php5This update fixes several security problems in PHP.Dieses Update behebt mehrere Sicherheitsprobleme in PHP.CVE-2007-0906: Multiple buffer overflows in PHP before
5.2.1 allow attackers to cause a denial of service and
possibly execute arbitrary code via unspecified vectors in
the (1) session, (2) zip, (3) imap, and (4) sqlite
extensions; (5) stream filters; and the (6) str_replace,
(7) mail, (8) ibase_delete_user, (9) ibase_add_user, and
(10) ibase_modify_user functions.
CVE-2007-0907: Buffer underflow in PHP before 5.2.1 allows
attackers to cause a denial of service via unspecified
vectors involving the sapi_header_op function.
CVE-2007-0908: The wddx extension in PHP before 5.2.1
allows remote attackers to obtain sensitive information via
unspecified vectors.
CVE-2007-0909: Multiple format string vulnerabilities in
PHP before 5.2.1 might allow attackers to execute arbitrary
code via format string specifiers to (1) all of the *print
functions on 64-bit systems, and (2) the odbc_result_all
function.
CVE-2007-0910: Unspecified vulnerability in PHP before
5.2.1 allows attackers to "clobber" certain super-global
variables via unspecified vectors.
CVE-2007-0911: Off-by-one error in the str_ireplace
function in PHP 5.2.1 might allow context-dependent
attackers to cause a denial of service (crash).
CVE-2006-6383: PHP 5.2.0 and 4.4 allows local users to
bypass safe_mode and open_basedir restrictions via a
malicious path and a null byte before a ";" in a
session_save_path argument, followed by an allowed path,
which causes a parsing inconsistency in which PHP validates
the allowed path but sets session.save_path to the
malicious path. And another fix for open_basedir was added
to stop mixing up its setting in a virtual host environment.
CVE-2007-0906: Mehrere Pufferüberläufe in PHP vor 5.2.1
erlauben Angreifern einen Denial of Service Angriff und
potentiell Schadcode durch unbekannte Methoden in den (1)
session, (2) zip, (3) imap, und (4) sqlite Extensions; (5)
stream Filtern; und den (6) str_replace, (7) mail, (8)
ibase_delete_user, (9) ibase_add_user, und (10)
ibase_modify_user Funktionen auszuführen.
CVE-2007-0907: Pufferüberlauf in PHP vor 5.2.1 erlaubt
Angreifern einen Denial of Service Angriff via
unspezifizierten Methoden durch die sapi_header_op Funktion.
CVE-2007-0908: Die wddx Extension in PHP vor 5.2.1 erlaubt
entfernten Angreifern private Informationen durch
unbekannte Methoden zu erlangen.
CVE-2007-0909: Mehrere Formatstring Probleme in PHP vor
5.2.1 erlauben entfernten Angreifern Schadcode auszuführen
durch Formatstring Angaben an (1) alle *print Funktionen
auf 64-bit Systemen, und (2) die odbc_result_all Funktion.
CVE-2007-0910: Ein unspezifiziertes Problem in PHP before
5.2.1 erlaubt Angreifern verschiedene super-global
Variablen zu zerstören.
CVE-2007-0911: Eine Off-by-One Überlauf in der Funktion
str_ireplace kann u. U. zu einem Absturz führen.
CVE-2006-6383: PHP 5.2.0 und 4.4 war es lokalen Benutzern
möglich die safe_mode und die open_basedir Einstellungen zu
umgehen.
Ein weiterer Patch für open_basedir sorgt dafür, dass in
Virtual-Host Umgebungen die Einstellungen nicht
durcheinander kommen.
securityapache2-mod_php5i586faca338f0ba4b672cbb8e638ca2ae4b176d6b45e02a0d5e79a19f487cd181fa13e6687326626cc34b5f190bb9830b0297c687b78455d93f593a6f6e9apache2-mod_php5ppc525cac2645a36526133b167b46e48f62e77a4d52ec6d71b3f75d45646e96d9d1f9c6b7cdb5cb50a7a19ad7ee16d1d6ba39665d2c5e96d3715a5a5f36apache2-mod_php5x86_648e481b46b681d4106252fe37dcc11fc265d7efc8491f427618c4f41af9e057aca2538e719aa55747876cc16c2fb6d1ad537909a007e6734f74cf274fphp5i586810e96861a716fd1dd7b83ff755d914e68f1e85b9c3be316674cf9672e69d44a160a7c8d26e4ff687483fcc715d81faf372a37940843142edcfb5ff1php5ppc90dc6ae715eebb5a2218bcd6f5d48849ab906e4ead86738fe60cdbcfa861ef35dda93a9270aed80e1f3b20bbdf939a54d4ef6ed3eec352c8474d0cafphp5x86_643ce4ca4e42d43966d9b3ac9b90331fc733166cc2a9526da361fd72af7a07b51c4cb892682d500de27d15b689aa917330e9394602d7e2e5cbd29dc8cbphp5-bcmathi5869f71d1811ccfd7806db081cc92bda02747d36817bde1cd96ff4d84ac023fac520d10c43dca6a6a8dphp5-bcmathppcb4d7c170de49ffded47ad7357842e46d2ddda632d9b690fdf735f4fea07a41303f51d738225971cbphp5-bcmathx86_64689de385787e142df0497d96807ee5a0590f0ee248d930d6097f9e28e0c1af3773262bcf95bb3663php5-curli5860b731f730340bb5e1ae1b8611d57782bb0d551d0df9c81df5babefea159f4b3910c765b6a45faee2php5-curlppc2a8aac60e22a342d00a60f228bc5a2ac8c4ce2aa09cd703762927d7f6087b237f6165142ec0caa8ephp5-curlx86_641891f85232ebd89e4ca77ee31a15e3e7c6aceb63c7067b046bef08af34744627d3de4df3370a62b7php5-dbai58609c18aca16fbebfaff0ea639f023db5392f473129813eed8eb0f480512b2f4c954de7ac843b2df473402f58f5366993d5c77cd42f21417cb117ea72fphp5-dbappc264cd5445ff3c5299771b30b0b6addeb8a688522ea76109a2d3a6994ac66091f7019a233dac58527php5-dbax86_64b167375b72475e0980908452f59b39f7d4f8e8d1d2e81cd770897a1889f265c0f8984b1d74eecefaa3a9b2b8303ac6af703019b86ec796a5971d8f30php5-develi586a191ba38638783faeb4ddbb09c2d085b11ad53daff75d5c999fb535b66ced5e0b1ebcc9230ce601edafb1cc66792cb15d7fd562d69c5f37b6855ec43php5-develppc129e61fb1c2352b3ef33557d0e8d5655b04e2ae362ea4e01ccb48dc1f1b7ba5e68d447192cb4e4c3405bd7e23ae64e96ef28875a4274b062c656d4dcphp5-develx86_64397847c2d5ca16c4ed13853813f189223bdbb86ba426df655af2eb808276a8be03ce4c5b15e0bd18c5b4d97a0df1b26f6c6340d49f5f7d1e059dd919php5-domi586536d4ccf41b65d89b9aa194ae9aa9cc72161c4b4d69bd024176f771b37476d1c80264a18ad73c52cphp5-domppcb9eda68fa3812a79c844ec2699bb2eb170c17ab1ff5c6c466d6bae2c48a876ba333ea8b129d4f263php5-domx86_648da821e51ae9b271ccb2908894f66d4eff2ce5e768833ec1c7089536b9cf324c501b5c0a06c0d819php5-exifi586db748a6e352a418e2faa672672bde92c135fde0409ac97ec15fc2105e60f12a43d9ebe63af0c9c93php5-exifppc08064a2517b8207c65b896ed9bc8adf118cb3545750eed215eeb970e1ce0919fde262b429ee51bc6php5-exifx86_64e7e8f7efc757ff5cfbb41df865c3af6c34ba5ce649553637f9459ed6201c3cffc13914af3a6ba450php5-fastcgii58685446654ecc8c0c09727f616ea4d6471645e9b916e60a2038c96c6d25248fe38f3f0f924e98bb26bd7c565dd09ad98c4c838e7582aee9b344cd0e71aphp5-fastcgippc29ce942ace647beddf6b80491c33126655d8e4e793634a3c244ec28fcf2fd711b9416454bef634e9821019eeef4892a7b06f2a9ef123fc5e1259267bphp5-fastcgix86_6481ab33bc9d6fba3dac8b7faa77da312a03b7545b307c042533282d1a88361eb585670d2e3ed16f520dc50318e8d21a7497a7b7f10543295b28d8a7a5php5-ftpi586b697b5a2fa6c82f28754eaebc6f3f61459b1e9830fb6db63bebe9b34953bc7ca51fe135d29a0ab1aphp5-ftpppc458c2563e1f3ecda6547aaf3bca0dbfc8192413a3bd809b6ffe2deeaf1a8cd30a60d480cb9c590b7php5-ftpx86_645053d480a528c69f77920327e1049436b59b8a4b5c2d53218cbc3be35d0c034a8abbb697ba0da5f82a2ba2e009d0f8872b1dde0cd1396b6e302e2690php5-gdi5862c63c11dc915fd3d8fd20d0f5ddcf5a7d58b383a7165458f8fe1aa9098f2c67d0b89a419e483956cphp5-gdppcd6341b7a441d4713fd592401e22d5609fe7e6c0ce3692d1da75cdaf281d6823b73f7217f09ce710bphp5-gdx86_641dadd3a34b2a54fb1af337f92ec365e020d49b2bf7157cce018024e5e156b2909965e9328227fa82php5-iconvi586d28d2b3845b4873df0199a388eeaf46e319e14177a8a9094ae4cc9611baef6499a0f5bea95fb26015dcfeb54bf44b83a3d2695848f2ba5a5f413ae7aphp5-iconvppcac9fc9cbbe579f5c209891e05bc58ce6446c0ea9bbc34832c567e553280093352e7ebeda41e9a0bc1cdbb00d4e2e2e7451af6a0eedbea8a567efa7cbphp5-iconvx86_64b469a97f7353d0d9d3b369d11948cbd561a500c61b760624962845e5568954c00781bace84b4ea93de336529c53f37876669f62ccfc1df2e52cde4bbphp5-imapi586d9ddbffc6489156aa8120661199e55d07d2427dd966a0e4370c19ec4f1e80511e23cd2bf18bc5a14ce57ffce44b2101e9c7c1bc34822b6fe037d8b36php5-imapppcfbfa2dcb31fb23bdf2f0a1f8f79e7afa5eee6eea1362d60b0730b6598604dd60999b4cc356986bf7e6faaf580a2cf98f192f165e344f23bd8204ef65php5-imapx86_64f267199e8a8becad780c8cf3cce42c704ac04d348ae5bbb3e83d73eb132cdb8cb229302c558565d3dd796d59ea13ffe8f5a85d35fbb18bfb11fafc4dphp5-ldapi58617d0c6ec9d6ca3d34f11060bd5e314507987a4812924c81ef0eecbfc511bc100495cbf65b5eeb0d6php5-ldapppca7ef0bc32e651e8e7922215e47ac7b81f8836cd9d7acc1c55e2b1c00570615546c653ac13fffa8ccphp5-ldapx86_64db67b5dddee829fc56f8669cfa05e42eaea8ec4d5f7ea806f0332937f757a23f643b7230f2b9a006php5-mbstringi5869cc9d085c27249cdac4b6cf31c2c0a6e0c64f429457ab9d32696fc3623d59df1d21bdb9b28384b4ephp5-mbstringppc9b740d6137deae1b44878cef4f71aa33ebaaa9fb2ec9acf86a85712b89fe220f041dada8099703b5php5-mbstringx86_64d8354cc7d55ec4be0a4e40f234438f0098713fedaef86d1a3c284c25bbdd939136369f720d9d644bphp5-mhashi586350649d65ce97b3e0e1569e2274f9bf8a82fcbfe96c11ae9e748b8deb11e5aff7092003c9937b5bdfd417fb46c6de431f348d52823ee3ff4244f871aphp5-mhashppcd6dac31ce5f64808d5a3cc12c29dbef0faedd2070905e23409fc37d44440f050b81dabec71e74197d9da165f5969434f339e495c893d1287d2adafe2php5-mhashx86_6477bc2fa5f183d50cb60757fa2644896120d8f4a638beb75e80061ec6e152d2a253af80b287a3490b54d7f47b1656b6f304b2a7ef500838ead20ffc67php5-mysqli5861ac5b630fad3b84a48c7bae7c0cc2c2afbe4151a46cdb4c56a05d3dad92e33f7251b20a1059a5125php5-mysqlppc30c330507007e104027681e88cebe26679c74c0be2863d753cd8c7f35deb56bd3a6cc1470bf39622php5-mysqlx86_640da0acbd1a81bcef4b2d2b4e1ff302d1c1641ae725a6d3f2f2d8a54968db2e22bd3d71e35963589aphp5-odbci586557bd80852662f4348dcaf0b6dc1a40b3dbfc9eba4b41bd3c6991056212d987e1041d158416ccf695ec44803a678455db25fa9c02c8405cc2f9d01dephp5-odbcppcd952fec612adafa12e04d92b46c63b03bb932fc25db2b7f50fc0df45f2eeab00bdf31c837c94e7a8389234ef010e3dfed73f47a9c2993bfe1a179cdaphp5-odbcx86_64b4e13a9b2aa6a994617db00352c9002d11d690eb410c50099aa32db0edd70f494b5381a55b7439223626bfbdfb14f8c51ccf49ac1422b8e806af192aphp5-peari586e61eae45c184c9fd049d39fc042bfe623a4facc9085b63ffa48fa76310284d93cc94ce5bf15ce54a15424cda94511ca7b2536bba749e651c7aabb88aphp5-pearppc04061343a633262b40c6c17e056f8788f82711019924de3baa7c1df4c34abd6f798d1edf71dbf966471a10cbaf4d439c9ddce0daa8ae2283598d0839php5-pearx86_64845a36f31dde7772d9b03e99eaaa9c956c8f01866c9d9c205064f40d708f6fc20520facdcadad208e0dca5621e33b7d3ffd64b0daded690eaa3002dcphp5-pgsqli5864b8eec73cea871f8e633bb3321849784291d79e3b9dbf1bac89f2f8e395af0149f77fc658a088abaphp5-pgsqlppcec2cc63e164cd3d0db238dcf2737ac3a88362ce9f1368e801f9b3656e626e95646f112131c2ec712php5-pgsqlx86_64c8b11c5f1bff8d0964701c2cb5330724b6382ee30fa68fe75af1360e62e370b94e74308432115a70php5-soapi586fe0116c9588b5a128c72e181bdda5321a9c61636507599be99ddbb9f02ed04e1492841af2410d260php5-soapppcfdd20c1955816f7e2f14343c96f15ae9422dfb92c6f21afdfe90dda9bd9db4da7501691cb5d14dc3php5-soapx86_6477a5597780561e29b4ce9af8e7a216f3ed15f834acf48d593c073f0bfb177435e2062e7dd78def9bphp5-sysvmsgi58648a74847cb3644b085148c9aa12bbfea6fcf944e4201d65145e687d52921129061bc1fed7affc5c031e7cd2166f1b1da4d1f08e0f631ac1cde56a06dphp5-sysvmsgppc4b9464d5c4704246da1fa0b1b5dc9e76d6db2f7ebaa84281f1f51c254136605b26ee79507a62e66f21bfe5026ef2669076a966828acdde8aebf8d812php5-sysvmsgx86_643695612d13aea448038d051e1889a94c94977273c33f477d3d22e109d8350c81d0dab315e006e95fcba9fb9cf644a6987a1df0de83a85a6bfe44a731php5-sysvshmi586387c608de7508b7fcac52ae312f82eb873eacc8fb20dc2c622253c0cf1f9e8526ec8cf4f246d9493php5-sysvshmppc0b98620b5ce0ccdbe9ca94b023139bb6d71c653595b447b8aec4593656131958858df262451586d7php5-sysvshmx86_64c3acaa071eb11d04cb4065c4f0dfc9a624cb2f28b9b4b3d089e7ce87ebf78417b6d252ea533b3566php5-wddxi586b28fd8b535dfa6bf2069495f4df224e2bd76608ea341c634e00068c0df5e7aa4dcd3c3ba809ce98c5a0d4ea6c81465066ff65c3088b3014d121fb249php5-wddxppc03dbe52a1ac667c56eaee892d1366b7a92e1faf955db37f42f8629821c2bc0be099d6a36d8c2d979604183675cdf17a9cee1a8dfb696ee2f3296e3b4php5-wddxx86_645ccdb187b325b4e8b6de8907260c3a0f55fbafa2eed54e4e10beb1d289599ee00e531633823700a62b5908ae87e2427f9cdfe4d3323450b6be47148bphp5-xmlrpci5864a883a88277d3b22c46a3fa61e2ed57f31f635c211e35d55d8cf271c8a4af7ac83c0611c031510a1php5-xmlrpcppcd8405c51a5d0923e9d2396f63259d15de377a169f4471e63f48d759dabf57c78f1fcac247d420411php5-xmlrpcx86_642250568a43eb311bc83cf10d5c26d24d65cd92b1357916cbdda1dcc07282e25e54462e2491c5500fphp5-zipi586c88b5ccb578c76293721b234779398be622d2bcb8131fa603250f92253c29cf9a1bad7ab1118c1f7f62881026d725bcc6f548812dcada3f734ffdbfephp5-zipppc4195609b70fa9bf706d723ffb6e5ea5f809a7b58d9064e551d855ccf7715476e2e1d6e84a9a529d710579a4e37edf592f13a172dfe68284588d49e06php5-zipx86_643ec6347004b6882ecde61c32a36e099a4ab7859a2ede86b3ec23e63f3cbb7eaaa9f77b6d173eebbdcf712bb81dcc19a6c302495f26738c7cbfd06b72