php5 php5: Security update to fix various security issues php5: Sicherheitsupdate für mehrere Sicherheitsprobleme The following issues have been fixed in PHP, which were spotted by the MOPB project or fixed in PHP 5.2.3 release: - missing open_basedir and safe_mode restriction (CVE-2007-3007) - chunk_split() integer overflow (CVE-2007-2872) - DoS condition in libgd's image processing (CVE-2007-2756) - possible super-global overwrite inside import_request_variables() (CVE-2007-1396) - buffer overflow inside user_filter_factory_create() (CVE-2007-2511) - remotely trigger-able buffer overflow inside bundled libxmlrpc (CVE-2007-1864) - CRLF injection inside ftp_putcmd() (CVE-2007-2509) - remotely trigger-able buffer overflow inside make_http_soap_request() (CVE-2007-2510) - MOPB-41-2007:PHP 5 sqlite_udf_decode_binary() Buffer Overflow Vulnerability (CVE-2007-0906) - MOPB-03-2007: deep recursion DoS (CVE-2007-1285) Die folgenden Probleme wurden behoben: - fehlende open_basedir und safe_mode Restriktionen (CVE-2007-3007) - chunk_split() Integer Überlauf (CVE-2007-2872) - DoS Verwundbarkeit in libgd's Bildverarbeitungsroutinen (CVE-2007-2756) - potentieller super-global Overwrite in import_request_variables() (CVE-2007-1396) - Pufferüberlauf in user_filter_factory_create() (CVE-2007-2511) - entfernt auslösbarer Pufferüberlauf in der internen libxmlrpc (CVE-2007-1864) - CRLF Injection in ftp_putcmd() (CVE-2007-2509) - entfernt auslösbarer Pufferüberlauf in make_http_soap_request() (CVE-2007-2510) - MOPB-41-2007:PHP 5 sqlite_udf_decode_binary() Pufferüberlauf (CVE-2007-0906 - MOPB-03-2007: DoS Verwundbarkeit mittels tiefer Rekursion (CVE-2007-1285) security apache2-mod_php5 i586 a7c8d09151e90a34626b702418f12570dd0f95a2 apache2-mod_php5 ppc 4df17cb9abe35b436ff62cd8244721c48477c100 apache2-mod_php5 x86_64 ecc047539196bcaacc4209bb1c57ebe9ce1f99a9 php5 i586 f0c0a8f62446288c10d0e24ecf7be0360f1b284f php5 ppc 8ae24e355a1b2545cce2b5c338b4b122f280429c php5 x86_64 fe32397511ad793113b1af4c76bb9af612b52739 php5-bcmath i586 af6d543ddb7adcef742f9d82029c5080dbbf7e9e php5-bcmath ppc 5c2d9384d589419f0e9881af27fb76875ecb9913 php5-bcmath x86_64 44db6c7230ca4720c45aa081d6153e05d57e47ad php5-bz2 i586 1fdc06ba242b20146128bce4543e332911a717fe php5-bz2 ppc cee2ef1002fc1b95786ba95e39975c1144ebdccf php5-bz2 x86_64 db9c00d4b70978129f45298e5ce492040465b1ed php5-calendar i586 8ed7bb02466312d399c890a7b9a525a6c93d8e13 php5-calendar ppc 36cd042945c64e8f2a38cce93907bfbe867e355f php5-calendar x86_64 c58426afa44ba88392dcc51a41b5d2ae8d9c5190 php5-ctype i586 17207018f12746837331f024027d63f75b317973 php5-ctype ppc ba6ee949889af59066953c131f64729f10d74ac7 php5-ctype x86_64 8a1c53c691d8222f12d95bb566acb4322e242745 php5-curl i586 fd10fc034364aeaa535081196fcacb86e4e452d3 php5-curl ppc 156c3211743e8cd891551d748a4bf8e0458f46bb php5-curl x86_64 52f546c2ed1a1faa586c665aecbd5e2fc8a2188b php5-dba i586 5a8bd66b922c88abfccc8f0f40ab715dcf71f4e9 php5-dba ppc 47befeffa614c7f384142124fa9e5689461c9d4b php5-dba x86_64 576e36114d38b298d48562430f4b9cbfa5ae2b83 php5-dbase i586 38a30fec209618c039de6f42f1fb2dc62e46ecad php5-dbase ppc 607b407b72380c7de01659d2eade82066c5a9d66 php5-dbase x86_64 86ecf17598c28163aaa277dbf50312cde4792e99 php5-devel i586 782a1f953503f9e217c58e1be714f1ab1cbb509c php5-devel ppc 58177f687ad23bad5fb6eb7088e1c18e348d0615 php5-devel x86_64 b81debd3326fc48382b78eaa415bc516b70e10d8 php5-dom i586 b53def26bac138f44b2068a2c23484526447d54b php5-dom ppc f84bd7ebecd346330da96a107e183cf1b4deee8c php5-dom x86_64 63d55db83bab7497feea405120f4f083c1a78508 php5-exif i586 8d680da833b725a188f3eaa98df97916a0437166 php5-exif ppc becdc2dc1fdb5b11306ed9e319c24201f33e1682 php5-exif x86_64 45c5897261f5361cfbdf65add066ebbb8c902638 php5-fastcgi i586 805c14d0f0f9e42d8757e4f225286fccab0ef875 php5-fastcgi ppc 35dcf49ccd3eb7792f66a203d4373ee4a9bfdf64 php5-fastcgi x86_64 4a500a89c6c61960e0e69bdcc75c526fa87ad5cf php5-ftp i586 9090d89bf9f8d3e8a14c9dcc64887e1a9f365c35 php5-ftp ppc 72863d519d6035f87fd712b15da7a9c6e1d62747 php5-ftp x86_64 577135afc659f65086d8d886f99ad5b1f70f382b php5-gd i586 bc13d4b1124c2a6cefa750b77688d1368204da61 php5-gd ppc c2a4bcafe755dab7b4e2df841c4f07aa7e09ed1c php5-gd x86_64 a5c9f42f5323041cead8bec89129312d34305aa8 php5-gettext i586 be179784eb32f40417e703a72a5ce2ebe8800e60 php5-gettext ppc 963557ad73264a4a24cf4a118dbd24bbb886fd1a php5-gettext x86_64 89f49565dbbdf69fd57faa1a441cb5980bb19647 php5-gmp i586 0163fc232b9d11b9a563b03fe2328bc85d187705 php5-gmp ppc 96991390b2b84bb2e88369d947fadf8ea5223420 php5-gmp x86_64 936f41849e10e1ef887936bc25d13f2c4f95e6e2 php5-iconv i586 5ac994971a8d1a3e7fadc5c88efd73178a61fac2 php5-iconv ppc c2132b2496b161aed9c8f17efa59a7c4b495ed91 php5-iconv x86_64 f92dedbd6924291a19180888028d5b90f5ad9bf7 php5-imap i586 f31a0a513f213a0c4a805e86a40402db76ea574f php5-imap ppc 148969d2e3c92ab7ef6fa6c155ce49079a9ab106 php5-imap x86_64 2267f9b53fc327e66049be80aa54f4d916bd9cc9 php5-ldap i586 7b3335a7336fdedb963e1ab4fe2ec50d2d1c9337 php5-ldap ppc 19aec5da3d4cf8feaaa646532d01b3344fde2d05 php5-ldap x86_64 d76fd5cbdc59b52d97a1d0b08c138659a1d912c0 php5-mbstring i586 cb55335a7614ff726e52edce40d79afc7996d26e php5-mbstring ppc b7418190e9975fb734b4e9c7463e7e6339b8971e php5-mbstring x86_64 7ff22bcc9fe2813a0bf4f49932f91f6a3cca311a php5-mcrypt i586 cf9c5bd0a8793b66d9270cc38a831de1ee1c103f php5-mcrypt ppc 234342f80ccf7963f3666f661f3530413e4f2254 php5-mcrypt x86_64 99719db710578114f0d4a98b2cfcdba19afeace7 php5-mhash i586 836a9fa4c68a552974a23b563f6d83848c73d15d php5-mhash ppc d87e235b500c0e6c0d240839369c9a67a4e2dc9d php5-mhash x86_64 5fb3b567a8209442469e77bda7a2126cb6a17326 php5-mysql i586 e06ef514232052a88aa01ed2a1872df101fcf22b php5-mysql ppc b73894a3608730c9e3b7d51934a739ac636d611a php5-mysql x86_64 3f35f66804803b08a5350d112178d7a8cfaf3bd8 php5-ncurses i586 b59a6bbd400f5011d613d7334b274b03c260507a php5-ncurses ppc 108a77661ed8e94b72c47e3cca8b0937fb56e4dd php5-ncurses x86_64 29282841096ab17a1732ff4a2ea6e261b89917df php5-odbc i586 519794b1b83919940bd28c54490ead812a70f875 php5-odbc ppc 7bb1afacffd32f2bd0407d1305f047764475cf78 php5-odbc x86_64 f1494ef826e9bada725cdde0ae5b0e23556b61a5 php5-openssl i586 6a1e943afb90b11b496e4301cb811baf2a1410e0 php5-openssl ppc 9cf62348378c00351912332128106f711064590f php5-openssl x86_64 0bd5906b22d8b6801826edb015b26dcef9e1775e php5-pcntl i586 9635c9bcd945dcd37014f9bca2972f665959b89a php5-pcntl ppc f8b2e3e79cb571fbe0048f89ce20d958e0bdc976 php5-pcntl x86_64 1300d2b9a8f724925ed0e5a4bb87c427dc73f3f2 php5-pdo i586 11b21be7696a703b661d87795659cfca9d6aa4b9 php5-pdo ppc 05aa50d1ec11a5ec4924c8e1da641524e3c12f33 php5-pdo x86_64 6126aee39db39a85f548c4625095cea2b17ef923 php5-pear i586 c353da233860ce84bc55318fe253b0262e7f6839 php5-pear ppc f738a197e30a836f74902f8892740c26699675db php5-pear x86_64 6364d38fae39744ae763473fe8ebc0cf1a8878b0 php5-pgsql i586 77f87a804d5d9ba1643d9fb8d6b37203f357780f php5-pgsql ppc 260d8a23d99788b017f92c2a5af3faad1886a29c php5-pgsql x86_64 e3af68352054b65d7abc75162738330ba2c807a9 php5-posix i586 2e773a03c1927c2c651a482bd977c586bc06b505 php5-posix ppc 79f2916d8f9e5c8bd2fd7a7c00f53bad8b12240e php5-posix x86_64 a49ad7b63af52451ada606f42c3869a7f67ea6bf php5-pspell i586 aca371d8251e156cbf82f0fbb080dd9d211aa76c php5-pspell ppc 54eac08ea38cfc1b0884c2a455595c59a98724af php5-pspell x86_64 3751c636a9cc980a1a11c7dd86a1123e32b5d6ce php5-shmop i586 c67d632f8fe751b29d41bca23318a5ec49094d3d php5-shmop ppc b370bbc0a6e519aa21e6ca0cb9a4a7947b3113ca php5-shmop x86_64 24b4010ac94e3774620a896241596b14f508bc45 php5-snmp i586 337c6333ebc93e30049271a9b8bed3cbef5d2068 php5-snmp ppc fe54a42ee7841fdedb0cf342eb985b068b2f2aa3 php5-snmp x86_64 3f1e561af02929a4ab61780510cb46365df798e7 php5-soap i586 00c5f681ec24493b80bbea9aa4f72ebb57d45d2e php5-soap ppc b72e28bd6fc3c2ae0e6f215ee25ee77db52e1210 php5-soap x86_64 83828484dd46ad01e09c8e457a3a46920f3db341 php5-sockets i586 66712bc943d57dbbbb24deedcd39f0fbcfd6e37a php5-sockets ppc c7e985fbee5793f6c53b92bce42a40a30d6f0973 php5-sockets x86_64 fb29ecc90a45155e523efd208b27f268ced167f0 php5-sqlite i586 af97d91abeae9cfa6aae4cdd8ee36d7e01db78dd php5-sqlite ppc 19da508570291421884411a0c141bb00de4c9368 php5-sqlite x86_64 429705b5feaac8ae35e299b3f5697a66770224f5 php5-sysvmsg i586 018b5a77d7a3c17930a51242ea40b6dfd422fb0e php5-sysvmsg ppc 746dd0667e9f531da5f8811c479c3b20313eb0d0 php5-sysvmsg x86_64 9fa2aae30d7b8287957611b6c58340e2f6992ccb php5-sysvsem i586 58997b568e41a6c570d2dcf1074d24600a3947df php5-sysvsem ppc 5ca0b3298a7c9707d3096b8d17736e5bbb7311e0 php5-sysvsem x86_64 84911c301408725f671d0124a1176c6d6c1e91cc php5-sysvshm i586 19292d242b6abd900aefa03bd11f45990e1f6f75 php5-sysvshm ppc d0b66056a5d51223cae94f5473e9ae3ed941c285 php5-sysvshm x86_64 6b3ea7e272a8823b36161adbdbda224b065bc84b php5-tidy i586 289e22167a943d0a661c69813d1e14a27a81aa68 php5-tidy ppc f3ab814816e598ad40fb1c341d6a54fd455f0deb php5-tidy x86_64 adb0b3a2b9e01bbc0435f582a26aab2903688a4c php5-tokenizer i586 bdd4f76715457a4efd03b37ae7ac0e85ff9a5022 php5-tokenizer ppc 0c4dde080c7f5f1968f9b3686a45efecb0d86d95 php5-tokenizer x86_64 cb173e97ab8800dd28f0acfe03cc8e7e5f58aa26 php5-wddx i586 9afe90c4b3e895ba5e0809f1f552033c9046e1a9 php5-wddx ppc 0ee988b3827d5f850d16e0fb37d9f3f7c3dc96b0 php5-wddx x86_64 0b9959790f8cce3ed14a07206952d3a8fa07d465 php5-xmlreader i586 b03b8c9545f1b6ae255a630d410b9d8949d593ed php5-xmlreader ppc 76e6863b176401b25809e7fa7ad36fe6873d6ee9 php5-xmlreader x86_64 ebefd205fc59862d9c196c9daf42371991371386 php5-xmlrpc i586 54665444f57499d57cfd8585a5ab38a8f4c2ea55 php5-xmlrpc ppc 60db7a17702f0455bc6253008e82602df0893418 php5-xmlrpc x86_64 adb72c5dc1cd2f7fc4b280b6979c9aa63b9e69dc php5-xsl i586 e41c574b6bcfbb6a74059d8d662ff153665f84f8 php5-xsl ppc 44142a2716e3e873cda306f959599d09dbaa43d2 php5-xsl x86_64 446e1f0e4c25d6bad6fbfc103585d90e6ac5c666 php5-zlib i586 7d2c61d65a2989f2a7a143a4453bfa33b5fd140d php5-zlib ppc 7cedd5996ab7b1dddfe472c0d91e0b645359583a php5-zlib x86_64 49a64ce4074b95c0539a1de681cd726c539b71bf