---------------------------------------------------------------------- BETA test the new Secunia Personal Software Inspector! The Secunia PSI detects installed software on your computer and categorises it as either Insecure, End-of-Life, or Up-To-Date. Effectively enabling you to focus your attention on software installations where more secure versions are available from the vendors. Download the free PSI BETA from the Secunia website: https://psi.secunia.com/ ---------------------------------------------------------------------- TITLE: Fedora update for php SECUNIA ADVISORY ID: SA26802 VERIFY ADVISORY: http://secunia.com/advisories/26802/ CRITICAL: Moderately critical IMPACT: Unknown, Security Bypass, Privilege escalation WHERE: >From remote OPERATING SYSTEM: Fedora 7 http://secunia.com/product/15552/ DESCRIPTION: Fedora has issued an update for php. This fixes a weakness and some vulnerabilities, where some have unknown impacts and others can be exploited by malicious users and malicious, local users to bypass certain security restrictions. For more information: SA25456 SA26642 SOLUTION: Apply updated packages. d3f958088df6e28e7c475038441b27b192bfe265 php-mhash-5.2.4-1.fc7.ppc64.rpm a25cbabc315bc998a9943efa05289a94450ad374 php-bcmath-5.2.4-1.fc7.ppc64.rpm 1b3901979cf3e682554dc37326ac05982cc44e79 php-cli-5.2.4-1.fc7.ppc64.rpm 02847b0a9f5ab051f8a0b31ab269e94fa13e1ee2 php-common-5.2.4-1.fc7.ppc64.rpm c5d73839db18de17f9e03017691086c1780e6de8 php-xmlrpc-5.2.4-1.fc7.ppc64.rpm 4bf69622e0dd8b521014413d7ac017b47b3a9ca0 php-xml-5.2.4-1.fc7.ppc64.rpm 7f49e173731ce5b4c9dfe5be3b3acd54351fecb7 php-dba-5.2.4-1.fc7.ppc64.rpm fda92a4a54cebaadbf69426aeb5a7b7cf900090b php-pgsql-5.2.4-1.fc7.ppc64.rpm 8515878ea580b2bdad1c189765fcdee6185fa988 php-ldap-5.2.4-1.fc7.ppc64.rpm 099fdc5b87656a3e36685ecec94e9edf77446516 php-mssql-5.2.4-1.fc7.ppc64.rpm d7922eaf0ec3006c64c67bb89f028da18b52a9c4 php-pdo-5.2.4-1.fc7.ppc64.rpm ac731b8cd45b264d8c6cf623b4e49b7f71b87947 php-devel-5.2.4-1.fc7.ppc64.rpm 67914f1367c7df3755be47b5661550d334ce1e8c php-ncurses-5.2.4-1.fc7.ppc64.rpm 1b07ec6a7c5f7ee547ad63eadad4ceecd676a8fc php-odbc-5.2.4-1.fc7.ppc64.rpm 09bf5149149e619b311a273337514860ebe0af7e php-tidy-5.2.4-1.fc7.ppc64.rpm a52562d06a6e51f514d9fe7521b787c5f37ffed5 php-soap-5.2.4-1.fc7.ppc64.rpm 6ac79efe263a834c42e414bc56d1f1dea7e42a50 php-mysql-5.2.4-1.fc7.ppc64.rpm 38df9555d14c352c7320c4f69c47dd002427c1e7 php-5.2.4-1.fc7.ppc64.rpm addbe25bf0d2e58c9d2bedabf07cfcfab77da7d7 php-snmp-5.2.4-1.fc7.ppc64.rpm 8f32ea46a21679d26ce238521167a9d573da80a3 php-mbstring-5.2.4-1.fc7.ppc64.rpm bbe3e76b444a36962fea5c80b793b80a4277622f php-gd-5.2.4-1.fc7.ppc64.rpm 1b419b451372c1261fbbe66596ad02044f8540e0 php-debuginfo-5.2.4-1.fc7.ppc64.rpm df2e2998801e2285d5499e2a75d4514b01f4e076 php-imap-5.2.4-1.fc7.ppc64.rpm 3d7c1904bef9b6f07aff192e34933d9b18619d59 php-mcrypt-5.2.4-1.fc7.ppc64.rpm 80c83b09fcfdc7c005252b9ebeeb6ca8f5c25c9b php-xml-5.2.4-1.fc7.i386.rpm dcf58734c86e51804618720f91291344d3923fe3 php-xmlrpc-5.2.4-1.fc7.i386.rpm 551e70d6cb226217dec4c0b8c8b804e0e267abf6 php-bcmath-5.2.4-1.fc7.i386.rpm d8cb51aa7650fb6c87e669e58638b385dd39352f php-mbstring-5.2.4-1.fc7.i386.rpm 8656287f84b554f1c4ef6695e3aca09a94a6d462 php-odbc-5.2.4-1.fc7.i386.rpm 7460899f1b6b83e5069afd5f040f571ede97e808 php-cli-5.2.4-1.fc7.i386.rpm 2cc7df1a06e7d71f26504190150cbf89dc7b74ac php-pdo-5.2.4-1.fc7.i386.rpm 14b4d6d84e95082b12c95026058e80d0e3878045 php-devel-5.2.4-1.fc7.i386.rpm 77d6c0aa9b51927ab0e572215e8b0da427ae8794 php-ncurses-5.2.4-1.fc7.i386.rpm dc4eb1c19e10a8385082e96d511a7ced7da7ccc7 php-mcrypt-5.2.4-1.fc7.i386.rpm 8c9e0efc8eef3dfc7dc93a6f02ea18623845c712 php-debuginfo-5.2.4-1.fc7.i386.rpm 119e59b8d2bb6d0b6076738d8ba46b39603403ee php-snmp-5.2.4-1.fc7.i386.rpm 38be3c17dd86cfe4233c97579ed34711618a03ac php-imap-5.2.4-1.fc7.i386.rpm e0a6f0423a67a7661d0fc2da676e7cf73210292b php-tidy-5.2.4-1.fc7.i386.rpm f3e731dffcd07139956322661d96750f0fb9fc90 php-ldap-5.2.4-1.fc7.i386.rpm 5ca8dbf6c1f0c2abd973a51de759f76b307c9c82 php-pgsql-5.2.4-1.fc7.i386.rpm c08d6d24e5f72d91660a39066069a08d6f62b1cf php-5.2.4-1.fc7.i386.rpm af7e8a347c097384b7aedaabb044c3b67354a55c php-mssql-5.2.4-1.fc7.i386.rpm 2eb2b1d05c3bb9941cc115c7a57ae37d625f419b php-mysql-5.2.4-1.fc7.i386.rpm ca02acee28acacae918329d26317cfd8988a4b8a php-soap-5.2.4-1.fc7.i386.rpm 8ce14b7e974ac5c10f168a6d45c4775cfbdc6d16 php-dba-5.2.4-1.fc7.i386.rpm 4987008590ec644ce9b5d09c916a933098cfc850 php-mhash-5.2.4-1.fc7.i386.rpm 45c05ca7e03c8a998f4c8efc5deae648114d4296 php-gd-5.2.4-1.fc7.i386.rpm c260e36f67d5d0b186c0c8437fb75d8de001e582 php-common-5.2.4-1.fc7.i386.rpm b94cef3bee1b09e8191add78bc6f25855feba17e php-mssql-5.2.4-1.fc7.x86_64.rpm f8f24fa8653211ac08a59775ec0373fe3fc84931 php-mcrypt-5.2.4-1.fc7.x86_64.rpm 62dc83b8c15bd9678a745b7245c13de8d419c3a0 php-xml-5.2.4-1.fc7.x86_64.rpm 729cc5541c09ab2b08071935378fe9a922a7cfdd php-mhash-5.2.4-1.fc7.x86_64.rpm 2767c1419158c2772891e6d687d788315a620ecc php-common-5.2.4-1.fc7.x86_64.rpm db2af5defc401cb1b7cf858b74af1b61902a6956 php-pdo-5.2.4-1.fc7.x86_64.rpm 7f13e42b8cd14eb27a48e9f56925c0a7f88251de php-bcmath-5.2.4-1.fc7.x86_64.rpm c3ee71320a65739d00c7520fdbddafc86df2fa6a php-imap-5.2.4-1.fc7.x86_64.rpm c7ae0dd726227a48e124b1cf898f52f44329a030 php-devel-5.2.4-1.fc7.x86_64.rpm 1f910f5709a16b1660096055ddfdbe2ccbae8140 php-mysql-5.2.4-1.fc7.x86_64.rpm 5e3bc6d73f73471837553c1fc890a9b98444a7c3 php-debuginfo-5.2.4-1.fc7.x86_64.rpm dffb5816d67c6b301c39c41abf250e67463febcb php-dba-5.2.4-1.fc7.x86_64.rpm b748a18b8c2e5bda850cf408d5d6c53c003c0f76 php-ncurses-5.2.4-1.fc7.x86_64.rpm c71310d585a0ec41e763a9ce576441f22fe05705 php-snmp-5.2.4-1.fc7.x86_64.rpm fb38abcf9dfcfcef40bca82bc1c11e0da4672954 php-5.2.4-1.fc7.x86_64.rpm c9881734a7572ab64c5d9a7c375fc8d98d4f8d52 php-cli-5.2.4-1.fc7.x86_64.rpm 99d348e9d7295f39c2c5be100d25a4519b009c85 php-tidy-5.2.4-1.fc7.x86_64.rpm dc6e45a1ca9db37679a76b5e3ee31bd090cd122e php-mbstring-5.2.4-1.fc7.x86_64.rpm 7582faa3d069dc4fd4c6b8434386f785a7ded621 php-pgsql-5.2.4-1.fc7.x86_64.rpm 40924ef4a541b7f7cd194bcde4121ab4646c1c69 php-gd-5.2.4-1.fc7.x86_64.rpm bdfdeb1cb345691f773a4ad56c886b20c8a28e6d php-odbc-5.2.4-1.fc7.x86_64.rpm 9509155519a01788f34b31b8e8dce0a3e93cd700 php-soap-5.2.4-1.fc7.x86_64.rpm 81e123dfcf28a342a04edd88d9727eb109319a30 php-ldap-5.2.4-1.fc7.x86_64.rpm eb4db25d27f4afbc15f9b40604d77e04a3e1c627 php-xmlrpc-5.2.4-1.fc7.x86_64.rpm faef9f73443f2b96dc9b57444630b91845feac27 php-xmlrpc-5.2.4-1.fc7.ppc.rpm 1f335637e61c93ce833fa96a9f6a4da48fd66b04 php-ncurses-5.2.4-1.fc7.ppc.rpm 7f2e965cd6a0e6542e819d9f70a343217463bcfe php-mssql-5.2.4-1.fc7.ppc.rpm 6548c17ecd7595b800272b46eb4d4544bb0951e7 php-debuginfo-5.2.4-1.fc7.ppc.rpm b2e8ccb40ac03b8a5f8d2a6855e0b9553b1328bc php-mysql-5.2.4-1.fc7.ppc.rpm fb2513962bf6af862397454a42dce95f3b443944 php-dba-5.2.4-1.fc7.ppc.rpm fa22bb380783e4d2a788e3feecb5fdb245a66ebc php-pdo-5.2.4-1.fc7.ppc.rpm 9ed6ac0fa235a1990d998998f442fff7e368bdd9 php-soap-5.2.4-1.fc7.ppc.rpm b575c4fbfdba833001772e7a911945576de540e1 php-snmp-5.2.4-1.fc7.ppc.rpm 067ae67d291dc9eb5c3a3653f1d6e342519b5775 php-xml-5.2.4-1.fc7.ppc.rpm 3f48a21c719f785fa47f956640bc0e0b91d5d193 php-mcrypt-5.2.4-1.fc7.ppc.rpm 42cbd89a26313cba7f380eee0cf7072445cd5e63 php-mhash-5.2.4-1.fc7.ppc.rpm fe8863ee6c6bc42bab55ec15cf310a847b31225a php-imap-5.2.4-1.fc7.ppc.rpm 2735bc8bbcb75e29144f153ce1beb578f0f4f3c1 php-odbc-5.2.4-1.fc7.ppc.rpm 098d13c772c898e15de744a4e46c9c56baafab41 php-cli-5.2.4-1.fc7.ppc.rpm f7f6bb9d1d96026c32dcb8535080f28cb0049570 php-5.2.4-1.fc7.ppc.rpm 262e2a9528474f9db722b9316817942ba4cd8adb php-devel-5.2.4-1.fc7.ppc.rpm a59d1a18ef44ab99af3b2f883efbe155805f2fc1 php-tidy-5.2.4-1.fc7.ppc.rpm 257ed22fea9615748d29b8257612ed1f5dffb2ff php-ldap-5.2.4-1.fc7.ppc.rpm 6e36505857178f6a089d81a40accb16d832c7b54 php-mbstring-5.2.4-1.fc7.ppc.rpm 1c34b6390011f4ba9a9c2a2fb5afde14d36fc6d6 php-pgsql-5.2.4-1.fc7.ppc.rpm b7af9531fa54b7c571b7dc89ced87fd669680f24 php-gd-5.2.4-1.fc7.ppc.rpm 182c52762ef541615f000b9a66bae6f5f9dae811 php-bcmath-5.2.4-1.fc7.ppc.rpm eb5e06ca7fbcee11437fca69d00427a333151377 php-common-5.2.4-1.fc7.ppc.rpm 9daa847965805bbf24f019fa4e3ced8463a8e237 php-5.2.4-1.fc7.src.rpm ORIGINAL ADVISORY: https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00321.html OTHER REFERENCES: SA25456: http://secunia.com/advisories/25456/ SA26642: http://secunia.com/advisories/26642/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------