php5 php5: Security update to fix various security issues php5: Sicherheitsupdate für mehrere Sicherheitsprobleme The following issues have been fixed in PHP, which were spotted by the MOPB project or fixed in PHP 5.2.3 release: - missing open_basedir and safe_mode restriction (CVE-2007-3007) - chunk_split() integer overflow (CVE-2007-2872) - DoS condition in libgd's image processing (CVE-2007-2756) - possible super-global overwrite inside import_request_variables() (CVE-2007-1396) - buffer overflow inside user_filter_factory_create() (CVE-2007-2511) - remotely trigger-able buffer overflow inside bundled libxmlrpc (CVE-2007-1864) - CRLF injection inside ftp_putcmd() (CVE-2007-2509) - remotely trigger-able buffer overflow inside make_http_soap_request() (CVE-2007-2510) - MOPB-41-2007:PHP 5 sqlite_udf_decode_binary() Buffer Overflow Vulnerability (CVE-2007-0906) - MOPB-03-2007: deep recursion DoS (CVE-2007-1285) Die folgenden Probleme wurden behoben: - fehlende open_basedir und safe_mode Restriktionen (CVE-2007-3007) - chunk_split() Integer Überlauf (CVE-2007-2872) - DoS Verwundbarkeit in libgd's Bildverarbeitungsroutinen (CVE-2007-2756) - potentieller super-global Overwrite in import_request_variables() (CVE-2007-1396) - Pufferpüberlauf in user_filter_factory_create() (CVE-2007-2511) - entfernt auslösbarer Pufferüberlauf in der internen libxmlrpc (CVE-2007-1864) - CRLF Injection in ftp_putcmd() (CVE-2007-2509) - entfernt auslösbarer Pufferüberlauf in make_http_soap_request() (CVE-2007-2510) - MOPB-41-2007:PHP 5 sqlite_udf_decode_binary() Pufferüberlauf (CVE-2007-0906 - MOPB-03-2007: DoS Verwundbarkeit mittels tiefer Rekursion (CVE-2007-1285) security apache2-mod_php5 i586 abe64c7a1082862d5489ee1653b020d68448a046 apache2-mod_php5 ppc 8ff21c97c051c35a8d335da672d2ddf4d271153d apache2-mod_php5 x86_64 8af3a0b97a3b02c8fa9201f37a4d46b9906e47ea php5 i586 688e12b56edaa25150af90b02c47037bb2fa7b48 php5 ppc 61a63f9dd96d32b51b822d29e8c3f7bbe1b2da87 php5 x86_64 0ba10a384def4b2fa104a7dcdcb4a921333b8550 php5-bcmath i586 2a01abe73b5aeb9091ef1a5ce0511b9ef5207574 php5-bcmath ppc 59e62a426ece78437356e3f6b5506a6b29417e8f php5-bcmath x86_64 07b466783727d32c36b410933260879b2b440cdc php5-bz2 i586 f075807664daa6b6797a369f5d0e32a5328c85c5 php5-bz2 ppc 4b772b86066ac5198eab26e830b62bb1f1964bf5 php5-bz2 x86_64 f7e4f2e5a0c5a89b89dbc47902164a4efaed8b51 php5-calendar i586 5b4bcf1767e1989fd5a76690e92d484b89d98cd0 php5-calendar ppc 868ce1a689f6c1d094a9e5b30a5077f0934476ef php5-calendar x86_64 ccb33157ff6441b4048c53324b34c08e15e16710 php5-ctype i586 54d8e1b797554808f8f58cacca11dcdd5e52c094 php5-ctype ppc 9f29259a45fa2a6d158432680d3e168652c1d6df php5-ctype x86_64 e3b5173deb4d2e807799f8b85ce1476f0b9980f8 php5-curl i586 5847e1f979bcdb15751c9645e514f95336e3351a php5-curl ppc 0fbab9c50c8755c2d166666e0dda1a69fcfa24eb php5-curl x86_64 a49a46f80f9156e618d3354b1de42fb28f9e1975 php5-dba i586 4c83bedd2e2cfaad8ca67a4d1436cc5994f9f804 php5-dba ppc 01741cc79e3d0d17eeff7591f1fbd7f69a5ce8e0 php5-dba x86_64 12cbab5065d3e726f2ff8b99710e6c430ed31800 php5-dbase i586 951585a3ecbb14b9ce2572d68418c93af2c6ed90 php5-dbase ppc 653cfd320c9570a8009943647775b75e4c380a72 php5-dbase x86_64 9d5eb9be6a74eaea2c8969eb7ee2d91c80196d83 php5-devel i586 b8fe4ddab433971449fdb28bcff0543f851c6f31 php5-devel ppc 1c1dc1f54ae1591aacbb09ea0c7a4ddbd91014a2 php5-devel x86_64 3aad037bed23dcf0a249da51570b5767055eaa3f php5-dom i586 5832bfbb46b6dde7729e3c177973b72d9a62a2dc php5-dom ppc 0ebf1d71db5eeace5045a4188d83d400ef0c70f1 php5-dom x86_64 968ba3127881f29033fbcf7a290fbb280b275804 php5-exif i586 422b7e772117bfd63b19be0c7df96c6f0d785a20 php5-exif ppc d34de06bda534f1c13203d27747c70469375603e php5-exif x86_64 0bb2aff7e894ab709e2a8c648e92f986ca5fcb45 php5-fastcgi i586 827019c01cdb5b596849d67eb5dd9e0b78368346 php5-fastcgi ppc 07b2c70536c1693d99b77584c2601ef5d8fcfd7c php5-fastcgi x86_64 9b389f4bd57a32660ee2d8e3c7fde3169bfd8adb php5-filepro i586 10c435cf7b09fa184510db973b5089782a394eaf php5-filepro ppc 37aaf0b43e61e23905ba34d11d994b65ff40efb4 php5-filepro x86_64 f1cc6c2984e68d9434e745ae0eb2a69375b912a6 php5-ftp i586 c0879bc81409b1204d204bb27a86c636a99660bf php5-ftp ppc a62fa7dc42996f225d209acf0688113700fa48a6 php5-ftp x86_64 dbd38b8f7618cfe7714fb463e7ea5fee52041c79 php5-gd i586 b500261d780168dad7af42e4c83d6ca2bd567136 php5-gd ppc 0828e0f3207a52f59d135e3492df66bd6fed0931 php5-gd x86_64 3a096bb0b56964d69f6b06f849934265ae5573c5 php5-gettext i586 b6a5cd840b6719363c7f5feca7c38b61004b0ca9 php5-gettext ppc 7ab7831c355b9a45f759ea2af0b5fa2fb848a9ef php5-gettext x86_64 9784a0a47aee74af1541e4c6d376aab5f038b71a php5-gmp i586 3f4f2ef34c4c156b498a725c1acb3a375eddc111 php5-gmp ppc 2f3666783d7238ba2e985841d4752f3604abdee1 php5-gmp x86_64 1496d27855f157cc99789f79070d1f878f0b3f1b php5-iconv i586 fb80ec1ba13c2f1e500c27f969b812cc34d3c6d1 php5-iconv ppc 100239b228f10a02c71d95f9081a12a54b61a190 php5-iconv x86_64 9b3d6bf6cb3c714130c268149d164c71b8435efe php5-imap i586 2f80b15d36603145d957427f844431ab00ed7e40 php5-imap ppc 0ecb17026ecaf7dcfb09ecd63df5638940a2a811 php5-imap x86_64 8b98654a9e612096c58135375f4aea8c75a172fc php5-ldap i586 ed647309c99819c2c60c3e5a2bd7a8ce1621c443 php5-ldap ppc 91775c9bca6601ea26c4dc341b6109827848c518 php5-ldap x86_64 1c7ddfe181fcb585df5bbbdf5e1cc4a9bc14d4f2 php5-mbstring i586 f8e0de816210dc585176ffa2d553371414e91759 php5-mbstring ppc 855248424d0bc2e30162c700e35eb5dba790dbc1 php5-mbstring x86_64 6f04e1f4e34b6d2915aa7e87672ae90a814a4e96 php5-mcrypt i586 935ff0352c440bd3e2c9eca9d9fde82638867f30 php5-mcrypt ppc acb30b27b871aaf2d4bcbb3a54941cb1eb243bc3 php5-mcrypt x86_64 be3975eb90d9a9067fdfa14ade8525dbbbcd0bf6 php5-mhash i586 ab6432fe25339b863201d2229d629342edca66ee php5-mhash ppc c639cb989135246a26de95a984367a1c9dbda16a php5-mhash x86_64 4d7b1c9143410c75ff40b051c51a370e787a5aef php5-mysql i586 a39641ef5537ccdc43e1df459b96b88b337cdaf5 php5-mysql ppc 1f8c189f9fce9579ff9c05f85fff88f22d054bef php5-mysql x86_64 00053f80adeb8480df5febc98bdeccdf1a741549 php5-mysqli i586 99af2a4f1315284a00b93b49c92ddcc96462193b php5-mysqli ppc 80fdf362696492b9ec0a28141c3136609e829322 php5-mysqli x86_64 533ee74259423ae95244ac74ef1c57cbbf6472c3 php5-ncurses i586 0bffca9ad7e5b858268886bff49475fef97ed99d php5-ncurses ppc 7cffe50673955917ad2dc017c39ed2fe8d13d653 php5-ncurses x86_64 e7d80a10848a415bff8d6719a413a572087d3e70 php5-odbc i586 da8f12c931608b7888c3d9c0fdc4903a18340f63 php5-odbc ppc 93553351bbcb57ca35f5cd28a8541ed36b8cf5f5 php5-odbc x86_64 5df29850e414e1d164bbf940e692b1225ddc3e9e php5-openssl i586 745697b3ed8fa0377d8d895bd3b55cf1ff623b5e php5-openssl ppc adb31c9bca05e92b9f614b80bef117bf15927083 php5-openssl x86_64 6ba1a51c7f3ffa0efa73d914f631dc375dc512e5 php5-pcntl i586 e2f730da35de52edd1815ac2c6ec5dd3fbe0586c php5-pcntl ppc 2369332fe38d0d6e7c2952ec26a8d936bc240c4e php5-pcntl x86_64 d983900e61023225d9d36d3f83c55f388b3def2f php5-pdo i586 8e5e5ef62c9dab1d8ea93cd93e7351ed4f75ed95 php5-pdo ppc d6647a3867691591b21d47e66e85b5a055cf66da php5-pdo x86_64 cf1ae0040b0cd9ad447ecde9ed78fed5d2214c02 php5-pear i586 f61313bae10438b60d24b5f2566c0d183c98e5ed php5-pear ppc 6649de32ac066394094f15255853e343f3360245 php5-pear x86_64 d9566493ea97c894dfba2215c839b312c1babc7b php5-pgsql i586 18aad62bfbc23ffc5a7ff1b96c0e9216586da9e1 php5-pgsql ppc 82a61d5e83d877c9f4fa53f318b5e2c30ed788ad php5-pgsql x86_64 0c7316bac62ca36efaf3d1233ee40af9106c56b2 php5-posix i586 81a18bddf743ecc065ba02c479ef8d96cdd75157 php5-posix ppc 8aec4a932808990021e026bc81e0c40d410333b2 php5-posix x86_64 b7d737ece463613aba150b83a7d22a5a0b5451f1 php5-pspell i586 587fb7c65c6d39325893f09b97357ea53b1dcbeb php5-pspell ppc 63cecdf9cad29bc843f214bfa924444a5cb2914d php5-pspell x86_64 b9eae21298dde1d921c025cf9d2c7907fbb866ef php5-shmop i586 36e87a6e88482fca8b5a4ded2d71137568834225 php5-shmop ppc b302ee92be0e5649a9f9805854b7177f23e77ef5 php5-shmop x86_64 fdb0a2598dbb0cc3dcdb158799f0a65057981cb3 php5-snmp i586 fb6b0cd94cba32a4d125824889625001a4e1b8c3 php5-snmp ppc 231d89103741e359e35c655816028ab83bf21998 php5-snmp x86_64 79673a95278a96250bad3a82f9861f37de42264c php5-soap i586 d96d3434008ea75c5517f28c34229a75a11c2331 php5-soap ppc e9f2e3523e48323790ca36daa198550bdf4b8f84 php5-soap x86_64 b8be999b32748fcd0209b0120648971d217c4b76 php5-sockets i586 a4bfeea1f579db1b45fd6cb0f850efcb8bd635dc php5-sockets ppc 31bd1868ba78868865035c55bfd3f7b9cf91dfeb php5-sockets x86_64 84eab402aa5870bdaae182345810d72002195119 php5-sqlite i586 5620e904f2ba5fa930c11fea206589ac993dd941 php5-sqlite ppc 80e311a6124714cfb20a3fa992d38fa22b177bfd php5-sqlite x86_64 931cab05a5dffb14e7f35944c6b8ca325db7d319 php5-sysvmsg i586 99b6f0a60e62ccef77d5f55b4583199be4c4a3b5 php5-sysvmsg ppc ba17a137274ddb6d41cac9e2758222f966dde4a2 php5-sysvmsg x86_64 06af169017944530f963adab51694bcc3ff4d798 php5-sysvsem i586 0aaf0e7b94676465869d01faf6c029ca20625a60 php5-sysvsem ppc b6cb64ccacde2a270ff30da2073f9ff1f1842108 php5-sysvsem x86_64 cc0cd47f26d39ef5ebd9784cdd0695cc9165a942 php5-sysvshm i586 6318d3fa1077de4522b4eeff97019798a21ef5b6 php5-sysvshm ppc ed44d2090ebdd52c3329bfe7ac700b60b55769cc php5-sysvshm x86_64 882b87bb7bef257ebf57f28c408a416d5993f43c php5-tidy i586 b12611ff31f7fe41e27d5f6e23af3048e393ca2e php5-tidy ppc 9a942a0b34eb6fa500141e8b91f2f7d9f1423b8f php5-tidy x86_64 ce2b028ea1080b5b7bc50c7f04649a32e42c12ac php5-tokenizer i586 993021b02f865851d3ad919b0aa2615a692771c9 php5-tokenizer ppc 44649cf77d7fa2e13a5cfc69f10fa2730865dfe1 php5-tokenizer x86_64 800a3ffc63aadf7df84f1506d7cfb9c286f328aa php5-wddx i586 3ff466a890313252abe64d2343f1e00f7a47f523 php5-wddx ppc aa61d6f488916ef42e17839ada1edb71ab1e5b3c php5-wddx x86_64 2cfa32bc870413e91a063045c0467b09a5763a89 php5-xmlreader i586 fb4014187e69295d893220b5148154519a98afc8 php5-xmlreader ppc a83924b6618e4a5006c04698deb9800e4af83c0f php5-xmlreader x86_64 d9e3bff344cb491c092e5457634e95bc695df6d0 php5-xmlrpc i586 1b071d25f44774c3f625a7ff427e2d7dba29ef78 php5-xmlrpc ppc 061fdbe67ec532f6853fc3f02cf31316456011de php5-xmlrpc x86_64 5713e177db88fa5a5fa777fa78e1d7b164d0bf82 php5-xsl i586 aef5e80eebc50fb92e6cf339079a2fa873efd7fc php5-xsl ppc 4a0ccdb54b9959dfe19da5be9aecbec54e83dae9 php5-xsl x86_64 30ea7c8e6815df93a6228972130f7db01c2f7624 php5-zlib i586 0577949e4ea565e69fe33c592052627c8470d4df php5-zlib ppc 0d9a7c07202975f494ff6c205f585b7c9d7e0ecf php5-zlib x86_64 fa0e0f06c517294fb809d82810f6f367446ea826