-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2009:167 http://www.mandriva.com/security/ _______________________________________________________________________ Package : php Date : July 28, 2009 Affected: Enterprise Server 5.0 _______________________________________________________________________ Problem Description: A vulnerability has been found and corrected in PHP: - Fixed upstream bug #48378 (exif_read_data() segfaults on certain corrupted .jpeg files). The updated packages have been patched to correct these issues. _______________________________________________________________________ References: http://bugs.php.net/bug.php?id=48378 _______________________________________________________________________ Updated Packages: Mandriva Enterprise Server 5: 3f3f7fad7715e287ae8c0a07cdb76823 mes5/i586/libphp5_common5-5.2.6-18.7mdvmes5.i586.rpm 5d18fb8298f181829658f5449f2b91fe mes5/i586/php-bcmath-5.2.6-18.7mdvmes5.i586.rpm 0cd0cdf199f37a72127b7425b061dd29 mes5/i586/php-bz2-5.2.6-18.7mdvmes5.i586.rpm ec7a4e660a0cf2cb4f8807dc81278a0e mes5/i586/php-calendar-5.2.6-18.7mdvmes5.i586.rpm f2461766d72c06a687c7eaa9f8d71ccf mes5/i586/php-cgi-5.2.6-18.7mdvmes5.i586.rpm 8d5b0d81f6dcc14094bb3d58761aa00f mes5/i586/php-cli-5.2.6-18.7mdvmes5.i586.rpm 305bbf621650f6e94378fa3e1a5a0ff8 mes5/i586/php-ctype-5.2.6-18.7mdvmes5.i586.rpm 1916da01319fe20cd102c8ccacc143c6 mes5/i586/php-curl-5.2.6-18.7mdvmes5.i586.rpm 037916c7471c442d37bed21f9826985d mes5/i586/php-dba-5.2.6-18.7mdvmes5.i586.rpm f2d33d30de41ed00a695ed82aa1e2365 mes5/i586/php-dbase-5.2.6-18.7mdvmes5.i586.rpm 4ba05fad00e76b56b0db435dc59bba1f mes5/i586/php-devel-5.2.6-18.7mdvmes5.i586.rpm e1d0f4b53b71740d424c9f144b9093ef mes5/i586/php-dom-5.2.6-18.7mdvmes5.i586.rpm 6e2159a2d55b6628cddf405d936fbdc1 mes5/i586/php-exif-5.2.6-18.7mdvmes5.i586.rpm d00ee84dda18b87eaee1a4396d6c78ee mes5/i586/php-fcgi-5.2.6-18.7mdvmes5.i586.rpm 7ff8f6f7354987343ada6b8bef6a144f mes5/i586/php-filter-5.2.6-18.7mdvmes5.i586.rpm 3f4a6d9500a7fe82e10ae0d488b65589 mes5/i586/php-ftp-5.2.6-18.7mdvmes5.i586.rpm 105ac192f815384c9c53ef523da933f8 mes5/i586/php-gd-5.2.6-18.7mdvmes5.i586.rpm 43a0e868728c87c67160941b2a4bedec mes5/i586/php-gettext-5.2.6-18.7mdvmes5.i586.rpm a1bd5d58ee395db72e50b529fec7e012 mes5/i586/php-gmp-5.2.6-18.7mdvmes5.i586.rpm e578e13d30e90f8fe1d1be3f50bf6693 mes5/i586/php-hash-5.2.6-18.7mdvmes5.i586.rpm be58a37030dfa7fd5c078e9453c53413 mes5/i586/php-iconv-5.2.6-18.7mdvmes5.i586.rpm 8cfccfce97e77d98cecb807f3d1de310 mes5/i586/php-imap-5.2.6-18.7mdvmes5.i586.rpm 384dcbbe2737a2321c245d993a3554f5 mes5/i586/php-json-5.2.6-18.7mdvmes5.i586.rpm 19e398328899ab709cd59a40476a82d6 mes5/i586/php-ldap-5.2.6-18.7mdvmes5.i586.rpm 1610789d1b6d71df79205768ecbb0291 mes5/i586/php-mbstring-5.2.6-18.7mdvmes5.i586.rpm c390849fa5ab08c93ca0c8acc368b111 mes5/i586/php-mcrypt-5.2.6-18.7mdvmes5.i586.rpm f264919a94dd9aacaa372c52a54d8a71 mes5/i586/php-mhash-5.2.6-18.7mdvmes5.i586.rpm ea4d46de23507d2a930c0a7930b00c6c mes5/i586/php-mime_magic-5.2.6-18.7mdvmes5.i586.rpm 5b24f880b2da1dee384b9a5864d3af68 mes5/i586/php-ming-5.2.6-18.7mdvmes5.i586.rpm 24b0a3f240c7e6e479329b9728f7d335 mes5/i586/php-mssql-5.2.6-18.7mdvmes5.i586.rpm e8f5ab9ba4764cad24cb7b6db3587f09 mes5/i586/php-mysql-5.2.6-18.7mdvmes5.i586.rpm b304c4cdde8c31d5ba85e84d685e83fa mes5/i586/php-mysqli-5.2.6-18.7mdvmes5.i586.rpm 2fe42371ea26650ab872751e593e0ca7 mes5/i586/php-ncurses-5.2.6-18.7mdvmes5.i586.rpm f68c4cbaa7391751f3fef61cd866faf4 mes5/i586/php-odbc-5.2.6-18.7mdvmes5.i586.rpm 3a13b0e1352098a827d31cf250ec735d mes5/i586/php-openssl-5.2.6-18.7mdvmes5.i586.rpm a92bb27a2ef2028ce601f9b088e29e0b mes5/i586/php-pcntl-5.2.6-18.7mdvmes5.i586.rpm 3beb653001b2693d5ce5129290f6e233 mes5/i586/php-pdo-5.2.6-18.7mdvmes5.i586.rpm 74e4c64bbf07f4055183064bb8a11354 mes5/i586/php-pdo_dblib-5.2.6-18.7mdvmes5.i586.rpm 69d4e0a949aedab166b4448da7d771c4 mes5/i586/php-pdo_mysql-5.2.6-18.7mdvmes5.i586.rpm 6c443ab06fd96a2ff60de9c61d4af650 mes5/i586/php-pdo_odbc-5.2.6-18.7mdvmes5.i586.rpm 45b60716f1899fba8f7d4d40790687f4 mes5/i586/php-pdo_pgsql-5.2.6-18.7mdvmes5.i586.rpm 6a312266edfce6d6d0f7213f8321fdf4 mes5/i586/php-pdo_sqlite-5.2.6-18.7mdvmes5.i586.rpm 8e1200048be6689d065d11ba20a7a942 mes5/i586/php-pgsql-5.2.6-18.7mdvmes5.i586.rpm d9fdf32c08ef34f5cc03fb727417bb9f mes5/i586/php-posix-5.2.6-18.7mdvmes5.i586.rpm fa3bff403e43e913f1bf2d4296a3937e mes5/i586/php-pspell-5.2.6-18.7mdvmes5.i586.rpm 44187179e55e245b4cf367b55c35ace7 mes5/i586/php-readline-5.2.6-18.7mdvmes5.i586.rpm 6690e2864d6c13576c3a9fb0441b9e87 mes5/i586/php-recode-5.2.6-18.7mdvmes5.i586.rpm 8fdbefee13d4bc1da9b0cb210848c712 mes5/i586/php-session-5.2.6-18.7mdvmes5.i586.rpm 77c116126219c7885ea91887e28cf457 mes5/i586/php-shmop-5.2.6-18.7mdvmes5.i586.rpm 2c885874901749f5aca1cbe5bd660321 mes5/i586/php-snmp-5.2.6-18.7mdvmes5.i586.rpm a2384c1f8b373bd3530bf1c18d8b4f4b mes5/i586/php-soap-5.2.6-18.7mdvmes5.i586.rpm 8f6da18501faff0681f9d6b16d4462d1 mes5/i586/php-sockets-5.2.6-18.7mdvmes5.i586.rpm 2ce3857d635031c38f9d05971ffd0979 mes5/i586/php-sqlite-5.2.6-18.7mdvmes5.i586.rpm 5f2d9134478850a1295856e2980a3bc7 mes5/i586/php-sybase-5.2.6-18.7mdvmes5.i586.rpm de42325d4e75bff98bb2a5aeebd5ab45 mes5/i586/php-sysvmsg-5.2.6-18.7mdvmes5.i586.rpm 8a0a6d2fabab73656111b1aa6945b5e0 mes5/i586/php-sysvsem-5.2.6-18.7mdvmes5.i586.rpm 37f19651aa10ae330db4b5047126e23f mes5/i586/php-sysvshm-5.2.6-18.7mdvmes5.i586.rpm 5cba78eec1731c7986a30fd9d685d837 mes5/i586/php-tidy-5.2.6-18.7mdvmes5.i586.rpm 8baf2c8f69b7e167cd5ebd213ebbc18d mes5/i586/php-tokenizer-5.2.6-18.7mdvmes5.i586.rpm 0db6ec2c58b1ec7d887cb972837aa243 mes5/i586/php-wddx-5.2.6-18.7mdvmes5.i586.rpm 9bb87172d24b76fda20b61b16d1f7da7 mes5/i586/php-xml-5.2.6-18.7mdvmes5.i586.rpm 591f1b1dbbf3fdf5d64846d5bc71166e mes5/i586/php-xmlreader-5.2.6-18.7mdvmes5.i586.rpm 17d8620577de04f97e4a7b6ec3dbf3fc mes5/i586/php-xmlrpc-5.2.6-18.7mdvmes5.i586.rpm ef1f423de0ec7169a4db773e271e3295 mes5/i586/php-xmlwriter-5.2.6-18.7mdvmes5.i586.rpm 86a3be1202874ce80931f604f9b4b14f mes5/i586/php-xsl-5.2.6-18.7mdvmes5.i586.rpm 1e5018d72861925351c1e78ee6798aaf mes5/i586/php-zlib-5.2.6-18.7mdvmes5.i586.rpm bac4a30648399229f6e990c3f5fe740f mes5/SRPMS/php-5.2.6-18.7mdvmes5.src.rpm Mandriva Enterprise Server 5/X86_64: 0eeee7f99b0af3771bc647a92743c432 mes5/x86_64/lib64php5_common5-5.2.6-18.7mdvmes5.x86_64.rpm 18d12546bbcc19be0701607652ce6c86 mes5/x86_64/php-bcmath-5.2.6-18.7mdvmes5.x86_64.rpm 6682658fb0d19b7f730ea30f87527fa1 mes5/x86_64/php-bz2-5.2.6-18.7mdvmes5.x86_64.rpm 3c8edcc9d3d8ae861a7958287a4bbde3 mes5/x86_64/php-calendar-5.2.6-18.7mdvmes5.x86_64.rpm 6e865919fde119cdb010d9e7c18eac15 mes5/x86_64/php-cgi-5.2.6-18.7mdvmes5.x86_64.rpm ce829f80228990a6c026ab9e5f453fd0 mes5/x86_64/php-cli-5.2.6-18.7mdvmes5.x86_64.rpm 7cbe82073fd66b6303cf5ff1c6ab68de mes5/x86_64/php-ctype-5.2.6-18.7mdvmes5.x86_64.rpm 9c47d93e840043598e9cd5f576560ed3 mes5/x86_64/php-curl-5.2.6-18.7mdvmes5.x86_64.rpm 0e7255cfb15c5452ad763cfc4017f2f3 mes5/x86_64/php-dba-5.2.6-18.7mdvmes5.x86_64.rpm 992c5fe0d793dc8c936503de3c2945b1 mes5/x86_64/php-dbase-5.2.6-18.7mdvmes5.x86_64.rpm 05880b78b3b1fa26059a74565124abf0 mes5/x86_64/php-devel-5.2.6-18.7mdvmes5.x86_64.rpm 563bee135193e0214f4c906d0fb2899a mes5/x86_64/php-dom-5.2.6-18.7mdvmes5.x86_64.rpm 2219d16f5954717d51b71be2a3bb09ac mes5/x86_64/php-exif-5.2.6-18.7mdvmes5.x86_64.rpm b714d2c2ab5069169140f61b714ad4fd mes5/x86_64/php-fcgi-5.2.6-18.7mdvmes5.x86_64.rpm 1bc340880d9d62d6ae3ff1c0eb055270 mes5/x86_64/php-filter-5.2.6-18.7mdvmes5.x86_64.rpm 6d72a0e41a9e617401daaa3e150699e5 mes5/x86_64/php-ftp-5.2.6-18.7mdvmes5.x86_64.rpm aad73b613cd87ef786fd97b69c357ac2 mes5/x86_64/php-gd-5.2.6-18.7mdvmes5.x86_64.rpm d36f9ccabf708a37e1e37f1112bbf355 mes5/x86_64/php-gettext-5.2.6-18.7mdvmes5.x86_64.rpm d387456545e32b725cdd92ecc984ec5d mes5/x86_64/php-gmp-5.2.6-18.7mdvmes5.x86_64.rpm 1acf6be0808c25f2a28dcf267cc84026 mes5/x86_64/php-hash-5.2.6-18.7mdvmes5.x86_64.rpm 7cc7619527c23f3da6eff6e866ba2ebe mes5/x86_64/php-iconv-5.2.6-18.7mdvmes5.x86_64.rpm 4569552f683d09f59d9a6bf4bbe690a2 mes5/x86_64/php-imap-5.2.6-18.7mdvmes5.x86_64.rpm 8530229a65ac38d307c64e514a65e30c mes5/x86_64/php-json-5.2.6-18.7mdvmes5.x86_64.rpm 58ea07b3b9ade7ed21cc7a29261dc336 mes5/x86_64/php-ldap-5.2.6-18.7mdvmes5.x86_64.rpm 9df7aa87edc7da3175eb546c63957f01 mes5/x86_64/php-mbstring-5.2.6-18.7mdvmes5.x86_64.rpm b7ed3515e8c76b5e3a2b29a51cf6f303 mes5/x86_64/php-mcrypt-5.2.6-18.7mdvmes5.x86_64.rpm 524009342b4849cd1a2ff155bbe80110 mes5/x86_64/php-mhash-5.2.6-18.7mdvmes5.x86_64.rpm b6e1fe7c644af19aaf5f62cbd526a13f mes5/x86_64/php-mime_magic-5.2.6-18.7mdvmes5.x86_64.rpm fec49dba905b0d9ec4ab5e7340c5ee84 mes5/x86_64/php-ming-5.2.6-18.7mdvmes5.x86_64.rpm 2a5e29d2674e99fe7774d75aba506841 mes5/x86_64/php-mssql-5.2.6-18.7mdvmes5.x86_64.rpm 59fb599962b7e95b755e1103eb3ebab0 mes5/x86_64/php-mysql-5.2.6-18.7mdvmes5.x86_64.rpm 847b10df69452a8682e84920071fbfa1 mes5/x86_64/php-mysqli-5.2.6-18.7mdvmes5.x86_64.rpm e09d8f5ddaf783baabe3e7031169fbc0 mes5/x86_64/php-ncurses-5.2.6-18.7mdvmes5.x86_64.rpm a8d8f6f24ad6b375200eac7620b70199 mes5/x86_64/php-odbc-5.2.6-18.7mdvmes5.x86_64.rpm befad702b7f25e399de66bf7210ee9a9 mes5/x86_64/php-openssl-5.2.6-18.7mdvmes5.x86_64.rpm 108bfdeed8dfb9ee10f626747e19b642 mes5/x86_64/php-pcntl-5.2.6-18.7mdvmes5.x86_64.rpm b430e138d6377df31bb344e7fdfb01e2 mes5/x86_64/php-pdo-5.2.6-18.7mdvmes5.x86_64.rpm fa0ad35f530342c7d4a647083b3bd8b8 mes5/x86_64/php-pdo_dblib-5.2.6-18.7mdvmes5.x86_64.rpm 94c9ebeab2a46fcd91c75773cb67e66a mes5/x86_64/php-pdo_mysql-5.2.6-18.7mdvmes5.x86_64.rpm b552b7089317ab6d00cdaca033e9a10b mes5/x86_64/php-pdo_odbc-5.2.6-18.7mdvmes5.x86_64.rpm ece9f0fc3b49cb9e5407d954f249b77b mes5/x86_64/php-pdo_pgsql-5.2.6-18.7mdvmes5.x86_64.rpm 050ceb9dad2e6e4f6f68abc8b81c2dd5 mes5/x86_64/php-pdo_sqlite-5.2.6-18.7mdvmes5.x86_64.rpm fc491cd864973d819661bcc68b631722 mes5/x86_64/php-pgsql-5.2.6-18.7mdvmes5.x86_64.rpm ff61efe07ac8ca4c8ba27bea69b54237 mes5/x86_64/php-posix-5.2.6-18.7mdvmes5.x86_64.rpm 71b72c87e39c11d169a93be5efb1e717 mes5/x86_64/php-pspell-5.2.6-18.7mdvmes5.x86_64.rpm b164bf0494f5c665199ea77ed5ee54b8 mes5/x86_64/php-readline-5.2.6-18.7mdvmes5.x86_64.rpm 7ed47dc225cd90d6175d856247a1f318 mes5/x86_64/php-recode-5.2.6-18.7mdvmes5.x86_64.rpm db43f14bdfe4df39bfc11e7c7b83fc7e mes5/x86_64/php-session-5.2.6-18.7mdvmes5.x86_64.rpm 4c1b910a4fcbd027b5b7137a42321916 mes5/x86_64/php-shmop-5.2.6-18.7mdvmes5.x86_64.rpm 1e41b6c93ee5ff3e28304d95f1d59773 mes5/x86_64/php-snmp-5.2.6-18.7mdvmes5.x86_64.rpm 6b7c1b20f9f8dcf8a1c58ff3c8cd5794 mes5/x86_64/php-soap-5.2.6-18.7mdvmes5.x86_64.rpm df701571bb2cc9273d6f2a9b87a50f4e mes5/x86_64/php-sockets-5.2.6-18.7mdvmes5.x86_64.rpm a32976d038a3c425149a0f865c715cb2 mes5/x86_64/php-sqlite-5.2.6-18.7mdvmes5.x86_64.rpm 6c63b0c429ce16df11f1caa2d84a8e2d mes5/x86_64/php-sybase-5.2.6-18.7mdvmes5.x86_64.rpm 61268adcfced193dfeae341c821299e6 mes5/x86_64/php-sysvmsg-5.2.6-18.7mdvmes5.x86_64.rpm c0e6b02dd1c3983391e54e4d77cb8353 mes5/x86_64/php-sysvsem-5.2.6-18.7mdvmes5.x86_64.rpm 72597bf4617f093bfffbc7c9ef54e6c4 mes5/x86_64/php-sysvshm-5.2.6-18.7mdvmes5.x86_64.rpm 463dc06fab74bb5cda9b745710dad478 mes5/x86_64/php-tidy-5.2.6-18.7mdvmes5.x86_64.rpm 7deead9c4a5b61c92721e62d610aeb8c mes5/x86_64/php-tokenizer-5.2.6-18.7mdvmes5.x86_64.rpm 114c9fdd121e758f691589845ea0ebc2 mes5/x86_64/php-wddx-5.2.6-18.7mdvmes5.x86_64.rpm b28d24edfb2ca5f7818634dbdd20d688 mes5/x86_64/php-xml-5.2.6-18.7mdvmes5.x86_64.rpm 493ade3ce3b8fed7ac359425be3b657b mes5/x86_64/php-xmlreader-5.2.6-18.7mdvmes5.x86_64.rpm 5eb0d96ef06159397cbbfe9495632dc9 mes5/x86_64/php-xmlrpc-5.2.6-18.7mdvmes5.x86_64.rpm 9ce170710f55e6e911ec2907d517dcd9 mes5/x86_64/php-xmlwriter-5.2.6-18.7mdvmes5.x86_64.rpm 072b0cb626bac82b45569ac5a3d34a56 mes5/x86_64/php-xsl-5.2.6-18.7mdvmes5.x86_64.rpm c113df0457277c9f76b67750746e98f6 mes5/x86_64/php-zlib-5.2.6-18.7mdvmes5.x86_64.rpm bac4a30648399229f6e990c3f5fe740f mes5/SRPMS/php-5.2.6-18.7mdvmes5.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iD8DBQFKb0MsmqjQ0CJFipgRAoWHAJ4kWkPMTIHKkuWcmTO9wwkeJDP/cACePJAd D9SSQgou/Mz0JazVs8xGHZM= =wTRP -----END PGP SIGNATURE-----
