Home / mailingsPDF  

[USN-624-1] PCRE vulnerability

Posted on 16 July 2008
Ubuntu Security

==========================
==========================
==========20
Ubuntu Security Notice USN-624-1 July 15, 2008
pcre3 vulnerability
CVE-2008-2371
==========================
==========================
=========

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 7.04
Ubuntu 7.10
Ubuntu 8.04 LTS

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
libpcre3 7.4-0ubuntu0.6.06.3

Ubuntu 7.04:
libpcre3 7.4-0ubuntu0.7.04.3

Ubuntu 7.10:
libpcre3 7.4-0ubuntu0.7.10.3

Ubuntu 8.04 LTS:
libpcre3 7.4-1ubuntu2.1

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

Tavis Ormandy discovered that the PCRE library did not correctly handle
certain in-pattern options. An attacker could cause applications linked
against pcre3 to crash, leading to a denial of service.


Updated packages for Ubuntu 6.06 LTS:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-0ubuntu0.=
6.06.3.diff.gz
Size/MD5: 85631 6bcacd2296461d74fd9e661d9fcb2922
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-0ubuntu0.=
6.06.3.dsc
Size/MD5: 657 e56861ae51122d44305ecc6ea959db29
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4.orig.tar.=
gz
Size/MD5: 1106897 de886b22cddc8eaf620a421d3041ee0b

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pgrep_7.4-0ubun=
tu0.6.06.3_all.deb
Size/MD5: 772 af2474a8f5e8c2dc1a6bb7b820537720

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0u=
buntu0.6.06.3_amd64.deb
Size/MD5: 254948 788c8a86453466bfeac3bab4ae934bd1
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubunt=
u0.6.06.3_amd64.deb
Size/MD5: 198730 ea815bf19bb9888cac145516bb4f8059
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ub=
untu0.6.06.3_amd64.deb
Size/MD5: 90324 7c9578adad9e1b2cd22b96b287fdb2e7
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0u=
buntu0.6.06.3_amd64.deb
Size/MD5: 20358 d2b2599e71665d8088c2b37bac829bcd

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0u=
buntu0.6.06.3_i386.deb
Size/MD5: 246562 441516d6a63e05ac6ff2b68f039a66f8
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubunt=
u0.6.06.3_i386.deb
Size/MD5: 194202 a8173b6bb5c356167e1e6d292bc28133
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ub=
untu0.6.06.3_i386.deb
Size/MD5: 88654 9b4a4af5c73fa1a046fec76d8de1e5d4
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0u=
buntu0.6.06.3_i386.deb
Size/MD5: 18962 186f0bc810462dc2cea6d9c85ecca01c

powerpc architecture (Apple Macintosh G3/G4/G5):

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0u=
buntu0.6.06.3_powerpc.deb
Size/MD5: 258744 07f82099de2e8a7882a4632221834c1b
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubunt=
u0.6.06.3_powerpc.deb
Size/MD5: 199912 9a15af619abd26cae9aae1e50c254ebc
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ub=
untu0.6.06.3_powerpc.deb
Size/MD5: 91414 dedcd449686b4c5a5f10f8ffc6f3a57a
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0u=
buntu0.6.06.3_powerpc.deb
Size/MD5: 21368 105edcb4a85e366cabb405d7454748bf

sparc architecture (Sun SPARC/UltraSPARC):

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0u=
buntu0.6.06.3_sparc.deb
Size/MD5: 250224 9e750f32976a7c7ee5e8a38173019d99
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubunt=
u0.6.06.3_sparc.deb
Size/MD5: 196638 8233e339d6d2ecedbf0d5e91ecfb5857
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ub=
untu0.6.06.3_sparc.deb
Size/MD5: 88096 18c453d1a07da4a594d9b7b1afc53ae7
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0u=
buntu0.6.06.3_sparc.deb
Size/MD5: 19584 d3b68c5c809c8c9880b4ba369dc29d05

Updated packages for Ubuntu 7.04:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-0ubuntu0.=
7.04.3.diff.gz
Size/MD5: 85863 e021d65323dfdd5f9152f1adab8ef35b
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-0ubuntu0.=
7.04.3.dsc
Size/MD5: 734 530fd8a9be4a12d42ec6ccbd308d2664
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4.orig.tar.=
gz
Size/MD5: 1106897 de886b22cddc8eaf620a421d3041ee0b

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0u=
buntu0.7.04.3_amd64.deb
Size/MD5: 255290 aabfa0188644252c0a3920c5518b94dd
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubunt=
u0.7.04.3_amd64.deb
Size/MD5: 199016 259f7869305c8a5046c8a1ac707de287
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ub=
untu0.7.04.3_amd64.deb
Size/MD5: 91624 9ce46f293c9f9f05cbc38ad9d70be993
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0u=
buntu0.7.04.3_amd64.deb
Size/MD5: 20470 1e41b6410f2f87f635499dbb97203c13

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0u=
buntu0.7.04.3_i386.deb
Size/MD5: 251016 5b4756ca47678b63e76e32c01ab56943
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubunt=
u0.7.04.3_i386.deb
Size/MD5: 198084 af2acf872b82403daac13a67bfca0248
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ub=
untu0.7.04.3_i386.deb
Size/MD5: 91280 8355dc6f2ea3e91bd669afb92dfd0551
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0u=
buntu0.7.04.3_i386.deb
Size/MD5: 19524 94159666ef8fa0a9be4744d8d1be66f9

powerpc architecture (Apple Macintosh G3/G4/G5):

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0u=
buntu0.7.04.3_powerpc.deb
Size/MD5: 257716 7ee895147086160c358c4d8ec63b2a3c
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubunt=
u0.7.04.3_powerpc.deb
Size/MD5: 201920 6478d1ef4120d40d3266c36cbe78e052
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ub=
untu0.7.04.3_powerpc.deb
Size/MD5: 94486 5846a7c667910d3aacf1d7b654d23c93
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0u=
buntu0.7.04.3_powerpc.deb
Size/MD5: 22692 e9f57c053e847728dcfa8958f4f3c6f4

sparc architecture (Sun SPARC/UltraSPARC):

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0u=
buntu0.7.04.3_sparc.deb
Size/MD5: 252324 58e066c59fe05eda544681edd5e25adb
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubunt=
u0.7.04.3_sparc.deb
Size/MD5: 199572 60df0418dc40d844992631fdcb2742fe
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ub=
untu0.7.04.3_sparc.deb
Size/MD5: 90136 a115cd726194eaa2279f8e552b1b65da
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0u=
buntu0.7.04.3_sparc.deb
Size/MD5: 20404 06f2bfc9542d06d17893613a51d16e41

Updated packages for Ubuntu 7.10:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-0ubuntu0.=
7.10.3.diff.gz
Size/MD5: 15106 03469183b160f6cedf254cda89b58e8b
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-0ubuntu0.=
7.10.3.dsc
Size/MD5: 734 e5349e7d076b1f012418e9fe6e37c7ed
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4.orig.tar.=
gz
Size/MD5: 1106897 de886b22cddc8eaf620a421d3041ee0b

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0u=
buntu0.7.10.3_amd64.deb
Size/MD5: 255724 8eac40835ba83154bb7766637fa55544
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubunt=
u0.7.10.3_amd64.deb
Size/MD5: 205652 48c7afec015d5e7602ed9e0de1f1e303
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ub=
untu0.7.10.3_amd64.deb
Size/MD5: 91454 bc14540316d82cf9121084241e2da710
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0u=
buntu0.7.10.3_amd64.deb
Size/MD5: 20466 4560795e64d41315615db50632811995

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0u=
buntu0.7.10.3_i386.deb
Size/MD5: 251242 e5aadd8a9f4773afefbd8db00935f19b
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubunt=
u0.7.10.3_i386.deb
Size/MD5: 204530 94d30a647325d9391abd43760d4cdb51
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ub=
untu0.7.10.3_i386.deb
Size/MD5: 91150 ccb87ae1e3f5c665526ed9224d21dd49
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0u=
buntu0.7.10.3_i386.deb
Size/MD5: 19526 de8d449e6e968e7ebd99b1a13ac1a96f

lpia architecture (Low Power Intel Architecture):

http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3-dev_7.4-0ubuntu0.7.1=
0.3_lpia.deb
Size/MD5: 252094 d2e0fad28af36746aa97b45f5fb26ed7
http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3_7.4-0ubuntu0.7.10.3_=
lpia.deb
Size/MD5: 206198 e43e0569fa546d53e6b57d01772b44b1
http://ports.ubuntu.com/pool/main/p/pcre3/libpcrecpp0_7.4-0ubuntu0.7.10=
=2E3_lpia.deb
Size/MD5: 90648 41dad33c9885d61197ff767cc276da6a
http://ports.ubuntu.com/pool/universe/p/pcre3/pcregrep_7.4-0ubuntu0.7.1=
0.3_lpia.deb
Size/MD5: 19494 f19cc9f205f6fca83e4e4773211b4dd7

powerpc architecture (Apple Macintosh G3/G4/G5):

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0u=
buntu0.7.10.3_powerpc.deb
Size/MD5: 257776 c3d61408fb1e635ecfd192647800512b
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubunt=
u0.7.10.3_powerpc.deb
Size/MD5: 208304 97c7b96cd468d7b7c87f52e92af2c0c8
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ub=
untu0.7.10.3_powerpc.deb
Size/MD5: 94430 e99d1887393b006084f6acd8ef6d07de
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0u=
buntu0.7.10.3_powerpc.deb
Size/MD5: 22690 d788fe4e595af3ada595c05156deeb97

sparc architecture (Sun SPARC/UltraSPARC):

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-0u=
buntu0.7.10.3_sparc.deb
Size/MD5: 252492 72138a6ab427f3577b96fca05b50b7d7
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-0ubunt=
u0.7.10.3_sparc.deb
Size/MD5: 205984 774bd853192a636a0d2c2dae978ef3f4
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-0ub=
untu0.7.10.3_sparc.deb
Size/MD5: 90036 dcd26900b8d5ee790ae80ea5c5fe4711
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-0u=
buntu0.7.10.3_sparc.deb
Size/MD5: 20404 8e3ac55a926ceaba2a4aa6d238df66f8

Updated packages for Ubuntu 8.04 LTS:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-1ubuntu2.=
1.diff.gz
Size/MD5: 28470 7b4185e229a25a167d0623563f55ee3c
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4-1ubuntu2.=
1.dsc
Size/MD5: 754 9513a7249290ebef7f0b29d973c6fb7b
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/pcre3_7.4.orig.tar.=
gz
Size/MD5: 1106897 de886b22cddc8eaf620a421d3041ee0b

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dbg_7.4-1u=
buntu2.1_amd64.deb
Size/MD5: 264496 f530971c2808b0a2fed1a8f3cdd3c9f6
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-1u=
buntu2.1_amd64.deb
Size/MD5: 254796 e0da3551ff4b490dd0fb92cade5b3666
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-1ubunt=
u2.1_amd64.deb
Size/MD5: 205592 5a2219b17fd80877272904a79fadc580
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-1ub=
untu2.1_amd64.deb
Size/MD5: 91230 061d3693e966e6f1779b0c64e7c2f4fe
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/libpcre3-udeb_7=
=2E4-1ubuntu2.1_amd64.udeb
Size/MD5: 70966 a862563a1d8b0a9f5368d019f03e6b4f
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-1u=
buntu2.1_amd64.deb
Size/MD5: 20434 1c7b00f8a238bd9c0cd4f7ec692d059d

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dbg_7.4-1u=
buntu2.1_i386.deb
Size/MD5: 243506 f0f989aec1a82d1bf0261f7f4b34a60a
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3-dev_7.4-1u=
buntu2.1_i386.deb
Size/MD5: 251576 d83ce6c8854d3a1167340bd08180b7ce
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcre3_7.4-1ubunt=
u2.1_i386.deb
Size/MD5: 205802 5556706d347c25bc418f82d5175dc106
http://security.ubuntu.com/ubuntu/pool/main/p/pcre3/libpcrecpp0_7.4-1ub=
untu2.1_i386.deb
Size/MD5: 91174 b6178ac07f1907e0968c4cd909fa6aa7
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/libpcre3-udeb_7=
=2E4-1ubuntu2.1_i386.udeb
Size/MD5: 72166 c461c3381f3c574185c921be9c39780d
http://security.ubuntu.com/ubuntu/pool/universe/p/pcre3/pcregrep_7.4-1u=
buntu2.1_i386.deb
Size/MD5: 19526 93700c88576af62d943d9fc027a3df68

lpia architecture (Low Power Intel Architecture):

http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3-dbg_7.4-1ubuntu2.1_l=
pia.deb
Size/MD5: 244482 3ad664f23af3e5ef174933958241900d
http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3-dev_7.4-1ubuntu2.1_l=
pia.deb
Size/MD5: 252212 2e63fffc5a0491d90eec5f7e16edd485
http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3_7.4-1ubuntu2.1_lpia.=
deb
Size/MD5: 206530 edee75400a2586765fd8f4338a92ad53
http://ports.ubuntu.com/pool/main/p/pcre3/libpcrecpp0_7.4-1ubuntu2.1_lp=
ia.deb
Size/MD5: 90760 371d5e56822ab90d5a5d9dada21d494b
http://ports.ubuntu.com/pool/universe/p/pcre3/libpcre3-udeb_7.4-1ubuntu=
2.1_lpia.udeb
Size/MD5: 72762 722e259ce4855436ea4495658ba9377e
http://ports.ubuntu.com/pool/universe/p/pcre3/pcregrep_7.4-1ubuntu2.1_l=
pia.deb
Size/MD5: 19546 181ab09b249e0d304e549bcc41a74e88

powerpc architecture (Apple Macintosh G3/G4/G5):

http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3-dbg_7.4-1ubuntu2.1_p=
owerpc.deb
Size/MD5: 261410 f31b196b659566cb5cb881dc7f90f451
http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3-dev_7.4-1ubuntu2.1_p=
owerpc.deb
Size/MD5: 259794 cd18085f270a0c0cffac4353de756e1a
http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3_7.4-1ubuntu2.1_power=
pc.deb
Size/MD5: 210952 dce18d87801b8821f87e3a6e443d58ce
http://ports.ubuntu.com/pool/main/p/pcre3/libpcrecpp0_7.4-1ubuntu2.1_po=
werpc.deb
Size/MD5: 94360 b019cdfd389e0d888b53fa825a0ed48b
http://ports.ubuntu.com/pool/universe/p/pcre3/libpcre3-udeb_7.4-1ubuntu=
2.1_powerpc.udeb
Size/MD5: 73124 dfd25f42ce8a11feaa36917bf5ccc4aa
http://ports.ubuntu.com/pool/universe/p/pcre3/pcregrep_7.4-1ubuntu2.1_p=
owerpc.deb
Size/MD5: 22746 31de7acefbc07e09a2dc81f629097c9e

sparc architecture (Sun SPARC/UltraSPARC):

http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3-dbg_7.4-1ubuntu2.1_s=
parc.deb
Size/MD5: 251756 01c99f90917ffa3decd84b7074fd87bd
http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3-dev_7.4-1ubuntu2.1_s=
parc.deb
Size/MD5: 252004 8359a7b8aecacd672d115df4f7a84264
http://ports.ubuntu.com/pool/main/p/pcre3/libpcre3_7.4-1ubuntu2.1_sparc=
=2Edeb
Size/MD5: 205372 b704cc10dc4adcb45ad0c8ef1f4e68c3
http://ports.ubuntu.com/pool/main/p/pcre3/libpcrecpp0_7.4-1ubuntu2.1_sp=
arc.deb
Size/MD5: 90340 ca0a66c1db4d1e5bf43954083fcc99e5
http://ports.ubuntu.com/pool/universe/p/pcre3/libpcre3-udeb_7.4-1ubuntu=
2.1_sparc.udeb
Size/MD5: 69450 2d2abc6b697adeb7bf1cbacbb953153a
http://ports.ubuntu.com/pool/universe/p/pcre3/pcregrep_7.4-1ubuntu2.1_s=
parc.deb
Size/MD5: 20878 ae427cb895a1da464c76d01987d01cba

 

TOP

Mailings :

Exploits :