Oval Definition:oval:com.redhat.rhsa:def:20110195
Revision Date:2011-02-03Version:638
Title:RHSA-2011:0195: php security update (Moderate)
Description:PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

  • A flaw was found in the way PHP converted certain floating point values from string representation to a number. If a PHP script evaluated an attacker's input in a numeric context, the PHP interpreter could cause high CPU usage until the script execution time limit is reached. This issue only affected i386 systems. (CVE-2010-4645)

  • A numeric truncation error and an input validation flaw were found in the way the PHP utf8_decode() function decoded partial multi-byte sequences for some multi-byte encodings, sending them to output without them being escaped. An attacker could use these flaws to perform a cross-site scripting attack. (CVE-2009-5016, CVE-2010-3870)

  • A NULL pointer dereference flaw was found in the PHP ZipArchive::getArchiveComment function. If a script used this function to inspect a specially-crafted ZIP archive file, it could cause the PHP interpreter to crash. (CVE-2010-3709)

    All php users should upgrade to these updated packages, which contain backported patches to resolve these issues. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2009-5016
    CVE-2009-5016
    CVE-2010-3709
    CVE-2010-3709
    CVE-2010-3870
    CVE-2010-3870
    CVE-2010-4645
    CVE-2010-4645
    RHSA-2011:0195
    RHSA-2011:0195-01
    RHSA-2011:0195-01
    Platform(s):Red Hat Enterprise Linux 6
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND
  • php is earlier than 0:5.3.2-6.el6_0.1
  • AND php is signed with Red Hat redhatrelease2 key
  • php-bcmath is earlier than 0:5.3.2-6.el6_0.1
  • AND php-bcmath is signed with Red Hat redhatrelease2 key
  • php-cli is earlier than 0:5.3.2-6.el6_0.1
  • AND php-cli is signed with Red Hat redhatrelease2 key
  • php-common is earlier than 0:5.3.2-6.el6_0.1
  • AND php-common is signed with Red Hat redhatrelease2 key
  • php-dba is earlier than 0:5.3.2-6.el6_0.1
  • AND php-dba is signed with Red Hat redhatrelease2 key
  • php-devel is earlier than 0:5.3.2-6.el6_0.1
  • AND php-devel is signed with Red Hat redhatrelease2 key
  • php-embedded is earlier than 0:5.3.2-6.el6_0.1
  • AND php-embedded is signed with Red Hat redhatrelease2 key
  • php-enchant is earlier than 0:5.3.2-6.el6_0.1
  • AND php-enchant is signed with Red Hat redhatrelease2 key
  • php-gd is earlier than 0:5.3.2-6.el6_0.1
  • AND php-gd is signed with Red Hat redhatrelease2 key
  • php-imap is earlier than 0:5.3.2-6.el6_0.1
  • AND php-imap is signed with Red Hat redhatrelease2 key
  • php-intl is earlier than 0:5.3.2-6.el6_0.1
  • AND php-intl is signed with Red Hat redhatrelease2 key
  • php-ldap is earlier than 0:5.3.2-6.el6_0.1
  • AND php-ldap is signed with Red Hat redhatrelease2 key
  • php-mbstring is earlier than 0:5.3.2-6.el6_0.1
  • AND php-mbstring is signed with Red Hat redhatrelease2 key
  • php-mysql is earlier than 0:5.3.2-6.el6_0.1
  • AND php-mysql is signed with Red Hat redhatrelease2 key
  • php-odbc is earlier than 0:5.3.2-6.el6_0.1
  • AND php-odbc is signed with Red Hat redhatrelease2 key
  • php-pdo is earlier than 0:5.3.2-6.el6_0.1
  • AND php-pdo is signed with Red Hat redhatrelease2 key
  • php-pgsql is earlier than 0:5.3.2-6.el6_0.1
  • AND php-pgsql is signed with Red Hat redhatrelease2 key
  • php-process is earlier than 0:5.3.2-6.el6_0.1
  • AND php-process is signed with Red Hat redhatrelease2 key
  • php-pspell is earlier than 0:5.3.2-6.el6_0.1
  • AND php-pspell is signed with Red Hat redhatrelease2 key
  • php-recode is earlier than 0:5.3.2-6.el6_0.1
  • AND php-recode is signed with Red Hat redhatrelease2 key
  • php-snmp is earlier than 0:5.3.2-6.el6_0.1
  • AND php-snmp is signed with Red Hat redhatrelease2 key
  • php-soap is earlier than 0:5.3.2-6.el6_0.1
  • AND php-soap is signed with Red Hat redhatrelease2 key
  • php-tidy is earlier than 0:5.3.2-6.el6_0.1
  • AND php-tidy is signed with Red Hat redhatrelease2 key
  • php-xml is earlier than 0:5.3.2-6.el6_0.1
  • AND php-xml is signed with Red Hat redhatrelease2 key
  • php-xmlrpc is earlier than 0:5.3.2-6.el6_0.1
  • AND php-xmlrpc is signed with Red Hat redhatrelease2 key
  • php-zts is earlier than 0:5.3.2-6.el6_0.1
  • AND php-zts is signed with Red Hat redhatrelease2 key
  • BACK