sdk-apache2-mod_php5Security update for PHP5Security update for PHP5This update fixes security problems also fixed in PHP
5.2.1, including following problems:
CVE-2007-0906: Multiple buffer overflows in PHP before
5.2.1 allow attackers to cause a denial of service and
possibly execute arbitrary code via unspecified vectors in
the (1) session, (2) zip, (3) imap, and (4) sqlite
extensions; (5) stream filters; and the (6) str_replace,
(7) mail, (8) ibase_delete_user, (9) ibase_add_user, and
(10) ibase_modify_user functions.
CVE-2007-0907: Buffer underflow in PHP before 5.2.1 allows
attackers to cause a denial of service via unspecified
vectors involving the sapi_header_op function.
CVE-2007-0908: The wddx extension in PHP before 5.2.1
allows remote attackers to obtain sensitive information
via unspecified vectors.
CVE-2007-0909: Multiple format string vulnerabilities in
PHP before 5.2.1 might allow attackers to execute
arbitrary code via format string specifiers to (1) all of
the *print functions on 64-bit systems, and (2) the
odbc_result_all function.
CVE-2007-0910: Unspecified vulnerability in PHP before
5.2.1 allows attackers to "clobber" certain super-global
variables via unspecified vectors.
CVE-2007-0911: Off-by-one error in the str_ireplace
function in PHP 5.2.1 might allow context-dependent
attackers to cause a denial of service (crash).
CVE-2006-6383: PHP 5.2.0 and 4.4 allows local users to
bypass safe_mode and open_basedir restrictions via a
malicious path and a null byte before a ";" in a
session_save_path argument, followed by an allowed path,
which causes a parsing inconsistency in which PHP validates
the allowed path but sets session.save_path to the
malicious path. And another fix for open_basedir was added
to stop mixing up its setting in a virtual host environment.
This update fixes security problems also fixed in PHP
5.2.1, including following problems:
CVE-2007-0906: Multiple buffer overflows in PHP before
5.2.1 allow attackers to cause a denial of service and
possibly execute arbitrary code via unspecified vectors in
the (1) session, (2) zip, (3) imap, and (4) sqlite
extensions; (5) stream filters; and the (6) str_replace,
(7) mail, (8) ibase_delete_user, (9) ibase_add_user, and
(10) ibase_modify_user functions.
CVE-2007-0907: Buffer underflow in PHP before 5.2.1 allows
attackers to cause a denial of service via unspecified
vectors involving the sapi_header_op function.
CVE-2007-0908: The wddx extension in PHP before 5.2.1
allows remote attackers to obtain sensitive information
via unspecified vectors.
CVE-2007-0909: Multiple format string vulnerabilities in
PHP before 5.2.1 might allow attackers to execute
arbitrary code via format string specifiers to (1) all of
the *print functions on 64-bit systems, and (2) the
odbc_result_all function.
CVE-2007-0910: Unspecified vulnerability in PHP before
5.2.1 allows attackers to "clobber" certain super-global
variables via unspecified vectors.
CVE-2007-0911: Off-by-one error in the str_ireplace
function in PHP 5.2.1 might allow context-dependent
attackers to cause a denial of service (crash).
CVE-2006-6383: PHP 5.2.0 and 4.4 allows local users to
bypass safe_mode and open_basedir restrictions via a
malicious path and a null byte before a ";" in a
session_save_path argument, followed by an allowed path,
which causes a parsing inconsistency in which PHP validates
the allowed path but sets session.save_path to the
malicious path. And another fix for open_basedir was added
to stop mixing up its setting in a virtual host environment.
securityapache2-mod_php5i58640bed9d12a82e8648f1d4a46cf3af32729bc260bphp5i586b5ee494aa24f5f77bcd44dd652be021c64d168bbphp5-bcmathi586cd08f546c404f5b66c59aa5a7bc120cc52ae149cphp5-curli58651f30beaa4d453cc9cfa09dfb3f184ed8b8925f5php5-dbai5862769d6eb3e42e700216344bcef9977c1c24cbd89php5-develi586c6dae6ff771e8ced8ea7d76abe3e0de8b26e14d0php5-domi5867b70df0b4a8b55ea4fb1cbf96fc6fbc75f336a7fphp5-exifi586a9672b8f35122d80f1ac20ebae99ff70df66ebb2php5-fastcgii5869ac3e8964670f38571a6773f50df82948e2f8035php5-ftpi5868e4976f7bcbf94f529f27704f4ad3849b34c91c2php5-gdi586001d297855a67f4482b5f286e618788299cc0bf7php5-iconvi586765800ae897f2cece7cbeaa9f527e31869ee5d56php5-imapi58600fbace8d08a61a84b7147a2cf85ea958a53278aphp5-ldapi586314a8143e48181cbc164d56a77bf68758ab849d3php5-mbstringi58621177cc91dc1194068ca9f5877bff936e2e25e19php5-mhashi586d25459de8d5d394d4204e0b613d9e37baf0f8e92php5-mysqli586a37bdaa1433440f1e90c1746580940831c1f177fphp5-odbci586236d42872fbf8baa3fe456d23711d7d993311b35php5-peari586dca458431662848a632f8bbe19a6a1bc31ac3f9aphp5-pgsqli58659ef72a59225b1beb8f1e96ff1e821af2b90287dphp5-wddxi586e90c934d71ee45d3c526b44b6d818747e6636cd2