中(Moderate):phpのセキュリティアップデート
セキュリティ・アドバイス
概要:
複数のセキュリティ問題を修正したPHPのアップデートパッケージが、Red Hat Enterprise Linux 3および4で利用可能になりました。
このアップデートは、レッドハットセキュリティ対策チームによって、深刻度「中(Moderate)」のセキュリティ問題と評価されています。
PHPは、Apache HTTP Webサーバで広く利用されているHTML組み込みスクリプト言語です。
phpinfo() PHP関数で、長い文字列が正しく処理されていませんでした。攻撃者がこの欠陥を利用して、phpinfo()を呼び出す一般公開のPHPスクリプトを備えたサイトに対してクロスサイトスクリプティング攻撃を仕掛ける可能性があります。(CVE-2006-0996)
html_entity_decode() PHP関数がバイナリセーフではないことがわかりました。攻撃者がこの欠陥を使用して、メモリの特定の部分を漏洩させる可能性があります。この問題を悪用するには、ターゲットサイトが、信頼性の低いユーザ入力をとる「html_entity_decode()」関数を呼び出して結果を表示するようなPHPスクリプトを備えている必要があります。(CVE-2006-1490)
エラー処理出力において、HTML出力が正しくエスケープされない場合があることがわかりました。攻撃者がこの欠陥を利用して、display_errorsとhtml_errorsの両方が有効になっているサイトに対してクロスサイトスクリプティング攻撃を仕掛ける可能性があります。(CVE-2006-0208)
「mb_send_mail()」関数で入力検証エラーが見つかりました。攻撃者がこの欠陥を利用して、「mb_send_mail()」関数を呼び出すスクリプトを介して送信されるメールに任意のヘッダを挿入する可能性があります。この場合、攻撃者が「To」パラメータを制御できます。(CVE-2005-3883)
uw-imap(The University of Washington's IMAP Server)でバッファオーバーフローの欠陥が発見されました。php-imapは、imapのスタティックなc-clientライブラリに対してコンパイルされるため、修正バージョンに対して再コンパイルする必要があります。この問題はRed Hat Enterprise Linux 3にのみ影響します。(CVE-2005-2933)
PHPのユーザは、これらの問題を解決するバックポートパッチを含む上記アップデートパッケージにアップグレードしてください。
アップデート・パッケージ:
| Red Hat Desktop (v. 3) | |
| SRPMS: | |
| php-4.3.2-30.ent.src.rpm | 460ed4c3f1f6330ecef844fcfabda531 |
| IA-32: | |
| php-4.3.2-30.ent.i386.rpm | 796091ea216f651fda39b3f3dbda8b03 |
| php-devel-4.3.2-30.ent.i386.rpm | c085f07a201c0eb6371a3db7122e44ab |
| php-imap-4.3.2-30.ent.i386.rpm | b1b3b15f480777f51b4abe7d153dcc1c |
| php-ldap-4.3.2-30.ent.i386.rpm | c985901e74a592d4b09073996134ea01 |
| php-mysql-4.3.2-30.ent.i386.rpm | a8722c1e7194bc274c38a5b7d3c454b5 |
| php-odbc-4.3.2-30.ent.i386.rpm | 54bdd8613038a57efa7f5ebd8751613e |
| php-pgsql-4.3.2-30.ent.i386.rpm | 151554ff8e17b21ebaa56bcf1b65851a |
| x86_64: | |
| php-4.3.2-30.ent.x86_64.rpm | 6c2a884d7fae38a410d827e7f4aa8570 |
| php-devel-4.3.2-30.ent.x86_64.rpm | 95bafd82cba9c87393d798a4f8d7335a |
| php-imap-4.3.2-30.ent.x86_64.rpm | 9b4ec8ddb9138403e38aba68afa8aef0 |
| php-ldap-4.3.2-30.ent.x86_64.rpm | 56371e679761c2c5e13c405b02e484f4 |
| php-mysql-4.3.2-30.ent.x86_64.rpm | 4a3803d30636186f1c7a40872c9c74e3 |
| php-odbc-4.3.2-30.ent.x86_64.rpm | 70b39963d9d4f0dfa2441a7f96df69ad |
| php-pgsql-4.3.2-30.ent.x86_64.rpm | e15bcb927e4d6e3d076cf8336865d547 |
| Red Hat Desktop (v. 4) | |
| SRPMS: | |
| php-4.3.9-3.12.src.rpm | 1f42883047b66e28a779a5604636b3da |
| IA-32: | |
| php-4.3.9-3.12.i386.rpm | daa465aebd0f11e8175ed67453687e32 |
| php-devel-4.3.9-3.12.i386.rpm | ed2efc56a5705982709bb32f621aaa22 |
| php-domxml-4.3.9-3.12.i386.rpm | 0dd882b0034dbc4cf8375148ace6949d |
| php-gd-4.3.9-3.12.i386.rpm | 610aec94208d58ea42d168daf0ca5eaa |
| php-imap-4.3.9-3.12.i386.rpm | c3f1001cbfa35ad31784fc72323e4856 |
| php-ldap-4.3.9-3.12.i386.rpm | 0b4e877a90c7a139c3e30d74c7787ee8 |
| php-mbstring-4.3.9-3.12.i386.rpm | 83d9de2ecda74ad0ed86c0525028c76b |
| php-mysql-4.3.9-3.12.i386.rpm | 1b96b8190956420be92ff2350ef207a7 |
| php-ncurses-4.3.9-3.12.i386.rpm | 44c9448f4db1b83f836f786fc7c28b75 |
| php-odbc-4.3.9-3.12.i386.rpm | 1f2265aa85bd444003d9871c52a529d5 |
| php-pear-4.3.9-3.12.i386.rpm | 0bd92272d4967bde1ab4c98b1ba10934 |
| php-pgsql-4.3.9-3.12.i386.rpm | e5712e82c9e043493d2a0e3d87a3c9b3 |
| php-snmp-4.3.9-3.12.i386.rpm | 5d73441291aef40ac2ce035e09c2b150 |
| php-xmlrpc-4.3.9-3.12.i386.rpm | 2c12e81e2bcaa950b62f4cb25cac13a7 |
| x86_64: | |
| php-4.3.9-3.12.x86_64.rpm | 3b601cc9b736a52b4586d65f02364139 |
| php-devel-4.3.9-3.12.x86_64.rpm | 2338dfedb3182566084ab3cfb133a47f |
| php-domxml-4.3.9-3.12.x86_64.rpm | f7aa9882eb8fa33aa38bedefcd8eae10 |
| php-gd-4.3.9-3.12.x86_64.rpm | e4bc0212dbe3a1068956512ec7d3c117 |
| php-imap-4.3.9-3.12.x86_64.rpm | cf416adc0a5c9427c8ad7ae645630516 |
| php-ldap-4.3.9-3.12.x86_64.rpm | d8218f64086a09f9678caf8d8b4d0805 |
| php-mbstring-4.3.9-3.12.x86_64.rpm | 89e6234ea1abe06111354f9387e01fe2 |
| php-mysql-4.3.9-3.12.x86_64.rpm | 065af91f39d7a16194933a02c14b682e |
| php-ncurses-4.3.9-3.12.x86_64.rpm | 1de5bedd278d8ad28f3047f50d50c0b4 |
| php-odbc-4.3.9-3.12.x86_64.rpm | 9b188d7675aa3842ab37044c3528bfe3 |
| php-pear-4.3.9-3.12.x86_64.rpm | 645ef167eb306e3f6620ba3e0b7f8c08 |
| php-pgsql-4.3.9-3.12.x86_64.rpm | f43cbd9188abffe823ef0cee0df30b4b |
| php-snmp-4.3.9-3.12.x86_64.rpm | c1ad4d0e5c0fb8f3aa8d524d7f097ebe |
| php-xmlrpc-4.3.9-3.12.x86_64.rpm | b7ed8fb03f9e84206a7dd60317ea0641 |
| Red Hat Enterprise Linux AS (v. 3) | |
| SRPMS: | |
| php-4.3.2-30.ent.src.rpm | 460ed4c3f1f6330ecef844fcfabda531 |
| IA-32: | |
| php-4.3.2-30.ent.i386.rpm | 796091ea216f651fda39b3f3dbda8b03 |
| php-devel-4.3.2-30.ent.i386.rpm | c085f07a201c0eb6371a3db7122e44ab |
| php-imap-4.3.2-30.ent.i386.rpm | b1b3b15f480777f51b4abe7d153dcc1c |
| php-ldap-4.3.2-30.ent.i386.rpm | c985901e74a592d4b09073996134ea01 |
| php-mysql-4.3.2-30.ent.i386.rpm | a8722c1e7194bc274c38a5b7d3c454b5 |
| php-odbc-4.3.2-30.ent.i386.rpm | 54bdd8613038a57efa7f5ebd8751613e |
| php-pgsql-4.3.2-30.ent.i386.rpm | 151554ff8e17b21ebaa56bcf1b65851a |
| IA-64: | |
| php-4.3.2-30.ent.ia64.rpm | fd908f56c849d52ada82cc0399513920 |
| php-devel-4.3.2-30.ent.ia64.rpm | 7ac805acf6f1af4e4fdcce49f20ffe6f |
| php-imap-4.3.2-30.ent.ia64.rpm | 59497b00d7feb65640ad6d7646d10c7e |
| php-ldap-4.3.2-30.ent.ia64.rpm | 4c9d6759b82f99929289ad608534275c |
| php-mysql-4.3.2-30.ent.ia64.rpm | 02846c28fc88fbca7dcdaedcfd13a8da |
| php-odbc-4.3.2-30.ent.ia64.rpm | 31e2faabc1cef6301e0c938b34457c6c |
| php-pgsql-4.3.2-30.ent.ia64.rpm | c0ce59db5e46fa9598b852f9d56d1b10 |
| PPC: | |
| php-4.3.2-30.ent.ppc.rpm | 5c82e086bb0116f9573a89639cc5c5ef |
| php-devel-4.3.2-30.ent.ppc.rpm | 555bc38be622b40e3bcb0d0000c5d1db |
| php-imap-4.3.2-30.ent.ppc.rpm | f16c80e05b6b26328630b8c89aa0cae7 |
| php-ldap-4.3.2-30.ent.ppc.rpm | 9d39caf8ae47809d36e163f5db234bee |
| php-mysql-4.3.2-30.ent.ppc.rpm | 9b362f1f7e84809f8ccaf7d36df4ac38 |
| php-odbc-4.3.2-30.ent.ppc.rpm | aa73627e58c2b769e36ba6ca11db0451 |
| php-pgsql-4.3.2-30.ent.ppc.rpm | b0e0c8b813a59cee20b10df4e375ace0 |
| s390: | |
| php-4.3.2-30.ent.s390.rpm | 7ade9ee2756435a08bfdb292d6250465 |
| php-devel-4.3.2-30.ent.s390.rpm | 113a2f052b7bec8fbf85bfc5f51ebf18 |
| php-imap-4.3.2-30.ent.s390.rpm | dfb326b3e69b11a27038489e53855974 |
| php-ldap-4.3.2-30.ent.s390.rpm | 4aa6a372dc1b820e1274a20eba5d82a2 |
| php-mysql-4.3.2-30.ent.s390.rpm | deb14a4e2da686414bc014ace3e9e94c |
| php-odbc-4.3.2-30.ent.s390.rpm | a3a7b7d7d4f838432e4b0467b940b220 |
| php-pgsql-4.3.2-30.ent.s390.rpm | 9ad7a0002a1abe0c219f2e80beb705c2 |
| s390x: | |
| php-4.3.2-30.ent.s390x.rpm | 40cffdc67add9c1fb527b3aa7cb4e449 |
| php-devel-4.3.2-30.ent.s390x.rpm | da12cab5f471ddd1f3aaf3b64cb5d74b |
| php-imap-4.3.2-30.ent.s390x.rpm | 8d95f5623e37f251942df27ff155e645 |
| php-ldap-4.3.2-30.ent.s390x.rpm | 05f45da8178fb7f8a241bbd4408fa395 |
| php-mysql-4.3.2-30.ent.s390x.rpm | 243c56673537f7fb69dc8714a4e50bec |
| php-odbc-4.3.2-30.ent.s390x.rpm | 940531674c946b274e0405c983bb8d9d |
| php-pgsql-4.3.2-30.ent.s390x.rpm | 870da8a4b0b243f3848666c69b06ec8c |
| x86_64: | |
| php-4.3.2-30.ent.x86_64.rpm | 6c2a884d7fae38a410d827e7f4aa8570 |
| php-devel-4.3.2-30.ent.x86_64.rpm | 95bafd82cba9c87393d798a4f8d7335a |
| php-imap-4.3.2-30.ent.x86_64.rpm | 9b4ec8ddb9138403e38aba68afa8aef0 |
| php-ldap-4.3.2-30.ent.x86_64.rpm | 56371e679761c2c5e13c405b02e484f4 |
| php-mysql-4.3.2-30.ent.x86_64.rpm | 4a3803d30636186f1c7a40872c9c74e3 |
| php-odbc-4.3.2-30.ent.x86_64.rpm | 70b39963d9d4f0dfa2441a7f96df69ad |
| php-pgsql-4.3.2-30.ent.x86_64.rpm | e15bcb927e4d6e3d076cf8336865d547 |
| Red Hat Enterprise Linux AS (v. 4) | |
| SRPMS: | |
| php-4.3.9-3.12.src.rpm | 1f42883047b66e28a779a5604636b3da |
| IA-32: | |
| php-4.3.9-3.12.i386.rpm | daa465aebd0f11e8175ed67453687e32 |
| php-devel-4.3.9-3.12.i386.rpm | ed2efc56a5705982709bb32f621aaa22 |
| php-domxml-4.3.9-3.12.i386.rpm | 0dd882b0034dbc4cf8375148ace6949d |
| php-gd-4.3.9-3.12.i386.rpm | 610aec94208d58ea42d168daf0ca5eaa |
| php-imap-4.3.9-3.12.i386.rpm | c3f1001cbfa35ad31784fc72323e4856 |
| php-ldap-4.3.9-3.12.i386.rpm | 0b4e877a90c7a139c3e30d74c7787ee8 |
| php-mbstring-4.3.9-3.12.i386.rpm | 83d9de2ecda74ad0ed86c0525028c76b |
| php-mysql-4.3.9-3.12.i386.rpm | 1b96b8190956420be92ff2350ef207a7 |
| php-ncurses-4.3.9-3.12.i386.rpm | 44c9448f4db1b83f836f786fc7c28b75 |
| php-odbc-4.3.9-3.12.i386.rpm | 1f2265aa85bd444003d9871c52a529d5 |
| php-pear-4.3.9-3.12.i386.rpm | 0bd92272d4967bde1ab4c98b1ba10934 |
| php-pgsql-4.3.9-3.12.i386.rpm | e5712e82c9e043493d2a0e3d87a3c9b3 |
| php-snmp-4.3.9-3.12.i386.rpm | 5d73441291aef40ac2ce035e09c2b150 |
| php-xmlrpc-4.3.9-3.12.i386.rpm | 2c12e81e2bcaa950b62f4cb25cac13a7 |
| IA-64: | |
| php-4.3.9-3.12.ia64.rpm | 5c701479c6c22559dbead737a8cbe8fa |
| php-devel-4.3.9-3.12.ia64.rpm | 7d76b25499946fd409720f4bdbccd35e |
| php-domxml-4.3.9-3.12.ia64.rpm | fe8f62fe3b7ddb164f1bb0fa77348ae1 |
| php-gd-4.3.9-3.12.ia64.rpm | 45be07bf97f0f5838d5b7362afa305e3 |
| php-imap-4.3.9-3.12.ia64.rpm | 658223efb8b941ddad14e4c54ec7a40a |
| php-ldap-4.3.9-3.12.ia64.rpm | a89c5d0b1878276ee63afd971051b2bf |
| php-mbstring-4.3.9-3.12.ia64.rpm | 85c32ff621275878dafe5500438bcd18 |
| php-mysql-4.3.9-3.12.ia64.rpm | b5382f0539b43f22e632efb0b4b714a1 |
| php-ncurses-4.3.9-3.12.ia64.rpm | d434c93ebf9240d9e71d4c7b2f83d1ab |
| php-odbc-4.3.9-3.12.ia64.rpm | 05f787718fb14fb6aad100617ad66545 |
| php-pear-4.3.9-3.12.ia64.rpm | 9df262fa2228a4137f78f2c4c24bea34 |
| php-pgsql-4.3.9-3.12.ia64.rpm | e7e5d04a2363779f95d243fcf175e6e8 |
| php-snmp-4.3.9-3.12.ia64.rpm | aae6a8a3fb253e32dac53fd9425ef014 |
| php-xmlrpc-4.3.9-3.12.ia64.rpm | 4417151624641bffd0c95935c20b9d9c |
| PPC: | |
| php-4.3.9-3.12.ppc.rpm | 41457a9257d66621181cc806842e557d |
| php-devel-4.3.9-3.12.ppc.rpm | bf16b2fc2ceac8ac02e8a63cc5fa9cb3 |
| php-domxml-4.3.9-3.12.ppc.rpm | 9205471bea067554679e981eb97855d9 |
| php-gd-4.3.9-3.12.ppc.rpm | eea436536d52235fbba6442b65af6fc5 |
| php-imap-4.3.9-3.12.ppc.rpm | bac6c82172923fb14ef7a0d2ab3da8ec |
| php-ldap-4.3.9-3.12.ppc.rpm | e29531cea45bf14c72b7726429714b90 |
| php-mbstring-4.3.9-3.12.ppc.rpm | 9cf4706d6afdfdc179d422910bc78fe9 |
| php-mysql-4.3.9-3.12.ppc.rpm | 940092af7f18663c1ae7af48684cced2 |
| php-ncurses-4.3.9-3.12.ppc.rpm | 923fb90f6be392be5f8d8de08aba6691 |
| php-odbc-4.3.9-3.12.ppc.rpm | c2c474923d61748007efb4e95d576e1d |
| php-pear-4.3.9-3.12.ppc.rpm | 6b3636cdaf5c409967da8bcc2c2f6715 |
| php-pgsql-4.3.9-3.12.ppc.rpm | ff6bd0fb05e641973e60f99c19e8ba5c |
| php-snmp-4.3.9-3.12.ppc.rpm | 76f86b05e3f50df633195dc58bff864a |
| php-xmlrpc-4.3.9-3.12.ppc.rpm | b7b959439de5c171a8fdb15d0773897f |
| s390: | |
| php-4.3.9-3.12.s390.rpm | 7333d72f68ab880c2d8c31311f20482f |
| php-devel-4.3.9-3.12.s390.rpm | 42295dd2a94a32b3cb25069f34d2efaf |
| php-domxml-4.3.9-3.12.s390.rpm | 9c088cc73a94e27f0bd4261352061a4d |
| php-gd-4.3.9-3.12.s390.rpm | 11b871f635340bba80ea666d428e10d7 |
| php-imap-4.3.9-3.12.s390.rpm | 031bad414e828ae5a91bfb6db9f19f90 |
| php-ldap-4.3.9-3.12.s390.rpm | ae86d751a267b235cdb19856e8fdb9bc |
| php-mbstring-4.3.9-3.12.s390.rpm | d864864e422af04c47695a97697ee9e0 |
| php-mysql-4.3.9-3.12.s390.rpm | 8e3da991d676c731712f0dd0bf23f708 |
| php-ncurses-4.3.9-3.12.s390.rpm | 1e8a711713fd7bfe695e8c875cd162ba |
| php-odbc-4.3.9-3.12.s390.rpm | 57d457768917ed2928dbe79a56259eaa |
| php-pear-4.3.9-3.12.s390.rpm | 7a1814470f946013767f425a10e9e794 |
| php-pgsql-4.3.9-3.12.s390.rpm | 5ec8c91ff4dc6d133a578dda36fb3f74 |
| php-snmp-4.3.9-3.12.s390.rpm | 34ceeea62b4ece2557ebadeab8cce6ee |
| php-xmlrpc-4.3.9-3.12.s390.rpm | 033dd905f4a5abae0ee6f91926acc3e7 |
| s390x: | |
| php-4.3.9-3.12.s390x.rpm | be60cd19d4ed1e4f56f6dedcf4864cef |
| php-devel-4.3.9-3.12.s390x.rpm | 14ebc189816c678f054035949cb18960 |
| php-domxml-4.3.9-3.12.s390x.rpm | b71b88c5834269b13986b75e171b4d48 |
| php-gd-4.3.9-3.12.s390x.rpm | 5c398acd42d0e28ee571d197aba1b7c6 |
| php-imap-4.3.9-3.12.s390x.rpm | 810775b9d4e5c0859554ebc8fe2a344e |
| php-ldap-4.3.9-3.12.s390x.rpm | a988c594f30bf1d8b845f9adeefbba52 |
| php-mbstring-4.3.9-3.12.s390x.rpm | 2a7f0ba4c81c26f681a35187e94d5ee7 |
| php-mysql-4.3.9-3.12.s390x.rpm | 06201a5ecff9b5cfab90cc04296abd54 |
| php-ncurses-4.3.9-3.12.s390x.rpm | f04b17c4a2df1f2d4add315193dd9ae9 |
| php-odbc-4.3.9-3.12.s390x.rpm | 9b1b9e6503687c3ae05904ea98aee976 |
| php-pear-4.3.9-3.12.s390x.rpm | 2ead93be0392519a6f6ff06a3eab5746 |
| php-pgsql-4.3.9-3.12.s390x.rpm | 8a53aaf77dd2db234883851306c3282c |
| php-snmp-4.3.9-3.12.s390x.rpm | 9b16971eac5f40462a7e57b54e2c67c2 |
| php-xmlrpc-4.3.9-3.12.s390x.rpm | 1a9625459c617553f333609203288c3f |
| x86_64: | |
| php-4.3.9-3.12.x86_64.rpm | 3b601cc9b736a52b4586d65f02364139 |
| php-devel-4.3.9-3.12.x86_64.rpm | 2338dfedb3182566084ab3cfb133a47f |
| php-domxml-4.3.9-3.12.x86_64.rpm | f7aa9882eb8fa33aa38bedefcd8eae10 |
| php-gd-4.3.9-3.12.x86_64.rpm | e4bc0212dbe3a1068956512ec7d3c117 |
| php-imap-4.3.9-3.12.x86_64.rpm | cf416adc0a5c9427c8ad7ae645630516 |
| php-ldap-4.3.9-3.12.x86_64.rpm | d8218f64086a09f9678caf8d8b4d0805 |
| php-mbstring-4.3.9-3.12.x86_64.rpm | 89e6234ea1abe06111354f9387e01fe2 |
| php-mysql-4.3.9-3.12.x86_64.rpm | 065af91f39d7a16194933a02c14b682e |
| php-ncurses-4.3.9-3.12.x86_64.rpm | 1de5bedd278d8ad28f3047f50d50c0b4 |
| php-odbc-4.3.9-3.12.x86_64.rpm | 9b188d7675aa3842ab37044c3528bfe3 |
| php-pear-4.3.9-3.12.x86_64.rpm | 645ef167eb306e3f6620ba3e0b7f8c08 |
| php-pgsql-4.3.9-3.12.x86_64.rpm | f43cbd9188abffe823ef0cee0df30b4b |
| php-snmp-4.3.9-3.12.x86_64.rpm | c1ad4d0e5c0fb8f3aa8d524d7f097ebe |
| php-xmlrpc-4.3.9-3.12.x86_64.rpm | b7ed8fb03f9e84206a7dd60317ea0641 |
| Red Hat Enterprise Linux ES (v. 3) | |
| SRPMS: | |
| php-4.3.2-30.ent.src.rpm | 460ed4c3f1f6330ecef844fcfabda531 |
| IA-32: | |
| php-4.3.2-30.ent.i386.rpm | 796091ea216f651fda39b3f3dbda8b03 |
| php-devel-4.3.2-30.ent.i386.rpm | c085f07a201c0eb6371a3db7122e44ab |
| php-imap-4.3.2-30.ent.i386.rpm | b1b3b15f480777f51b4abe7d153dcc1c |
| php-ldap-4.3.2-30.ent.i386.rpm | c985901e74a592d4b09073996134ea01 |
| php-mysql-4.3.2-30.ent.i386.rpm | a8722c1e7194bc274c38a5b7d3c454b5 |
| php-odbc-4.3.2-30.ent.i386.rpm | 54bdd8613038a57efa7f5ebd8751613e |
| php-pgsql-4.3.2-30.ent.i386.rpm | 151554ff8e17b21ebaa56bcf1b65851a |
| IA-64: | |
| php-4.3.2-30.ent.ia64.rpm | fd908f56c849d52ada82cc0399513920 |
| php-devel-4.3.2-30.ent.ia64.rpm | 7ac805acf6f1af4e4fdcce49f20ffe6f |
| php-imap-4.3.2-30.ent.ia64.rpm | 59497b00d7feb65640ad6d7646d10c7e |
| php-ldap-4.3.2-30.ent.ia64.rpm | 4c9d6759b82f99929289ad608534275c |
| php-mysql-4.3.2-30.ent.ia64.rpm | 02846c28fc88fbca7dcdaedcfd13a8da |
| php-odbc-4.3.2-30.ent.ia64.rpm | 31e2faabc1cef6301e0c938b34457c6c |
| php-pgsql-4.3.2-30.ent.ia64.rpm | c0ce59db5e46fa9598b852f9d56d1b10 |
| x86_64: | |
| php-4.3.2-30.ent.x86_64.rpm | 6c2a884d7fae38a410d827e7f4aa8570 |
| php-devel-4.3.2-30.ent.x86_64.rpm | 95bafd82cba9c87393d798a4f8d7335a |
| php-imap-4.3.2-30.ent.x86_64.rpm | 9b4ec8ddb9138403e38aba68afa8aef0 |
| php-ldap-4.3.2-30.ent.x86_64.rpm | 56371e679761c2c5e13c405b02e484f4 |
| php-mysql-4.3.2-30.ent.x86_64.rpm | 4a3803d30636186f1c7a40872c9c74e3 |
| php-odbc-4.3.2-30.ent.x86_64.rpm | 70b39963d9d4f0dfa2441a7f96df69ad |
| php-pgsql-4.3.2-30.ent.x86_64.rpm | e15bcb927e4d6e3d076cf8336865d547 |
| Red Hat Enterprise Linux ES (v. 4) | |
| SRPMS: | |
| php-4.3.9-3.12.src.rpm | 1f42883047b66e28a779a5604636b3da |
| IA-32: | |
| php-4.3.9-3.12.i386.rpm | daa465aebd0f11e8175ed67453687e32 |
| php-devel-4.3.9-3.12.i386.rpm | ed2efc56a5705982709bb32f621aaa22 |
| php-domxml-4.3.9-3.12.i386.rpm | 0dd882b0034dbc4cf8375148ace6949d |
| php-gd-4.3.9-3.12.i386.rpm | 610aec94208d58ea42d168daf0ca5eaa |
| php-imap-4.3.9-3.12.i386.rpm | c3f1001cbfa35ad31784fc72323e4856 |
| php-ldap-4.3.9-3.12.i386.rpm | 0b4e877a90c7a139c3e30d74c7787ee8 |
| php-mbstring-4.3.9-3.12.i386.rpm | 83d9de2ecda74ad0ed86c0525028c76b |
| php-mysql-4.3.9-3.12.i386.rpm | 1b96b8190956420be92ff2350ef207a7 |
| php-ncurses-4.3.9-3.12.i386.rpm | 44c9448f4db1b83f836f786fc7c28b75 |
| php-odbc-4.3.9-3.12.i386.rpm | 1f2265aa85bd444003d9871c52a529d5 |
| php-pear-4.3.9-3.12.i386.rpm | 0bd92272d4967bde1ab4c98b1ba10934 |
| php-pgsql-4.3.9-3.12.i386.rpm | e5712e82c9e043493d2a0e3d87a3c9b3 |
| php-snmp-4.3.9-3.12.i386.rpm | 5d73441291aef40ac2ce035e09c2b150 |
| php-xmlrpc-4.3.9-3.12.i386.rpm | 2c12e81e2bcaa950b62f4cb25cac13a7 |
| IA-64: | |
| php-4.3.9-3.12.ia64.rpm | 5c701479c6c22559dbead737a8cbe8fa |
| php-devel-4.3.9-3.12.ia64.rpm | 7d76b25499946fd409720f4bdbccd35e |
| php-domxml-4.3.9-3.12.ia64.rpm | fe8f62fe3b7ddb164f1bb0fa77348ae1 |
| php-gd-4.3.9-3.12.ia64.rpm | 45be07bf97f0f5838d5b7362afa305e3 |
| php-imap-4.3.9-3.12.ia64.rpm | 658223efb8b941ddad14e4c54ec7a40a |
| php-ldap-4.3.9-3.12.ia64.rpm | a89c5d0b1878276ee63afd971051b2bf |
| php-mbstring-4.3.9-3.12.ia64.rpm | 85c32ff621275878dafe5500438bcd18 |
| php-mysql-4.3.9-3.12.ia64.rpm | b5382f0539b43f22e632efb0b4b714a1 |
| php-ncurses-4.3.9-3.12.ia64.rpm | d434c93ebf9240d9e71d4c7b2f83d1ab |
| php-odbc-4.3.9-3.12.ia64.rpm | 05f787718fb14fb6aad100617ad66545 |
| php-pear-4.3.9-3.12.ia64.rpm | 9df262fa2228a4137f78f2c4c24bea34 |
| php-pgsql-4.3.9-3.12.ia64.rpm | e7e5d04a2363779f95d243fcf175e6e8 |
| php-snmp-4.3.9-3.12.ia64.rpm | aae6a8a3fb253e32dac53fd9425ef014 |
| php-xmlrpc-4.3.9-3.12.ia64.rpm | 4417151624641bffd0c95935c20b9d9c |
| x86_64: | |
| php-4.3.9-3.12.x86_64.rpm | 3b601cc9b736a52b4586d65f02364139 |
| php-devel-4.3.9-3.12.x86_64.rpm | 2338dfedb3182566084ab3cfb133a47f |
| php-domxml-4.3.9-3.12.x86_64.rpm | f7aa9882eb8fa33aa38bedefcd8eae10 |
| php-gd-4.3.9-3.12.x86_64.rpm | e4bc0212dbe3a1068956512ec7d3c117 |
| php-imap-4.3.9-3.12.x86_64.rpm | cf416adc0a5c9427c8ad7ae645630516 |
| php-ldap-4.3.9-3.12.x86_64.rpm | d8218f64086a09f9678caf8d8b4d0805 |
| php-mbstring-4.3.9-3.12.x86_64.rpm | 89e6234ea1abe06111354f9387e01fe2 |
| php-mysql-4.3.9-3.12.x86_64.rpm | 065af91f39d7a16194933a02c14b682e |
| php-ncurses-4.3.9-3.12.x86_64.rpm | 1de5bedd278d8ad28f3047f50d50c0b4 |
| php-odbc-4.3.9-3.12.x86_64.rpm | 9b188d7675aa3842ab37044c3528bfe3 |
| php-pear-4.3.9-3.12.x86_64.rpm | 645ef167eb306e3f6620ba3e0b7f8c08 |
| php-pgsql-4.3.9-3.12.x86_64.rpm | f43cbd9188abffe823ef0cee0df30b4b |
| php-snmp-4.3.9-3.12.x86_64.rpm | c1ad4d0e5c0fb8f3aa8d524d7f097ebe |
| php-xmlrpc-4.3.9-3.12.x86_64.rpm | b7ed8fb03f9e84206a7dd60317ea0641 |
| Red Hat Enterprise Linux WS (v. 3) | |
| SRPMS: | |
| php-4.3.2-30.ent.src.rpm | 460ed4c3f1f6330ecef844fcfabda531 |
| IA-32: | |
| php-4.3.2-30.ent.i386.rpm | 796091ea216f651fda39b3f3dbda8b03 |
| php-devel-4.3.2-30.ent.i386.rpm | c085f07a201c0eb6371a3db7122e44ab |
| php-imap-4.3.2-30.ent.i386.rpm | b1b3b15f480777f51b4abe7d153dcc1c |
| php-ldap-4.3.2-30.ent.i386.rpm | c985901e74a592d4b09073996134ea01 |
| php-mysql-4.3.2-30.ent.i386.rpm | a8722c1e7194bc274c38a5b7d3c454b5 |
| php-odbc-4.3.2-30.ent.i386.rpm | 54bdd8613038a57efa7f5ebd8751613e |
| php-pgsql-4.3.2-30.ent.i386.rpm | 151554ff8e17b21ebaa56bcf1b65851a |
| IA-64: | |
| php-4.3.2-30.ent.ia64.rpm | fd908f56c849d52ada82cc0399513920 |
| php-devel-4.3.2-30.ent.ia64.rpm | 7ac805acf6f1af4e4fdcce49f20ffe6f |
| php-imap-4.3.2-30.ent.ia64.rpm | 59497b00d7feb65640ad6d7646d10c7e |
| php-ldap-4.3.2-30.ent.ia64.rpm | 4c9d6759b82f99929289ad608534275c |
| php-mysql-4.3.2-30.ent.ia64.rpm | 02846c28fc88fbca7dcdaedcfd13a8da |
| php-odbc-4.3.2-30.ent.ia64.rpm | 31e2faabc1cef6301e0c938b34457c6c |
| php-pgsql-4.3.2-30.ent.ia64.rpm | c0ce59db5e46fa9598b852f9d56d1b10 |
| x86_64: | |
| php-4.3.2-30.ent.x86_64.rpm | 6c2a884d7fae38a410d827e7f4aa8570 |
| php-devel-4.3.2-30.ent.x86_64.rpm | 95bafd82cba9c87393d798a4f8d7335a |
| php-imap-4.3.2-30.ent.x86_64.rpm | 9b4ec8ddb9138403e38aba68afa8aef0 |
| php-ldap-4.3.2-30.ent.x86_64.rpm | 56371e679761c2c5e13c405b02e484f4 |
| php-mysql-4.3.2-30.ent.x86_64.rpm | 4a3803d30636186f1c7a40872c9c74e3 |
| php-odbc-4.3.2-30.ent.x86_64.rpm | 70b39963d9d4f0dfa2441a7f96df69ad |
| php-pgsql-4.3.2-30.ent.x86_64.rpm | e15bcb927e4d6e3d076cf8336865d547 |
| Red Hat Enterprise Linux WS (v. 4) | |
| SRPMS: | |
| php-4.3.9-3.12.src.rpm | 1f42883047b66e28a779a5604636b3da |
| IA-32: | |
| php-4.3.9-3.12.i386.rpm | daa465aebd0f11e8175ed67453687e32 |
| php-devel-4.3.9-3.12.i386.rpm | ed2efc56a5705982709bb32f621aaa22 |
| php-domxml-4.3.9-3.12.i386.rpm | 0dd882b0034dbc4cf8375148ace6949d |
| php-gd-4.3.9-3.12.i386.rpm | 610aec94208d58ea42d168daf0ca5eaa |
| php-imap-4.3.9-3.12.i386.rpm | c3f1001cbfa35ad31784fc72323e4856 |
| php-ldap-4.3.9-3.12.i386.rpm | 0b4e877a90c7a139c3e30d74c7787ee8 |
| php-mbstring-4.3.9-3.12.i386.rpm | 83d9de2ecda74ad0ed86c0525028c76b |
| php-mysql-4.3.9-3.12.i386.rpm | 1b96b8190956420be92ff2350ef207a7 |
| php-ncurses-4.3.9-3.12.i386.rpm | 44c9448f4db1b83f836f786fc7c28b75 |
| php-odbc-4.3.9-3.12.i386.rpm | 1f2265aa85bd444003d9871c52a529d5 |
| php-pear-4.3.9-3.12.i386.rpm | 0bd92272d4967bde1ab4c98b1ba10934 |
| php-pgsql-4.3.9-3.12.i386.rpm | e5712e82c9e043493d2a0e3d87a3c9b3 |
| php-snmp-4.3.9-3.12.i386.rpm | 5d73441291aef40ac2ce035e09c2b150 |
| php-xmlrpc-4.3.9-3.12.i386.rpm | 2c12e81e2bcaa950b62f4cb25cac13a7 |
| IA-64: | |
| php-4.3.9-3.12.ia64.rpm | 5c701479c6c22559dbead737a8cbe8fa |
| php-devel-4.3.9-3.12.ia64.rpm | 7d76b25499946fd409720f4bdbccd35e |
| php-domxml-4.3.9-3.12.ia64.rpm | fe8f62fe3b7ddb164f1bb0fa77348ae1 |
| php-gd-4.3.9-3.12.ia64.rpm | 45be07bf97f0f5838d5b7362afa305e3 |
| php-imap-4.3.9-3.12.ia64.rpm | 658223efb8b941ddad14e4c54ec7a40a |
| php-ldap-4.3.9-3.12.ia64.rpm | a89c5d0b1878276ee63afd971051b2bf |
| php-mbstring-4.3.9-3.12.ia64.rpm | 85c32ff621275878dafe5500438bcd18 |
| php-mysql-4.3.9-3.12.ia64.rpm | b5382f0539b43f22e632efb0b4b714a1 |
| php-ncurses-4.3.9-3.12.ia64.rpm | d434c93ebf9240d9e71d4c7b2f83d1ab |
| php-odbc-4.3.9-3.12.ia64.rpm | 05f787718fb14fb6aad100617ad66545 |
| php-pear-4.3.9-3.12.ia64.rpm | 9df262fa2228a4137f78f2c4c24bea34 |
| php-pgsql-4.3.9-3.12.ia64.rpm | e7e5d04a2363779f95d243fcf175e6e8 |
| php-snmp-4.3.9-3.12.ia64.rpm | aae6a8a3fb253e32dac53fd9425ef014 |
| php-xmlrpc-4.3.9-3.12.ia64.rpm | 4417151624641bffd0c95935c20b9d9c |
| x86_64: | |
| php-4.3.9-3.12.x86_64.rpm | 3b601cc9b736a52b4586d65f02364139 |
| php-devel-4.3.9-3.12.x86_64.rpm | 2338dfedb3182566084ab3cfb133a47f |
| php-domxml-4.3.9-3.12.x86_64.rpm | f7aa9882eb8fa33aa38bedefcd8eae10 |
| php-gd-4.3.9-3.12.x86_64.rpm | e4bc0212dbe3a1068956512ec7d3c117 |
| php-imap-4.3.9-3.12.x86_64.rpm | cf416adc0a5c9427c8ad7ae645630516 |
| php-ldap-4.3.9-3.12.x86_64.rpm | d8218f64086a09f9678caf8d8b4d0805 |
| php-mbstring-4.3.9-3.12.x86_64.rpm | 89e6234ea1abe06111354f9387e01fe2 |
| php-mysql-4.3.9-3.12.x86_64.rpm | 065af91f39d7a16194933a02c14b682e |
| php-ncurses-4.3.9-3.12.x86_64.rpm | 1de5bedd278d8ad28f3047f50d50c0b4 |
| php-odbc-4.3.9-3.12.x86_64.rpm | 9b188d7675aa3842ab37044c3528bfe3 |
| php-pear-4.3.9-3.12.x86_64.rpm | 645ef167eb306e3f6620ba3e0b7f8c08 |
| php-pgsql-4.3.9-3.12.x86_64.rpm | f43cbd9188abffe823ef0cee0df30b4b |
| php-snmp-4.3.9-3.12.x86_64.rpm | c1ad4d0e5c0fb8f3aa8d524d7f097ebe |
| php-xmlrpc-4.3.9-3.12.x86_64.rpm | b7ed8fb03f9e84206a7dd60317ea0641 |
| (The unlinked packages above are only available from the Red Hat Network) | |
解決法:
このアップデートを適用する前に、システムに関連するリリース済の errata が適用済であることをご確認ください。バグジラ: (詳細は、こちらbugzilla[英語]を御覧ください。)
163490 - PEAR::DB autoExecute function does not work when updating with WHERE clause
174463 - CVE-2005-3883 PHP mb_send_mail() header parsing issue
174528 - CVE-2005-2933 imap buffer overflow
178028 - CVE-2006-0208 PHP Cross Site Scripting (XSS) flaw
182719 - ImageCreateFromGif does not clean up its temporary file
187230 - CVE-2006-1490 PHP memory disclosure issue
187510 - CVE-2006-0996 phpinfo() XSS issue
参照:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2933
ここに在るパッケージはセキュリティの為、 Red Hat, Inc. によって、 GPG 認証されています。キーは以下から利用可能になっています:
http://www.redhat.com/about/contact.html
各パッケージを確認するには次のコマンドをご利用ください: rpm --checksig filename
各パッケージが壊れていないか、もしくは改ざんされていないかを確認するには、以下のコマンドで MD5 チェックサムをお調べください: rpm --checksig --nogpg filename
注意: GnuPG キーをチェックするためには、RPM 3.0 以上が必要です。