c0acc6667c0863fff0
          Size/MD5:    41300 441b1af86b3cec483761c0674b94f6d0
          Size/MD5:    59736 30623193d106b09b20b0d6e0830a8828
          Size/MD5:    11160 7a2aef4df2d0252ac45235edf6052d7d
          Size/MD5:     7188 37e32c2664367dcfdcb0a7537069fe6b
          Size/MD5:    14238 73c8c1d1bcff54032afd52400c05a8ac
          Size/MD5:    42386 3cc69af45072f7eabf48f776219f9068
          Size/MD5:    31374 3f778a9b21062e30c7f0adfec89c37fd
          Size/MD5:    20068 315d7413a2e86646aa8fdba3d4f1917c
          Size/MD5:    40474 660a5a2fff1e66e25ec195630eb8cbec
          Size/MD5:    15710 26f3e928ae838b7d26d21daa8adff3e5

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  2567250 2e05da7a8db0171fc6b5782c7c7ab4d9
          Size/MD5:  5024680 44123b5ff291cca7845ec0176f351ee7
          Size/MD5:  2533470 96bac59481ddd782b533a69765c86229
          Size/MD5:   313846 ca52e7c1786a78ade1939aeeaffb34b4
          Size/MD5:    24262 0d33ddf0408caaf655a101400ace4223
          Size/MD5:   364366 e0f243335ed87aa8afc6c9beebe97f2c
          Size/MD5:    33526 ae735d8b71bf2276805076269229f7de
          Size/MD5:    14148 c100b7a686f58f7cee7e5f0542968075
          Size/MD5:    17698 c4040983deae345c29ac9c94bbae382a
          Size/MD5:     5054 af7d66a4cbc732be4d4e2f3823abfcb5
          Size/MD5:    63414 77b338668fe5fffb3adfd351c48fc738
          Size/MD5:    32420 7740b71f5492e22b2fa9f262253e209a
          Size/MD5:    49696 1ade189ddfef42ea71d2350183e9dce4
          Size/MD5:     8476 40b936de43c0d44c55fbe7dfb2e79b68
          Size/MD5:     4742 4fd8ba1c7eaf39b36b7d2e3eb834934a
          Size/MD5:    11544 fe4880c1b0c111087ebb6e1abf324bb1
          Size/MD5:    32802 b1e6c1125366a0634bc7ad206571f054
          Size/MD5:    24956 5238600df6431c4f4ea60cc60c02e85b
          Size/MD5:    16344 682bc76295fea3f53bb8751fff265d32
          Size/MD5:    34748 c87317be93e09f8c942b786d53c9f174
          Size/MD5:    12010 9465a6d77250bbf04eb74812735a9ff3



Ubuntu: PHP vulnerabilities USN-628-1

July 23, 2008

It was discovered that PHP did not properly check the length of the string parameter to the fnmatch function

Summary

Update Instructions

References

Severity
===========================================================

Package Information

Related News