slesp1o-php5

Recommended update for Apache2 and PHP5

This is a update for SLE10 for package(s):php5,php5-devel,php5-pear,apache2-mod_php5,php5-f astcgi,php5-bcmath,php5-bz2,php5-calendar,php5-ctype,php5-cu rl,php5-dba,php5-dbase,php5-dom,php5-exif,php5-filepro,php5- ftp,php5-gd,php5-gettext,php5-gmp,php5-iconv,php5-imap,php5- ldap,php5-mbstring,php5-mcrypt,php5-mhash,php5-mysql,php5-my sqli,php5-ncurses,php5-odbc,php5-openssl,php5-pcntl,php5-pdo ,php5-pgsql,php5-posix,php5-pspell,php5-shmop,php5-snmp,php5 -soap,php5-sockets,php5-sqlite,php5-sysvmsg,php5-sysvsem,php 5-sysvshm,php5-tidy,php5-tokenizer,php5-wddx,php5-xmlrpc,php 5-xsl,php5-xmlreader,php5-zlib,apache2,apache2-worker,apache 2-prefork,apache2-devel,apache2-doc,apache2-example-pages modified (subpackage of) php5: ------------------------------- --- SLES10-MT-CHANGELOGS/php5 2007-03-09 00:43:02.509602000 +0100 +++ SLES10-SP1-CHANGELOGS/php5 2007-03-08 17:00:50.715796000 +0100 @@ -1,3 +1,31 @@ +* Tue Feb 27 2007 - anosek@suse.cz +- fixed VUL-0: php5: official release 5.2.1 fixes a lot of security + vulnerabilities [#244034] + Patches: + CVE-2007-0905.patch + CVE-2007-0906-session.patch + CVE-2007-0906-imap.patch + CVE-2007-0906-sqlite.patch + CVE-2007-0906-str_replace.patch + CVE-2007-0907.patch + CVE-2007-0908.patch + CVE-2007-0909-print.patch + CVE-2007-0909-odbc.patch + CVE-2007-0910.patch + emalloc-overflows.patch + +* Thu Jan 04 2007 - anosek@suse.cz +- added Suhosin patch and extension (fate #301876) + +* Tue Dec 19 2006 - anosek@suse.cz +- fixed VUL-0: php session.save_path open_basedir bypass + [#227569] (save_path-secfix.patch) + +* Thu Nov 09 2006 - anosek@suse.cz +- fixed security issue: + PHP mixes up open_basedir settings [#136651] + (open_basedir-secfix.patch) + * Fri Nov 03 2006 - mmarek@suse.cz - fixed a buffer overflow in php_escape_html_entities() [#217301] (CVE-2006-5465.patch) ------------------------------- modified (subpackage of) apache2: ------------------------------- --- SLES10-MT-CHANGELOGS/apache2 2007-03-09 00:42:50.339750000 +0100 +++ SLES10-SP1-CHANGELOGS/apache2 2007-03-08 17:00:48.036984000 +0100 @@ -1,3 +1,9 @@ +* Thu Jan 11 2007 - mskibbe@suse.de +- change path to xml service document (fate #301708) + +* Wed Jan 10 2007 - mskibbe@suse.de +- Apache XML Service Description Document ( fate #301708 ) + * Fri Nov 10 2006 - poeml@suse.de - update to 2.2.3 |SECURITY: CVE-2006-3747 (cve.mitre.org) ------------------------------- This is a update for SLE10 for package(s):php5,php5-devel,php5-pear,apache2-mod_php5,php5-f astcgi,php5-bcmath,php5-bz2,php5-calendar,php5-ctype,php5-cu rl,php5-dba,php5-dbase,php5-dom,php5-exif,php5-filepro,php5- ftp,php5-gd,php5-gettext,php5-gmp,php5-iconv,php5-imap,php5- ldap,php5-mbstring,php5-mcrypt,php5-mhash,php5-mysql,php5-my sqli,php5-ncurses,php5-odbc,php5-openssl,php5-pcntl,php5-pdo ,php5-pgsql,php5-posix,php5-pspell,php5-shmop,php5-snmp,php5 -soap,php5-sockets,php5-sqlite,php5-sysvmsg,php5-sysvsem,php 5-sysvshm,php5-tidy,php5-tokenizer,php5-wddx,php5-xmlrpc,php 5-xsl,php5-xmlreader,php5-zlib,apache2,apache2-worker,apache 2-prefork,apache2-devel,apache2-doc,apache2-example-pages modified (subpackage of) php5: ------------------------------- --- SLES10-MT-CHANGELOGS/php5 2007-03-09 00:43:02.509602000 +0100 +++ SLES10-SP1-CHANGELOGS/php5 2007-03-08 17:00:50.715796000 +0100 @@ -1,3 +1,31 @@ +* Tue Feb 27 2007 - anosek@suse.cz +- fixed VUL-0: php5: official release 5.2.1 fixes a lot of security + vulnerabilities [#244034] + Patches: + CVE-2007-0905.patch + CVE-2007-0906-session.patch + CVE-2007-0906-imap.patch + CVE-2007-0906-sqlite.patch + CVE-2007-0906-str_replace.patch + CVE-2007-0907.patch + CVE-2007-0908.patch + CVE-2007-0909-print.patch + CVE-2007-0909-odbc.patch + CVE-2007-0910.patch + emalloc-overflows.patch + +* Thu Jan 04 2007 - anosek@suse.cz +- added Suhosin patch and extension (fate #301876) + +* Tue Dec 19 2006 - anosek@suse.cz +- fixed VUL-0: php session.save_path open_basedir bypass + [#227569] (save_path-secfix.patch) + +* Thu Nov 09 2006 - anosek@suse.cz +- fixed security issue: + PHP mixes up open_basedir settings [#136651] + (open_basedir-secfix.patch) + * Fri Nov 03 2006 - mmarek@suse.cz - fixed a buffer overflow in php_escape_html_entities() [#217301] (CVE-2006-5465.patch) ------------------------------- modified (subpackage of) apache2: ------------------------------- --- SLES10-MT-CHANGELOGS/apache2 2007-03-09 00:42:50.339750000 +0100 +++ SLES10-SP1-CHANGELOGS/apache2 2007-03-08 17:00:48.036984000 +0100 @@ -1,3 +1,9 @@ +* Thu Jan 11 2007 - mskibbe@suse.de +- change path to xml service document (fate #301708) + +* Wed Jan 10 2007 - mskibbe@suse.de +- Apache XML Service Description Document ( fate #301708 ) + * Fri Nov 10 2006 - poeml@suse.de - update to 2.2.3 |SECURITY: CVE-2006-3747 (cve.mitre.org) ------------------------------- recommended apache2 i586 e7e8a6a527a3a32588e9e7b11c49a3ee9f79c751 apache2-devel i586 bd456b4642c9701314024dbde4725a3253859064 apache2-doc i586 be0b041f79af4c3a8ad17e54f06d38edf2cf05ef apache2-example-pages i586 6f291c95a894b5138eec90252dacf653c3740de6 apache2-mod_php5 i586 8cd74ded1bbd9f39acb11ba41734dcfc568089c9 apache2-prefork i586 6b38c80273fc0839957ac28fcd2d152fae62a3b0 apache2-worker i586 982a94e818c5b33af258986220ae658c92de53ca php5 i586 f88a0a0238d8b08e06c3a5eade74e43921e7cbb1 php5-bcmath i586 e9867dba492431c6ed2172fa4680e38e97f9c083 php5-bz2 i586 51453901bd110c9ce978c2dae8ef5aa93ec146ff php5-calendar i586 79d1a4b5bb1224bb3c6f58b7f5cf50ba409eb3d3 php5-ctype i586 f4f7be4455c1821cc3d895440309e3e931229aca php5-curl i586 b6da8cb4c2d357a092b59102938b6858293a5cac php5-dba i586 6465dbe4be3122de1cdee786ebaa54954cb017e4 php5-dbase i586 cdb5c912692566dc8865b733b778f8a7654489d0 php5-devel i586 c0734ea0a0f5e39adf03b9b9b8b7efbe0de5dd3f php5-dom i586 a5edb2d2b2a77a5f7e760133ca8305bb3947491a php5-exif i586 d03b9396ad791a3225b85755f3ba4c7bbf877044 php5-fastcgi i586 8575f9d5ae76ea70e55a94a2a84558839750c308 php5-filepro i586 ab71238ee7be1ad491bc9d208c368055bb3fbf7d php5-ftp i586 81a9f616d9739ab09afd51fe4f02685f0ad0da3c php5-gd i586 29b6d4ff1ec090855de5142816dedc6fb5fd3b32 php5-gettext i586 c4372b2733dca5260bfce61c8aaa97b43e49bafa php5-gmp i586 9f22330cd34a3ba5a330300bda321801aa58d6eb php5-iconv i586 dcb37ce2d2815b147f0c111ca53cc727055c7537 php5-imap i586 90a0da86d97bb226336724d3f10bbc114ba4afff php5-ldap i586 babbe5d99b37f8dee20e6e0111511108f4601bd6 php5-mbstring i586 65967d2a4f0a930252fbc6c2ffb8fd6d9c2ac9e6 php5-mcrypt i586 cfce3424bb61418e89e435171df641967168436b php5-mhash i586 dcabae0aa72a2c09a3293b832c00cca958a015b2 php5-mysql i586 90867ad9ad2c7981a224af53e8169fe908be6cad php5-mysqli i586 3e610df8d94e1fd8851d2fd63ab233049de16f21 php5-ncurses i586 654eabbc3223d387f7f4d925d11206189c3f6467 php5-odbc i586 dfcc0c3cf14fcbb38a6933ee74a1609bb4a36c5d php5-openssl i586 a0d41a839b594109e5381512a791a10ef871669b php5-pcntl i586 f7d5ade0f278a8594ad89d6755592f78930edca4 php5-pdo i586 b64c8552ab16fc2ad95e63e0570d3b033a3e6f5f php5-pear i586 31f996df2011bac44571646ae894f7b133a4b8f4 php5-pgsql i586 e1a91df7ab9ff6fd46e0f612780acaad9cea2f4a php5-posix i586 ba9de03ee1e2ad56a686ad9d08fcb872f711f9be php5-pspell i586 2d140209984cf7f4256442a156980123ea9cf00a php5-shmop i586 52d4cf2f50320792573c41b62b219d59c0e17b19 php5-snmp i586 0d604954a93fdf4b31305d1f835b3b9a519df9bf php5-soap i586 c9309eac427bac2c6efbe3fb6cf4b5575185c167 php5-sockets i586 1f148cb25469f703d936e9632edad14f93aba948 php5-sqlite i586 43b6f88ac391e6753441cda10742dbf029aa4e7d php5-sysvmsg i586 ae9c349217baef2bd2af9271082d949b0a1c3b5e php5-sysvsem i586 f4a3904bc85064d76015e82e90f2e8c8cc235a69 php5-sysvshm i586 2fd3d891f7efd8e81be0688568b000afeb5181d2 php5-tokenizer i586 4c81d3d0688d42b37907fddb2200e0f5b2fba13a php5-wddx i586 997368595c0369821742286c4f5b1ed6cd009fd0 php5-xmlreader i586 cdf64008f91e650ec4f2c116f2e51fa3a3ed14dc php5-xmlrpc i586 4b030fd39cf6d40079cf5cb5462dfff2a6a79df3 php5-xsl i586 a176cd28410af4a2f3333caad0e7d4ffeb2a4979 php5-zlib i586 a43e25ce487dbf4184a78d4c0c7f717208f51895