Oval Definition:	oval:com.redhat.rhsa:def:20120093
Revision Date: 2012-02-02 Version: 635 Title: RHSA-2012:0093: php security update (Critical) Description: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It was discovered that the fix for CVE-2011-4885 (released via RHSA-2012:0071, RHSA-2012:0033, and RHSA-2012:0019 for php packages in Red Hat Enterprise Linux 4, 5, and 6 respectively) introduced an uninitialized memory use flaw. A remote attacker could send a specially-crafted HTTP request to cause the PHP interpreter to crash or, possibly, execute arbitrary code. (CVE-2012-0830) All php users should upgrade to these updated packages, which contain a backported patch to resolve this issue. After installing the updated packages, the httpd daemon must be restarted for the update to take effect. Family: unix Class: patch Status: Reference(s): CVE-2012-0830 CVE-2012-0830 RHSA-2012:0093 RHSA-2012:0093-01 RHSA-2012:0093-01 Platform(s): Red Hat Enterprise Linux 4 Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 4 is installed AND php is earlier than 0:4.3.9-3.36 AND php is signed with Red Hat redhatrelease2 key php-devel is earlier than 0:4.3.9-3.36 AND php-devel is signed with Red Hat redhatrelease2 key php-domxml is earlier than 0:4.3.9-3.36 AND php-domxml is signed with Red Hat redhatrelease2 key php-gd is earlier than 0:4.3.9-3.36 AND php-gd is signed with Red Hat redhatrelease2 key php-imap is earlier than 0:4.3.9-3.36 AND php-imap is signed with Red Hat redhatrelease2 key php-ldap is earlier than 0:4.3.9-3.36 AND php-ldap is signed with Red Hat redhatrelease2 key php-mbstring is earlier than 0:4.3.9-3.36 AND php-mbstring is signed with Red Hat redhatrelease2 key php-mysql is earlier than 0:4.3.9-3.36 AND php-mysql is signed with Red Hat redhatrelease2 key php-ncurses is earlier than 0:4.3.9-3.36 AND php-ncurses is signed with Red Hat redhatrelease2 key php-odbc is earlier than 0:4.3.9-3.36 AND php-odbc is signed with Red Hat redhatrelease2 key php-pear is earlier than 0:4.3.9-3.36 AND php-pear is signed with Red Hat redhatrelease2 key php-pgsql is earlier than 0:4.3.9-3.36 AND php-pgsql is signed with Red Hat redhatrelease2 key php-snmp is earlier than 0:4.3.9-3.36 AND php-snmp is signed with Red Hat redhatrelease2 key php-xmlrpc is earlier than 0:4.3.9-3.36 AND php-xmlrpc is signed with Red Hat redhatrelease2 key OR Package Information Red Hat Enterprise Linux 5 is installed AND php is earlier than 0:5.1.6-27.el5_7.5 AND php is signed with Red Hat redhatrelease2 key php-bcmath is earlier than 0:5.1.6-27.el5_7.5 AND php-bcmath is signed with Red Hat redhatrelease2 key php-cli is earlier than 0:5.1.6-27.el5_7.5 AND php-cli is signed with Red Hat redhatrelease2 key php-common is earlier than 0:5.1.6-27.el5_7.5 AND php-common is signed with Red Hat redhatrelease2 key php-dba is earlier than 0:5.1.6-27.el5_7.5 AND php-dba is signed with Red Hat redhatrelease2 key php-devel is earlier than 0:5.1.6-27.el5_7.5 AND php-devel is signed with Red Hat redhatrelease2 key php-gd is earlier than 0:5.1.6-27.el5_7.5 AND php-gd is signed with Red Hat redhatrelease2 key php-imap is earlier than 0:5.1.6-27.el5_7.5 AND php-imap is signed with Red Hat redhatrelease2 key php-ldap is earlier than 0:5.1.6-27.el5_7.5 AND php-ldap is signed with Red Hat redhatrelease2 key php-mbstring is earlier than 0:5.1.6-27.el5_7.5 AND php-mbstring is signed with Red Hat redhatrelease2 key php-mysql is earlier than 0:5.1.6-27.el5_7.5 AND php-mysql is signed with Red Hat redhatrelease2 key php-ncurses is earlier than 0:5.1.6-27.el5_7.5 AND php-ncurses is signed with Red Hat redhatrelease2 key php-odbc is earlier than 0:5.1.6-27.el5_7.5 AND php-odbc is signed with Red Hat redhatrelease2 key php-pdo is earlier than 0:5.1.6-27.el5_7.5 AND php-pdo is signed with Red Hat redhatrelease2 key php-pgsql is earlier than 0:5.1.6-27.el5_7.5 AND php-pgsql is signed with Red Hat redhatrelease2 key php-snmp is earlier than 0:5.1.6-27.el5_7.5 AND php-snmp is signed with Red Hat redhatrelease2 key php-soap is earlier than 0:5.1.6-27.el5_7.5 AND php-soap is signed with Red Hat redhatrelease2 key php-xml is earlier than 0:5.1.6-27.el5_7.5 AND php-xml is signed with Red Hat redhatrelease2 key php-xmlrpc is earlier than 0:5.1.6-27.el5_7.5 AND php-xmlrpc is signed with Red Hat redhatrelease2 key OR Package Information Red Hat Enterprise Linux 6 is installed AND php is earlier than 0:5.3.3-3.el6_2.6 AND php is signed with Red Hat redhatrelease2 key php-bcmath is earlier than 0:5.3.3-3.el6_2.6 AND php-bcmath is signed with Red Hat redhatrelease2 key php-cli is earlier than 0:5.3.3-3.el6_2.6 AND php-cli is signed with Red Hat redhatrelease2 key php-common is earlier than 0:5.3.3-3.el6_2.6 AND php-common is signed with Red Hat redhatrelease2 key php-dba is earlier than 0:5.3.3-3.el6_2.6 AND php-dba is signed with Red Hat redhatrelease2 key php-devel is earlier than 0:5.3.3-3.el6_2.6 AND php-devel is signed with Red Hat redhatrelease2 key php-embedded is earlier than 0:5.3.3-3.el6_2.6 AND php-embedded is signed with Red Hat redhatrelease2 key php-enchant is earlier than 0:5.3.3-3.el6_2.6 AND php-enchant is signed with Red Hat redhatrelease2 key php-gd is earlier than 0:5.3.3-3.el6_2.6 AND php-gd is signed with Red Hat redhatrelease2 key php-imap is earlier than 0:5.3.3-3.el6_2.6 AND php-imap is signed with Red Hat redhatrelease2 key php-intl is earlier than 0:5.3.3-3.el6_2.6 AND php-intl is signed with Red Hat redhatrelease2 key php-ldap is earlier than 0:5.3.3-3.el6_2.6 AND php-ldap is signed with Red Hat redhatrelease2 key php-mbstring is earlier than 0:5.3.3-3.el6_2.6 AND php-mbstring is signed with Red Hat redhatrelease2 key php-mysql is earlier than 0:5.3.3-3.el6_2.6 AND php-mysql is signed with Red Hat redhatrelease2 key php-odbc is earlier than 0:5.3.3-3.el6_2.6 AND php-odbc is signed with Red Hat redhatrelease2 key php-pdo is earlier than 0:5.3.3-3.el6_2.6 AND php-pdo is signed with Red Hat redhatrelease2 key php-pgsql is earlier than 0:5.3.3-3.el6_2.6 AND php-pgsql is signed with Red Hat redhatrelease2 key php-process is earlier than 0:5.3.3-3.el6_2.6 AND php-process is signed with Red Hat redhatrelease2 key php-pspell is earlier than 0:5.3.3-3.el6_2.6 AND php-pspell is signed with Red Hat redhatrelease2 key php-recode is earlier than 0:5.3.3-3.el6_2.6 AND php-recode is signed with Red Hat redhatrelease2 key php-snmp is earlier than 0:5.3.3-3.el6_2.6 AND php-snmp is signed with Red Hat redhatrelease2 key php-soap is earlier than 0:5.3.3-3.el6_2.6 AND php-soap is signed with Red Hat redhatrelease2 key php-tidy is earlier than 0:5.3.3-3.el6_2.6 AND php-tidy is signed with Red Hat redhatrelease2 key php-xml is earlier than 0:5.3.3-3.el6_2.6 AND php-xml is signed with Red Hat redhatrelease2 key php-xmlrpc is earlier than 0:5.3.3-3.el6_2.6 AND php-xmlrpc is signed with Red Hat redhatrelease2 key php-zts is earlier than 0:5.3.3-3.el6_2.6 AND php-zts is signed with Red Hat redhatrelease2 key Definition Synopsis Release Information Red Hat Enterprise Linux 6 Client is installed OR Red Hat Enterprise Linux 6 Server is installed OR Red Hat Enterprise Linux 6 Workstation is installed OR Red Hat Enterprise Linux 6 ComputeNode is installed AND php-common is earlier than 0:5.3.3-3.el6_2.6 AND php-common is signed with Red Hat redhatrelease2 key php-pdo is earlier than 0:5.3.3-3.el6_2.6 AND php-pdo is signed with Red Hat redhatrelease2 key php-snmp is earlier than 0:5.3.3-3.el6_2.6 AND php-snmp is signed with Red Hat redhatrelease2 key php-xmlrpc is earlier than 0:5.3.3-3.el6_2.6 AND php-xmlrpc is signed with Red Hat redhatrelease2 key php-embedded is earlier than 0:5.3.3-3.el6_2.6 AND php-embedded is signed with Red Hat redhatrelease2 key php-pgsql is earlier than 0:5.3.3-3.el6_2.6 AND php-pgsql is signed with Red Hat redhatrelease2 key php-enchant is earlier than 0:5.3.3-3.el6_2.6 AND php-enchant is signed with Red Hat redhatrelease2 key php-devel is earlier than 0:5.3.3-3.el6_2.6 AND php-devel is signed with Red Hat redhatrelease2 key php-recode is earlier than 0:5.3.3-3.el6_2.6 AND php-recode is signed with Red Hat redhatrelease2 key php is earlier than 0:5.3.3-3.el6_2.6 AND php is signed with Red Hat redhatrelease2 key php-gd is earlier than 0:5.3.3-3.el6_2.6 AND php-gd is signed with Red Hat redhatrelease2 key php-odbc is earlier than 0:5.3.3-3.el6_2.6 AND php-odbc is signed with Red Hat redhatrelease2 key php-imap is earlier than 0:5.3.3-3.el6_2.6 AND php-imap is signed with Red Hat redhatrelease2 key php-tidy is earlier than 0:5.3.3-3.el6_2.6 AND php-tidy is signed with Red Hat redhatrelease2 key php-soap is earlier than 0:5.3.3-3.el6_2.6 AND php-soap is signed with Red Hat redhatrelease2 key php-mysql is earlier than 0:5.3.3-3.el6_2.6 AND php-mysql is signed with Red Hat redhatrelease2 key php-bcmath is earlier than 0:5.3.3-3.el6_2.6 AND php-bcmath is signed with Red Hat redhatrelease2 key php-intl is earlier than 0:5.3.3-3.el6_2.6 AND php-intl is signed with Red Hat redhatrelease2 key php-zts is earlier than 0:5.3.3-3.el6_2.6 AND php-zts is signed with Red Hat redhatrelease2 key php-process is earlier than 0:5.3.3-3.el6_2.6 AND php-process is signed with Red Hat redhatrelease2 key php-mbstring is earlier than 0:5.3.3-3.el6_2.6 AND php-mbstring is signed with Red Hat redhatrelease2 key php-ldap is earlier than 0:5.3.3-3.el6_2.6 AND php-ldap is signed with Red Hat redhatrelease2 key php-cli is earlier than 0:5.3.3-3.el6_2.6 AND php-cli is signed with Red Hat redhatrelease2 key php-dba is earlier than 0:5.3.3-3.el6_2.6 AND php-dba is signed with Red Hat redhatrelease2 key php-pspell is earlier than 0:5.3.3-3.el6_2.6 AND php-pspell is signed with Red Hat redhatrelease2 key php-xml is earlier than 0:5.3.3-3.el6_2.6 AND php-xml is signed with Red Hat redhatrelease2 key OR Package Information Red Hat Enterprise Linux 4 is installed AND php-ncurses is earlier than 0:4.3.9-3.36 AND php-ncurses is signed with Red Hat master key php-pgsql is earlier than 0:4.3.9-3.36 AND php-pgsql is signed with Red Hat master key php-xmlrpc is earlier than 0:4.3.9-3.36 AND php-xmlrpc is signed with Red Hat master key php-snmp is earlier than 0:4.3.9-3.36 AND php-snmp is signed with Red Hat master key php-devel is earlier than 0:4.3.9-3.36 AND php-devel is signed with Red Hat master key php is earlier than 0:4.3.9-3.36 AND php is signed with Red Hat master key php-imap is earlier than 0:4.3.9-3.36 AND php-imap is signed with Red Hat master key php-gd is earlier than 0:4.3.9-3.36 AND php-gd is signed with Red Hat master key php-odbc is earlier than 0:4.3.9-3.36 AND php-odbc is signed with Red Hat master key php-mysql is earlier than 0:4.3.9-3.36 AND php-mysql is signed with Red Hat master key php-mbstring is earlier than 0:4.3.9-3.36 AND php-mbstring is signed with Red Hat master key php-ldap is earlier than 0:4.3.9-3.36 AND php-ldap is signed with Red Hat master key php-domxml is earlier than 0:4.3.9-3.36 AND php-domxml is signed with Red Hat master key php-pear is earlier than 0:4.3.9-3.36 AND php-pear is signed with Red Hat master key OR Package Information Red Hat Enterprise Linux 5 is installed AND php-common is earlier than 0:5.1.6-27.el5_7.5 AND php-common is signed with Red Hat redhatrelease key php-pdo is earlier than 0:5.1.6-27.el5_7.5 AND php-pdo is signed with Red Hat redhatrelease key php-ncurses is earlier than 0:5.1.6-27.el5_7.5 AND php-ncurses is signed with Red Hat redhatrelease key php-pgsql is earlier than 0:5.1.6-27.el5_7.5 AND php-pgsql is signed with Red Hat redhatrelease key php-xmlrpc is earlier than 0:5.1.6-27.el5_7.5 AND php-xmlrpc is signed with Red Hat redhatrelease key php-snmp is earlier than 0:5.1.6-27.el5_7.5 AND php-snmp is signed with Red Hat redhatrelease key php-devel is earlier than 0:5.1.6-27.el5_7.5 AND php-devel is signed with Red Hat redhatrelease key php is earlier than 0:5.1.6-27.el5_7.5 AND php is signed with Red Hat redhatrelease key php-imap is earlier than 0:5.1.6-27.el5_7.5 AND php-imap is signed with Red Hat redhatrelease key php-odbc is earlier than 0:5.1.6-27.el5_7.5 AND php-odbc is signed with Red Hat redhatrelease key php-gd is earlier than 0:5.1.6-27.el5_7.5 AND php-gd is signed with Red Hat redhatrelease key php-soap is earlier than 0:5.1.6-27.el5_7.5 AND php-soap is signed with Red Hat redhatrelease key php-mysql is earlier than 0:5.1.6-27.el5_7.5 AND php-mysql is signed with Red Hat redhatrelease key php-bcmath is earlier than 0:5.1.6-27.el5_7.5 AND php-bcmath is signed with Red Hat redhatrelease key php-mbstring is earlier than 0:5.1.6-27.el5_7.5 AND php-mbstring is signed with Red Hat redhatrelease key php-ldap is earlier than 0:5.1.6-27.el5_7.5 AND php-ldap is signed with Red Hat redhatrelease key php-cli is earlier than 0:5.1.6-27.el5_7.5 AND php-cli is signed with Red Hat redhatrelease key php-dba is earlier than 0:5.1.6-27.el5_7.5 AND php-dba is signed with Red Hat redhatrelease key php-xml is earlier than 0:5.1.6-27.el5_7.5 AND php-xml is signed with Red Hat redhatrelease key
BACK