Oval Definition:	oval:com.redhat.rhsa:def:20070153
Revision Date: 2007-04-20 Version: 636 Title: RHSA-2007:0153: php security update (Moderate) Description: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A flaw was found in the way the mbstring extension set global variables. A script which used the mb_parse_str() function to set global variables could be forced to enable the register_globals configuration option, possibly resulting in global variable injection. (CVE-2007-1583) A heap based buffer overflow flaw was discovered in PHP's gd extension. A script that could be forced to process WBMP images from an untrusted source could result in arbitrary code execution. (CVE-2007-1001) A buffer over-read flaw was discovered in PHP's gd extension. A script that could be forced to write arbitrary string using a JIS font from an untrusted source could cause the PHP interpreter to crash. (CVE-2007-0455) A flaw was discovered in the way PHP's mail() function processed header data. If a script sent mail using a Subject header containing a string from an untrusted source, a remote attacker could send bulk e-mail to unintended recipients. (CVE-2007-1718) Users of PHP should upgrade to these updated packages which contain backported patches to correct these issues. Family: unix Class: patch Status: Reference(s): CVE-2007-0455 CVE-2007-1001 CVE-2007-1583 CVE-2007-1718 RHSA-2007:0153 RHSA-2007:0153-01 RHSA-2007:0153-01 Platform(s): Red Hat Enterprise Linux 5 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 5 is installed AND php is earlier than 0:5.1.6-11.el5 AND php is signed with Red Hat redhatrelease2 key php-bcmath is earlier than 0:5.1.6-11.el5 AND php-bcmath is signed with Red Hat redhatrelease2 key php-cli is earlier than 0:5.1.6-11.el5 AND php-cli is signed with Red Hat redhatrelease2 key php-common is earlier than 0:5.1.6-11.el5 AND php-common is signed with Red Hat redhatrelease2 key php-dba is earlier than 0:5.1.6-11.el5 AND php-dba is signed with Red Hat redhatrelease2 key php-devel is earlier than 0:5.1.6-11.el5 AND php-devel is signed with Red Hat redhatrelease2 key php-gd is earlier than 0:5.1.6-11.el5 AND php-gd is signed with Red Hat redhatrelease2 key php-imap is earlier than 0:5.1.6-11.el5 AND php-imap is signed with Red Hat redhatrelease2 key php-ldap is earlier than 0:5.1.6-11.el5 AND php-ldap is signed with Red Hat redhatrelease2 key php-mbstring is earlier than 0:5.1.6-11.el5 AND php-mbstring is signed with Red Hat redhatrelease2 key php-mysql is earlier than 0:5.1.6-11.el5 AND php-mysql is signed with Red Hat redhatrelease2 key php-ncurses is earlier than 0:5.1.6-11.el5 AND php-ncurses is signed with Red Hat redhatrelease2 key php-odbc is earlier than 0:5.1.6-11.el5 AND php-odbc is signed with Red Hat redhatrelease2 key php-pdo is earlier than 0:5.1.6-11.el5 AND php-pdo is signed with Red Hat redhatrelease2 key php-pgsql is earlier than 0:5.1.6-11.el5 AND php-pgsql is signed with Red Hat redhatrelease2 key php-snmp is earlier than 0:5.1.6-11.el5 AND php-snmp is signed with Red Hat redhatrelease2 key php-soap is earlier than 0:5.1.6-11.el5 AND php-soap is signed with Red Hat redhatrelease2 key php-xml is earlier than 0:5.1.6-11.el5 AND php-xml is signed with Red Hat redhatrelease2 key php-xmlrpc is earlier than 0:5.1.6-11.el5 AND php-xmlrpc is signed with Red Hat redhatrelease2 key
BACK