Security World: [SECURITY] [DSA-1940-1] New php5 packages fix several issues

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
Debian Security Advisory DSA-1940-1 security@debian.org
http://www.debian.org/security/ Stefan Fritsch
November 25, 2009 http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package : php5
Vulnerability : multiple issues
Problem type : remote
Debian-specific: no
CVE Id(s) : CVE-2009-2626 CVE-2009-2687 CVE-2009-3291 CVE-2009-3292
Debian bugs : 535888 540605 527560

Several remote vulnerabilities have been discovered in the PHP 5
hypertext preprocessor. The Common Vulnerabilities and Exposures
project identifies the following problems:

The following issues have been fixed in both the stable (lenny)
and the oldstable (etch) distributions:

CVE-2009-2687 CVE-2009-3292

The exif module did not properly handle malformed jpeg files,
allowing an attacker to cause a segfault, resulting in a denial
of service.

CVE-2009-3291

The php_openssl_apply_verification_policy() function did not
properly perform certificate validation.

No CVE id yet

Bogdan Calin discovered that a remote attacker could cause a denial
of service by uploading a large number of files in using multipart/
form-data requests, causing the creation of a large number of
temporary files.

To address this issue, the max_file_uploads option introduced in PHP
5.3.1 has been backported. This option limits the maximum number of
files uploaded per request. The default value for this new option is
50. See NEWS.Debian for more information.

The following issue has been fixed in the stable (lenny) distribution:

CVE-2009-2626

A flaw in the ini_restore() function could lead to a memory
disclosure, possibly leading to the disclosure of sensitive data.

In the oldstable (etch) distribution, this update also fixes a regression
introduced by the fix for CVE-2008-5658 in DSA-1789-1 (bug #527560).

For the stable distribution (lenny), these problems have been fixed in
version 5.2.6.dfsg.1-1+lenny4.

The oldstable distribution (etch), these problems have been fixed in
version 5.2.0+dfsg-8+etch16.

For the testing distribution (squeeze) and the unstable distribution
(sid), these problems will be fixed in version 5.2.11.dfsg.1-2.

We recommend that you upgrade your php5 packages.

Upgrade instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 4.0 (oldstable) alias etch
- -------------------------------------------

Oldstable updates are available for alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.

Source archives:

http://security.debian.org/pool/updates/main/p/php5/php5_5.2.0+dfsg.orig.tar.gz
Size/MD5 checksum: 8431973 956486a588c577616a5008d185e84968
http://security.debian.org/pool/updates/main/p/php5/php5_5.2.0+dfsg-8+etch16.dsc
Size/MD5 checksum: 2002 7b5aa6deaeba26e4c5cf3bb6ae33c27b
http://security.debian.org/pool/updates/main/p/php5/php5_5.2.0+dfsg-8+etch16.diff.gz
Size/MD5 checksum: 134709 612732624d30561ad7dea430903a2807

Architecture independent packages:

http://security.debian.org/pool/updates/main/p/php5/php5_5.2.0+dfsg-8+etch16_all.deb
Size/MD5 checksum: 1044 64a93759ca8a44ce1499fb425af5ba7d
http://security.debian.org/pool/updates/main/p/php5/php-pear_5.2.0+dfsg-8+etch16_all.deb
Size/MD5 checksum: 310830 7919b140eee8f8f2e10fedd41fd14fd6

alpha architecture (DEC Alpha)

amd64 architecture (AMD x86_64 (AMD64))

arm architecture (ARM)

hppa architecture (HP PA RISC)

i386 architecture (Intel ia32)

ia64 architecture (Intel ia64)

mips architecture (MIPS (Big Endian))

mipsel architecture (MIPS (Little Endian))

powerpc architecture (PowerPC)

s390 architecture (IBM S/390)

sparc architecture (Sun SPARC/UltraSPARC)

Debian GNU/Linux 5.0 (stable) alias lenny
- -----------------------------------------

Stable updates are available for alpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.

Source archives:

http://security.debian.org/pool/updates/main/p/php5/php5_5.2.6.dfsg.1-1+lenny4.diff.gz
Size/MD5 checksum: 164099 957d5e45ad5a1e96d92a864b29590e7b
http://security.debian.org/pool/updates/main/p/php5/php5_5.2.6.dfsg.1.orig.tar.gz
Size/MD5 checksum: 12173741 b80fcee38363f031229368ceff8ced58
http://security.debian.org/pool/updates/main/p/php5/php5_5.2.6.dfsg.1-1+lenny4.dsc
Size/MD5 checksum: 2529 a437a2a7a18fd20140862ca43030f388

Architecture independent packages:

http://security.debian.org/pool/updates/main/p/php5/php-pear_5.2.6.dfsg.1-1+lenny4_all.deb
Size/MD5 checksum: 334532 14c1cefa63a25bc9d47f2b613c79a658
http://security.debian.org/pool/updates/main/p/php5/php5_5.2.6.dfsg.1-1+lenny4_all.deb
Size/MD5 checksum: 1080 285cecdbe24061cfa77e62f36ae78e99

alpha architecture (DEC Alpha)

amd64 architecture (AMD x86_64 (AMD64))

arm architecture (ARM)

armel architecture (ARM EABI)

hppa architecture (HP PA RISC)

i386 architecture (Intel ia32)

ia64 architecture (Intel ia64)

mips architecture (MIPS (Big Endian))

mipsel architecture (MIPS (Little Endian))

powerpc architecture (PowerPC)

s390 architecture (IBM S/390)

sparc architecture (Sun SPARC/UltraSPARC)

These files will probably be moved into the stable distribution on
its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iD8DBQFLDaWEbxelr8HyTqQRAjQlAKDMA6d0Q7tQwL4ekF8Z0X4/FGHCHwCgg/dU
0sKE1LIjruxp4Y+lWQTtCoQ=
=8nGq
-----END PGP SIGNATURE-----

--
To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Security World

Search This Blog

Wednesday, November 25, 2009

[SECURITY] [DSA-1940-1] New php5 packages fix several issues

No comments: