=========================================================== 
Ubuntu Security Notice USN-375-1          November 02, 2006
php5 vulnerability
CVE-2006-5465
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 5.10
Ubuntu 6.06 LTS
Ubuntu 6.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 5.10:
  libapache2-mod-php5                      5.0.5-2ubuntu1.6
  php5-cli                                 5.0.5-2ubuntu1.6

Ubuntu 6.06 LTS:
  libapache2-mod-php5                      5.1.2-1ubuntu3.4
  php5-cli                                 5.1.2-1ubuntu3.4

Ubuntu 6.10:
  libapache2-mod-php5                      5.1.6-1ubuntu2.1
  php5-cli                                 5.1.6-1ubuntu2.1

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

Stefan Esser discovered two buffer overflows in the htmlentities() and
htmlspecialchars() functions. By supplying specially crafted input to
PHP applications which process that input with these functions, a
remote attacker could potentially exploit this to execute arbitrary
code with the privileges of the application. (CVE-2006-5465)

This update also fixes bugs in the chdir() and tempnam() functions,
which did not perform proper open_basedir checks. This could allow
local scripts to bypass intended restrictions.


Updated packages for Ubuntu 5.10:

  Source archives:

          Size/MD5:   112425 63a852d183b72a445768e054979af66e
          Size/MD5:     1707 0286bd32528175488daa0189f97b1d75
          Size/MD5:  6082082 ae36a2aa35cfaa58bdc5b9a525e6f451

  Architecture independent packages:

          Size/MD5:   173670 572a607668c6f5cd2029343bccc4cf2f
          Size/MD5:     1038 c776023995d03e018198575b6393989c

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:  2013148 7c1d4e4812bf88a200fb41829d519b36
          Size/MD5:  3972536 9d125c7504d9549ab43951cae8b221a9
          Size/MD5:  1997138 7ce36c97b659f9a89a1d5545e945cc03
          Size/MD5:   129032 6b8c7e3655e6b47700a7a9e85b5ec637
          Size/MD5:    24022 ccc396ace095952fce2c9f351cb8c0fa
          Size/MD5:   218732 1f147e51c313f480fa21afff7710fa6d
          Size/MD5:    35556 59d0bff85f86103d3ab8452e15ba6b3f
          Size/MD5:    20660 f6590132e23072988585ca437684c475
          Size/MD5:     8612 e9052b945f1c87e2dfa9b6538ce4768e
          Size/MD5:    24468 c473297e7b15de48cdd8142e8bd03d42
          Size/MD5:    29286 16537d4b9080f8a0b34e83427cec39ae
          Size/MD5:    40072 392cdd68f2b97e0ad8d00e04c059a765
          Size/MD5:     8090 702929f3a94280eb9f90e010cb0cfddd
          Size/MD5:    14466 a5f8d8c2f30534a17d39840a50ad8a6a
          Size/MD5:    28150 3d0f62ebf3ac0289a964bc75e18c3961
          Size/MD5:    22216 a9faea6d24aa8aaf56736bea7d247842
          Size/MD5:    41888 e1fe7c9087fca237a2b1cbf1ee48c97e
          Size/MD5:    15098 ce3f8ee0e3139c12a8d732b5ea4b7ad1

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:  1869022 3e273d78ea574862ddd6d3eacffb6369
          Size/MD5:  3710618 f29766401fcd105374fd6ce76f62c3ef
          Size/MD5:  1864542 6472d667da4e17d29abec92269817ac0
          Size/MD5:   129034 cac3e0bddf393fffb1e2c3c539026dea
          Size/MD5:    22190 64005cb5de0568a5a45b6eefa5f3a149
          Size/MD5:   218738 3b6091e09375f5cb0ec2d9cc5cff9752
          Size/MD5:    31602 b2efd4959afa21ff9c3c4d50cd5eb4bd
          Size/MD5:    18528 7db88062fff4ae9a9dba5fc33d80859d
          Size/MD5:     8238 8898e04551171b4dcda845573c169c87
          Size/MD5:    21274 16b158c118f46a66a53b678388c71c08
          Size/MD5:    26378 e9a9b1c7cfca252763f5d91aa15c2a30
          Size/MD5:    36038 013fe03678a136e6058094d2d840972c
          Size/MD5:     7850 628c34168f2c581b58f408e2e203169b
          Size/MD5:    13364 fb9eee4ea7823e697f13ee1d6c4518cc
          Size/MD5:    24730 cc24ee06e9011b2160c3fa0049197d01
          Size/MD5:    20110 98772912220ff2fe3702bb9d28194e05
          Size/MD5:    37482 4e7275442258997bbe4e532d310478c2
          Size/MD5:    14016 77b9ba2030dd1d443d26fe8a34faa01b

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:  1984324 ce8822d237b7ae8997d71abc4965853b
          Size/MD5:  3909066 7455052e03778167d774cdde0afd30b3
          Size/MD5:  1962500 37f0e080cf4a185ad6bf19289977b14d
          Size/MD5:   129020 b6cc7e4976908f001c9dca9fa299355f
          Size/MD5:    25952 8f171dc886ce94ec3eba778950edfca1
          Size/MD5:   218802 f92e0d9cc80a9d29e21b36d4c5c5ce3a
          Size/MD5:    35498 68264013a228f913ebd8d4554edb578d
          Size/MD5:    21134 9dff442759309f74fc00c56f17ee5075
          Size/MD5:    10014 6598755bac3fb3e0ec4ca6f5884b5ad0
          Size/MD5:    23960 9df37e43bd3cc5871c97320f63262790
          Size/MD5:    29360 fffe9449a83268e6e3f96f0425a1ad16
          Size/MD5:    39794 1778173429f135a7a6c2ad2a600aa77f
          Size/MD5:     9508 370222f4c7ffaf2045325b786012e3ae
          Size/MD5:    15302 8ec14d97e02b5d178ae7af3c76fdc2dc
          Size/MD5:    28388 6c5affbf7bb3e86de9a1641fcbcf4e31
          Size/MD5:    23180 38dbe15c2a46f591bd6a445ff3daaf09
          Size/MD5:    40462 b18ab2040b938c4fb5bbee7b64f6d1d5
          Size/MD5:    15880 648f74cf9c47b0f03a6bd4ac8a186802

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:  1928708 bfcbc06c08be2aee52fc7c953fad7dbd
          Size/MD5:  3782750 bfef013b112a238e97c553422711274a
          Size/MD5:  1901712 2ff990abd6849249de741047c6a84b5d
          Size/MD5:   129038 1161097e5de98230edceb6a5a9813a18
          Size/MD5:    23978 524778279c695a8a3b7ebe8528557e71
          Size/MD5:   218768 6547ab30806fd767850f3b149c88b4c4
          Size/MD5:    32022 80c7d3b18ac597879e7c80ee2dabbab1
          Size/MD5:    18714 8218e352977b6c74bc2fe898f4e76228
          Size/MD5:     8162 48a8a89ddbec320081a7f927e4e7352b
          Size/MD5:    21580 521ca13e090357bc5041d9ed5482788b
          Size/MD5:    26088 0d6d897c9b054ff92e3d1c57dcf60851
          Size/MD5:    36988 257ba75e9ee88c1db03065e632cf642e
          Size/MD5:     7816 f3538c589ed84ecc80428c65df44240f
          Size/MD5:    13246 a8e0a7e7b070a465f56ec96a3994a444
          Size/MD5:    25108 f3607a09cf9df54b2c0d9f18ffdee6d4
          Size/MD5:    20338 a19c5ff95d57b092824352965f73d79f
          Size/MD5:    37766 58c98c17c35f39d1f2dcddf866428d39
          Size/MD5:    13876 cc421727493d90a39e808eca51696df5

Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:   107337 5e61cf8630fd7c34a22cfe45d3dd5d65
          Size/MD5:     1768 4aaa25d0641b83142b7da4ad756f2267
          Size/MD5:  8064193 b5b6564e8c6a0d5bc1d2b4787480d792

  Architecture independent packages:

          Size/MD5:   301896 5f42f5128ecb0b75843ec86013439d27
          Size/MD5:     1038 8f717a1439cd0cfa0cd749ea8a8930c7

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:  2431754 1f4492c86978019980d88d7524659f88
          Size/MD5:  4753560 2bd3d436679a22f772527b0fb86ba425
          Size/MD5:  2386552 bf96125fbae579cf724eeec0c62eece8
          Size/MD5:   132940 1ef9d77f10e1af2cda202e30621889f1
          Size/MD5:    24612 bd4e238a44302c54e00536e3859d53c1
          Size/MD5:   312546 3f7d08e40cb03e2c09f18e9ab2a80ccd
          Size/MD5:    36792 782d6178d9fa5e65ded3e623c06abfd8
          Size/MD5:    22132 8aea963ea0bcc399f8ae20a421001df3
          Size/MD5:     8776 0b083082d92a5fbe211c6cbf2c283c05
          Size/MD5:    25232 a6f46ea40a4e105321fc444fe37bd767
          Size/MD5:    43900 927c88c77b139dc7c140bbce78af746c
          Size/MD5:    30146 0b782712bc2be089e61efd0917aa9758
          Size/MD5:    44380 86b9500b35335c9bf8e74310e8603fe5
          Size/MD5:     8344 65898b8d5e6dd35690e0a846ac67d227
          Size/MD5:    15304 1b1191f16a4b20ae487048978199697e
          Size/MD5:    29178 b0aac41d63128d1df4ef021826135bcb
          Size/MD5:    22702 c83d0a023121a73a620f2357223e47d2
          Size/MD5:    42296 0e9106403fd2bc060563b00426ebf719
          Size/MD5:    16386 84a10cfdb9f47561660d3d43a4c9fdec

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:  2259902 edeafe41e7a2d9a6417f07e3a86908ea
          Size/MD5:  4469102 8aa599e3e2af65211df24a42fb1561ce
          Size/MD5:  2245012 2a2e70a5da361cae1bec5175babb14e3
          Size/MD5:   132948 c43cdfc55a605035da8a408f2a62e39a
          Size/MD5:    22842 633d7d2b455ecd263efbef432f7519fc
          Size/MD5:   312558 cf34950842e34bf37f612fe5d9e8e875
          Size/MD5:    32830 b541ca00aea155c2fde90fb252d339e9
          Size/MD5:    19790 5a4321984ca79f9a63a14acdb2236d7d
          Size/MD5:     8366 cebab86002bcc91c11fe7065ede642bd
          Size/MD5:    22000 dbcd29bf48535e511a8f2db34052cf5d
          Size/MD5:    37366 45aa1f61d64474272959905d96e8ec99
          Size/MD5:    27038 ba7217d0807b61968a8b568ae2322853
          Size/MD5:    39790 25d051a2b12140509afe6bcb406f29e2
          Size/MD5:     8056 393a35ea037fbc7cee016ead65944cef
          Size/MD5:    14154 3cd3bfb96c04240afa4b98cce900087e
          Size/MD5:    25634 8b305a8f8e1eeb54a8432ead6aed0336
          Size/MD5:    20538 f20fc05de40e2f3c05953d9e501a5bd5
          Size/MD5:    37814 654654f4e1bc21b815b117d963308ad1
          Size/MD5:    15130 965c63058f75896d2fc423e4b6411371

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:  2396242 5c3a9d6a27aa2c6baa0cb221fb869dfe
          Size/MD5:  4689426 c68ef92aa185a919121cf340f5e16bcc
          Size/MD5:  2353398 6e2b9c3c66edde57d226f9812c7b3264
          Size/MD5:   132934 1d6ef52a93a991798c9c04a1dd76043b
          Size/MD5:    26606 5cfe0a61727df097eab5c9c277066ae0
          Size/MD5:   312580 1f3a337dbd156229613ba87a176bcff4
          Size/MD5:    36432 c5ac32058637865422ee3ebe4de88779
          Size/MD5:    22540 9b204f256cebc847bd97b20390a35bc0
          Size/MD5:    10122 28421ebfb4b9bd77dfd42e818bb39f0b
          Size/MD5:    24816 9554f725f9294b0ef8e85f8c0f9d523c
          Size/MD5:    41784 d3f268522e3bc709bfe12661d908d49e
          Size/MD5:    30088 90ab8f394d212779d42daa303994eb21
          Size/MD5:    43412 54cded2027b481ab565d846c08b8ed80
          Size/MD5:     9792 316013196adbffc45097eea60a676743
          Size/MD5:    15938 ed7ba027fcbacf5bbb2af5a820cb443f
          Size/MD5:    29430 a75632ff1d97b0fbf4b63fe701580064
          Size/MD5:    23578 7c36abcc01f127777fc6a0061853ea51
          Size/MD5:    40896 125ca9af36de2a407c04e119cd6c3369
          Size/MD5:    17232 a75d60382e0eee0568db474eba52866e

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:  2321512 4f3d22282fbe88f6dbe350af94e7bbc9
          Size/MD5:  4530196 847e6859abb34fad9d2697e2ba4a6651
          Size/MD5:  2275026 49e94f2e5891f0346598be0523b42fcd
          Size/MD5:   132944 3082f2de41c9f57bcc08f65fb5ad63d4
          Size/MD5:    24556 b79abfe5e838a9da76456849f409b54b
          Size/MD5:   312576 bf7c9243e16fc15c15873e5aef45772a
          Size/MD5:    33242 7f854075aa658bc792e4af3e9afa107b
          Size/MD5:    20090 7a39b6e6e06be2b0c3a277475241af92
          Size/MD5:     8378 868317f58334e8074f0eaa026d149139
          Size/MD5:    22362 0fa08d70a209b17bd751f5ea040afd91
          Size/MD5:    38650 2a04e2166c4b4eb36fe7c0bcadead8ca
          Size/MD5:    26832 de04a666c006037d3787d5fdd812d22d
          Size/MD5:    40612 29be54916f18c4657f96fd761f8c75ce
          Size/MD5:     8104 f725f29120e00146cd7d9531793eb2e0
          Size/MD5:    14052 3d036f7b740d9670116cf5c6bb80f28a
          Size/MD5:    25966 66e173a982339df4eb915162c2a0160b
          Size/MD5:    20794 4f076b8464e96458578dfb0eef3967f3
          Size/MD5:    38034 de0a45e98a29917ea18b5e92008687c1
          Size/MD5:    15084 7f4461d2841b2243aa8c1b843c646ca5

Updated packages for Ubuntu 6.10:

  Source archives:

          Size/MD5:   100822 26ee53ed42ecec89d45c298c006f200a
          Size/MD5:     1766 c48fdfbb72fa496a97e6752b9ff82954
          Size/MD5:  8187896 04d6166552289eaeff771f5ec953b065

  Architecture independent packages:

          Size/MD5:   305670 c0a9d0ebee7353adc25c548bd536ad36
          Size/MD5:     1070 1d6b9e9e72d331f3cb553a99eba0e66c

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:  2428560 d450bb988e058bf62265f1cb0cffd528
          Size/MD5:  4721970 0ecd26f7a73d8c40599cb1132f169888
          Size/MD5:  2383976 cdeb8881ea6e56c6aab4b98ba06c3cd4
          Size/MD5:   139224 389e249398b411b6fb2079972d957d36
          Size/MD5:    25818 ff68061bc10bbfe7df78d38807acc929
          Size/MD5:   308446 a48b2091bb2db6e96a9dc66e51d91ef2
          Size/MD5:    37200 399d86f7c4ef960e4d14613a11de7759
          Size/MD5:    22156 c3396c2a36a6514cc8034f8a64697703
          Size/MD5:     8866 e0a70b29f6ac71f29fc8309344158d1a
          Size/MD5:    25340 e993086137d525ab208b9f6f171d9839
          Size/MD5:    44264 2e8bf997dd738d07d281143fd0775917
          Size/MD5:    30284 b767ba2d51afdcbd82d677ececb5ae3f
          Size/MD5:    44302 37f838e02af2df22f4ece8c27b625690
          Size/MD5:     8348 f495007e5fe125c6cc9beba87d527609
          Size/MD5:    15532 4233e07e92d9f736433c57137c4ca900
          Size/MD5:    29320 1252aaaf7751ba64ab7a340c695149cc
          Size/MD5:    22874 3a615a46c3a5e36dd18a3016cfb246d3
          Size/MD5:    42684 b2e7f3692b160b456654cfcb1b7bd981
          Size/MD5:    16464 0679728d0dabb655054e82558b37e048

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:  2317640 fe7cba7cfcbc97b61e2646fa4797e609
          Size/MD5:  4578658 bf329a9f26b0340458d4c781f92a2da1
          Size/MD5:  2304304 e95ede138a7531368521f0cfa1470315
          Size/MD5:   139226 ac3cb275ad8e6db55bcf7d78883b9187
          Size/MD5:    24580 5ed19d26fa5599ccb6133eb84251a49d
          Size/MD5:   308478 2eee5f649195249c7e4ff56103cf8394
          Size/MD5:    34086 6034a6ae0615a770c1af93b6752eb2af
          Size/MD5:    20320 dffe3a2e3cc58cb426ecfd5679c54bb3
          Size/MD5:     8630 13ee2f57f00509e1c7af321753a57f94
          Size/MD5:    23108 dc0586b679171e0fa4662e1859029af0
          Size/MD5:    39496 5372c04989306c55a14e9b6a26eaa752
          Size/MD5:    28406 0b2d24430bd3b773bae003667640dc66
          Size/MD5:    41672 7f9727aea8b1cfe20cb9b418866fbea3
          Size/MD5:     8180 72a34323daf16551b2b4029bca826b32
          Size/MD5:    14626 e094be832e9e1d9dd5ef31ea3bc530c1
          Size/MD5:    26438 56bc7358f0204ac1e9d64774be9ade67
          Size/MD5:    21492 4cdc6b7a5195ec7bc801b3c09444e1b6
          Size/MD5:    39808 b698a1e7a035d9aa9709d60c6c2ad69c
          Size/MD5:    15492 95ae1bb2404dc4e91c360348fdc762d0

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:  2448712 2ef089eea006803f85235a841e77740f
          Size/MD5:  4773878 863af9569bf619843bb5cbc0a9519dd2
          Size/MD5:  2402370 5e5413660e478b17e83df7dbef79b065
          Size/MD5:   139230 caa37da353e2cae774981a8e03418bd7
          Size/MD5:    27776 8ebea64a3fecd2760c0334ac7c43a8b6
          Size/MD5:   308516 16d222e1d64aaf86f78defa941df089a
          Size/MD5:    37290 faa5feeae92860967549c36309b5925f
          Size/MD5:    22814 67df3c3e0055f5bb8774e71d0fb421ea
          Size/MD5:    10264 4ca9cf83d5e75e52f0f106fb0d8df8bf
          Size/MD5:    25374 39e6a5344152345770e7f986990d097b
          Size/MD5:    42614 5a1c8eb62e3d1389ea767f27cfb6d02f
          Size/MD5:    30458 99c090f970b0de98e7246bb54a74f250
          Size/MD5:    44514 3776bb9b6a4f70f00289fdfa22924ea4
          Size/MD5:     9820 6d8694796ba7cd84c269770bc8f228e0
          Size/MD5:    16156 88f823b7f2849c8944d99b6803e43a48
          Size/MD5:    29562 a18ff8adf9271e5a73a20ebf7214d436
          Size/MD5:    23792 151a2f684125205c9a39adf950d384c2
          Size/MD5:    41386 3db2da7db60485d33011f44970738dc2
          Size/MD5:    17286 7439c15dbfea57c04e33a2e7eae24eb7

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:  2341888 b6d9d7bda9d8a038b7c87b4fc3c84393
          Size/MD5:  4554856 19b366ca7e9b3751384691e843e564bc
          Size/MD5:  2296212 3d015b3243bf52d04cddd6113a93bbf0
          Size/MD5:   139222 d5b16b8c8e4404dee33e1e13db88868c
          Size/MD5:    25354 09b2efaffe92467939a4d4a692a48f02
          Size/MD5:   308472 0fae8a44c85d743c110ed6fb94ff1c27
          Size/MD5:    34098 f9cd60b4fe93d9c1e6b6c4ffb5037913
          Size/MD5:    20096 db338ddc6dd9c496fbe29c058301053b
          Size/MD5:     8456 4e37b1971a9ba1bc2757562320b39890
          Size/MD5:    22622 e66998b4f5fc9cfde3e45e3d8fb40b4c
          Size/MD5:    39196 5c3a82b3d47b9e188d981226ac91ab48
          Size/MD5:    27308 155c08380f6a52fc1b51adab038cfcb0
          Size/MD5:    41218 06177dc100b31577f73c72cfa91bfce9
          Size/MD5:     8094 07bde5082674ffcd2bd9ed4fe879cb96
          Size/MD5:    14320 58f7446f256c415f57c6cbc347d20f0b
          Size/MD5:    25926 6c45af577d1702100e13dbd6064c968a
          Size/MD5:    21002 14146b593b5cb1fbeb96d2785334d2d4
          Size/MD5:    38446 d2ab91291905b26f952f2eff0acfb09e
          Size/MD5:    15064 898a9d99352edbba92a3a71108f1f7fd