sdk-apache2-mod_php5Security update for PHP5Security update for PHP5This update fixes security problems also fixed in PHP
5.2.1, including following problems:
CVE-2007-0906: Multiple buffer overflows in PHP before
5.2.1 allow attackers to cause a denial of service and
possibly execute arbitrary code via unspecified vectors in
the (1) session, (2) zip, (3) imap, and (4) sqlite
extensions; (5) stream filters; and the (6) str_replace,
(7) mail, (8) ibase_delete_user, (9) ibase_add_user, and
(10) ibase_modify_user functions.
CVE-2007-0907: Buffer underflow in PHP before 5.2.1 allows
attackers to cause a denial of service via unspecified
vectors involving the sapi_header_op function.
CVE-2007-0908: The wddx extension in PHP before 5.2.1
allows remote attackers to obtain sensitive information
via unspecified vectors.
CVE-2007-0909: Multiple format string vulnerabilities in
PHP before 5.2.1 might allow attackers to execute
arbitrary code via format string specifiers to (1) all of
the *print functions on 64-bit systems, and (2) the
odbc_result_all function.
CVE-2007-0910: Unspecified vulnerability in PHP before
5.2.1 allows attackers to "clobber" certain super-global
variables via unspecified vectors.
CVE-2007-0911: Off-by-one error in the str_ireplace
function in PHP 5.2.1 might allow context-dependent
attackers to cause a denial of service (crash).
CVE-2006-6383: PHP 5.2.0 and 4.4 allows local users to
bypass safe_mode and open_basedir restrictions via a
malicious path and a null byte before a ";" in a
session_save_path argument, followed by an allowed path,
which causes a parsing inconsistency in which PHP validates
the allowed path but sets session.save_path to the
malicious path. And another fix for open_basedir was added
to stop mixing up its setting in a virtual host environment.
This update fixes security problems also fixed in PHP
5.2.1, including following problems:
CVE-2007-0906: Multiple buffer overflows in PHP before
5.2.1 allow attackers to cause a denial of service and
possibly execute arbitrary code via unspecified vectors in
the (1) session, (2) zip, (3) imap, and (4) sqlite
extensions; (5) stream filters; and the (6) str_replace,
(7) mail, (8) ibase_delete_user, (9) ibase_add_user, and
(10) ibase_modify_user functions.
CVE-2007-0907: Buffer underflow in PHP before 5.2.1 allows
attackers to cause a denial of service via unspecified
vectors involving the sapi_header_op function.
CVE-2007-0908: The wddx extension in PHP before 5.2.1
allows remote attackers to obtain sensitive information
via unspecified vectors.
CVE-2007-0909: Multiple format string vulnerabilities in
PHP before 5.2.1 might allow attackers to execute
arbitrary code via format string specifiers to (1) all of
the *print functions on 64-bit systems, and (2) the
odbc_result_all function.
CVE-2007-0910: Unspecified vulnerability in PHP before
5.2.1 allows attackers to "clobber" certain super-global
variables via unspecified vectors.
CVE-2007-0911: Off-by-one error in the str_ireplace
function in PHP 5.2.1 might allow context-dependent
attackers to cause a denial of service (crash).
CVE-2006-6383: PHP 5.2.0 and 4.4 allows local users to
bypass safe_mode and open_basedir restrictions via a
malicious path and a null byte before a ";" in a
session_save_path argument, followed by an allowed path,
which causes a parsing inconsistency in which PHP validates
the allowed path but sets session.save_path to the
malicious path. And another fix for open_basedir was added
to stop mixing up its setting in a virtual host environment.
securityapache2-mod_php5x86_64969487af890125e97436aafda9b30d41dc12ea85php5x86_647e41fc99f34fb09516c62ea93f3b3003fe967527php5-bcmathx86_64c62b727e8885934eb97165f6eff50537f6d47022php5-curlx86_64697062df520f6ec27bbf1a3de1005adfd2150c43php5-dbax86_64deb62190dd84902c9636251ccd066e4119048fabphp5-develx86_64eaaf29b912cf273d15df741f600197593387ca77php5-domx86_6419647a12e3f1496c1fb844a24d830c28fa68f292php5-exifx86_64b9e17c216ec0a9baaf26a37695a0dfbd10115fd8php5-fastcgix86_64d305407266fbc6f408232265e4b537a2bc6e8fa1php5-ftpx86_6486d1f0bfb5773773493bc9597146337ef3472aabphp5-gdx86_64843191f5d7dabb5b5fec1c905880140bfc874286php5-iconvx86_64bdbf219918374e6668dc01a56c5aeffd32617c72php5-imapx86_64f560806456e6f13dc29fc42593db860413c9763bphp5-ldapx86_64fe94e66e3d798852fa8e524f06c2bf102904ce2bphp5-mbstringx86_64b8b73043024e1f0516538a5bc2f612801a2d27a3php5-mhashx86_64e185766f2968918f448417cc6fea87adfb3678ebphp5-mysqlx86_6457080b82546a9d68748676ed921bd314717dc40bphp5-odbcx86_641765c748b440d5040e4880abfdec93e60c27527aphp5-pearx86_6407049168f9790e4fe439ac3e9c84ec3189675b8cphp5-pgsqlx86_648f82be49d240d347778137c7d87a25c0631828ddphp5-wddxx86_64edd2047385de1ecdbd5b699c31614fa1b9dc77e8