=========================================================== Ubuntu Security Notice USN-624-1 July 15, 2008 pcre3 vulnerability CVE-2008-2371 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 7.04 Ubuntu 7.10 Ubuntu 8.04 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: libpcre3 7.4-0ubuntu0.6.06.3 Ubuntu 7.04: libpcre3 7.4-0ubuntu0.7.04.3 Ubuntu 7.10: libpcre3 7.4-0ubuntu0.7.10.3 Ubuntu 8.04 LTS: libpcre3 7.4-1ubuntu2.1 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: Tavis Ormandy discovered that the PCRE library did not correctly handle certain in-pattern options. An attacker could cause applications linked against pcre3 to crash, leading to a denial of service. Updated packages for Ubuntu 6.06 LTS: Source archives: http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-0ubuntu0.6.06.3.diff.gz Size/MD5: 85631 6bcacd2296461d74fd9e661d9fcb2922 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-0ubuntu0.6.06.3.dsc Size/MD5: 657 e56861ae51122d44305ecc6ea959db29 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4.orig.tar.gz Size/MD5: 1106897 de886b22cddc8eaf620a421d3041ee0b Architecture independent packages: http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pgrep_7.4-0ubuntu0.6.06.3_all.deb Size/MD5: 772 af2474a8f5e8c2dc1a6bb7b820537720 amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0ubuntu0.6.06.3_amd64.deb Size/MD5: 254948 788c8a86453466bfeac3bab4ae934bd1 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubuntu0.6.06.3_amd64.deb Size/MD5: 198730 ea815bf19bb9888cac145516bb4f8059 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ubuntu0.6.06.3_amd64.deb Size/MD5: 90324 7c9578adad9e1b2cd22b96b287fdb2e7 http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0ubuntu0.6.06.3_amd64.deb Size/MD5: 20358 d2b2599e71665d8088c2b37bac829bcd i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0ubuntu0.6.06.3_i386.deb Size/MD5: 246562 441516d6a63e05ac6ff2b68f039a66f8 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubuntu0.6.06.3_i386.deb Size/MD5: 194202 a8173b6bb5c356167e1e6d292bc28133 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ubuntu0.6.06.3_i386.deb Size/MD5: 88654 9b4a4af5c73fa1a046fec76d8de1e5d4 http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0ubuntu0.6.06.3_i386.deb Size/MD5: 18962 186f0bc810462dc2cea6d9c85ecca01c powerpc architecture (Apple Macintosh G3/G4/G5): http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0ubuntu0.6.06.3_powerpc.deb Size/MD5: 258744 07f82099de2e8a7882a4632221834c1b http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubuntu0.6.06.3_powerpc.deb Size/MD5: 199912 9a15af619abd26cae9aae1e50c254ebc http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ubuntu0.6.06.3_powerpc.deb Size/MD5: 91414 dedcd449686b4c5a5f10f8ffc6f3a57a http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0ubuntu0.6.06.3_powerpc.deb Size/MD5: 21368 105edcb4a85e366cabb405d7454748bf sparc architecture (Sun SPARC/UltraSPARC): http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0ubuntu0.6.06.3_sparc.deb Size/MD5: 250224 9e750f32976a7c7ee5e8a38173019d99 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubuntu0.6.06.3_sparc.deb Size/MD5: 196638 8233e339d6d2ecedbf0d5e91ecfb5857 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ubuntu0.6.06.3_sparc.deb Size/MD5: 88096 18c453d1a07da4a594d9b7b1afc53ae7 http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0ubuntu0.6.06.3_sparc.deb Size/MD5: 19584 d3b68c5c809c8c9880b4ba369dc29d05 Updated packages for Ubuntu 7.04: Source archives: http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-0ubuntu0.7.04.3.diff.gz Size/MD5: 85863 e021d65323dfdd5f9152f1adab8ef35b http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-0ubuntu0.7.04.3.dsc Size/MD5: 734 530fd8a9be4a12d42ec6ccbd308d2664 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4.orig.tar.gz Size/MD5: 1106897 de886b22cddc8eaf620a421d3041ee0b amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0ubuntu0.7.04.3_amd64.deb Size/MD5: 255290 aabfa0188644252c0a3920c5518b94dd http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubuntu0.7.04.3_amd64.deb Size/MD5: 199016 259f7869305c8a5046c8a1ac707de287 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ubuntu0.7.04.3_amd64.deb Size/MD5: 91624 9ce46f293c9f9f05cbc38ad9d70be993 http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0ubuntu0.7.04.3_amd64.deb Size/MD5: 20470 1e41b6410f2f87f635499dbb97203c13 i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0ubuntu0.7.04.3_i386.deb Size/MD5: 251016 5b4756ca47678b63e76e32c01ab56943 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubuntu0.7.04.3_i386.deb Size/MD5: 198084 af2acf872b82403daac13a67bfca0248 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ubuntu0.7.04.3_i386.deb Size/MD5: 91280 8355dc6f2ea3e91bd669afb92dfd0551 http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0ubuntu0.7.04.3_i386.deb Size/MD5: 19524 94159666ef8fa0a9be4744d8d1be66f9 powerpc architecture (Apple Macintosh G3/G4/G5): http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0ubuntu0.7.04.3_powerpc.deb Size/MD5: 257716 7ee895147086160c358c4d8ec63b2a3c http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubuntu0.7.04.3_powerpc.deb Size/MD5: 201920 6478d1ef4120d40d3266c36cbe78e052 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ubuntu0.7.04.3_powerpc.deb Size/MD5: 94486 5846a7c667910d3aacf1d7b654d23c93 http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0ubuntu0.7.04.3_powerpc.deb Size/MD5: 22692 e9f57c053e847728dcfa8958f4f3c6f4 sparc architecture (Sun SPARC/UltraSPARC): http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0ubuntu0.7.04.3_sparc.deb Size/MD5: 252324 58e066c59fe05eda544681edd5e25adb http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubuntu0.7.04.3_sparc.deb Size/MD5: 199572 60df0418dc40d844992631fdcb2742fe http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ubuntu0.7.04.3_sparc.deb Size/MD5: 90136 a115cd726194eaa2279f8e552b1b65da http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0ubuntu0.7.04.3_sparc.deb Size/MD5: 20404 06f2bfc9542d06d17893613a51d16e41 Updated packages for Ubuntu 7.10: Source archives: http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-0ubuntu0.7.10.3.diff.gz Size/MD5: 15106 03469183b160f6cedf254cda89b58e8b http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-0ubuntu0.7.10.3.dsc Size/MD5: 734 e5349e7d076b1f012418e9fe6e37c7ed http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4.orig.tar.gz Size/MD5: 1106897 de886b22cddc8eaf620a421d3041ee0b amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0ubuntu0.7.10.3_amd64.deb Size/MD5: 255724 8eac40835ba83154bb7766637fa55544 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubuntu0.7.10.3_amd64.deb Size/MD5: 205652 48c7afec015d5e7602ed9e0de1f1e303 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ubuntu0.7.10.3_amd64.deb Size/MD5: 91454 bc14540316d82cf9121084241e2da710 http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0ubuntu0.7.10.3_amd64.deb Size/MD5: 20466 4560795e64d41315615db50632811995 i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0ubuntu0.7.10.3_i386.deb Size/MD5: 251242 e5aadd8a9f4773afefbd8db00935f19b http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubuntu0.7.10.3_i386.deb Size/MD5: 204530 94d30a647325d9391abd43760d4cdb51 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ubuntu0.7.10.3_i386.deb Size/MD5: 91150 ccb87ae1e3f5c665526ed9224d21dd49 http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0ubuntu0.7.10.3_i386.deb Size/MD5: 19526 de8d449e6e968e7ebd99b1a13ac1a96f lpia architecture (Low Power Intel Architecture): http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3-dev_7.4-0ubuntu0.7.10.3_lpia.deb Size/MD5: 252094 d2e0fad28af36746aa97b45f5fb26ed7 http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3_7.4-0ubuntu0.7.10.3_lpia.deb Size/MD5: 206198 e43e0569fa546d53e6b57d01772b44b1 http://ports.ubuntu.com/pool/main/p/pcre3/libpcrecpp0_7.4-0ubuntu0.7.10.3_lpia.deb Size/MD5: 90648 41dad33c9885d61197ff767cc276da6a http://ports.ubuntu.com/pool/universe/p/pcre3/pcregrep_7.4-0ubuntu0.7.10.3_lpia.deb Size/MD5: 19494 f19cc9f205f6fca83e4e4773211b4dd7 powerpc architecture (Apple Macintosh G3/G4/G5): http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0ubuntu0.7.10.3_powerpc.deb Size/MD5: 257776 c3d61408fb1e635ecfd192647800512b http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubuntu0.7.10.3_powerpc.deb Size/MD5: 208304 97c7b96cd468d7b7c87f52e92af2c0c8 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ubuntu0.7.10.3_powerpc.deb Size/MD5: 94430 e99d1887393b006084f6acd8ef6d07de http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0ubuntu0.7.10.3_powerpc.deb Size/MD5: 22690 d788fe4e595af3ada595c05156deeb97 sparc architecture (Sun SPARC/UltraSPARC): http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0ubuntu0.7.10.3_sparc.deb Size/MD5: 252492 72138a6ab427f3577b96fca05b50b7d7 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubuntu0.7.10.3_sparc.deb Size/MD5: 205984 774bd853192a636a0d2c2dae978ef3f4 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ubuntu0.7.10.3_sparc.deb Size/MD5: 90036 dcd26900b8d5ee790ae80ea5c5fe4711 http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0ubuntu0.7.10.3_sparc.deb Size/MD5: 20404 8e3ac55a926ceaba2a4aa6d238df66f8 Updated packages for Ubuntu 8.04 LTS: Source archives: http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-1ubuntu2.1.diff.gz Size/MD5: 28470 7b4185e229a25a167d0623563f55ee3c http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-1ubuntu2.1.dsc Size/MD5: 754 9513a7249290ebef7f0b29d973c6fb7b http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4.orig.tar.gz Size/MD5: 1106897 de886b22cddc8eaf620a421d3041ee0b amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dbg_7.4-1ubuntu2.1_amd64.deb Size/MD5: 264496 f530971c2808b0a2fed1a8f3cdd3c9f6 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-1ubuntu2.1_amd64.deb Size/MD5: 254796 e0da3551ff4b490dd0fb92cade5b3666 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-1ubuntu2.1_amd64.deb Size/MD5: 205592 5a2219b17fd80877272904a79fadc580 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-1ubuntu2.1_amd64.deb Size/MD5: 91230 061d3693e966e6f1779b0c64e7c2f4fe http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/libpcre3-udeb_7.4-1ubuntu2.1_amd64.udeb Size/MD5: 70966 a862563a1d8b0a9f5368d019f03e6b4f http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-1ubuntu2.1_amd64.deb Size/MD5: 20434 1c7b00f8a238bd9c0cd4f7ec692d059d i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dbg_7.4-1ubuntu2.1_i386.deb Size/MD5: 243506 f0f989aec1a82d1bf0261f7f4b34a60a http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-1ubuntu2.1_i386.deb Size/MD5: 251576 d83ce6c8854d3a1167340bd08180b7ce http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-1ubuntu2.1_i386.deb Size/MD5: 205802 5556706d347c25bc418f82d5175dc106 http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-1ubuntu2.1_i386.deb Size/MD5: 91174 b6178ac07f1907e0968c4cd909fa6aa7 http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/libpcre3-udeb_7.4-1ubuntu2.1_i386.udeb Size/MD5: 72166 c461c3381f3c574185c921be9c39780d http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-1ubuntu2.1_i386.deb Size/MD5: 19526 93700c88576af62d943d9fc027a3df68 lpia architecture (Low Power Intel Architecture): http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3-dbg_7.4-1ubuntu2.1_lpia.deb Size/MD5: 244482 3ad664f23af3e5ef174933958241900d http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3-dev_7.4-1ubuntu2.1_lpia.deb Size/MD5: 252212 2e63fffc5a0491d90eec5f7e16edd485 http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3_7.4-1ubuntu2.1_lpia.deb Size/MD5: 206530 edee75400a2586765fd8f4338a92ad53 http://ports.ubuntu.com/pool/main/p/pcre3/libpcrecpp0_7.4-1ubuntu2.1_lpia.deb Size/MD5: 90760 371d5e56822ab90d5a5d9dada21d494b http://ports.ubuntu.com/pool/universe/p/pcre3/libpcre3-udeb_7.4-1ubuntu2.1_lpia.udeb Size/MD5: 72762 722e259ce4855436ea4495658ba9377e http://ports.ubuntu.com/pool/universe/p/pcre3/pcregrep_7.4-1ubuntu2.1_lpia.deb Size/MD5: 19546 181ab09b249e0d304e549bcc41a74e88 powerpc architecture (Apple Macintosh G3/G4/G5): http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3-dbg_7.4-1ubuntu2.1_powerpc.deb Size/MD5: 261410 f31b196b659566cb5cb881dc7f90f451 http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3-dev_7.4-1ubuntu2.1_powerpc.deb Size/MD5: 259794 cd18085f270a0c0cffac4353de756e1a http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3_7.4-1ubuntu2.1_powerpc.deb Size/MD5: 210952 dce18d87801b8821f87e3a6e443d58ce http://ports.ubuntu.com/pool/main/p/pcre3/libpcrecpp0_7.4-1ubuntu2.1_powerpc.deb Size/MD5: 94360 b019cdfd389e0d888b53fa825a0ed48b http://ports.ubuntu.com/pool/universe/p/pcre3/libpcre3-udeb_7.4-1ubuntu2.1_powerpc.udeb Size/MD5: 73124 dfd25f42ce8a11feaa36917bf5ccc4aa http://ports.ubuntu.com/pool/universe/p/pcre3/pcregrep_7.4-1ubuntu2.1_powerpc.deb Size/MD5: 22746 31de7acefbc07e09a2dc81f629097c9e sparc architecture (Sun SPARC/UltraSPARC): http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3-dbg_7.4-1ubuntu2.1_sparc.deb Size/MD5: 251756 01c99f90917ffa3decd84b7074fd87bd http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3-dev_7.4-1ubuntu2.1_sparc.deb Size/MD5: 252004 8359a7b8aecacd672d115df4f7a84264 http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3_7.4-1ubuntu2.1_sparc.deb Size/MD5: 205372 b704cc10dc4adcb45ad0c8ef1f4e68c3 http://ports.ubuntu.com/pool/main/p/pcre3/libpcrecpp0_7.4-1ubuntu2.1_sparc.deb Size/MD5: 90340 ca0a66c1db4d1e5bf43954083fcc99e5 http://ports.ubuntu.com/pool/universe/p/pcre3/libpcre3-udeb_7.4-1ubuntu2.1_sparc.udeb Size/MD5: 69450 2d2abc6b697adeb7bf1cbacbb953153a http://ports.ubuntu.com/pool/universe/p/pcre3/pcregrep_7.4-1ubuntu2.1_sparc.deb Size/MD5: 20878 ae427cb895a1da464c76d01987d01cba
Attachment:
signature.asc
Description: Digital signature