slesp1o-php5

Recommended update for Apache2 and PHP5

This is a update for SLE10 for package(s):php5,php5-devel,php5-pear,apache2-mod_php5,php5-f astcgi,php5-bcmath,php5-bz2,php5-calendar,php5-ctype,php5-cu rl,php5-dba,php5-dbase,php5-dom,php5-exif,php5-filepro,php5- ftp,php5-gd,php5-gettext,php5-gmp,php5-iconv,php5-imap,php5- ldap,php5-mbstring,php5-mcrypt,php5-mhash,php5-mysql,php5-my sqli,php5-ncurses,php5-odbc,php5-openssl,php5-pcntl,php5-pdo ,php5-pgsql,php5-posix,php5-pspell,php5-shmop,php5-snmp,php5 -soap,php5-sockets,php5-sqlite,php5-sysvmsg,php5-sysvsem,php 5-sysvshm,php5-tidy,php5-tokenizer,php5-wddx,php5-xmlrpc,php 5-xsl,php5-xmlreader,php5-zlib,apache2,apache2-worker,apache 2-prefork,apache2-devel,apache2-doc,apache2-example-pages modified (subpackage of) php5: ------------------------------- --- SLES10-MT-CHANGELOGS/php5 2007-03-09 00:43:02.509602000 +0100 +++ SLES10-SP1-CHANGELOGS/php5 2007-03-08 17:00:50.715796000 +0100 @@ -1,3 +1,31 @@ +* Tue Feb 27 2007 - anosek@suse.cz +- fixed VUL-0: php5: official release 5.2.1 fixes a lot of security + vulnerabilities [#244034] + Patches: + CVE-2007-0905.patch + CVE-2007-0906-session.patch + CVE-2007-0906-imap.patch + CVE-2007-0906-sqlite.patch + CVE-2007-0906-str_replace.patch + CVE-2007-0907.patch + CVE-2007-0908.patch + CVE-2007-0909-print.patch + CVE-2007-0909-odbc.patch + CVE-2007-0910.patch + emalloc-overflows.patch + +* Thu Jan 04 2007 - anosek@suse.cz +- added Suhosin patch and extension (fate #301876) + +* Tue Dec 19 2006 - anosek@suse.cz +- fixed VUL-0: php session.save_path open_basedir bypass + [#227569] (save_path-secfix.patch) + +* Thu Nov 09 2006 - anosek@suse.cz +- fixed security issue: + PHP mixes up open_basedir settings [#136651] + (open_basedir-secfix.patch) + * Fri Nov 03 2006 - mmarek@suse.cz - fixed a buffer overflow in php_escape_html_entities() [#217301] (CVE-2006-5465.patch) ------------------------------- modified (subpackage of) apache2: ------------------------------- --- SLES10-MT-CHANGELOGS/apache2 2007-03-09 00:42:50.339750000 +0100 +++ SLES10-SP1-CHANGELOGS/apache2 2007-03-08 17:00:48.036984000 +0100 @@ -1,3 +1,9 @@ +* Thu Jan 11 2007 - mskibbe@suse.de +- change path to xml service document (fate #301708) + +* Wed Jan 10 2007 - mskibbe@suse.de +- Apache XML Service Description Document ( fate #301708 ) + * Fri Nov 10 2006 - poeml@suse.de - update to 2.2.3 |SECURITY: CVE-2006-3747 (cve.mitre.org) ------------------------------- This is a update for SLE10 for package(s):php5,php5-devel,php5-pear,apache2-mod_php5,php5-f astcgi,php5-bcmath,php5-bz2,php5-calendar,php5-ctype,php5-cu rl,php5-dba,php5-dbase,php5-dom,php5-exif,php5-filepro,php5- ftp,php5-gd,php5-gettext,php5-gmp,php5-iconv,php5-imap,php5- ldap,php5-mbstring,php5-mcrypt,php5-mhash,php5-mysql,php5-my sqli,php5-ncurses,php5-odbc,php5-openssl,php5-pcntl,php5-pdo ,php5-pgsql,php5-posix,php5-pspell,php5-shmop,php5-snmp,php5 -soap,php5-sockets,php5-sqlite,php5-sysvmsg,php5-sysvsem,php 5-sysvshm,php5-tidy,php5-tokenizer,php5-wddx,php5-xmlrpc,php 5-xsl,php5-xmlreader,php5-zlib,apache2,apache2-worker,apache 2-prefork,apache2-devel,apache2-doc,apache2-example-pages modified (subpackage of) php5: ------------------------------- --- SLES10-MT-CHANGELOGS/php5 2007-03-09 00:43:02.509602000 +0100 +++ SLES10-SP1-CHANGELOGS/php5 2007-03-08 17:00:50.715796000 +0100 @@ -1,3 +1,31 @@ +* Tue Feb 27 2007 - anosek@suse.cz +- fixed VUL-0: php5: official release 5.2.1 fixes a lot of security + vulnerabilities [#244034] + Patches: + CVE-2007-0905.patch + CVE-2007-0906-session.patch + CVE-2007-0906-imap.patch + CVE-2007-0906-sqlite.patch + CVE-2007-0906-str_replace.patch + CVE-2007-0907.patch + CVE-2007-0908.patch + CVE-2007-0909-print.patch + CVE-2007-0909-odbc.patch + CVE-2007-0910.patch + emalloc-overflows.patch + +* Thu Jan 04 2007 - anosek@suse.cz +- added Suhosin patch and extension (fate #301876) + +* Tue Dec 19 2006 - anosek@suse.cz +- fixed VUL-0: php session.save_path open_basedir bypass + [#227569] (save_path-secfix.patch) + +* Thu Nov 09 2006 - anosek@suse.cz +- fixed security issue: + PHP mixes up open_basedir settings [#136651] + (open_basedir-secfix.patch) + * Fri Nov 03 2006 - mmarek@suse.cz - fixed a buffer overflow in php_escape_html_entities() [#217301] (CVE-2006-5465.patch) ------------------------------- modified (subpackage of) apache2: ------------------------------- --- SLES10-MT-CHANGELOGS/apache2 2007-03-09 00:42:50.339750000 +0100 +++ SLES10-SP1-CHANGELOGS/apache2 2007-03-08 17:00:48.036984000 +0100 @@ -1,3 +1,9 @@ +* Thu Jan 11 2007 - mskibbe@suse.de +- change path to xml service document (fate #301708) + +* Wed Jan 10 2007 - mskibbe@suse.de +- Apache XML Service Description Document ( fate #301708 ) + * Fri Nov 10 2006 - poeml@suse.de - update to 2.2.3 |SECURITY: CVE-2006-3747 (cve.mitre.org) ------------------------------- recommended apache2 x86_64 59098cfc96605591c03eb0484d171809d0693aea apache2-devel x86_64 cb3009257f998dbe176eecfaaecfe27b1523f786 apache2-doc x86_64 2d0521cb7fad99671e7ee14cce605a3b80009cb0 apache2-example-pages x86_64 b4ff1166a2e392e67898184a12f9228fdd6e4acf apache2-mod_php5 x86_64 47bce078548723abda65922efbffcddae9de9428 apache2-prefork x86_64 3dff7947f66d06011a70d64aa0ed12e11064464b apache2-worker x86_64 653c51ea057d093d6ccfe38e406df8d0a0f37a78 php5 x86_64 c1ea69d52549b3bacbc60772528b5d9890b72af3 php5-bcmath x86_64 b00d7ba74f73b98709e97d1390dad44babf954a2 php5-bz2 x86_64 6df6bd2d65ff57fd004de1d75b2f0d3607ac8fb2 php5-calendar x86_64 45048c8fbd468983d43414b29f919f384f4a0d4c php5-ctype x86_64 a6408ff28477101e8eb4e642416357133893ce86 php5-curl x86_64 7a21aa86c4189835f32dca973887e0f042e936e0 php5-dba x86_64 e16bd6cdf3adf246fd900200cd157b164b44c75c php5-dbase x86_64 5bc2ab32dc5ecec88699e458dd4583038d8b5e73 php5-devel x86_64 e37674520d0e387b5ec92d85dcd5005e65b3f835 php5-dom x86_64 efed55d79070350340c5cd01e896fbb65d881387 php5-exif x86_64 db72a73346efb223e6ebaf7d8add442b04f2ea5c php5-fastcgi x86_64 6e719965ddca11c73f493f2db9ace078822e85ce php5-filepro x86_64 a085d1985c69ba25597896bffde30582fc08418d php5-ftp x86_64 68feb4c7b8e951dfbdc0990ee58512ecf037ba7b php5-gd x86_64 56a59e5b5e7075f9ed00b7cdf99eb5668ed320ea php5-gettext x86_64 4bfd8854b833d02f13c3804745d528998051399a php5-gmp x86_64 07b8f51944f2be1559971284147228c080b5237e php5-iconv x86_64 52ec343bf4ec5f96fe29b44c61ff6c08eff8d41a php5-imap x86_64 9cb2445b8df4c9a7accfe22d45c7e4450f46d753 php5-ldap x86_64 20846743167f83e30b98ca76be112722c8dc45c3 php5-mbstring x86_64 a096544c05a8867b6d3ea2e38b7719f3423e1c5c php5-mcrypt x86_64 2ef3ac1b74be200d102f183751ff03bb4e0cebad php5-mhash x86_64 929d9176760ff9d37f8b7d0763f55d834a077140 php5-mysql x86_64 0e4a8f77cbe2df9bd5c8b29b9c118ebe15b2db37 php5-mysqli x86_64 5b1416fee264c2e7b90347801d63ecf59d2d62a8 php5-ncurses x86_64 3bec02f84f517bc14fb6991f5cb61c1007204f58 php5-odbc x86_64 145be8e7f5ca8b6eb01deca93cb2f8174d9d0b6a php5-openssl x86_64 9f227768177e8ddca9fcf483193899da534401fe php5-pcntl x86_64 b56f167a238f41a58431ffb4b053f1c579c6bd3b php5-pdo x86_64 991bb9565ea752a6f9495b17874fc3925e0e364a php5-pear x86_64 37eac0dfbb49b7b7a16235512e61ab05b527c2b3 php5-pgsql x86_64 f231022f8ec13d077ed67e1f25a479cd3d9c448e php5-posix x86_64 a7482ebed9a5a8193abe4dfb6767ff785f1782cb php5-pspell x86_64 68968c8351ce1ba4328ba4f53279348f7d1244a7 php5-shmop x86_64 452ea4bb31785d39a41137508b3404b04f3ab3b2 php5-snmp x86_64 b5281b2072c40c2c639453459e64b41629301373 php5-soap x86_64 b56aef338e0975a70aa7cba30d4572725731aee5 php5-sockets x86_64 d77bd319fc4e57a170d7f8991cd24ba50b528590 php5-sqlite x86_64 f4fd7fd5194986bafb4e8eb8f2fa87a6b16277fb php5-sysvmsg x86_64 e4405660f4c067ba508da25fd0fbb8505c2512d2 php5-sysvsem x86_64 a36b7c78e7b62ebc1667c3d9463a9abc224e6fe6 php5-sysvshm x86_64 39265dd554d87e6db756543404712da3987d2f53 php5-tokenizer x86_64 3403a2bbb9cb9d5972210f9ae707cc582b1fae00 php5-wddx x86_64 b8a612048ac154cc4de3cfc1f5f54a268cd7af63 php5-xmlreader x86_64 7e7ca0f7c5c8a4a639f274a4f83d36ccb226aae1 php5-xmlrpc x86_64 a291d57d8c3e1171355bf03fc7ecdda72ff76429 php5-xsl x86_64 d98addb2da29d7e64816d247e5daa6363192e8f5 php5-zlib x86_64 912825659294fe644de3859b1de43158de47ddde