Otkrivena su tri propusta paketa PHP. To je prevodioc skriptnog jezika za izradu web aplikacija koji podržava i objektno orijentiranu paradigmu. Ranjivosti su vezane uz funkcije filter_var, mb_strcut i zend_strtod. Prva funkcija omogućuje napadaču, putem dugog znakovnog niza adrese elektroničke pošte, pokretanje napada uskraćivanja usluga. Druga omogućuje dobivanje potencijalno osjetljivih informacija postavljanjem velike vrijednosti trećeg parametra funkcije. Iskorištavanjem posljednje ranjivosti napadač može pokrenuti napad uskraćivanja usluga korištenjem decimalnog zapisa u znanstvenoj notaciji. Kako bi se riješili opisanih problema, korisnici trebaju obaviti uobičajenu nadogradnju.

CentOS Errata and Security Advisory 2011:0196 Moderate

Upstream details at : https://rhn.redhat.com/errata/RHSA-2011-0196.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

x86_64:
f6ba2ae910a7f8b9d18db3d830852dcc  php53-5.3.3-1.el5_6.1.x86_64.rpm
b48ec852c33f276edfd359e086ac5b05  php53-bcmath-5.3.3-1.el5_6.1.x86_64.rpm
7183599712f33e9b98816fdbaa72afa5  php53-cli-5.3.3-1.el5_6.1.x86_64.rpm
b687f4ae385a49bf1d0ed3d077cf5cfc  php53-common-5.3.3-1.el5_6.1.x86_64.rpm
798352008d5381c12d6e0394280a28d4  php53-dba-5.3.3-1.el5_6.1.x86_64.rpm
d5c3822afea57f4d94dddab35c4e7ef7  php53-devel-5.3.3-1.el5_6.1.x86_64.rpm
b23f02961009e35a672c807576dd8fd9  php53-gd-5.3.3-1.el5_6.1.x86_64.rpm
74d506d9dca3fa24fe1184c03357c906  php53-imap-5.3.3-1.el5_6.1.x86_64.rpm
4d07effc7c388d9f9077429d02de685f  php53-intl-5.3.3-1.el5_6.1.x86_64.rpm
e361d936fb0600b1e8a846260e00853c  php53-ldap-5.3.3-1.el5_6.1.x86_64.rpm
d8319dc04d796f06c3963987d15fd810  php53-mbstring-5.3.3-1.el5_6.1.x86_64.rpm
c4766d42c1fd6be5d0166291f6c20c20  php53-mysql-5.3.3-1.el5_6.1.x86_64.rpm
0ad9977504d25a6dfadc3c7d74ddc037  php53-odbc-5.3.3-1.el5_6.1.x86_64.rpm
7230c692cb49acf53803c76da006be1c  php53-pdo-5.3.3-1.el5_6.1.x86_64.rpm
944a0ba89d40f0511e9bdf06f21e4a71  php53-pgsql-5.3.3-1.el5_6.1.x86_64.rpm
f5a1210ee6a773e2ece49fb4b413ec2d  php53-process-5.3.3-1.el5_6.1.x86_64.rpm
746c2990fab8cf260299eac4080de844  php53-pspell-5.3.3-1.el5_6.1.x86_64.rpm
f738cc6ffd0c0447d65c4089b02e7e34  php53-snmp-5.3.3-1.el5_6.1.x86_64.rpm
2dd49649af22700b92196934ac55337a  php53-soap-5.3.3-1.el5_6.1.x86_64.rpm
59fbb8c2dc6eceb00a8f24841e2885c5  php53-xml-5.3.3-1.el5_6.1.x86_64.rpm
19ffc2b8caa865a279e175e529b739ca  php53-xmlrpc-5.3.3-1.el5_6.1.x86_64.rpm

Source:
0ca9eac0494b6b0a96e3df73b4172e83  php53-5.3.3-1.el5_6.1.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.

_______________________________________________
CentOS-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
http://lists.centos.org/mailman/listinfo/centos-announce