=========================================================== 
Ubuntu Security Notice USN-424-2             March 08, 2007
php5 regression
https://launchpad.net/bugs/87481
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 5.10
Ubuntu 6.06 LTS
Ubuntu 6.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 5.10:
  libapache2-mod-php5                      5.0.5-2ubuntu1.8
  php5-cgi                                 5.0.5-2ubuntu1.8
  php5-cli                                 5.0.5-2ubuntu1.8
  php5-common                              5.0.5-2ubuntu1.8

Ubuntu 6.06 LTS:
  libapache2-mod-php5                      5.1.2-1ubuntu3.6
  php5-cgi                                 5.1.2-1ubuntu3.6
  php5-cli                                 5.1.2-1ubuntu3.6
  php5-common                              5.1.2-1ubuntu3.6

Ubuntu 6.10:
  libapache2-mod-php5                      5.1.6-1ubuntu2.3
  php5-cgi                                 5.1.6-1ubuntu2.3
  php5-cli                                 5.1.6-1ubuntu2.3
  php5-common                              5.1.6-1ubuntu2.3

After a standard system upgrade you need to restart Apache or reboot 
your computer to effect the necessary changes.

Details follow:

USN-424-1 fixed vulnerabilities in PHP.  However, some upstream changes 
were not included, which caused errors in the stream filters.  This 
update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

 Multiple buffer overflows have been discovered in various PHP modules.
 If a PHP application processes untrusted data with functions of the
 session or zip module, or various string functions, a remote attacker
 could exploit this to execute arbitrary code with the privileges of
 the web server. (CVE-2007-0906)

 The sapi_header_op() function had a buffer underflow that could be
 exploited to crash the PHP interpreter. (CVE-2007-0907)

 The wddx unserialization handler did not correctly check for some
 buffer boundaries and had an uninitialized variable. By unserializing
 untrusted data, this could be exploited to expose memory regions that
 were not meant to be accessible. Depending on the PHP application this
 could lead to disclosure of potentially sensitive information.
 (CVE-2007-0908)

 On 64 bit systems (the amd64 and sparc platforms), various print
 functions and the odbc_result_all() were susceptible to a format
 string vulnerability. A remote attacker could exploit this to execute
 arbitrary code with the privileges of the web server. (CVE-2007-0909)

 Under certain circumstances it was possible to overwrite superglobal
 variables (like the HTTP GET/POST arrays) with crafted session data.
 (CVE-2007-0910)

 When unserializing untrusted data on 64-bit platforms the
 zend_hash_init() function could be forced to enter an infinite loop,
 consuming CPU resources, for a limited length of time, until the
 script timeout alarm aborts the script. (CVE-2007-0988)


Updated packages for Ubuntu 5.10:

  Source archives:

          Size/MD5:   116518 f7dbd3bd621283d85f0edbb3210c7256
          Size/MD5:     1707 462bc04bc7ed345e0c26649b3d4c000a
          Size/MD5:  6082082 ae36a2aa35cfaa58bdc5b9a525e6f451

  Architecture independent packages:

          Size/MD5:   173694 77d975dfce5e55abd5e2269b73a4f786
          Size/MD5:     1038 a62fc4e66817ae8c6d806786df8221bc

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:  2013522 3715bd50b956f12629ae2a6c842bc335
          Size/MD5:  3973490 b7b3cf740a90439502fd3623d67f88a0
          Size/MD5:  1997794 05c9c691f86d6af835123a5de03f79dc
          Size/MD5:   129512 227db2238194369292280dcf04523dcb
          Size/MD5:    24030 bf504e4fc48f0c9eadd30819f21db683
          Size/MD5:   218772 34e8c8dab570eeb79d5c823f7336ba79
          Size/MD5:    35568 b2d455800f9c499a786e0de7f0424bb2
          Size/MD5:    20674 e41517d05eba79febbc8086f325e0408
          Size/MD5:     8620 67b985ecf80e98403e0ad1724b87e02f
          Size/MD5:    24478 e12544b588a81723e58ea0e6ffd3e917
          Size/MD5:    29286 2cc7d2c3824658a95aaa1eb8a17144ab
          Size/MD5:    40074 532c75f8f98ff0355db5bca114ef8bb5
          Size/MD5:     8100 b19a083643541a5e4379699fbfe9481b
          Size/MD5:    14470 399854b4a04ade2ab40e45ec37dd3899
          Size/MD5:    28168 681d9f36e1b56a9b9a54cb563328eb12
          Size/MD5:    22222 7fa501834e93014ce3075aba7ff54a7e
          Size/MD5:    41904 84679d9feca81b76ca359774fe1260b9
          Size/MD5:    15108 6ccfed590dc4e0e60ea40a8206b4996f

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:  1869434 ff5a84e6bbb468754aba53e9e7a2feb0
          Size/MD5:  3711800 7e1ba6c72ac595f2faf2e5309f96ee51
          Size/MD5:  1864658 e1a3302ef94baf3685355bef3bc0eba5
          Size/MD5:   129502 a621cec9e5336f52b84a7ef03ecbcdf1
          Size/MD5:    22196 5d54b4379da6e2b58d96b7be1ed583d8
          Size/MD5:   218794 4994f212a937129920fb6df23fb4b2e3
          Size/MD5:    31614 e1031a4d321f1dd798478bac7f1da153
          Size/MD5:    18536 cccec5d8cb8332122a855e456d8623a1
          Size/MD5:     8246 5b1dc23196242984bb193e55cc56495e
          Size/MD5:    21276 eb724649aa41ad6082cac49c732d9c97
          Size/MD5:    26394 c81a979c0788d9a723687569ce490a3d
          Size/MD5:    36044 a473377cc9e7c00224a90979ab1b7be8
          Size/MD5:     7852 87ab0fe4a1ee7501f34a419f7d4d8e0d
          Size/MD5:    13366 36de903ddb2530222c938f8c2fb89f8a
          Size/MD5:    24736 3fe0441e8850e1bed81ffb5efb677596
          Size/MD5:    20114 e4f2dc7c2eb0447def1074b35f3904fd
          Size/MD5:    37488 f8daed913dc67fc9e7a56bfc114e1653
          Size/MD5:    14026 a2af8cf70cf5a2414a714794dbc72402

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:  1984866 6cacbc9982e4abd67522f0bdf1189ef4
          Size/MD5:  3909846 4f8527b0d6146ee80e23cecb68f2d620
          Size/MD5:  1963174 714fcebf55e90d51dc79a877bc0aabc3
          Size/MD5:   129506 5c1018d206288e55364dac03ce303f17
          Size/MD5:    25952 74e14b2e7b7758b51890ccfc13d192f3
          Size/MD5:   218824 0b8abc063d61c96751ccb9d983ef3b19
          Size/MD5:    35492 669b7db95bd0e4c31b9d80f4efbdfc8a
          Size/MD5:    21138 42dbb813083b42f8aa2b6e6195e72701
          Size/MD5:    10006 d5a13e1b092d73bed9f5fdf13358b93c
          Size/MD5:    23960 4479cdbc2678188962f59a45c9249125
          Size/MD5:    29360 4b564041a20b96e6633e1e166b5a81eb
          Size/MD5:    39788 daee3675f53c9cac4deea177b25e5c2e
          Size/MD5:     9512 5861261c0638fe839f04d0034d600dad
          Size/MD5:    15294 2290cfd6a1a01cbf5a6439c7c9f2a92a
          Size/MD5:    28390 03810ab777ef2be3100c6664b82ced02
          Size/MD5:    23186 f9ac5f60506b0d738083cdbaa7047def
          Size/MD5:    40468 1474176f1145c6da7a05f2e5c1804b83
          Size/MD5:    15886 195373f18c7ef935dea68351761052c5

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:  1929346 2a55ca8da2ec42c64ce0ce17df816f5b
          Size/MD5:  3784258 d8b5a92b3f9ac13fb3ff3d68524c1397
          Size/MD5:  1902124 156ba26a9b16b20d6989c536c5df36da
          Size/MD5:   129498 0f9f3436b900f6dd84cda4649159621a
          Size/MD5:    23976 2e8d9ddad1ffa424612758c4e9165e25
          Size/MD5:   218782 24f468192d193b378d455e7a637e9b67
          Size/MD5:    32022 f0e8ea04a78add3ff37ac2fce5520504
          Size/MD5:    18718 248ac49eb611d6217550bc44146dacd0
          Size/MD5:     8162 86959e1e5da9e3a8a3cf528d53b65461
          Size/MD5:    21580 f82ff611b271002892c187533148f8e1
          Size/MD5:    26090 1b00db196e067b5a5f81d6ee47831f97
          Size/MD5:    36998 96ac88467685ecbee65c82230b74bfce
          Size/MD5:     7814 e4b7998fd921579e43f97541462df072
          Size/MD5:    13244 6716008100d1ccbfe86870d8903d008a
          Size/MD5:    25108 998df2b6ef2ccb8222540032a18f74a5
          Size/MD5:    20338 5eb345cdfb663ce61f823f787f9d7c96
          Size/MD5:    37768 65a09a65e943255632fa69ae0e3dd546
          Size/MD5:    13868 b3069f430b3b44526b2b36cd63caa837

Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:   113810 dd65729a26659b699371111cbed6534a
          Size/MD5:     1768 ff848ea8ba9d1f2be278bca5d3f5a110
          Size/MD5:  8064193 b5b6564e8c6a0d5bc1d2b4787480d792

  Architecture independent packages:

          Size/MD5:   301896 e6f04e5762e50d8b2b6f7608cf43f7df
          Size/MD5:     1038 95773caa93a680f94d23b1ae33b45f7e

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:  2432462 366d3f3b5c948b61707f35b169054312
          Size/MD5:  4755392 87c10fadfd3b9aff9aeb1f524ff38925
          Size/MD5:  2386806 4d8c072ca91a2cf21efe4098f7fbca10
          Size/MD5:   133642 d39bf84717c5d95025be81d8fe923063
          Size/MD5:    24618 34e51ddbbc71e7b351ad32179fb5e6c4
          Size/MD5:   312538 ca7972e71db0e109d37bc8f0782efd59
          Size/MD5:    36800 7f5ece4b9c846a889080f0bf84f59df5
          Size/MD5:    22136 56951b014f3c3b2175981b5a1fb88f64
          Size/MD5:     8786 d10e24e1c19238fdbaa2ce323debbcc1
          Size/MD5:    25234 13cae2c7c4baa9eff416674e5afcca8c
          Size/MD5:    43902 1bebd70f4e23123fcc6c1ba08c359437
          Size/MD5:    30132 203a22ee1b6808ef291f9116ceb5a502
          Size/MD5:    44390 364eea49e820e29c6ab6d36c0791833c
          Size/MD5:     8344 033cc7959c5f8148814e5f21bec7b113
          Size/MD5:    15304 a9266eb9fc8b3c4878cfcacc02253944
          Size/MD5:    29188 9fc3b5b2a29a8d34f6fb142c7a1d28d5
          Size/MD5:    22704 eed1488f4f0721ae39981a4b2908a945
          Size/MD5:    42300 b907423b0b397583c7b89f0dbf393c7c
          Size/MD5:    16396 ba25d041a221837216173047a107e4d1

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:  2260140 cadd2922a4cbab02b93c3a8b93ec7bf6
          Size/MD5:  4470258 41c3960c9d749dd726abe31179e29261
          Size/MD5:  2245280 33dcb6181ff30ac9eff1d63a69e91068
          Size/MD5:   133650 a5d4c0f4dc724c52a5f9342172900f2a
          Size/MD5:    22838 11fae23750caf0a3ef8dbb623e8c22f9
          Size/MD5:   312560 fddc0cad8c6fdbed839ea40a2f1140a1
          Size/MD5:    32836 1b89d32c62a978551aabcb3716622918
          Size/MD5:    19796 4de23cdb2a013fb6d930312d1a537974
          Size/MD5:     8374 ae2b87de52739ae896fb4621ffabf6c8
          Size/MD5:    21998 56344802bfc59c6c2f8bb2736714a023
          Size/MD5:    37370 75d6446951987c507f159f6f556bbbaa
          Size/MD5:    27042 0e7a01cc4d5d240ecac6b6ededadc46c
          Size/MD5:    39792 f07ec1e9758c1a699236f2866625dc6c
          Size/MD5:     8058 c3771ed16ce6b6269d6eaeded4555a10
          Size/MD5:    14160 e537a90f844a0c0c43bf0dab10c80393
          Size/MD5:    25634 97661242e7a3a6ab165ae2d138dc1edb
          Size/MD5:    20542 fc60e07c2bca2da912f7b8ad007496a5
          Size/MD5:    37816 0735d68e86a87131178282310f347924
          Size/MD5:    15130 0f0e3f1c5cbade2c84c4e9f720f10177

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:  2396578 4cc7fe06a0578bbc9a7793db293e7e34
          Size/MD5:  4690482 c5ed5eed51fc95ec532af4da020a4e88
          Size/MD5:  2353800 28d3e0b04127ce29d43fa4665fef7649
          Size/MD5:   133640 a1ca18f6883477cdf33aa33f46c9769b
          Size/MD5:    26614 03eb951f8f0c9924d6b69f19f86bc44d
          Size/MD5:   312594 8e583176125c8abb74a39e616977a49a
          Size/MD5:    36432 b545380f9c0c7f98713c21de8fb3ac6a
          Size/MD5:    22548 e64c2c2828de6a5c1253483464fbe0b6
          Size/MD5:    10126 aa2fb0498713652e7efcf9cfb1bf2d3e
          Size/MD5:    24818 67096998be58269ac6fe1e30254171c5
          Size/MD5:    41778 9ed68b418476f33a4d7c75aff5809272
          Size/MD5:    30076 ee962b9f3f6eec23ce83b92525391369
          Size/MD5:    43414 56025e7737e7ab2ab3a2307267dca00d
          Size/MD5:     9792 4e7755a0e9bb3f33610ca504643e35ef
          Size/MD5:    15946 fc4c7aff9cd4977e3856fa560e11da99
          Size/MD5:    29436 ce0088f4dd1610c4339fdd1e822f10fc
          Size/MD5:    23580 92f8ea6e13b52954c7c7e408c71d41d8
          Size/MD5:    40898 defc4389b768abec1d8f47fdc2239db7
          Size/MD5:    17244 4a6eb9d473b580a8daf4b60cc50cfd9c

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:  2322386 042eabfa828a292b0f1427c35a146849
          Size/MD5:  4530892 aa1cb2c9b23150cc61bc9b7af4ba9d3c
          Size/MD5:  2275654 762413f4e997334f83ab385e21258b45
          Size/MD5:   133646 57a451853ef0231f5e800df5f41efcc4
          Size/MD5:    24560 1c585b2f206ec5d8860a6331f36c10fe
          Size/MD5:   312550 70af43881f2d94d350203de12f0e8551
          Size/MD5:    33242 ac1ceb0d2cc4cd31e3b7108fb6f35f55
          Size/MD5:    20092 80f9f3fa79af85302b88bac31bbf54d4
          Size/MD5:     8372 01e3415882f09a8e4dba900369082199
          Size/MD5:    22362 5d5bcb8fb36df3be1daabd6285d03136
          Size/MD5:    38654 2d141fad87c506ac19adba644cfb1c19
          Size/MD5:    26836 b7e25744fc17e3e17433ce47b7acf6f9
          Size/MD5:    40614 5612be92d7eb453d29d95ace7b1922ab
          Size/MD5:     8106 296bdae0fa560357e0cba601471109f8
          Size/MD5:    14052 b1c3de4029225a19ed2c7ff418adfb8c
          Size/MD5:    25964 303e083d5f560ede8d2132c786077f6e
          Size/MD5:    20788 2cd17d476be3cda706eb3fa05c0bc313
          Size/MD5:    38028 ce39cd1911b8cd146ff2328b168cbb25
          Size/MD5:    15082 d441d6235abe88990dc11384da200487

Updated packages for Ubuntu 6.10:

  Source archives:

          Size/MD5:   107479 7d180d00bc62da71934cdb1e13ecf817
          Size/MD5:     1766 21ed2c34115f447ec0bcad613cc45ecb
          Size/MD5:  8187896 04d6166552289eaeff771f5ec953b065

  Architecture independent packages:

          Size/MD5:   305694 18df7f5881e899b6afc68acd45e282a5
          Size/MD5:     1070 450e72489f77db90c8371455fac31291

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:  2429170 26e877f10606e3e3dee0ad5f3bc95655
          Size/MD5:  4722618 03b4be3c2c6313727bd819cf69451021
          Size/MD5:  2384804 4cf63801aa4a75c9861ad3ff2f003f1a
          Size/MD5:   139898 80f4ececf9622e6a6c2923aa7f443363
          Size/MD5:    25826 e7d183bf2c9c3f1bc430ec0d22c028d7
          Size/MD5:   308460 47c093a7a81e3faab7b75a52260f9017
          Size/MD5:    37194 e4978c80286a921ff62753d0171dcd75
          Size/MD5:    22164 513f34aeb27901744e116afc21f5a2f2
          Size/MD5:     8874 037dad99aba32c172c273d64e1b2e92f
          Size/MD5:    25346 ac078728a7c3750f5f3faf87348ccf6b
          Size/MD5:    44268 5bb5d2b7ec8fe51b3b96cb82089b721e
          Size/MD5:    30272 8675e39c6796bba43e335b569a1ddf79
          Size/MD5:    44304 e3bac51448355e4797ccf9be593d9e97
          Size/MD5:     8354 8634aa0116340a3897725ad48e5e1550
          Size/MD5:    15542 c81a3772e4e9e82f30b07977c754d25e
          Size/MD5:    29326 411925fdcf88c977c10257ccdee9b4d8
          Size/MD5:    22878 fbb15b6b5c4852e359e96e347de7f68c
          Size/MD5:    42690 4eca58e4dddc8116bc8df77f2f45f97e
          Size/MD5:    16474 79e46497183d1eebd6ad3b893f79a6a7

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:  2318230 179c500c8e7c2f87bd338d7be97a0848
          Size/MD5:  4578968 9126f89416a242eed33c1a5bceac740b
          Size/MD5:  2304466 b8568170f90df1dc067dbf12a7ffc851
          Size/MD5:   139900 69056528d18c8d4971a5b00903c603e0
          Size/MD5:    24574 4259db29f6ae50ebc24f510baf869397
          Size/MD5:   308482 58073a11cea4f900d9ecfea2d69c1f19
          Size/MD5:    34086 084b942c6123b030565c601f422bb7a6
          Size/MD5:    20324 db6a087587dc2cae9f265ccb404a871f
          Size/MD5:     8630 5f55e30cf76abe7e9eb779ef60d021e2
          Size/MD5:    23106 3120306fae51697681de099a7285bc48
          Size/MD5:    39494 0c3bd231f67301d82995ea83a6b7097b
          Size/MD5:    28402 074a55853f9af1aa966a6fcc2c938e3f
          Size/MD5:    41674 7742074b4cc576052307c36eb400e0e5
          Size/MD5:     8180 a8fea8b773d7e935262d9b6d10be5f35
          Size/MD5:    14628 0034283b12136fd03bc73b2d1ef28e54
          Size/MD5:    26432 09d9918a42cc93a7b99f962280f91319
          Size/MD5:    21488 a7e4db77f6893d1407fa9ccb414b5ab9
          Size/MD5:    39810 a83ff00d0a28123fe0ff932da22d4a92
          Size/MD5:    15492 31622fa630e0e16777d0345d54c33282

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:  2449340 90309539e6bd9d3836bed3f2ad6d542a
          Size/MD5:  4774572 3962544cb575538a14af1172f799662c
          Size/MD5:  2402654 63be9437c15207b0d0f4309393041ebd
          Size/MD5:   139896 49041329cf25fa6280aa33f0145f1232
          Size/MD5:    27778 a5f425db5c6e59f4d414a1d62a2b8fca
          Size/MD5:   308518 d6f0ad2bc3957b622957ba8e1fb704ca
          Size/MD5:    37282 0932279eda51eb0cd3b4fa937bffc375
          Size/MD5:    22822 36ea36d554308267ef49f4c765a755ca
          Size/MD5:    10264 84422f0276be805ea2a6c7fc02e3b016
          Size/MD5:    25370 735ec4ee74dde0eff2ce307669eb4f1b
          Size/MD5:    42604 a7cb9c9e3f3313a31b3bd75bfb2d451f
          Size/MD5:    30462 4e527cc5d0477be79bd8b95a4b8aa00e
          Size/MD5:    44506 3f3f1313038b7a5fbfdd1ed635e3a2e6
          Size/MD5:     9816 fe51bc64e327ab05ec923f4a501c7b46
          Size/MD5:    16162 4f93cc92b80298270f64b94f6be9421a
          Size/MD5:    29562 53dc8d3ac6456554f1c9a320950a2abe
          Size/MD5:    23794 b388ffeed02462f5e1ca42b49d7740aa
          Size/MD5:    41392 92ac4b081a55951f9f1966d07ba6ec65
          Size/MD5:    17282 bdd2005caaaef91057d33e0c966a61f2

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:  2342178 a52bd8c74db2a4ccf607655c0475bbc9
          Size/MD5:  4555930 3ac4db185822c777d63397a6915af796
          Size/MD5:  2296724 faa162d38976d97bbcfaacfcf83e98a1
          Size/MD5:   139908 c7dbd1cfaa303a6aae59e0d78244b6aa
          Size/MD5:    25360 c3f4c24dabbc8156754eb0bd9dfacaf9
          Size/MD5:   308470 3a4df66c93e41144499b4264a4cd210b
          Size/MD5:    34100 317e15047bd594f038b567888e6ef99c
          Size/MD5:    20098 c50f44cb1546a0ab176d23863fdcfd2a
          Size/MD5:     8456 9295addd932df14f2ac0290446c38322
          Size/MD5:    22620 c6a026463a8c8dbd8986f8b2a0cffcb7
          Size/MD5:    39186 fbd135194b8aa1ff9e665417c34a5004
          Size/MD5:    27312 99e5e96217a08e9992ae76e276515973
          Size/MD5:    41220 b82658e62c0e151fe54d11786c3368ae
          Size/MD5:     8096 9ef3dee7b074399997d2f1ddec59da72
          Size/MD5:    14326 6485a83ca14d202c722e14248ad46625
          Size/MD5:    25926 bc25e3db5d98b534c03c0ba99d47a54a
          Size/MD5:    21002 12d5f11dc804bc740485a57cfc310a89
          Size/MD5:    38446 fb0c0005760518b89192ab3f60204aa2
          Size/MD5:    15068 ff61da3d4de17245d8403850f2132aaf