WINDOWS CENTER: November 2009

Send ubuntu-security-announce mailing list submissions to
ubuntu-security-announce@lists.ubuntu.com

To subscribe or unsubscribe via the World Wide Web, visit
https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
or, via email, send a message with subject or body 'help' to
ubuntu-security-announce-request@lists.ubuntu.com

You can reach the person managing the list at
ubuntu-security-announce-owner@lists.ubuntu.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of ubuntu-security-announce digest..."

Today's Topics:

1. [USN-861-1] libvorbis vulnerabilities (Marc Deslauriers)
2. [USN-862-1] PHP vulnerabilities (Marc Deslauriers)

----------------------------------------------------------------------

Message: 1
Date: Tue, 24 Nov 2009 09:31:12 -0500
From: Marc Deslauriers <marc.deslauriers@canonical.com>
Subject: [USN-861-1] libvorbis vulnerabilities
To: ubuntu-security-announce@lists.ubuntu.com
Cc: full-disclosure@lists.grok.org.uk, bugtraq@securityfocus.com
Message-ID: <1259073072.22112.19.camel@mdlinux.technorage.com>
Content-Type: text/plain; charset="utf-8"

===========================================================
Ubuntu Security Notice USN-861-1 November 24, 2009
libvorbis vulnerabilities
CVE-2008-2009, CVE-2009-3379
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04
Ubuntu 9.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 8.04 LTS:
libvorbis0a 1.2.0.dfsg-2ubuntu0.3

Ubuntu 8.10:
libvorbis0a 1.2.0.dfsg-3.1ubuntu0.8.10.2

Ubuntu 9.04:
libvorbis0a 1.2.0.dfsg-3.1ubuntu0.9.04.2

Ubuntu 9.10:
libvorbis0a 1.2.0.dfsg-6ubuntu0.1

After a standard system upgrade you need to restart any applications that
use libvorbis, such as Totem and gtkpod, to effect the necessary changes.

Details follow:

It was discovered that libvorbis did not correctly handle ogg files with
underpopulated Huffman trees. If a user were tricked into opening a
specially crafted ogg file with an application that uses libvorbis, an
attacker could cause a denial of service. (CVE-2008-2009)

It was discovered that libvorbis did not correctly handle certain malformed
ogg files. If a user were tricked into opening a specially crafted ogg file
with an application that uses libvorbis, an attacker could cause a denial
of service or possibly execute arbitrary code with the user's privileges.
(CVE-2009-3379)

Updated packages for Ubuntu 8.04 LTS:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis_1.2.0.dfsg-2ubuntu0.3.diff.gz
Size/MD5: 12991 d7ac1cea7fd18471b0366844c4f2d434
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis_1.2.0.dfsg-2ubuntu0.3.dsc
Size/MD5: 937 b9ab7e79ef09dbe4cc523245a179853c
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis_1.2.0.dfsg.orig.tar.gz
Size/MD5: 1477935 3c7fff70c0989ab3c1c85366bf670818

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-2ubuntu0.3_amd64.deb
Size/MD5: 476030 a96358bb558f637d96a4354101f9bb2c
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-2ubuntu0.3_amd64.deb
Size/MD5: 104488 5463be3057e6f7e8db31b1acf3c8502d
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-2ubuntu0.3_amd64.deb
Size/MD5: 94894 2c21a6d370070b7d12bed48f96036463
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-2ubuntu0.3_amd64.deb
Size/MD5: 19630 a5a80fc2df2729b88590addfe3982cfb

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-2ubuntu0.3_i386.deb
Size/MD5: 456398 9e41b7ea54511a6b6127c5c643eddb1e
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-2ubuntu0.3_i386.deb
Size/MD5: 99448 ffc9abdb63cc0312fef0566473f4c13d
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-2ubuntu0.3_i386.deb
Size/MD5: 76726 8dc17f35d4699557bff77dc8a2673de8
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-2ubuntu0.3_i386.deb
Size/MD5: 20402 cc111d8b13c33c5b03a364b0d1bb95d1

lpia architecture (Low Power Intel Architecture):

http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-2ubuntu0.3_lpia.deb
Size/MD5: 458366 c2d4e954201ef68cc3d241a7dda3ea93
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-2ubuntu0.3_lpia.deb
Size/MD5: 100038 b371e7f6d202b427614a656cd618e407
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-2ubuntu0.3_lpia.deb
Size/MD5: 76912 b219d40cdaadb9aa368b4e3449a0de0b
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-2ubuntu0.3_lpia.deb
Size/MD5: 20406 cc10625815d7cb3516ad3e2e7325e7f8

powerpc architecture (Apple Macintosh G3/G4/G5):

http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-2ubuntu0.3_powerpc.deb
Size/MD5: 485154 86ff174f93f9000e89aa84ae7ba8e702
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-2ubuntu0.3_powerpc.deb
Size/MD5: 109396 5e52e396225668911249ad4840ba89d2
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-2ubuntu0.3_powerpc.deb
Size/MD5: 84090 053277cac971a8dd5854b25bc82f1275
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-2ubuntu0.3_powerpc.deb
Size/MD5: 24256 7b644a68479f137d1c31cb7bc6e11239

sparc architecture (Sun SPARC/UltraSPARC):

http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-2ubuntu0.3_sparc.deb
Size/MD5: 462624 43611553a9ff71736ad1829ee2d48ee6
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-2ubuntu0.3_sparc.deb
Size/MD5: 100454 5d94a781fafacdb33752fbe8c687f4a6
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-2ubuntu0.3_sparc.deb
Size/MD5: 81230 e7c3fcb35cd9f255af91fb850fce7718
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-2ubuntu0.3_sparc.deb
Size/MD5: 19678 5c6725ecf7ad2f5697ddd80ec7181d99

Updated packages for Ubuntu 8.10:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis_1.2.0.dfsg-3.1ubuntu0.8.10.2.diff.gz
Size/MD5: 14099 3b381e5b9d4ff995371549d0f4049b17
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis_1.2.0.dfsg-3.1ubuntu0.8.10.2.dsc
Size/MD5: 1391 f693d0a5b8d382d11eafee3eeaec74b5
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis_1.2.0.dfsg.orig.tar.gz
Size/MD5: 1477935 3c7fff70c0989ab3c1c85366bf670818

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-3.1ubuntu0.8.10.2_amd64.deb
Size/MD5: 479892 fa93b658c3490a316a40440d66791937
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-3.1ubuntu0.8.10.2_amd64.deb
Size/MD5: 109252 ef6627a20fb4892a1069ded79fe379be
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-3.1ubuntu0.8.10.2_amd64.deb
Size/MD5: 96200 4fe223431c6c290695ae9c27fac0966a
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-3.1ubuntu0.8.10.2_amd64.deb
Size/MD5: 20768 cb51f1c14be4d5bd735bc2ac74c4084f

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-3.1ubuntu0.8.10.2_i386.deb
Size/MD5: 460236 8d03a67ad77c3065462e07bfac250e79
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-3.1ubuntu0.8.10.2_i386.deb
Size/MD5: 102638 29966392d03df0d2523aa3177434a158
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-3.1ubuntu0.8.10.2_i386.deb
Size/MD5: 77906 10ad5e56f23d2b8f4ebb385df163b676
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-3.1ubuntu0.8.10.2_i386.deb
Size/MD5: 21822 877561be88e24e6de4874c393257ba62

lpia architecture (Low Power Intel Architecture):

http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-3.1ubuntu0.8.10.2_lpia.deb
Size/MD5: 462006 8e817bd23febab8094cd11e99864bc92
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-3.1ubuntu0.8.10.2_lpia.deb
Size/MD5: 103306 3d377b2b715e457858f7a3afa72e3a34
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-3.1ubuntu0.8.10.2_lpia.deb
Size/MD5: 78054 87197ab70eab21d293d06a03b925a30a
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-3.1ubuntu0.8.10.2_lpia.deb
Size/MD5: 21654 916bdeadfed79e9521fc44c10f414f23

powerpc architecture (Apple Macintosh G3/G4/G5):

http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-3.1ubuntu0.8.10.2_powerpc.deb
Size/MD5: 491454 62a722a76f9169182787e6646a01549b
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-3.1ubuntu0.8.10.2_powerpc.deb
Size/MD5: 115404 d951d55225968eebf9464d18f6faab2f
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-3.1ubuntu0.8.10.2_powerpc.deb
Size/MD5: 85524 cb9fa0eff43344cbcd177c44455ca863
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-3.1ubuntu0.8.10.2_powerpc.deb
Size/MD5: 25540 6252523c4b9cb8e91af913dfa94a4509

sparc architecture (Sun SPARC/UltraSPARC):

http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-3.1ubuntu0.8.10.2_sparc.deb
Size/MD5: 465890 7bb9b029adab1877f2ae9b66ad650da6
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-3.1ubuntu0.8.10.2_sparc.deb
Size/MD5: 105036 b5efdeab1f1ae5bf0f68032fae4de733
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-3.1ubuntu0.8.10.2_sparc.deb
Size/MD5: 82522 217424eb3438493636c8e2e2e947a951
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-3.1ubuntu0.8.10.2_sparc.deb
Size/MD5: 21210 fe7a01c235dcde80427cdc1c4218c650

Updated packages for Ubuntu 9.04:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis_1.2.0.dfsg-3.1ubuntu0.9.04.2.diff.gz
Size/MD5: 14106 806c51558b40e8a0173258e322126dfc
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis_1.2.0.dfsg-3.1ubuntu0.9.04.2.dsc
Size/MD5: 1391 8237287820fda9e5caaf1645917012a9
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis_1.2.0.dfsg.orig.tar.gz
Size/MD5: 1477935 3c7fff70c0989ab3c1c85366bf670818

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-3.1ubuntu0.9.04.2_amd64.deb
Size/MD5: 479954 ed840c38ac73f07d2594485992810cf3
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-3.1ubuntu0.9.04.2_amd64.deb
Size/MD5: 109254 fa9ecb0116a031ea24c068f7c104a6c5
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-3.1ubuntu0.9.04.2_amd64.deb
Size/MD5: 96190 92cce557b7dc8367962bd71f5d2e16ed
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-3.1ubuntu0.9.04.2_amd64.deb
Size/MD5: 20752 b092b5312c1fdc3ca3b68efb67c6d788

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-3.1ubuntu0.9.04.2_i386.deb
Size/MD5: 460350 dcab6f09451ee399e6c3718fd7a290b4
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-3.1ubuntu0.9.04.2_i386.deb
Size/MD5: 102774 c0294bc33be421dc97b5a41f0962a305
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-3.1ubuntu0.9.04.2_i386.deb
Size/MD5: 77908 4f631989517676b33426d8196ce86089
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-3.1ubuntu0.9.04.2_i386.deb
Size/MD5: 21798 fd715839d6a485a560dc4ba3d6bd25f9

lpia architecture (Low Power Intel Architecture):

http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-3.1ubuntu0.9.04.2_lpia.deb
Size/MD5: 462086 df504130bd6ba53055514188ae319608
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-3.1ubuntu0.9.04.2_lpia.deb
Size/MD5: 103382 81883010e7f156576925e34ee1bf3650
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-3.1ubuntu0.9.04.2_lpia.deb
Size/MD5: 78050 4b0c1e4270759a4ebb0a4a3b3e819921
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-3.1ubuntu0.9.04.2_lpia.deb
Size/MD5: 21628 f598818f8da06a03e82811d325a0d6aa

powerpc architecture (Apple Macintosh G3/G4/G5):

http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-3.1ubuntu0.9.04.2_powerpc.deb
Size/MD5: 491462 de9941dcdf7fbcce2ce1771157283b41
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-3.1ubuntu0.9.04.2_powerpc.deb
Size/MD5: 115408 bf40900dd80d91fc9ba0da14079ba8ba
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-3.1ubuntu0.9.04.2_powerpc.deb
Size/MD5: 85526 476aadeedd5fe54e094dd754eaf67a1a
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-3.1ubuntu0.9.04.2_powerpc.deb
Size/MD5: 25534 2ce93cbcb6112d91c6b9099cb1f750ce

sparc architecture (Sun SPARC/UltraSPARC):

http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-3.1ubuntu0.9.04.2_sparc.deb
Size/MD5: 465896 ab3725414d6572e1d7297a9374aa29c7
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-3.1ubuntu0.9.04.2_sparc.deb
Size/MD5: 105040 70accc7b795a5d0871ba555377860b77
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-3.1ubuntu0.9.04.2_sparc.deb
Size/MD5: 82470 e9e0d296fac9c00496f07d743c52c7a9
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-3.1ubuntu0.9.04.2_sparc.deb
Size/MD5: 21170 efa8d7e1d2a14f843d14f80dae9c755c

Updated packages for Ubuntu 9.10:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis_1.2.0.dfsg-6ubuntu0.1.diff.gz
Size/MD5: 14077 1472bf5d0d81031673a907939ca5e13f
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis_1.2.0.dfsg-6ubuntu0.1.dsc
Size/MD5: 1240 06738b4c14538449ec70061555bd5b95
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis_1.2.0.dfsg.orig.tar.gz
Size/MD5: 1477935 3c7fff70c0989ab3c1c85366bf670818

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-6ubuntu0.1_amd64.deb
Size/MD5: 481960 03bdebc10b57dff61913983f7e2c6b12
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-6ubuntu0.1_amd64.deb
Size/MD5: 110800 1cd3c19e86f96a82543f00ecc200e450
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-6ubuntu0.1_amd64.deb
Size/MD5: 96410 fd88dda1df522a5e4caa3a51f0af75ea
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-6ubuntu0.1_amd64.deb
Size/MD5: 21064 f0206b2785ab195deddfbe3c551c1d53

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-6ubuntu0.1_i386.deb
Size/MD5: 460010 a465712a5dee205bb3572c69882d84b3
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-6ubuntu0.1_i386.deb
Size/MD5: 102444 335555688456137832536be14bc89c30
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-6ubuntu0.1_i386.deb
Size/MD5: 78058 3528e4ca888274ae7c081425238d80f4
http://security.ubuntu.com/ubuntu/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-6ubuntu0.1_i386.deb
Size/MD5: 22528 3e089ed25e17995ad21e0f9e48e2c192

lpia architecture (Low Power Intel Architecture):

http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-6ubuntu0.1_lpia.deb
Size/MD5: 461842 ca8cae4e451a3c39c8485d784a762688
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-6ubuntu0.1_lpia.deb
Size/MD5: 103222 3372e8291fe8cbf4fb10ff8cef8daf46
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-6ubuntu0.1_lpia.deb
Size/MD5: 78064 67727a08216b600b5a355e1a6c4a2723
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-6ubuntu0.1_lpia.deb
Size/MD5: 22282 f8c2669196b70ae210155d5c49127c8e

powerpc architecture (Apple Macintosh G3/G4/G5):

http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
Size/MD5: 491998 f7edf9891a62bdaf437d24c012c0995a
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
Size/MD5: 113120 3d8780b8b7983e7dac75c021a53a6b9d
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
Size/MD5: 84114 a03a7b5b903cd91a3f9ac799ea3c8b91
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
Size/MD5: 23840 56dda24b70b6717c7117bbec29d4e3fe

sparc architecture (Sun SPARC/UltraSPARC):

http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis-dev_1.2.0.dfsg-6ubuntu0.1_sparc.deb
Size/MD5: 466488 2fd2ffcbb529131155b0f05fba03f376
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbis0a_1.2.0.dfsg-6ubuntu0.1_sparc.deb
Size/MD5: 106288 1d69667318f1e5deece70dc1af2dafac
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisenc2_1.2.0.dfsg-6ubuntu0.1_sparc.deb
Size/MD5: 82834 0a22a390ed4456a001a5b75db9394916
http://ports.ubuntu.com/pool/main/libv/libvorbis/libvorbisfile3_1.2.0.dfsg-6ubuntu0.1_sparc.deb
Size/MD5: 21412 354a11cb80e57366d473c1f490210a26

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
Url : https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20091124/22741b59/attachment-0001.pgp

------------------------------

Message: 2
Date: Thu, 26 Nov 2009 15:37:54 -0500
From: Marc Deslauriers <marc.deslauriers@canonical.com>
Subject: [USN-862-1] PHP vulnerabilities
To: ubuntu-security-announce@lists.ubuntu.com
Cc: full-disclosure@lists.grok.org.uk, bugtraq@securityfocus.com
Message-ID: <1259267874.22112.42.camel@mdlinux.technorage.com>
Content-Type: text/plain; charset="utf-8"

===========================================================
Ubuntu Security Notice USN-862-1 November 26, 2009
php5 vulnerabilities
CVE-2008-7068, CVE-2009-3291, CVE-2009-3292, CVE-2009-3557,
CVE-2009-3558, CVE-2009-4017, CVE-2009-4018
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04
Ubuntu 9.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
libapache2-mod-php5 5.1.2-1ubuntu3.17
php5-cgi 5.1.2-1ubuntu3.17
php5-cli 5.1.2-1ubuntu3.17

Ubuntu 8.04 LTS:
libapache2-mod-php5 5.2.4-2ubuntu5.9
php5-cgi 5.2.4-2ubuntu5.9
php5-cli 5.2.4-2ubuntu5.9

Ubuntu 8.10:
libapache2-mod-php5 5.2.6-2ubuntu4.5
php5-cgi 5.2.6-2ubuntu4.5
php5-cli 5.2.6-2ubuntu4.5

Ubuntu 9.04:
libapache2-mod-php5 5.2.6.dfsg.1-3ubuntu4.4
php5-cgi 5.2.6.dfsg.1-3ubuntu4.4
php5-cli 5.2.6.dfsg.1-3ubuntu4.4

Ubuntu 9.10:
libapache2-mod-php5 5.2.10.dfsg.1-2ubuntu6.3
php5-cgi 5.2.10.dfsg.1-2ubuntu6.3
php5-cli 5.2.10.dfsg.1-2ubuntu6.3

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

Maksymilian Arciemowicz discovered that PHP did not properly validate
arguments to the dba_replace function. If a script passed untrusted input
to the dba_replace function, an attacker could truncate the database. This
issue only applied to Ubuntu 6.06 LTS, 8.04 LTS, and 8.10. (CVE-2008-7068)

It was discovered that PHP's php_openssl_apply_verification_policy
function did not correctly handle SSL certificates with zero bytes in the
Common Name. A remote attacker could exploit this to perform a man in the
middle attack to view sensitive information or alter encrypted
communications. (CVE-2009-3291)

It was discovered that PHP did not properly handle certain malformed images
when being parsed by the Exif module. A remote attacker could exploit this
flaw and cause the PHP server to crash, resulting in a denial of service.
(CVE-2009-3292)

Grzegorz Stachowiak discovered that PHP did not properly enforce
restrictions in the tempnam function. An attacker could exploit this issue
to bypass safe_mode restrictions. (CVE-2009-3557)

Grzegorz Stachowiak discovered that PHP did not properly enforce
restrictions in the posix_mkfifo function. An attacker could exploit this
issue to bypass open_basedir restrictions. (CVE-2009-3558)

Bogdan Calin discovered that PHP did not limit the number of temporary
files created when handling multipart/form-data POST requests. A remote
attacker could exploit this flaw and cause the PHP server to consume all
available resources, resulting in a denial of service. (CVE-2009-4017)

ATTENTION: This update changes previous PHP behaviour by limiting the
number of files in a POST request to 50. This may be increased by adding a
"max_file_uploads" directive to the php.ini configuration file.

It was discovered that PHP did not properly enforce restrictions in the
proc_open function. An attacker could exploit this issue to bypass
safe_mode_protected_env_vars restrictions and possibly execute arbitrary
code with application privileges. (CVE-2009-4018)

Updated packages for Ubuntu 6.06 LTS:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5_5.1.2-1ubuntu3.17.diff.gz
Size/MD5: 140956 db920f723c2d94bec20c3f19448c5f03
http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5_5.1.2-1ubuntu3.17.dsc
Size/MD5: 1776 b983bbb57af1f91eeb1e0e96605a8fbd
http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5_5.1.2.orig.tar.gz
Size/MD5: 8064193 b5b6564e8c6a0d5bc1d2b4787480d792

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/p/php5/php-pear_5.1.2-1ubuntu3.17_all.deb
Size/MD5: 302008 0d00445a02e7ebc78324f18e9a47e383
http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5_5.1.2-1ubuntu3.17_all.deb
Size/MD5: 1038 d9e19c100862ebfd1c3e560940db989e

amd64 architecture (Athlon64, Opteron, EM64T Xeon):