Message-Id: <E1LPma8-0006PD-Bx@titan.mandriva.com>
Date: Wed, 21 Jan 2009 16:34:00 -0700
From: security@...driva.com
To: bugtraq@...urityfocus.com
Subject: [ MDVSA-2009:022 ] php


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2009:022
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : php
 Date    : January 21, 2009
 Affected: 2008.0
 _______________________________________________________________________

 Problem Description:

 A vulnerability in PHP allowed context-dependent attackers to cause
 a denial of service (crash) via a certain long string in the glob()
 or fnmatch() functions (CVE-2007-4782).
 
 A vulnerability in the cURL library in PHP allowed context-dependent
 attackers to bypass safe_mode and open_basedir restrictions and read
 arbitrary files using a special URL request (CVE-2007-4850).
 
 An integer overflow in PHP allowed context-dependent attackers to
 cause a denial of serivce via a special printf() format parameter
 (CVE-2008-1384).
 
 A stack-based buffer overflow in the FastCGI SAPI in PHP has unknown
 impact and attack vectors (CVE-2008-2050).
 
 A buffer overflow in the imageloadfont() function in PHP allowed
 context-dependent attackers to cause a denial of service (crash)
 and potentially execute arbitrary code via a crafted font file
 (CVE-2008-3658).
 
 A buffer overflow in the memnstr() function allowed context-dependent
 attackers to cause a denial of service (crash) and potentially execute
 arbitrary code via the delimiter argument to the explode() function
 (CVE-2008-3659).
 
 PHP, when used as a FastCGI module, allowed remote attackers to cause
 a denial of service (crash) via a request with multiple dots preceding
 the extension (CVE-2008-3660).
 
 An array index error in the imageRotate() function in PHP allowed
 context-dependent attackers to read the contents of arbitrary memory
 locations via a crafted value of the third argument to the function
 for an indexed image (CVE-2008-5498).
 
 The updated packages have been patched to correct these issues.
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4782
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4850
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1384
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2050
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3658
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3659
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3660
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498
 _______________________________________________________________________

 Updated Packages:

 Mandriva Linux 2008.0:
 7a652c5161099a807eb67096c1904738  2008.0/i586/libphp5_common5-5.2.4-3.3mdv2008.0.i586.rpm
 e48275669ba1c1936e6adf0cfdfe9c37  2008.0/i586/php-bcmath-5.2.4-3.3mdv2008.0.i586.rpm
 77bbce6d44ef33977caf61c8bf7acdd3  2008.0/i586/php-bz2-5.2.4-3.3mdv2008.0.i586.rpm
 995177d832c1ebc80fb9272701471c57  2008.0/i586/php-calendar-5.2.4-3.3mdv2008.0.i586.rpm
 7b088350c660056ef612fbd2a54682e8  2008.0/i586/php-cgi-5.2.4-3.3mdv2008.0.i586.rpm
 eb9bbe3de40891cf1f80790d607b2d0b  2008.0/i586/php-cli-5.2.4-3.3mdv2008.0.i586.rpm
 631d10abbce8287e8a5b668b1b29de5f  2008.0/i586/php-ctype-5.2.4-3.3mdv2008.0.i586.rpm
 9af5654306d2cf8c9904d5d796a7e473  2008.0/i586/php-curl-5.2.4-3.3mdv2008.0.i586.rpm
 947b9d9e7096bebeff2cb6ebc73aac43  2008.0/i586/php-dba-5.2.4-3.3mdv2008.0.i586.rpm
 31e7cb59ee851d12e1d5b978aa2091cf  2008.0/i586/php-dbase-5.2.4-3.3mdv2008.0.i586.rpm
 d6d198044d437ad5d30902676f13939e  2008.0/i586/php-devel-5.2.4-3.3mdv2008.0.i586.rpm
 bda8dd71c91f5940e8b22c93959e7720  2008.0/i586/php-dom-5.2.4-3.3mdv2008.0.i586.rpm
 17de69302a54194ee76fa561ca8d0fe7  2008.0/i586/php-exif-5.2.4-3.3mdv2008.0.i586.rpm
 f4735d6bd86b617815e080ad729b7433  2008.0/i586/php-fcgi-5.2.4-3.3mdv2008.0.i586.rpm
 9e2a645b0b121a4a4f9853b8863e10e4  2008.0/i586/php-filter-5.2.4-3.3mdv2008.0.i586.rpm
 53670f7055d3cde333d9742030e3fd5b  2008.0/i586/php-ftp-5.2.4-3.3mdv2008.0.i586.rpm
 46a7eb8f4a4d00c332e96e3bb0d31189  2008.0/i586/php-gd-5.2.4-3.3mdv2008.0.i586.rpm
 7241fdefb6d2a5ea4eec96a18bf31ed2  2008.0/i586/php-gettext-5.2.4-3.3mdv2008.0.i586.rpm
 62c52647488c0a7080001aaf462640f0  2008.0/i586/php-gmp-5.2.4-3.3mdv2008.0.i586.rpm
 5941034e1f012edffbe1e5523adb17c8  2008.0/i586/php-hash-5.2.4-3.3mdv2008.0.i586.rpm
 07372e866901555fab3152b7702afdc2  2008.0/i586/php-iconv-5.2.4-3.3mdv2008.0.i586.rpm
 da94c20e59e785a439ab728c2194f897  2008.0/i586/php-imap-5.2.4-3.3mdv2008.0.i586.rpm
 ad640383a672f2bda97a7c2f6f8d623c  2008.0/i586/php-json-5.2.4-3.3mdv2008.0.i586.rpm
 793b27eaa0d344b83dd5de1628c5d3b0  2008.0/i586/php-ldap-5.2.4-3.3mdv2008.0.i586.rpm
 5a1aeae14535d5493a9cbd1d5db34b50  2008.0/i586/php-mbstring-5.2.4-3.3mdv2008.0.i586.rpm
 461333bd3c9a9107b542da36e88e951e  2008.0/i586/php-mcrypt-5.2.4-3.3mdv2008.0.i586.rpm
 367150bc9718c4b7a022ab5bb076bd35  2008.0/i586/php-mhash-5.2.4-3.3mdv2008.0.i586.rpm
 4c2ca88ed728a7d98e9c09b0fa2efd96  2008.0/i586/php-mime_magic-5.2.4-3.3mdv2008.0.i586.rpm
 aa755604d1444c522713f6d6c366b5bd  2008.0/i586/php-ming-5.2.4-3.3mdv2008.0.i586.rpm
 a676178533ac458dac1410eae8ea67da  2008.0/i586/php-mssql-5.2.4-3.3mdv2008.0.i586.rpm
 593b42628393ee668b75b6f8622fa7b0  2008.0/i586/php-mysql-5.2.4-3.3mdv2008.0.i586.rpm
 aebff890814488282f7ea6a29c01d7a1  2008.0/i586/php-mysqli-5.2.4-3.3mdv2008.0.i586.rpm
 6e315b85744911432ef40e914e2f41f5  2008.0/i586/php-ncurses-5.2.4-3.3mdv2008.0.i586.rpm
 a0cec0628667e13d26e89d6fc6541497  2008.0/i586/php-odbc-5.2.4-3.3mdv2008.0.i586.rpm
 90b55faea598db1f6a5b9709e06fa71b  2008.0/i586/php-openssl-5.2.4-3.3mdv2008.0.i586.rpm
 1ca2e330d6e20381a63c5bba97591ac9  2008.0/i586/php-pcntl-5.2.4-3.3mdv2008.0.i586.rpm
 08f4d6146d3e26ef97a5015f1bf8b132  2008.0/i586/php-pdo-5.2.4-3.3mdv2008.0.i586.rpm
 8e7f471066f4580cb373789ec27906c0  2008.0/i586/php-pdo_dblib-5.2.4-3.3mdv2008.0.i586.rpm
 e6f2baee019de6759ad3913b31439d3c  2008.0/i586/php-pdo_mysql-5.2.4-3.3mdv2008.0.i586.rpm
 97ac80b266b67a4a9578a9dfc921c940  2008.0/i586/php-pdo_odbc-5.2.4-3.3mdv2008.0.i586.rpm
 04cdad00191a250ce4b29a1c01fe3eef  2008.0/i586/php-pdo_pgsql-5.2.4-3.3mdv2008.0.i586.rpm
 8944ef0d51c1db6d781151269cd1a3a4  2008.0/i586/php-pdo_sqlite-5.2.4-3.3mdv2008.0.i586.rpm
 2b4f964b98d82e01ebcd1389b7b5cfd9  2008.0/i586/php-pgsql-5.2.4-3.3mdv2008.0.i586.rpm
 f378eede095e848f47dd2752d6d1d1ee  2008.0/i586/php-posix-5.2.4-3.3mdv2008.0.i586.rpm
 8aa798c5a0b491f659c703f88299c7bb  2008.0/i586/php-pspell-5.2.4-3.3mdv2008.0.i586.rpm
 e651db4d7886759a2274354cb0afe020  2008.0/i586/php-readline-5.2.4-3.3mdv2008.0.i586.rpm
 cfe33d6e4bb79c7d0f8c9006207b894f  2008.0/i586/php-recode-5.2.4-3.3mdv2008.0.i586.rpm
 cffccd3024397701c9c2a449bae1471d  2008.0/i586/php-session-5.2.4-3.3mdv2008.0.i586.rpm
 deefc043ef2733636a537f22a851016e  2008.0/i586/php-shmop-5.2.4-3.3mdv2008.0.i586.rpm
 d2e3fd9852c298b807f4ac2831e7c0eb  2008.0/i586/php-simplexml-5.2.4-3.3mdv2008.0.i586.rpm
 ab317dd79631f92b22c56e89077798a1  2008.0/i586/php-snmp-5.2.4-3.3mdv2008.0.i586.rpm
 7eb6e93e6da916103e72727493204a32  2008.0/i586/php-soap-5.2.4-3.3mdv2008.0.i586.rpm
 a14e42046640f7562eead57135d134c9  2008.0/i586/php-sockets-5.2.4-3.3mdv2008.0.i586.rpm
 507f4f1d51c13ba5e65783d324760bb1  2008.0/i586/php-sqlite-5.2.4-3.3mdv2008.0.i586.rpm
 528d87f5221deb269f2e7eba7c62b561  2008.0/i586/php-sysvmsg-5.2.4-3.3mdv2008.0.i586.rpm
 2ae1cf711351a79e54d075a56baa803f  2008.0/i586/php-sysvsem-5.2.4-3.3mdv2008.0.i586.rpm
 1f43453db03dfaa9a4ad6d75c8032fbf  2008.0/i586/php-sysvshm-5.2.4-3.3mdv2008.0.i586.rpm
 99c765052a26be7b3c68cb3999d03301  2008.0/i586/php-tidy-5.2.4-3.3mdv2008.0.i586.rpm
 568385e201d2e9c494132608374c67cb  2008.0/i586/php-tokenizer-5.2.4-3.3mdv2008.0.i586.rpm
 aa3d73e0f32f510134808c48e5730c28  2008.0/i586/php-wddx-5.2.4-3.3mdv2008.0.i586.rpm
 a8a7238a7bbb2c0458cee41764bf4167  2008.0/i586/php-xml-5.2.4-3.3mdv2008.0.i586.rpm
 89dabad2ce9ff9e1330998e8171a7f76  2008.0/i586/php-xmlreader-5.2.4-3.3mdv2008.0.i586.rpm
 2b973524ec6301282d9a6ebf943898bf  2008.0/i586/php-xmlrpc-5.2.4-3.3mdv2008.0.i586.rpm
 c019b015e1c7738b7c268bed9738a274  2008.0/i586/php-xmlwriter-5.2.4-3.3mdv2008.0.i586.rpm
 444e7b7b981f842b0851159c2b60e3f2  2008.0/i586/php-xsl-5.2.4-3.3mdv2008.0.i586.rpm
 ac9ce0fd528f5b3f4ab671c48a35c588  2008.0/i586/php-zlib-5.2.4-3.3mdv2008.0.i586.rpm 
 ecf0b17dd6998db1a0a7ece0f992db56  2008.0/SRPMS/php-5.2.4-3.3mdv2008.0.src.rpm

 Mandriva Linux 2008.0/X86_64:
 89ba8b65286114fa3ce605c877f434ff  2008.0/x86_64/lib64php5_common5-5.2.4-3.3mdv2008.0.x86_64.rpm
 0ff29b438923c6cdd74d373e7d2e4850  2008.0/x86_64/php-bcmath-5.2.4-3.3mdv2008.0.x86_64.rpm
 fb4fd6c767ab0efcf8fd8893dc218e00  2008.0/x86_64/php-bz2-5.2.4-3.3mdv2008.0.x86_64.rpm
 8d100cf17c2d2b33c9d985294c2522a9  2008.0/x86_64/php-calendar-5.2.4-3.3mdv2008.0.x86_64.rpm
 51735968841ed984937d8bbb129ec515  2008.0/x86_64/php-cgi-5.2.4-3.3mdv2008.0.x86_64.rpm
 271b559fa4a5dff7654f908069a3aba8  2008.0/x86_64/php-cli-5.2.4-3.3mdv2008.0.x86_64.rpm
 2558176bb0d83e12615764374359ed33  2008.0/x86_64/php-ctype-5.2.4-3.3mdv2008.0.x86_64.rpm
 e813815fb84332d469adc6d2a2cf52d9  2008.0/x86_64/php-curl-5.2.4-3.3mdv2008.0.x86_64.rpm
 03be7783fbd67080a3ac7ac203e12d89  2008.0/x86_64/php-dba-5.2.4-3.3mdv2008.0.x86_64.rpm
 48ea284238fa82d159fb665b950162fb  2008.0/x86_64/php-dbase-5.2.4-3.3mdv2008.0.x86_64.rpm
 1b680313ae918dbd6d0605ceb1c37b83  2008.0/x86_64/php-devel-5.2.4-3.3mdv2008.0.x86_64.rpm
 fb9657c80f96d90af8cedb65d5fbc8af  2008.0/x86_64/php-dom-5.2.4-3.3mdv2008.0.x86_64.rpm
 badbfa62b773421cbbec3da18d368eaf  2008.0/x86_64/php-exif-5.2.4-3.3mdv2008.0.x86_64.rpm
 dd405943aa2f7073c00a3e1c0a305c4f  2008.0/x86_64/php-fcgi-5.2.4-3.3mdv2008.0.x86_64.rpm
 1f240a39bbffab1b89df0af047c04ef9  2008.0/x86_64/php-filter-5.2.4-3.3mdv2008.0.x86_64.rpm
 09f930a49b343b5686b9e1b906221f29  2008.0/x86_64/php-ftp-5.2.4-3.3mdv2008.0.x86_64.rpm
 cee4006868185c9d1cccf0ae2764737a  2008.0/x86_64/php-gd-5.2.4-3.3mdv2008.0.x86_64.rpm
 1f90f96d383ac9ff444648fac9706bdd  2008.0/x86_64/php-gettext-5.2.4-3.3mdv2008.0.x86_64.rpm
 3b831a3789ec11c038f4fb0d08badd92  2008.0/x86_64/php-gmp-5.2.4-3.3mdv2008.0.x86_64.rpm
 6c79f8f172d84c278719fd78edb9e8bf  2008.0/x86_64/php-hash-5.2.4-3.3mdv2008.0.x86_64.rpm
 c78688c8a299337f48708e49fb642f35  2008.0/x86_64/php-iconv-5.2.4-3.3mdv2008.0.x86_64.rpm
 cdca33614db11df4d28c195b9e0c2d1b  2008.0/x86_64/php-imap-5.2.4-3.3mdv2008.0.x86_64.rpm
 42827e2ff517d47d340d134b482956cc  2008.0/x86_64/php-json-5.2.4-3.3mdv2008.0.x86_64.rpm
 47b84f7a9c064edec70862dcd62407c2  2008.0/x86_64/php-ldap-5.2.4-3.3mdv2008.0.x86_64.rpm
 7eb75ae9d26308c1f047da264195e0bc  2008.0/x86_64/php-mbstring-5.2.4-3.3mdv2008.0.x86_64.rpm
 ca8404c82e14b76f34505441d7993756  2008.0/x86_64/php-mcrypt-5.2.4-3.3mdv2008.0.x86_64.rpm
 137d94b0bc22b2e3269b69afb2521bc8  2008.0/x86_64/php-mhash-5.2.4-3.3mdv2008.0.x86_64.rpm
 244873acdf03db7e75960dfe7410406a  2008.0/x86_64/php-mime_magic-5.2.4-3.3mdv2008.0.x86_64.rpm
 3cb0ed9c97f740b776365e7ee71c2af2  2008.0/x86_64/php-ming-5.2.4-3.3mdv2008.0.x86_64.rpm
 1cb62b1372b16ad4ebe32f31f9e6b7f9  2008.0/x86_64/php-mssql-5.2.4-3.3mdv2008.0.x86_64.rpm
 9de3e8c8158818bd10e6131c5cb07dd5  2008.0/x86_64/php-mysql-5.2.4-3.3mdv2008.0.x86_64.rpm
 9cc32cd7dd1be8ec371f9d1bb71b686e  2008.0/x86_64/php-mysqli-5.2.4-3.3mdv2008.0.x86_64.rpm
 944bfc97936ff94f6f844e0cbd0dd95a  2008.0/x86_64/php-ncurses-5.2.4-3.3mdv2008.0.x86_64.rpm
 4760b4ab342f44ac87c7f2da54410c0e  2008.0/x86_64/php-odbc-5.2.4-3.3mdv2008.0.x86_64.rpm
 3829b2387029cb3a19b2a2636623f2fa  2008.0/x86_64/php-openssl-5.2.4-3.3mdv2008.0.x86_64.rpm
 62e1e8f8b40e2a8221ea794d9c2b6b5d  2008.0/x86_64/php-pcntl-5.2.4-3.3mdv2008.0.x86_64.rpm
 025965d8df8de7590c8f0d8d4108be78  2008.0/x86_64/php-pdo-5.2.4-3.3mdv2008.0.x86_64.rpm
 2868838706493b2a44f599482fb1d651  2008.0/x86_64/php-pdo_dblib-5.2.4-3.3mdv2008.0.x86_64.rpm
 bd8fe64ddc3ff3600126514157b9e511  2008.0/x86_64/php-pdo_mysql-5.2.4-3.3mdv2008.0.x86_64.rpm
 876f1ad50e59fe4a27860b1dcf6afced  2008.0/x86_64/php-pdo_odbc-5.2.4-3.3mdv2008.0.x86_64.rpm
 e0e86de461e6da0c154cd8408ba7ff2b  2008.0/x86_64/php-pdo_pgsql-5.2.4-3.3mdv2008.0.x86_64.rpm
 9a90b3d24a4f6acb8142563869c92d69  2008.0/x86_64/php-pdo_sqlite-5.2.4-3.3mdv2008.0.x86_64.rpm
 1139217457e537a2ea3e28ef7b7b8f39  2008.0/x86_64/php-pgsql-5.2.4-3.3mdv2008.0.x86_64.rpm
 31377cffd512f021df688f168fa70565  2008.0/x86_64/php-posix-5.2.4-3.3mdv2008.0.x86_64.rpm
 12a6e43f9413d93f582582ba5c8cc0d2  2008.0/x86_64/php-pspell-5.2.4-3.3mdv2008.0.x86_64.rpm
 e257dec42f74358db7ca58d5cc1d524b  2008.0/x86_64/php-readline-5.2.4-3.3mdv2008.0.x86_64.rpm
 6cacff3a4b0a61e60e4ad11ebdafc7bf  2008.0/x86_64/php-recode-5.2.4-3.3mdv2008.0.x86_64.rpm
 025d4d90a09d6de4836dc45228cff6e7  2008.0/x86_64/php-session-5.2.4-3.3mdv2008.0.x86_64.rpm
 908e4379581b86d83d9139879084eb33  2008.0/x86_64/php-shmop-5.2.4-3.3mdv2008.0.x86_64.rpm
 c18c8de8b1629ec5cd2f51bf4e17e817  2008.0/x86_64/php-simplexml-5.2.4-3.3mdv2008.0.x86_64.rpm
 dd8b061f27acae1a7371d8aed868ba23  2008.0/x86_64/php-snmp-5.2.4-3.3mdv2008.0.x86_64.rpm
 3bb622cd884b6712cd7974f88e88a90b  2008.0/x86_64/php-soap-5.2.4-3.3mdv2008.0.x86_64.rpm
 79373a824e2a4a7a0bc900532a1e2801  2008.0/x86_64/php-sockets-5.2.4-3.3mdv2008.0.x86_64.rpm
 5d73d8283b43e69d77396f8f01be8bf3  2008.0/x86_64/php-sqlite-5.2.4-3.3mdv2008.0.x86_64.rpm
 0b2e447aca5263291991c2da1cadd536  2008.0/x86_64/php-sysvmsg-5.2.4-3.3mdv2008.0.x86_64.rpm
 509468b4dbd2935e05e800d9bae37874  2008.0/x86_64/php-sysvsem-5.2.4-3.3mdv2008.0.x86_64.rpm
 1324a045c8e5d05ceb954bc8005fce9e  2008.0/x86_64/php-sysvshm-5.2.4-3.3mdv2008.0.x86_64.rpm
 832fc2acd82c4cb5806f5c5b6ec31086  2008.0/x86_64/php-tidy-5.2.4-3.3mdv2008.0.x86_64.rpm
 a026d9e7a62e9a8064ccb34f7bc73e38  2008.0/x86_64/php-tokenizer-5.2.4-3.3mdv2008.0.x86_64.rpm
 73b8df410ab637a3349adb520e7ddd2b  2008.0/x86_64/php-wddx-5.2.4-3.3mdv2008.0.x86_64.rpm
 35f6c8e61e68c94c7582084b55673c65  2008.0/x86_64/php-xml-5.2.4-3.3mdv2008.0.x86_64.rpm
 117931585f5d3457fad1b924286a34b4  2008.0/x86_64/php-xmlreader-5.2.4-3.3mdv2008.0.x86_64.rpm
 86d4fc9df8514fede7924268cc87cf69  2008.0/x86_64/php-xmlrpc-5.2.4-3.3mdv2008.0.x86_64.rpm
 062ee98ab5ce0675e98adee65131f3f4  2008.0/x86_64/php-xmlwriter-5.2.4-3.3mdv2008.0.x86_64.rpm
 9cad5ac838e1f0f67c55702d4df50c30  2008.0/x86_64/php-xsl-5.2.4-3.3mdv2008.0.x86_64.rpm
 525169a83f9850cbcd3903af389def55  2008.0/x86_64/php-zlib-5.2.4-3.3mdv2008.0.x86_64.rpm 
 ecf0b17dd6998db1a0a7ece0f992db56  2008.0/SRPMS/php-5.2.4-3.3mdv2008.0.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFJd4VZmqjQ0CJFipgRAqRGAJ9QJxYLp5zE2eOo9WQZ3OkzB4CeWACg9aLi
A2E6w1lLiqFmL7RnEdjkypY=
=5YNA
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists