ELSA-2009-0338

ELSA-2009-0338 - php security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2009-04-06

Description

[5.1.6-23.2.el5]
- ext/gd: fix overflow2 usage for CVE-2007-3996, CVE-2008-3658

[5.1.6-23.1.el5]
- add security fixes for CVE-2008-3658, CVE-2008-3660,
CVE-2008-5498, CVE-2008-5557, CVE-2008-5814, and mbstring
func_overload issue (#487369)

Related CVEs

CVE-2008-3660

CVE-2008-5498

CVE-2008-5557

CVE-2008-3658

CVE-2008-5814

CVE-2009-0754

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	php-5.1.6-23.2.el5_3.src.rpm	5fa70c9a9c087874b23d30c7b79841ac6ec5275bc239b88a575122df466d8315	ELSA-2014-1824	el5_u3_i386_patch
	php-5.1.6-23.2.el5_3.src.rpm	5fa70c9a9c087874b23d30c7b79841ac6ec5275bc239b88a575122df466d8315	ELSA-2014-1824	el5_u4_i386_base
	php-5.1.6-23.2.el5_3.i386.rpm	5800526f96fbf42305ceeba088d77a7546cb409bfe82a6f50e712ed047eebc0e	ELSA-2014-1824	el5_u3_i386_patch
	php-5.1.6-23.2.el5_3.i386.rpm	5800526f96fbf42305ceeba088d77a7546cb409bfe82a6f50e712ed047eebc0e	ELSA-2014-1824	el5_u4_i386_base
	php-bcmath-5.1.6-23.2.el5_3.i386.rpm	28bc118698a4dd4cd3ab2772846ab5483a53f1319b989520567da622deefb59c	ELSA-2014-1824	el5_u3_i386_patch
	php-bcmath-5.1.6-23.2.el5_3.i386.rpm	28bc118698a4dd4cd3ab2772846ab5483a53f1319b989520567da622deefb59c	ELSA-2014-1824	el5_u4_i386_base
	php-cli-5.1.6-23.2.el5_3.i386.rpm	9ee7bd8676631b7ef989c46fa78fc5f4884ab2987f0db3ec46435fec9177d143	ELSA-2014-1824	el5_u3_i386_patch
	php-cli-5.1.6-23.2.el5_3.i386.rpm	9ee7bd8676631b7ef989c46fa78fc5f4884ab2987f0db3ec46435fec9177d143	ELSA-2014-1824	el5_u4_i386_base
	php-common-5.1.6-23.2.el5_3.i386.rpm	56191ad999951fb54f685f914c9b8d6d1b400f3b91c951a2f2791be54727efa8	ELSA-2014-1824	el5_u3_i386_patch
	php-common-5.1.6-23.2.el5_3.i386.rpm	56191ad999951fb54f685f914c9b8d6d1b400f3b91c951a2f2791be54727efa8	ELSA-2014-1824	el5_u4_i386_base
	php-dba-5.1.6-23.2.el5_3.i386.rpm	338bddf3d6c3c319eda759afba43cf846ef883788db4dba1ff508d81326c2642	ELSA-2014-1824	el5_u3_i386_patch
	php-dba-5.1.6-23.2.el5_3.i386.rpm	338bddf3d6c3c319eda759afba43cf846ef883788db4dba1ff508d81326c2642	ELSA-2014-1824	el5_u4_i386_base
	php-devel-5.1.6-23.2.el5_3.i386.rpm	575b7a4e6301ffd1c907c29659719e300be27f0175be2ff2a90baef04af0352b	ELSA-2014-1824	el5_u3_i386_patch
	php-devel-5.1.6-23.2.el5_3.i386.rpm	575b7a4e6301ffd1c907c29659719e300be27f0175be2ff2a90baef04af0352b	ELSA-2014-1824	el5_u4_i386_base
	php-gd-5.1.6-23.2.el5_3.i386.rpm	82fd01983323a3dcfed7f083d97a5011680d61df749431d06249fc7cac0f2036	ELSA-2014-1824	el5_u3_i386_patch
	php-gd-5.1.6-23.2.el5_3.i386.rpm	82fd01983323a3dcfed7f083d97a5011680d61df749431d06249fc7cac0f2036	ELSA-2014-1824	el5_u4_i386_base
	php-imap-5.1.6-23.2.el5_3.i386.rpm	8eee88faf6e5ea46fcf3a244fbbb105fc01c152767b26afa396715050fa360fe	ELSA-2014-1824	el5_u3_i386_patch
	php-imap-5.1.6-23.2.el5_3.i386.rpm	8eee88faf6e5ea46fcf3a244fbbb105fc01c152767b26afa396715050fa360fe	ELSA-2014-1824	el5_u4_i386_base
	php-ldap-5.1.6-23.2.el5_3.i386.rpm	e62f2883c514d3b27489caec860f03ba1f11dc5875966fcb56ae2d7ff189276d	ELSA-2014-1824	el5_u3_i386_patch
	php-ldap-5.1.6-23.2.el5_3.i386.rpm	e62f2883c514d3b27489caec860f03ba1f11dc5875966fcb56ae2d7ff189276d	ELSA-2014-1824	el5_u4_i386_base
	php-mbstring-5.1.6-23.2.el5_3.i386.rpm	ec956cce58396edc410e0818270d079e148be3488831fcc25980f5f62d8989c9	ELSA-2014-1824	el5_u3_i386_patch
	php-mbstring-5.1.6-23.2.el5_3.i386.rpm	ec956cce58396edc410e0818270d079e148be3488831fcc25980f5f62d8989c9	ELSA-2014-1824	el5_u4_i386_base
	php-mysql-5.1.6-23.2.el5_3.i386.rpm	cf9823008c25d0599828889a6d2e0b36855af8e8bd00e8586b5d2fba03f557aa	ELSA-2014-1824	el5_u3_i386_patch
	php-mysql-5.1.6-23.2.el5_3.i386.rpm	cf9823008c25d0599828889a6d2e0b36855af8e8bd00e8586b5d2fba03f557aa	ELSA-2014-1824	el5_u4_i386_base
	php-ncurses-5.1.6-23.2.el5_3.i386.rpm	2db028b69b52b55a4bb2e6fc0893e734a903d8bb934cb2e11685ddc8b93dd9ad	ELSA-2014-1824	el5_u3_i386_patch
	php-ncurses-5.1.6-23.2.el5_3.i386.rpm	2db028b69b52b55a4bb2e6fc0893e734a903d8bb934cb2e11685ddc8b93dd9ad	ELSA-2014-1824	el5_u4_i386_base
	php-odbc-5.1.6-23.2.el5_3.i386.rpm	164aaea0dc6169b1c304f5a6ff29189aef18e8b8e3881eb9f0149d587d374453	ELSA-2014-1824	el5_u3_i386_patch
	php-odbc-5.1.6-23.2.el5_3.i386.rpm	164aaea0dc6169b1c304f5a6ff29189aef18e8b8e3881eb9f0149d587d374453	ELSA-2014-1824	el5_u4_i386_base
	php-pdo-5.1.6-23.2.el5_3.i386.rpm	ad515c7ffef5154529a44e812f3b4dd7e3864d143b89f55cacb06227620fbfe8	ELSA-2014-1824	el5_u3_i386_patch
	php-pdo-5.1.6-23.2.el5_3.i386.rpm	ad515c7ffef5154529a44e812f3b4dd7e3864d143b89f55cacb06227620fbfe8	ELSA-2014-1824	el5_u4_i386_base
	php-pgsql-5.1.6-23.2.el5_3.i386.rpm	e63c0c810591c0664fc6e0fdb9d2921dea077cdad78ad63b4fc7200267ab6944	ELSA-2014-1824	el5_u3_i386_patch
	php-pgsql-5.1.6-23.2.el5_3.i386.rpm	e63c0c810591c0664fc6e0fdb9d2921dea077cdad78ad63b4fc7200267ab6944	ELSA-2014-1824	el5_u4_i386_base
	php-snmp-5.1.6-23.2.el5_3.i386.rpm	59e0db0536c15fe9399a82c29325b21ec531d7eee6fad88e050b5f27ac610254	ELSA-2014-1824	el5_u3_i386_patch
	php-snmp-5.1.6-23.2.el5_3.i386.rpm	59e0db0536c15fe9399a82c29325b21ec531d7eee6fad88e050b5f27ac610254	ELSA-2014-1824	el5_u4_i386_base
	php-soap-5.1.6-23.2.el5_3.i386.rpm	a54529ef1e479c3dce5c22817f575bfd78f9a91bbc777c9fd10de442e01121d0	ELSA-2014-1824	el5_u3_i386_patch
	php-soap-5.1.6-23.2.el5_3.i386.rpm	a54529ef1e479c3dce5c22817f575bfd78f9a91bbc777c9fd10de442e01121d0	ELSA-2014-1824	el5_u4_i386_base
	php-xml-5.1.6-23.2.el5_3.i386.rpm	65d396c571dfed8806f962eae10142697f3fc7325669b7872adc3b09846fadc0	ELSA-2014-1824	el5_u3_i386_patch
	php-xml-5.1.6-23.2.el5_3.i386.rpm	65d396c571dfed8806f962eae10142697f3fc7325669b7872adc3b09846fadc0	ELSA-2014-1824	el5_u4_i386_base
	php-xmlrpc-5.1.6-23.2.el5_3.i386.rpm	f3852bcdef5e0f073131f9ac864907a1e60d612fcb3861690d3c5a8af9487ef4	ELSA-2014-1824	el5_u3_i386_patch
	php-xmlrpc-5.1.6-23.2.el5_3.i386.rpm	f3852bcdef5e0f073131f9ac864907a1e60d612fcb3861690d3c5a8af9487ef4	ELSA-2014-1824	el5_u4_i386_base
Oracle Linux 5 (ia64)	php-5.1.6-23.2.el5_3.src.rpm	5fa70c9a9c087874b23d30c7b79841ac6ec5275bc239b88a575122df466d8315	ELSA-2014-1824	el5_u4_ia64_base
	php-5.1.6-23.2.el5_3.ia64.rpm	cb50865e4cfdbf4cc289a660b8999dbb8f14a2fc826931b52d59042d0d81a863	ELSA-2014-1824	el5_u4_ia64_base
	php-bcmath-5.1.6-23.2.el5_3.ia64.rpm	4805467bcc52c3c13a470b44e28b64394ac87546e37e6f4caae29a3b3e44bd6b	ELSA-2014-1824	el5_u4_ia64_base
	php-cli-5.1.6-23.2.el5_3.ia64.rpm	30d276959728fe1a8bf817ce503450a99baf80b525df21cca8bdb12dba4e92ca	ELSA-2014-1824	el5_u4_ia64_base
	php-common-5.1.6-23.2.el5_3.ia64.rpm	4438ac50ff13ea71ee4dec01a32ce9420d5572df3f2261700b82d2b3743b9127	ELSA-2014-1824	el5_u4_ia64_base
	php-dba-5.1.6-23.2.el5_3.ia64.rpm	065a7a1aa3b23e964ec3c0b25ac118765cd000709821e48955971c2f31ed7461	ELSA-2014-1824	el5_u4_ia64_base
	php-devel-5.1.6-23.2.el5_3.ia64.rpm	7f5bbe4a505edbbc6bc6d8bb53fe5dbc8501b24fc77a921ae686ef7cba10bb6a	ELSA-2014-1824	el5_u4_ia64_base
	php-gd-5.1.6-23.2.el5_3.ia64.rpm	49cbaf5999c5d0d7bd8ccfb06fbe11e183dde0c089353b46474fd014f80b7577	ELSA-2014-1824	el5_u4_ia64_base
	php-imap-5.1.6-23.2.el5_3.ia64.rpm	674df394e0dae603f908b4975730780a73ba624250f99fbe6367e7e56b61e6e2	ELSA-2014-1824	el5_u4_ia64_base
	php-ldap-5.1.6-23.2.el5_3.ia64.rpm	0cf214fbaef4abb9e091070c2a32958ea930a2083f17349e58a5f8b581f2e467	ELSA-2014-1824	el5_u4_ia64_base
	php-mbstring-5.1.6-23.2.el5_3.ia64.rpm	1bbd1ae5ea98a564719800e18c0a95ec0ec0ed047a38c74875b980a73eda74d0	ELSA-2014-1824	el5_u4_ia64_base
	php-mysql-5.1.6-23.2.el5_3.ia64.rpm	a8dda9ef924a8a3b215f2a8fec17f4268004212e82811b2192198ea8c098afc0	ELSA-2014-1824	el5_u4_ia64_base
	php-ncurses-5.1.6-23.2.el5_3.ia64.rpm	e18b04ae3435b2850ea7161b911d984b9e908fa5ff189d2c334406b6e30f1c1b	ELSA-2014-1824	el5_u4_ia64_base
	php-odbc-5.1.6-23.2.el5_3.ia64.rpm	3b3698cd166ce2e1226ff938fa9d5f0430a5bdc6590beccdeae2a58bb1f9202a	ELSA-2014-1824	el5_u4_ia64_base
	php-pdo-5.1.6-23.2.el5_3.ia64.rpm	e0acb7b2d3c1d82bd08a8e1334d1cc81969eb2c58fc03bf2b4aca39a7ad258b2	ELSA-2014-1824	el5_u4_ia64_base
	php-pgsql-5.1.6-23.2.el5_3.ia64.rpm	50b53a4844d9203da44cf191cc3672f62fe79e91a55b46b48cd73c81f9c4c88e	ELSA-2014-1824	el5_u4_ia64_base
	php-snmp-5.1.6-23.2.el5_3.ia64.rpm	ade7d28a63b7f37d1e5bd35f0adab4aca468d4fb84e31fbfd791c8b51e756ba2	ELSA-2014-1824	el5_u4_ia64_base
	php-soap-5.1.6-23.2.el5_3.ia64.rpm	ecaf898d2e4acdd43ea2c062d8649a5952e2dfe1b4f1573701ec677ee6d6c766	ELSA-2014-1824	el5_u4_ia64_base
	php-xml-5.1.6-23.2.el5_3.ia64.rpm	6f43f8d5f8eefa6fa0bb4a4f916c0b55b19bd59f80e662434f3624e071f8d5f0	ELSA-2014-1824	el5_u4_ia64_base
	php-xmlrpc-5.1.6-23.2.el5_3.ia64.rpm	ae732e916fcdebc9095ac425598e4c4d8644d314664af5b1b2b0206fa2c0b9af	ELSA-2014-1824	el5_u4_ia64_base
Oracle Linux 5 (x86_64)	php-5.1.6-23.2.el5_3.src.rpm	5fa70c9a9c087874b23d30c7b79841ac6ec5275bc239b88a575122df466d8315	ELSA-2014-1824	el5_u3_x86_64_patch
	php-5.1.6-23.2.el5_3.src.rpm	5fa70c9a9c087874b23d30c7b79841ac6ec5275bc239b88a575122df466d8315	ELSA-2014-1824	el5_u4_x86_64_base
	php-5.1.6-23.2.el5_3.x86_64.rpm	4035a849da3c6468dbf556c2e0c03fd253968c7e2b03367623520dcf88ea11b1	ELSA-2014-1824	el5_u3_x86_64_patch
	php-5.1.6-23.2.el5_3.x86_64.rpm	4035a849da3c6468dbf556c2e0c03fd253968c7e2b03367623520dcf88ea11b1	ELSA-2014-1824	el5_u4_x86_64_base
	php-bcmath-5.1.6-23.2.el5_3.x86_64.rpm	d78f919c28a99e9f877e8f82b4200dab9bd6a5a6c8c2dc5fdd8855c076ef8ac8	ELSA-2014-1824	el5_u3_x86_64_patch
	php-bcmath-5.1.6-23.2.el5_3.x86_64.rpm	d78f919c28a99e9f877e8f82b4200dab9bd6a5a6c8c2dc5fdd8855c076ef8ac8	ELSA-2014-1824	el5_u4_x86_64_base
	php-cli-5.1.6-23.2.el5_3.x86_64.rpm	3500543ffe64f6d2ea80f505c614167f750f799cc8054704759fe1d37ed35095	ELSA-2014-1824	el5_u3_x86_64_patch
	php-cli-5.1.6-23.2.el5_3.x86_64.rpm	3500543ffe64f6d2ea80f505c614167f750f799cc8054704759fe1d37ed35095	ELSA-2014-1824	el5_u4_x86_64_base
	php-common-5.1.6-23.2.el5_3.x86_64.rpm	595672ad2ffb9f6d9342eae2eb9a61741e2a770ce758d311f8254c64221ba799	ELSA-2014-1824	el5_u3_x86_64_patch
	php-common-5.1.6-23.2.el5_3.x86_64.rpm	595672ad2ffb9f6d9342eae2eb9a61741e2a770ce758d311f8254c64221ba799	ELSA-2014-1824	el5_u4_x86_64_base
	php-dba-5.1.6-23.2.el5_3.x86_64.rpm	cc7b58416e88917cdfe9da6ab3258d8cb71406aa3fbd75232f0f8cc43a896c2d	ELSA-2014-1824	el5_u3_x86_64_patch
	php-dba-5.1.6-23.2.el5_3.x86_64.rpm	cc7b58416e88917cdfe9da6ab3258d8cb71406aa3fbd75232f0f8cc43a896c2d	ELSA-2014-1824	el5_u4_x86_64_base
	php-devel-5.1.6-23.2.el5_3.x86_64.rpm	ade7df5b555eed130ec86e3f5d43451e09fb4dfd8fded4cf8e609f89826851d7	ELSA-2014-1824	el5_u3_x86_64_patch
	php-devel-5.1.6-23.2.el5_3.x86_64.rpm	ade7df5b555eed130ec86e3f5d43451e09fb4dfd8fded4cf8e609f89826851d7	ELSA-2014-1824	el5_u4_x86_64_base
	php-gd-5.1.6-23.2.el5_3.x86_64.rpm	1797daef933357aa7f68bb9d7ec381cd950b64e5dd9d15c4fee0520b2a1cab5e	ELSA-2014-1824	el5_u3_x86_64_patch
	php-gd-5.1.6-23.2.el5_3.x86_64.rpm	1797daef933357aa7f68bb9d7ec381cd950b64e5dd9d15c4fee0520b2a1cab5e	ELSA-2014-1824	el5_u4_x86_64_base
	php-imap-5.1.6-23.2.el5_3.x86_64.rpm	2a93c06cdb2508d112226ab8405f4e419eed9698eff47f6259afad5a6c93a1a0	ELSA-2014-1824	el5_u3_x86_64_patch
	php-imap-5.1.6-23.2.el5_3.x86_64.rpm	2a93c06cdb2508d112226ab8405f4e419eed9698eff47f6259afad5a6c93a1a0	ELSA-2014-1824	el5_u4_x86_64_base
	php-ldap-5.1.6-23.2.el5_3.x86_64.rpm	c9cb5b84c153ab672cafbc486fb55ec4c1276cbce7ee86a9da2b61cf686b16bf	ELSA-2014-1824	el5_u3_x86_64_patch
	php-ldap-5.1.6-23.2.el5_3.x86_64.rpm	c9cb5b84c153ab672cafbc486fb55ec4c1276cbce7ee86a9da2b61cf686b16bf	ELSA-2014-1824	el5_u4_x86_64_base
	php-mbstring-5.1.6-23.2.el5_3.x86_64.rpm	26cfcf88d78cb65c4d7a8e3639860f89d0974e20effdad2860ddd1739e4f1ca6	ELSA-2014-1824	el5_u3_x86_64_patch
	php-mbstring-5.1.6-23.2.el5_3.x86_64.rpm	26cfcf88d78cb65c4d7a8e3639860f89d0974e20effdad2860ddd1739e4f1ca6	ELSA-2014-1824	el5_u4_x86_64_base
	php-mysql-5.1.6-23.2.el5_3.x86_64.rpm	98ed197aa8e965f16eb61846bcaf6041ad93efb7e28ef7c0935791033a11f63b	ELSA-2014-1824	el5_u3_x86_64_patch
	php-mysql-5.1.6-23.2.el5_3.x86_64.rpm	98ed197aa8e965f16eb61846bcaf6041ad93efb7e28ef7c0935791033a11f63b	ELSA-2014-1824	el5_u4_x86_64_base
	php-ncurses-5.1.6-23.2.el5_3.x86_64.rpm	33d0aa4ac32abbab5fce6e6c4abd30561dbc458d83ec82974c06f9a99f936105	ELSA-2014-1824	el5_u3_x86_64_patch
	php-ncurses-5.1.6-23.2.el5_3.x86_64.rpm	33d0aa4ac32abbab5fce6e6c4abd30561dbc458d83ec82974c06f9a99f936105	ELSA-2014-1824	el5_u4_x86_64_base
	php-odbc-5.1.6-23.2.el5_3.x86_64.rpm	d45b1a2ac0c702edd9e392f1608883673039dc21f00eb08f898331e8af2bfe19	ELSA-2014-1824	el5_u3_x86_64_patch
	php-odbc-5.1.6-23.2.el5_3.x86_64.rpm	d45b1a2ac0c702edd9e392f1608883673039dc21f00eb08f898331e8af2bfe19	ELSA-2014-1824	el5_u4_x86_64_base
	php-pdo-5.1.6-23.2.el5_3.x86_64.rpm	b933b8281f1c71d16082e4c28787db56fb09c725adec7a848b59db84524b1b20	ELSA-2014-1824	el5_u3_x86_64_patch
	php-pdo-5.1.6-23.2.el5_3.x86_64.rpm	b933b8281f1c71d16082e4c28787db56fb09c725adec7a848b59db84524b1b20	ELSA-2014-1824	el5_u4_x86_64_base
	php-pgsql-5.1.6-23.2.el5_3.x86_64.rpm	ce1eb1d371178ed0585c208ce4334d0996e4cca57cbe39bad2b22d3718861e66	ELSA-2014-1824	el5_u3_x86_64_patch
	php-pgsql-5.1.6-23.2.el5_3.x86_64.rpm	ce1eb1d371178ed0585c208ce4334d0996e4cca57cbe39bad2b22d3718861e66	ELSA-2014-1824	el5_u4_x86_64_base
	php-snmp-5.1.6-23.2.el5_3.x86_64.rpm	4b8b9439c596137d8491b9732a4d8b0eb5c14cf280a13b8800d0a9a0faa5571f	ELSA-2014-1824	el5_u3_x86_64_patch
	php-snmp-5.1.6-23.2.el5_3.x86_64.rpm	4b8b9439c596137d8491b9732a4d8b0eb5c14cf280a13b8800d0a9a0faa5571f	ELSA-2014-1824	el5_u4_x86_64_base
	php-soap-5.1.6-23.2.el5_3.x86_64.rpm	475df5f1c3f660e2dd21716211295b9d308cba6846d864a87e4c32d57d1d7fdb	ELSA-2014-1824	el5_u3_x86_64_patch
	php-soap-5.1.6-23.2.el5_3.x86_64.rpm	475df5f1c3f660e2dd21716211295b9d308cba6846d864a87e4c32d57d1d7fdb	ELSA-2014-1824	el5_u4_x86_64_base
	php-xml-5.1.6-23.2.el5_3.x86_64.rpm	0338acf9470764e2824140ee79ed1ef1830f4e243a8eecd695794063a21a0403	ELSA-2014-1824	el5_u3_x86_64_patch
	php-xml-5.1.6-23.2.el5_3.x86_64.rpm	0338acf9470764e2824140ee79ed1ef1830f4e243a8eecd695794063a21a0403	ELSA-2014-1824	el5_u4_x86_64_base
	php-xmlrpc-5.1.6-23.2.el5_3.x86_64.rpm	36c6f371cb6b277dbf9f43f87604a855c9532624e3bd98750653aee96305caf2	ELSA-2014-1824	el5_u3_x86_64_patch
	php-xmlrpc-5.1.6-23.2.el5_3.x86_64.rpm	36c6f371cb6b277dbf9f43f87604a855c9532624e3bd98750653aee96305caf2	ELSA-2014-1824	el5_u4_x86_64_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team