news 28 Posted January 21, 2009 This is a multi-part message in MIME format... ------------=_1232580615-14940-7754 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2009:022 http://www.mandriva.com/security/ _______________________________________________________________________ Package : php Date : January 21, 2009 Affected: 2008.0 _______________________________________________________________________ Problem Description: A vulnerability in PHP allowed context-dependent attackers to cause a denial of service (crash) via a certain long string in the glob() or fnmatch() functions (CVE-2007-4782). A vulnerability in the cURL library in PHP allowed context-dependent attackers to bypass safe_mode and open_basedir restrictions and read arbitrary files using a special URL request (CVE-2007-4850). An integer overflow in PHP allowed context-dependent attackers to cause a denial of serivce via a special printf() format parameter (CVE-2008-1384). A stack-based buffer overflow in the FastCGI SAPI in PHP has unknown impact and attack vectors (CVE-2008-2050). A buffer overflow in the imageloadfont() function in PHP allowed context-dependent attackers to cause a denial of service (crash) and potentially execute arbitrary code via a crafted font file (CVE-2008-3658). A buffer overflow in the memnstr() function allowed context-dependent attackers to cause a denial of service (crash) and potentially execute arbitrary code via the delimiter argument to the explode() function (CVE-2008-3659). PHP, when used as a FastCGI module, allowed remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension (CVE-2008-3660). An array index error in the imageRotate() function in PHP allowed context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument to the function for an indexed image (CVE-2008-5498). The updated packages have been patched to correct these issues. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4782 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4850 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1384 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2050 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3658 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3659 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3660 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498 _______________________________________________________________________ Updated Packages: Mandriva Linux 2008.0: 7a652c5161099a807eb67096c1904738 2008.0/i586/libphp5_common5-5.2.4-3.3mdv2008.0.i586.rpm e48275669ba1c1936e6adf0cfdfe9c37 2008.0/i586/php-bcmath-5.2.4-3.3mdv2008.0.i586.rpm 77bbce6d44ef33977caf61c8bf7acdd3 2008.0/i586/php-bz2-5.2.4-3.3mdv2008.0.i586.rpm 995177d832c1ebc80fb9272701471c57 2008.0/i586/php-calendar-5.2.4-3.3mdv2008.0.i586.rpm 7b088350c660056ef612fbd2a54682e8 2008.0/i586/php-cgi-5.2.4-3.3mdv2008.0.i586.rpm eb9bbe3de40891cf1f80790d607b2d0b 2008.0/i586/php-cli-5.2.4-3.3mdv2008.0.i586.rpm 631d10abbce8287e8a5b668b1b29de5f 2008.0/i586/php-ctype-5.2.4-3.3mdv2008.0.i586.rpm 9af5654306d2cf8c9904d5d796a7e473 2008.0/i586/php-curl-5.2.4-3.3mdv2008.0.i586.rpm 947b9d9e7096bebeff2cb6ebc73aac43 2008.0/i586/php-dba-5.2.4-3.3mdv2008.0.i586.rpm 31e7cb59ee851d12e1d5b978aa2091cf 2008.0/i586/php-dbase-5.2.4-3.3mdv2008.0.i586.rpm d6d198044d437ad5d30902676f13939e 2008.0/i586/php-devel-5.2.4-3.3mdv2008.0.i586.rpm bda8dd71c91f5940e8b22c93959e7720 2008.0/i586/php-dom-5.2.4-3.3mdv2008.0.i586.rpm 17de69302a54194ee76fa561ca8d0fe7 2008.0/i586/php-exif-5.2.4-3.3mdv2008.0.i586.rpm f4735d6bd86b617815e080ad729b7433 2008.0/i586/php-fcgi-5.2.4-3.3mdv2008.0.i586.rpm 9e2a645b0b121a4a4f9853b8863e10e4 2008.0/i586/php-filter-5.2.4-3.3mdv2008.0.i586.rpm 53670f7055d3cde333d9742030e3fd5b 2008.0/i586/php-ftp-5.2.4-3.3mdv2008.0.i586.rpm 46a7eb8f4a4d00c332e96e3bb0d31189 2008.0/i586/php-gd-5.2.4-3.3mdv2008.0.i586.rpm 7241fdefb6d2a5ea4eec96a18bf31ed2 2008.0/i586/php-gettext-5.2.4-3.3mdv2008.0.i586.rpm 62c52647488c0a7080001aaf462640f0 2008.0/i586/php-gmp-5.2.4-3.3mdv2008.0.i586.rpm 5941034e1f012edffbe1e5523adb17c8 2008.0/i586/php-hash-5.2.4-3.3mdv2008.0.i586.rpm 07372e866901555fab3152b7702afdc2 2008.0/i586/php-iconv-5.2.4-3.3mdv2008.0.i586.rpm da94c20e59e785a439ab728c2194f897 2008.0/i586/php-imap-5.2.4-3.3mdv2008.0.i586.rpm ad640383a672f2bda97a7c2f6f8d623c 2008.0/i586/php-json-5.2.4-3.3mdv2008.0.i586.rpm 793b27eaa0d344b83dd5de1628c5d3b0 2008.0/i586/php-ldap-5.2.4-3.3mdv2008.0.i586.rpm 5a1aeae14535d5493a9cbd1d5db34b50 2008.0/i586/php-mbstring-5.2.4-3.3mdv2008.0.i586.rpm 461333bd3c9a9107b542da36e88e951e 2008.0/i586/php-mcrypt-5.2.4-3.3mdv2008.0.i586.rpm 367150bc9718c4b7a022ab5bb076bd35 2008.0/i586/php-mhash-5.2.4-3.3mdv2008.0.i586.rpm 4c2ca88ed728a7d98e9c09b0fa2efd96 2008.0/i586/php-mime_magic-5.2.4-3.3mdv2008.0.i586.rpm aa755604d1444c522713f6d6c366b5bd 2008.0/i586/php-ming-5.2.4-3.3mdv2008.0.i586.rpm a676178533ac458dac1410eae8ea67da 2008.0/i586/php-mssql-5.2.4-3.3mdv2008.0.i586.rpm 593b42628393ee668b75b6f8622fa7b0 2008.0/i586/php-mysql-5.2.4-3.3mdv2008.0.i586.rpm aebff890814488282f7ea6a29c01d7a1 2008.0/i586/php-mysqli-5.2.4-3.3mdv2008.0.i586.rpm 6e315b85744911432ef40e914e2f41f5 2008.0/i586/php-ncurses-5.2.4-3.3mdv2008.0.i586.rpm a0cec0628667e13d26e89d6fc6541497 2008.0/i586/php-odbc-5.2.4-3.3mdv2008.0.i586.rpm 90b55faea598db1f6a5b9709e06fa71b 2008.0/i586/php-openssl-5.2.4-3.3mdv2008.0.i586.rpm 1ca2e330d6e20381a63c5bba97591ac9 2008.0/i586/php-pcntl-5.2.4-3.3mdv2008.0.i586.rpm 08f4d6146d3e26ef97a5015f1bf8b132 2008.0/i586/php-pdo-5.2.4-3.3mdv2008.0.i586.rpm 8e7f471066f4580cb373789ec27906c0 2008.0/i586/php-pdo_dblib-5.2.4-3.3mdv2008.0.i586.rpm e6f2baee019de6759ad3913b31439d3c 2008.0/i586/php-pdo_mysql-5.2.4-3.3mdv2008.0.i586.rpm 97ac80b266b67a4a9578a9dfc921c940 2008.0/i586/php-pdo_odbc-5.2.4-3.3mdv2008.0.i586.rpm 04cdad00191a250ce4b29a1c01fe3eef 2008.0/i586/php-pdo_pgsql-5.2.4-3.3mdv2008.0.i586.rpm 8944ef0d51c1db6d781151269cd1a3a4 2008.0/i586/php-pdo_sqlite-5.2.4-3.3mdv2008.0.i586.rpm 2b4f964b98d82e01ebcd1389b7b5cfd9 2008.0/i586/php-pgsql-5.2.4-3.3mdv2008.0.i586.rpm f378eede095e848f47dd2752d6d1d1ee 2008.0/i586/php-posix-5.2.4-3.3mdv2008.0.i586.rpm 8aa798c5a0b491f659c703f88299c7bb 2008.0/i586/php-pspell-5.2.4-3.3mdv2008.0.i586.rpm e651db4d7886759a2274354cb0afe020 2008.0/i586/php-readline-5.2.4-3.3mdv2008.0.i586.rpm cfe33d6e4bb79c7d0f8c9006207b894f 2008.0/i586/php-recode-5.2.4-3.3mdv2008.0.i586.rpm cffccd3024397701c9c2a449bae1471d 2008.0/i586/php-session-5.2.4-3.3mdv2008.0.i586.rpm deefc043ef2733636a537f22a851016e 2008.0/i586/php-shmop-5.2.4-3.3mdv2008.0.i586.rpm d2e3fd9852c298b807f4ac2831e7c0eb 2008.0/i586/php-simplexml-5.2.4-3.3mdv2008.0.i586.rpm ab317dd79631f92b22c56e89077798a1 2008.0/i586/php-snmp-5.2.4-3.3mdv2008.0.i586.rpm 7eb6e93e6da916103e72727493204a32 2008.0/i586/php-soap-5.2.4-3.3mdv2008.0.i586.rpm a14e42046640f7562eead57135d134c9 2008.0/i586/php-sockets-5.2.4-3.3mdv2008.0.i586.rpm 507f4f1d51c13ba5e65783d324760bb1 2008.0/i586/php-sqlite-5.2.4-3.3mdv2008.0.i586.rpm 528d87f5221deb269f2e7eba7c62b561 2008.0/i586/php-sysvmsg-5.2.4-3.3mdv2008.0.i586.rpm 2ae1cf711351a79e54d075a56baa803f 2008.0/i586/php-sysvsem-5.2.4-3.3mdv2008.0.i586.rpm 1f43453db03dfaa9a4ad6d75c8032fbf 2008.0/i586/php-sysvshm-5.2.4-3.3mdv2008.0.i586.rpm 99c765052a26be7b3c68cb3999d03301 2008.0/i586/php-tidy-5.2.4-3.3mdv2008.0.i586.rpm 568385e201d2e9c494132608374c67cb 2008.0/i586/php-tokenizer-5.2.4-3.3mdv2008.0.i586.rpm aa3d73e0f32f510134808c48e5730c28 2008.0/i586/php-wddx-5.2.4-3.3mdv2008.0.i586.rpm a8a7238a7bbb2c0458cee41764bf4167 2008.0/i586/php-xml-5.2.4-3.3mdv2008.0.i586.rpm 89dabad2ce9ff9e1330998e8171a7f76 2008.0/i586/php-xmlreader-5.2.4-3.3mdv2008.0.i586.rpm 2b973524ec6301282d9a6ebf943898bf 2008.0/i586/php-xmlrpc-5.2.4-3.3mdv2008.0.i586.rpm c019b015e1c7738b7c268bed9738a274 2008.0/i586/php-xmlwriter-5.2.4-3.3mdv2008.0.i586.rpm 444e7b7b981f842b0851159c2b60e3f2 2008.0/i586/php-xsl-5.2.4-3.3mdv2008.0.i586.rpm ac9ce0fd528f5b3f4ab671c48a35c588 2008.0/i586/php-zlib-5.2.4-3.3mdv2008.0.i586.rpm ecf0b17dd6998db1a0a7ece0f992db56 2008.0/SRPMS/php-5.2.4-3.3mdv2008.0.src.rpm Mandriva Linux 2008.0/X86_64: 89ba8b65286114fa3ce605c877f434ff 2008.0/x86_64/lib64php5_common5-5.2.4-3.3mdv2008.0.x86_64.rpm 0ff29b438923c6cdd74d373e7d2e4850 2008.0/x86_64/php-bcmath-5.2.4-3.3mdv2008.0.x86_64.rpm fb4fd6c767ab0efcf8fd8893dc218e00 2008.0/x86_64/php-bz2-5.2.4-3.3mdv2008.0.x86_64.rpm 8d100cf17c2d2b33c9d985294c2522a9 2008.0/x86_64/php-calendar-5.2.4-3.3mdv2008.0.x86_64.rpm 51735968841ed984937d8bbb129ec515 2008.0/x86_64/php-cgi-5.2.4-3.3mdv2008.0.x86_64.rpm 271b559fa4a5dff7654f908069a3aba8 2008.0/x86_64/php-cli-5.2.4-3.3mdv2008.0.x86_64.rpm 2558176bb0d83e12615764374359ed33 2008.0/x86_64/php-ctype-5.2.4-3.3mdv2008.0.x86_64.rpm e813815fb84332d469adc6d2a2cf52d9 2008.0/x86_64/php-curl-5.2.4-3.3mdv2008.0.x86_64.rpm 03be7783fbd67080a3ac7ac203e12d89 2008.0/x86_64/php-dba-5.2.4-3.3mdv2008.0.x86_64.rpm 48ea284238fa82d159fb665b950162fb 2008.0/x86_64/php-dbase-5.2.4-3.3mdv2008.0.x86_64.rpm 1b680313ae918dbd6d0605ceb1c37b83 2008.0/x86_64/php-devel-5.2.4-3.3mdv2008.0.x86_64.rpm fb9657c80f96d90af8cedb65d5fbc8af 2008.0/x86_64/php-dom-5.2.4-3.3mdv2008.0.x86_64.rpm badbfa62b773421cbbec3da18d368eaf 2008.0/x86_64/php-exif-5.2.4-3.3mdv2008.0.x86_64.rpm dd405943aa2f7073c00a3e1c0a305c4f 2008.0/x86_64/php-fcgi-5.2.4-3.3mdv2008.0.x86_64.rpm 1f240a39bbffab1b89df0af047c04ef9 2008.0/x86_64/php-filter-5.2.4-3.3mdv2008.0.x86_64.rpm 09f930a49b343b5686b9e1b906221f29 2008.0/x86_64/php-ftp-5.2.4-3.3mdv2008.0.x86_64.rpm cee4006868185c9d1cccf0ae2764737a 2008.0/x86_64/php-gd-5.2.4-3.3mdv2008.0.x86_64.rpm 1f90f96d383ac9ff444648fac9706bdd 2008.0/x86_64/php-gettext-5.2.4-3.3mdv2008.0.x86_64.rpm 3b831a3789ec11c038f4fb0d08badd92 2008.0/x86_64/php-gmp-5.2.4-3.3mdv2008.0.x86_64.rpm 6c79f8f172d84c278719fd78edb9e8bf 2008.0/x86_64/php-hash-5.2.4-3.3mdv2008.0.x86_64.rpm c78688c8a299337f48708e49fb642f35 2008.0/x86_64/php-iconv-5.2.4-3.3mdv2008.0.x86_64.rpm cdca33614db11df4d28c195b9e0c2d1b 2008.0/x86_64/php-imap-5.2.4-3.3mdv2008.0.x86_64.rpm 42827e2ff517d47d340d134b482956cc 2008.0/x86_64/php-json-5.2.4-3.3mdv2008.0.x86_64.rpm 47b84f7a9c064edec70862dcd62407c2 2008.0/x86_64/php-ldap-5.2.4-3.3mdv2008.0.x86_64.rpm 7eb75ae9d26308c1f047da264195e0bc 2008.0/x86_64/php-mbstring-5.2.4-3.3mdv2008.0.x86_64.rpm ca8404c82e14b76f34505441d7993756 2008.0/x86_64/php-mcrypt-5.2.4-3.3mdv2008.0.x86_64.rpm 137d94b0bc22b2e3269b69afb2521bc8 2008.0/x86_64/php-mhash-5.2.4-3.3mdv2008.0.x86_64.rpm 244873acdf03db7e75960dfe7410406a 2008.0/x86_64/php-mime_magic-5.2.4-3.3mdv2008.0.x86_64.rpm 3cb0ed9c97f740b776365e7ee71c2af2 2008.0/x86_64/php-ming-5.2.4-3.3mdv2008.0.x86_64.rpm 1cb62b1372b16ad4ebe32f31f9e6b7f9 2008.0/x86_64/php-mssql-5.2.4-3.3mdv2008.0.x86_64.rpm 9de3e8c8158818bd10e6131c5cb07dd5 2008.0/x86_64/php-mysql-5.2.4-3.3mdv2008.0.x86_64.rpm 9cc32cd7dd1be8ec371f9d1bb71b686e 2008.0/x86_64/php-mysqli-5.2.4-3.3mdv2008.0.x86_64.rpm 944bfc97936ff94f6f844e0cbd0dd95a 2008.0/x86_64/php-ncurses-5.2.4-3.3mdv2008.0.x86_64.rpm 4760b4ab342f44ac87c7f2da54410c0e 2008.0/x86_64/php-odbc-5.2.4-3.3mdv2008.0.x86_64.rpm 3829b2387029cb3a19b2a2636623f2fa 2008.0/x86_64/php-openssl-5.2.4-3.3mdv2008.0.x86_64.rpm 62e1e8f8b40e2a8221ea794d9c2b6b5d 2008.0/x86_64/php-pcntl-5.2.4-3.3mdv2008.0.x86_64.rpm 025965d8df8de7590c8f0d8d4108be78 2008.0/x86_64/php-pdo-5.2.4-3.3mdv2008.0.x86_64.rpm 2868838706493b2a44f599482fb1d651 2008.0/x86_64/php-pdo_dblib-5.2.4-3.3mdv2008.0.x86_64.rpm bd8fe64ddc3ff3600126514157b9e511 2008.0/x86_64/php-pdo_mysql-5.2.4-3.3mdv2008.0.x86_64.rpm 876f1ad50e59fe4a27860b1dcf6afced 2008.0/x86_64/php-pdo_odbc-5.2.4-3.3mdv2008.0.x86_64.rpm e0e86de461e6da0c154cd8408ba7ff2b 2008.0/x86_64/php-pdo_pgsql-5.2.4-3.3mdv2008.0.x86_64.rpm 9a90b3d24a4f6acb8142563869c92d69 2008.0/x86_64/php-pdo_sqlite-5.2.4-3.3mdv2008.0.x86_64.rpm 1139217457e537a2ea3e28ef7b7b8f39 2008.0/x86_64/php-pgsql-5.2.4-3.3mdv2008.0.x86_64.rpm 31377cffd512f021df688f168fa70565 2008.0/x86_64/php-posix-5.2.4-3.3mdv2008.0.x86_64.rpm 12a6e43f9413d93f582582ba5c8cc0d2 2008.0/x86_64/php-pspell-5.2.4-3.3mdv2008.0.x86_64.rpm e257dec42f74358db7ca58d5cc1d524b 2008.0/x86_64/php-readline-5.2.4-3.3mdv2008.0.x86_64.rpm 6cacff3a4b0a61e60e4ad11ebdafc7bf 2008.0/x86_64/php-recode-5.2.4-3.3mdv2008.0.x86_64.rpm 025d4d90a09d6de4836dc45228cff6e7 2008.0/x86_64/php-session-5.2.4-3.3mdv2008.0.x86_64.rpm 908e4379581b86d83d9139879084eb33 2008.0/x86_64/php-shmop-5.2.4-3.3mdv2008.0.x86_64.rpm c18c8de8b1629ec5cd2f51bf4e17e817 2008.0/x86_64/php-simplexml-5.2.4-3.3mdv2008.0.x86_64.rpm dd8b061f27acae1a7371d8aed868ba23 2008.0/x86_64/php-snmp-5.2.4-3.3mdv2008.0.x86_64.rpm 3bb622cd884b6712cd7974f88e88a90b 2008.0/x86_64/php-soap-5.2.4-3.3mdv2008.0.x86_64.rpm 79373a824e2a4a7a0bc900532a1e2801 2008.0/x86_64/php-sockets-5.2.4-3.3mdv2008.0.x86_64.rpm 5d73d8283b43e69d77396f8f01be8bf3 2008.0/x86_64/php-sqlite-5.2.4-3.3mdv2008.0.x86_64.rpm 0b2e447aca5263291991c2da1cadd536 2008.0/x86_64/php-sysvmsg-5.2.4-3.3mdv2008.0.x86_64.rpm 509468b4dbd2935e05e800d9bae37874 2008.0/x86_64/php-sysvsem-5.2.4-3.3mdv2008.0.x86_64.rpm 1324a045c8e5d05ceb954bc8005fce9e 2008.0/x86_64/php-sysvshm-5.2.4-3.3mdv2008.0.x86_64.rpm 832fc2acd82c4cb5806f5c5b6ec31086 2008.0/x86_64/php-tidy-5.2.4-3.3mdv2008.0.x86_64.rpm a026d9e7a62e9a8064ccb34f7bc73e38 2008.0/x86_64/php-tokenizer-5.2.4-3.3mdv2008.0.x86_64.rpm 73b8df410ab637a3349adb520e7ddd2b 2008.0/x86_64/php-wddx-5.2.4-3.3mdv2008.0.x86_64.rpm 35f6c8e61e68c94c7582084b55673c65 2008.0/x86_64/php-xml-5.2.4-3.3mdv2008.0.x86_64.rpm 117931585f5d3457fad1b924286a34b4 2008.0/x86_64/php-xmlreader-5.2.4-3.3mdv2008.0.x86_64.rpm 86d4fc9df8514fede7924268cc87cf69 2008.0/x86_64/php-xmlrpc-5.2.4-3.3mdv2008.0.x86_64.rpm 062ee98ab5ce0675e98adee65131f3f4 2008.0/x86_64/php-xmlwriter-5.2.4-3.3mdv2008.0.x86_64.rpm 9cad5ac838e1f0f67c55702d4df50c30 2008.0/x86_64/php-xsl-5.2.4-3.3mdv2008.0.x86_64.rpm 525169a83f9850cbcd3903af389def55 2008.0/x86_64/php-zlib-5.2.4-3.3mdv2008.0.x86_64.rpm ecf0b17dd6998db1a0a7ece0f992db56 2008.0/SRPMS/php-5.2.4-3.3mdv2008.0.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iD8DBQFJd4VZmqjQ0CJFipgRAqRGAJ9QJxYLp5zE2eOo9WQZ3OkzB4CeWACg9aLi A2E6w1lLiqFmL7RnEdjkypY= =5YNA -----END PGP SIGNATURE----- ------------=_1232580615-14940-7754 Content-Type: text/plain; name="message-footer.txt" Content-Disposition: inline; filename="message-footer.txt" Content-Transfer-Encoding: 8bit To unsubscribe, send a email to sympa ( -at -) mandrivalinux.org with this subject : unsubscribe security-announce _______________________________________________________ Want to buy your Pack or Services from Mandriva? Go to http://www.mandrivastore.com Join the Club : http://www.mandrivaclub.com _______________________________________________________ ------------=_1232580615-14940-7754-- Share this post Link to post
