=========================================================== 
Ubuntu Security Notice USN-462-1               May 22, 2007
php5 vulnerabilities
CVE-2007-2509, CVE-2007-2510, CVE-2007-2511, CVE-2007-2519
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 6.10
Ubuntu 7.04

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libapache2-mod-php5                      5.1.2-1ubuntu3.8
  php-pear                                 5.1.2-1ubuntu3.8
  php5-cgi                                 5.1.2-1ubuntu3.8
  php5-cli                                 5.1.2-1ubuntu3.8
  php5-xmlrpc                              5.1.2-1ubuntu3.8

Ubuntu 6.10:
  libapache2-mod-php5                      5.1.6-1ubuntu2.5
  php-pear                                 5.1.6-1ubuntu2.5
  php5-cgi                                 5.1.6-1ubuntu2.5
  php5-cli                                 5.1.6-1ubuntu2.5
  php5-xmlrpc                              5.1.6-1ubuntu2.5

Ubuntu 7.04:
  libapache2-mod-php5                      5.2.1-0ubuntu1.2
  php-pear                                 5.2.1-0ubuntu1.2
  php5-cgi                                 5.2.1-0ubuntu1.2
  php5-cli                                 5.2.1-0ubuntu1.2
  php5-xmlrpc                              5.2.1-0ubuntu1.2

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

A flaw was discovered in the FTP command handler in PHP.  Commands were
not correctly filtered for control characters.  An attacker could issue
arbitrary FTP commands using specially crafted arguments.  (CVE-2007-2509)

Ilia Alshanetsky discovered a buffer overflow in the SOAP request handler
in PHP.  Remote attackers could send a specially crafted SOAP request
and execute arbitrary code with web server privileges.  (CVE-2007-2510)

Ilia Alshanetsky discovered a buffer overflow in the user filter factory
in PHP.  A local attacker could create a specially crafted script and
execute arbitrary code with web server privileges.  (CVE-2007-2511)

Gregory Beaver discovered that the PEAR installer did not validate
installation paths.  If a user were tricked into installing a malicious
PEAR package, an attacker could overwrite arbitrary files.  (CVE-2007-2519)


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:   119147 f46662ebb5480294691cff6b9b6c9ef8
          Size/MD5:     1766 111134ae46b8398588243e483de15bb0
          Size/MD5:  8064193 b5b6564e8c6a0d5bc1d2b4787480d792

  Architecture independent packages:

          Size/MD5:   301998 66823bf875cf3e595ccf65eb0c448275
          Size/MD5:     1040 314f5d15a22de997c9b2866738ffd8cb

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:  2432772 f4213030ad140b31fad18901491c2df7
          Size/MD5:  4756232 0a0443e9579ecf972673704ba597e4ef
          Size/MD5:  2387358 f71ab2a79f64b82643db179a6cb767fa
          Size/MD5:   134206 bc5073be6b8be57ee72297c6650ef78c
          Size/MD5:    24622 43eacbbd63b34fe715586a9e59f823c3
          Size/MD5:   312538 49b1de0d9f485ea96f2ced18e1f48454
          Size/MD5:    36802 6b3d8c480694414c79b66a1d388b4434
          Size/MD5:    22146 9d9df1b55a42d3650a215443ac45a398
          Size/MD5:     8786 48d31a87745a4fb50453010c08eb812e
          Size/MD5:    25246 b3e97549a3a84b9362bd974fe03a57dd
          Size/MD5:    43904 7d631bee559c7d5bdae57ef46ae39df8
          Size/MD5:    30132 79db85349b9225d7db0e487024e35a8e
          Size/MD5:    44388 0714d96b8fe4913842bbff4d75a5dd78
          Size/MD5:     8342 aef395298a7dc6cd2758e49561336020
          Size/MD5:    15310 58c29449d8c67f986e875ec8136fde91
          Size/MD5:    29152 e67d8979e575ac5fc635755cea82c8cb
          Size/MD5:    22712 75c0cdf252ba4b9c977c706275624ae8
          Size/MD5:    42304 226179b85bfa3a251dafb0c5757e48e0
          Size/MD5:    16390 9d08779908263d9b72e236d823d00954

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:  2261110 a5fbd2410f20f4bb85df6a0d0e69249e
          Size/MD5:  4471038 58c9ae23c425c1a7c940ae5eb349254e
          Size/MD5:  2245598 3fc9eca2c431ec08aa45f87e9cd05dc0
          Size/MD5:   134216 57a326aacdb4459250a3a5bb21a52dff
          Size/MD5:    22842 ce88bf9de364ebd8ce4e2e6afabc2d4e
          Size/MD5:   312568 8f6b2174879aa9645b49bb85c60c6520
          Size/MD5:    32830 6cc651673918b105ed7550ee62fccf41
          Size/MD5:    19794 3c73e0cf413ed81674da586a3d03385f
          Size/MD5:     8368 e62bcddc47f8e35e76d26a11ceda02e9
          Size/MD5:    22000 f4a1b6afbe6703dab9b495605b1c30c1
          Size/MD5:    37360 5f0324a0aa303a04bc05cda51d200802
          Size/MD5:    27038 074b2b9160af499a58fc43335bb1be45
          Size/MD5:    39786 24659110557d6cd2ae8bf2b94ab51361
          Size/MD5:     8050 1bfb27f5db924ee7d51c2da6be685094
          Size/MD5:    14156 feca1b1b1dd77e67f3a1dba81b00bfc4
          Size/MD5:    25596 dd14b0c2e9d331cb75fadde39d165aa8
          Size/MD5:    20534 bf9c69fc994c679473bc488cd9386448
          Size/MD5:    37808 8c3872915497c97edcc13a8d4c68bb57
          Size/MD5:    15128 a5f4509614e4f30208396b8789352fe9

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:  2397012 eed4695834ddbc07c1db29ea699de4da
          Size/MD5:  4691020 ffd2a03bcfcce81fdec4e9a97e00cc64
          Size/MD5:  2354394 2efb044186a0d8922d7c65ae977dda74
          Size/MD5:   134216 b9898d9207692e6873c6fa65720e59fd
          Size/MD5:    26616 da5a175f04e57be8519d36a045c765b7
          Size/MD5:   312598 041c5d7e77e62be9ed4a61b3059df1d9
          Size/MD5:    36440 f0d4e86eb631715c4f5f6d261d13f491
          Size/MD5:    22548 488c3ea9f4ee6a4ee07f807742a77d95
          Size/MD5:    10128 a86882e915b5cac90792b59844f875a4
          Size/MD5:    24820 e57d2bef6f4b07f42ae518641c76ec8b
          Size/MD5:    41784 4c1f9d3b2aa28e81ee9e6bf4782e983d
          Size/MD5:    30096 8a711b674f8474cba5bc7eb8046054ec
          Size/MD5:    43426 d7310714ad8a8f528c58a5936b02b779
          Size/MD5:     9796 114c6c5e34ab027dcbd79c43fe1973b8
          Size/MD5:    15948 eacead284d843c047a517d8f421f18cf
          Size/MD5:    29408 41ac03db6ae3881362e64e296c41ea0f
          Size/MD5:    23592 1ee7c0934bac9dd9ac12a41b54a5849d
          Size/MD5:    40902 923a9061939249b9d1c6daa957a1cc4e
          Size/MD5:    17254 13ff98ceee263f42f3ff70cf58a4dac2

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:  2322542 d7ef9572cc2b315e5d522e93bc3c86d8
          Size/MD5:  4531344 8983eec71f501db7d1492d91d13307e8
          Size/MD5:  2276116 ba8268d069f354bfc54a04c9a3641d0b
          Size/MD5:   134218 881e3218f2bf1dc73b66721300037327
          Size/MD5:    24564 6f01a2978ceb429ab773ad16706b96e8
          Size/MD5:   312584 1e89df0e2dd9a3d00741c6a89e2fa5f3
          Size/MD5:    33244 2e62ad746dcdb7c2d888003d809ecd6d
          Size/MD5:    20090 d0ad7d61c315481dfc10e1149125c5fa
          Size/MD5:     8372 b23f8209d0b4d29945599086a3daf9f0
          Size/MD5:    22364 1d88ae2da0986ffcbdc8123109044ad9
          Size/MD5:    38654 f6c93404484d00097b4690924a3a036c
          Size/MD5:    26834 98c851ed8c302373f3b25eeacff9717d
          Size/MD5:    40612 d67d1b86222e43c5bbc8d83a55c5e2c0
          Size/MD5:     8102 266c783c8965604f43b1bffc3e312760
          Size/MD5:    14058 d496c00510b471ffed3fce8aaa0347ef
          Size/MD5:    25952 9831e20bd58e77e897476a2eb34641a6
          Size/MD5:    20796 eee0af1ac38b23d95e1c0a7c1e6566c6
          Size/MD5:    38032 5788720e6000997fe6648c3d54dcc7c5
          Size/MD5:    15086 17883519e05775b83fd9e690b33c82d4

Updated packages for Ubuntu 6.10:

  Source archives:

          Size/MD5:   113070 c90248dfe9d4b3317f9f0f4a76640e86
          Size/MD5:     1766 b0559e39ea7ef6425d37ba43b166e393
          Size/MD5:  8187896 04d6166552289eaeff771f5ec953b065

  Architecture independent packages:

          Size/MD5:   305766 ca45513d5384a540fd4fcdab86be58cf
          Size/MD5:     1072 c1df701b5774190b4efa43fa5949b815

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:  2429812 464372dbb6af0ca5bb7c07a40e95b0e5
          Size/MD5:  4723738 1233cb7b85a57e9f4b74f415f2336224
          Size/MD5:  2385736 9424e162a540bedf9818e77eb4fab774
          Size/MD5:   140356 597e9488d143ba4e9983d952eb4f6d1a
          Size/MD5:    25824 cbef47f2e585597bf449051e89c69ebb
          Size/MD5:   308460 8fbd9192eef101d8d9596e45321b6d66
          Size/MD5:    37200 310184b6670f8f580d9aad4bbe5f47f5
          Size/MD5:    22168 c67e9e6f3225d5b0ad62ef75787de104
          Size/MD5:     8880 fce0f0550c66b303e272b862ea04ae3b
          Size/MD5:    25348 a60a7cf1e17ec6b9565438a1a40fc130
          Size/MD5:    44274 7e6e7f943bf573b1218c4561e13ee823
          Size/MD5:    30278 b37054c7dbb97016d1224c91f34c7981
          Size/MD5:    44310 c93df8564a756ef244d94f6cf9488975
          Size/MD5:     8358 cdc03615ab0cb4ae318ef629275baaa8
          Size/MD5:    15546 1aa33ece27820e774f4ac89f23c7eb4f
          Size/MD5:    29344 8e1a9aaaf1ec2929c5e882121c8a33c4
          Size/MD5:    22884 e8ef8d00ccfb166376f6f4103a6744d5
          Size/MD5:    42696 fd81acea7d11e7791d05a7c2c17b231f
          Size/MD5:    16486 2e1c6a8af525709d3816d3386cf28c96

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:  2318808 34eee0a8240746a2daaaa8cdef15b9ab
          Size/MD5:  4579332 ce51b3da6bb44a3ec1c5fc560895d93d
          Size/MD5:  2305080 efe5e518f13e44f915d487d6d6948b4b
          Size/MD5:   140370 9887f8dcc06ecd5f03a8392dea3cc9a3
          Size/MD5:    24570 8041e27e3853b3caf793083f463ca4eb
          Size/MD5:   308488 67a28ddec988c10170e5987f7fb6923c
          Size/MD5:    34090 e659712a27190f5c51fa41dbe685725d
          Size/MD5:    20318 57ab3063f6aac42b61b898d9fc6fe930
          Size/MD5:     8634 c961951efbac2b3f0a9d06013fd73570
          Size/MD5:    23104 6ee25444c9443a3cbe9fe6af214e07a2
          Size/MD5:    39504 8ed23774ef2e64c5fa0f79be74098541
          Size/MD5:    28406 daa7973583fd59b74e7f4bbbe4b55aac
          Size/MD5:    41666 062e4c812970c5f99fc56350f96f014c
          Size/MD5:     8178 5803e0c0175d5665f721495ad4b522e3
          Size/MD5:    14626 b641ede6158257b8657968df092abd6d
          Size/MD5:    26452 4af680050afe367f52a0d42ea6e339fc
          Size/MD5:    21484 7f593104edcb2f606e8dee6170702fc3
          Size/MD5:    39808 69fe4e359484454a6019472cc1d185bb
          Size/MD5:    15496 7161904a5100d295b5ebef4fb3d80029

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:  2449870 dd546438f50ebcfd8a59219307e833c9
          Size/MD5:  4775802 aa9d42dc3d644c8fb95ba155eb5302d3
          Size/MD5:  2403532 daac5d75b77e98ed19f15ba016a070f1
          Size/MD5:   140386 18f21d96b19a2bc42958348686c879f9
          Size/MD5:    27782 588fbcadb68e94e6519fce3edf783bb9
          Size/MD5:   308494 dbe4e69457dd9c418ccbb55e0419be70
          Size/MD5:    37290 4d7dd5a1ce40f1789d72f004266b33f3
          Size/MD5:    22818 2ec76ce495e4a4124dad2dc8ba55905e
          Size/MD5:    10274 8ddff4432f44ce00eecc7793dd4026dc
          Size/MD5:    25372 62cb55e6411a48295db38c4139fcda98
          Size/MD5:    42610 60c46948651f2458aef37dd847926f88
          Size/MD5:    30466 db16ae71638be24861f5d9d2dc92ceac
          Size/MD5:    44514 02595b70911381aab8a13ce2c2a4a7cc
          Size/MD5:     9816 67096839521689394b2013d30e60c4ae
          Size/MD5:    16158 7cc57ba69f5126f459e4131d8cf44b24
          Size/MD5:    29528 1f527f16bf181c5603ec16e60ed40edb
          Size/MD5:    23790 84f353c22a34c5af4140d5b0b416843e
          Size/MD5:    41390 91611aeb3f45898013531d0a74e7ca31
          Size/MD5:    17290 2a925d2b00d9ae6689aad35b5c6bfdd3

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:  2342714 13eaf42e68199a7ebdfbee0d66d383d3
          Size/MD5:  4557468 5e7f462d720ba3384a5ebfc67f1b3e45
          Size/MD5:  2296974 a4373cda4a2dee50b352a7d0b7bbdf64
          Size/MD5:   140378 91f77f10cbe313351fc55d8b8cea67b4
          Size/MD5:    25370 91ea86b18d475575a4f2b0808f185246
          Size/MD5:   308484 6182f78b3424ef57a77f843c40feeb65
          Size/MD5:    34104 72e8068781ce077f328475463103c07e
          Size/MD5:    20096 556ce208ddc0350110f36214c23711f3
          Size/MD5:     8462 4a3b9452d07469a6fb953ff41e3e9333
          Size/MD5:    22622 639e48d8b13878118dbee51a771e1a9d
          Size/MD5:    39200 d4c4d3245fb16123a312cf07eaed1a57
          Size/MD5:    27316 d9acb4335e7024cef40e9bb05b6b85f9
          Size/MD5:    41216 66847e06bde9f2714c0b6219208345c3
          Size/MD5:     8098 fe950a062c61ac7ba3d271de1c0f2c70
          Size/MD5:    14330 c0a926dd9d63be87f71bd3fab1cf6be4
          Size/MD5:    25902 1c597c6fa2b9d0a29d85354b49757007
          Size/MD5:    21014 4b3e7871276f6cf8b91a648ccff9e747
          Size/MD5:    38452 0f4eccd9a0292f8c27eeb4c26df85ade
          Size/MD5:    15068 95b93efbe63d5d8f2d30e9e8bc361854

Updated packages for Ubuntu 7.04:

  Source archives:

          Size/MD5:   100967 ca75f3219a86afd9a6bc52131c3cdcdd
          Size/MD5:     1925 c5c1be45fe15263b84b325a6a5614cff
          Size/MD5:  9010594 604eaee2b834bb037d2c83e53e300d3f

  Architecture independent packages:

          Size/MD5:   307882 730b487160b6bd6c1dc0ee37fc2569b4
          Size/MD5:     1078 9e7238d69b27b4ae27e383c986fe1202

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:  2652898 65f0a14ab5d5d528a6380af6695d1f39
          Size/MD5:  5157198 fc1023b8af10368f28a0aa1d2f2d37d3
          Size/MD5:  2597670 2d501b02ba67d7f7ec0e69a2765a0ae4
          Size/MD5:   226776 b16ae1237b92817ccf734b9e813454ae
          Size/MD5:    25368 715beb495edb43d90e6c1be4be241c12
          Size/MD5:   348628 904558088e9b0bb19f391e335b309948
          Size/MD5:    37820 9e4966e46e3c6ab93b0d52af8facf261
          Size/MD5:    19222 343ce64640b13475a78adf0ff73adac6
          Size/MD5:     5532 9dc9a246ab943fe2fc0a78e25bba28cc
          Size/MD5:    73782 d62fea9fb1be545166c8261b55c5de86
          Size/MD5:    37370 92f994b2da14bca74bef3e7f13bec049
          Size/MD5:    55796 faeb03e08f81316ea862f866df11334e
          Size/MD5:     9634 fb4752e679193f2e0c9b79f4009b0f8c
          Size/MD5:     5012 15eb4f566c9b4d7ea4bb2f07e8340a60
          Size/MD5:    12468 ea6b5ef448db1a32e54c930c72d29878
          Size/MD5:    38996 b7affced10a64736c26b9dc2ba6b1ce2
          Size/MD5:    19834 dfaa6421bdb57a095ca474ff4fbebd57
          Size/MD5:    17758 e1f6fec95461edc9ae6efd9bf228f344
          Size/MD5:    40594 89250d0e2d42efbc5a36974133fb1d62
          Size/MD5:    13384 d9a925954696e3de66408c836272638a

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:  2530514 fb5d479a7c10a21949aab90758dac196
          Size/MD5:  5001766 d1fc4886fcec1a4f5d9ffa2dc68b17cc
          Size/MD5:  2519452 982bdf0c73cc769915efd767599710da
          Size/MD5:   223300 8d1e78f52f4a1b48b96fae5eb8d3be8f
          Size/MD5:    24180 dc1bfed8dde4755719239396b3312253
          Size/MD5:   348698 9cec70d15d1885b2986a2405501372b1
          Size/MD5:    33514 c765691671ac2474d63323dec409f811
          Size/MD5:    17352 f42d2b08391e979884d64ecd2c632d2a
          Size/MD5:     5234 8f8829e389f78453a5c085815bd1d342
          Size/MD5:    65448 fca46106268d1643c6807decaaf1b348
          Size/MD5:    34514 b7cb2e9fac4135259a88234bc03e632a
          Size/MD5:    51328 3f28836f02ba63ef03c53e2809ea99e4
          Size/MD5:     8720 a0b97bc966b8395a0117551274b08b80
          Size/MD5:     4804 bb396dbe8d109d8ae3d7dcc75f2e0139
          Size/MD5:    11584 230d18cb891b0c66a410cce2008f2f62
          Size/MD5:    34392 062ecb1c49427509b4e5cde6254d4da7
          Size/MD5:    18396 aaa467c988c8e58d76bb202344369ccf
          Size/MD5:    16238 8c62684c3e38a082f5df6dd33c0b00fb
          Size/MD5:    37714 83ccf33f087cf94570dca9580e49634b
          Size/MD5:    12446 61601eac35120e5ee5d06f24bc88a234

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:  2726980 bae4600322b970205672ae082ab9c3a5
          Size/MD5:  5237858 16784fa12a8a8f69a95b94f99fd74901
          Size/MD5:  2639382 bf7ef7cdb12fdce3a964a9f88b98dd56
          Size/MD5:   229868 a8179b5d17dbac22972c43b0924cd789
          Size/MD5:    28738 3bd587eda7df0b1017e6fa4fdabae1e9
          Size/MD5:   348710 11008d6048f1cd2827524b0fc0d2a069
          Size/MD5:    39152 e1c486bce7eb6ba8b92847bfde00482a
          Size/MD5:    21098 1ef8a4bc899dc966d64e8b0d28df3c01
          Size/MD5:     7682 3f3749e05cd60dcc6a7d86fc2990cb86
          Size/MD5:    78124 f7e2428f482a33ce7cf49342881c10ce
          Size/MD5:    41014 271bc3a538a6f291d3779b15e2419167
          Size/MD5:    59610 d189414916d473af0cb1c2e49e520541
          Size/MD5:    11286 1f35787d2ec91c5150d92f1716c513dd
          Size/MD5:     7220 8d6fed59aa1ce093c58accbb844f2c38
          Size/MD5:    14152 94fb9fe3094580fc7065ae91ef85ed23
          Size/MD5:    42590 a029a0a600785ce727057ea5b4144ff9
          Size/MD5:    21922 abc0cf272c15a25205702225c1b2f50f
          Size/MD5:    20114 56c2d809fdaaa482a3eb253071d7b585
          Size/MD5:    43142 493e043fdcc12cfd38256790c8bdc174
          Size/MD5:    15514 0d684b34b2b4a0ab4b69d9c0525a8e52

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:  2561952 2609675acfea96a86b37e06eb02d69be
          Size/MD5:  4995112 42e58aefd890c78e454f9401f7fd28d6
          Size/MD5:  2515826 3c2ff522189b8a3fca6b15cb14cbb95d
          Size/MD5:   223902 941dc2e5cf9c7c7aa2e9317ea4b58d74
          Size/MD5:    25048 050c5504e132e1c7e231b2b1106f65cc
          Size/MD5:   348690 8b3ce69cbb08568be8ec103ba50d48d8
          Size/MD5:    34304 7ca6da161264f2974b686849e581dcc9
          Size/MD5:    17206 d5bdf14ff4c3afc83132be6c9d42d914
          Size/MD5:     5072 6245f854b3290f7efd46548d62ac7ac7
          Size/MD5:    64878 87684b4847a046a57b6f44ad5c27f7d8
          Size/MD5:    32718 f32b4409d4e19878789ff726797127c5
          Size/MD5:    50080 84b7b202fd3c447eac966dfada761a94
          Size/MD5:     8614 98bce5f6743b0f36dbe998a3a33295fc
          Size/MD5:     4770 8fa7c02eaf524729d1a031ad87cf564e
          Size/MD5:    11414 0a2271086021a344bc4c6301be66a929
          Size/MD5:    33074 f8e4318486e586717f0c06f0517ca95b
          Size/MD5:    18000 446f7f7f10e02a79329cd5e28b538fe2
          Size/MD5:    16384 f2523cda630d0e85483e009006f262b8
          Size/MD5:    36518 f47a536028edd8b2ba6fc47a99b202a8
          Size/MD5:    11958 9cc016788993474d086c22109703c3fb


--cmJC7u66zC7hs+87
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGU4JaH/9LqRcGPm0RAswSAJ4yaOmL2JEH1aht/Jgp9OLM2Csq7ACbBi+F
NvWQiU5vQQmn7j0GWNoxDdU=+3TU
-----END PGP SIGNATURE-------cmJC7u66zC7hs+87--
--==============