Уведомление безопасности SUSE-SA:2006:031

Высокая (6.4)

(AV:N/AC:L/Au:N/C:N/I:P/A:P)

SUSE

apache2-mod_php4 (any) apache2-mod_php5 (any) mod_php4-core (any) mod_php4-servlet (any) php4 (any) php4-32bit (any) php4-devel (any) php4-exif (any) php4-fastcgi (any) php4-gd (any) php4-imap (any) php4-mbstring (any) php4-mysql (any) php4-pear (any) php4-recode (any) php4-servlet (any) php4-session (any) php4-sysvshm (any) php4-unixODBC (any) php4-wddx (any) php5 (any) php5-devel (any) php5-exif (any) php5-fastcgi (any) php5-gd (any) php5-mbstring (any) php5-mysqli (any) php5-pear (any) php5-snmp (any) php5-sysvmsg (any) php5-sysvshm (any)

Уведомление безопасности об уязвимостях SUSE LINUX 10.1, SUSE LINUX 10.0, SUSE LINUX 9.3, SUSE LINUX 9.2, SUSE LINUX 9.1, SuSE Linux Enterprise Server 8, SUSE SLES 9, UnitedLinux 1.0

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
openSUSE 10.0:
i586:
php5-mysqli - 5.0.4-9.13
php4 - 4.4.0-6.13
php4-mbstring - 4.4.0-6.13
php5-exif - 5.0.4-9.13
php5-gd - 5.0.4-9.13
php5-fastcgi - 5.0.4-9.13
php4-gd - 4.4.0-6.13
php5-snmp - 5.0.4-9.13
php4-unixODBC - 4.4.0-6.13
php4-exif - 4.4.0-6.13
php4-servlet - 4.4.0-6.13
php5-pear - 5.0.4-9.13
php5 - 5.0.4-9.13
apache2-mod_php4 - 4.4.0-6.13
apache2-mod_php5 - 5.0.4-9.13
php5-mbstring - 5.0.4-9.13
php4-fastcgi - 4.4.0-6.13
openSUSE 10.1:
i586:
php5-gd - 5.1.2-29.4
apache2-mod_php5 - 5.1.2-29.4
php5 - 5.1.2-29.4
SUSE LINUX Enterprise Server 8:
s390x:
mod_php4 - 4.2.2-515
mod_php4-core - 4.2.2-515
mod_php4-devel - 4.2.2-515
mod_php4-servlet - 4.2.2-515
mod_php4 - 4.2.2-512
mod_php4-core - 4.2.2-512
mod_php4-devel - 4.2.2-512
mod_php4-servlet - 4.2.2-512
openSUSE 9.2:
i586:
php4-fastcgi - 4.3.8-8.26
php4-gd - 4.3.8-8.26
php4-sysvshm - 4.3.8-8.26
php4-devel - 4.3.8-8.26
php4-exif - 4.3.8-8.26
php4 - 4.3.8-8.26
apache2-mod_php4 - 4.3.8-8.26
php4-session - 4.3.8-8.26
mod_php4-servlet - 4.3.8-8.26
php4-pear - 4.3.8-8.26
php4-mbstring - 4.3.8-8.26
Novell Open Enterprise Server (OES), SUSE Linux Enterprise Server 9, Novell Linux Point of Service 9:
x86_64:
apache-mod_php4 - 4.3.4-43.69
apache2-mod_php4 - 4.3.4-43.69
mod_php4-core - 4.3.4-43.69
mod_php4-servlet - 4.3.4-43.69
php4 - 4.3.4-43.69
php4-curl - 4.3.4-43.69
php4-devel - 4.3.4-43.69
php4-exif - 4.3.4-43.69
php4-fastcgi - 4.3.4-43.69
php4-gd - 4.3.4-43.69
php4-imap - 4.3.4-43.69
php4-mbstring - 4.3.4-43.69
php4-mysql - 4.3.4-43.69
php4-pear - 4.3.4-43.69
php4-pgsql - 4.3.4-43.69
php4-recode - 4.3.4-43.69
php4-servlet - 4.3.4-43.69
php4-session - 4.3.4-43.69
php4-sysvshm - 4.3.4-43.69
php4-wddx - 4.3.4-43.69
apache-mod_php4 - 4.3.4-43.66
apache2-mod_php4 - 4.3.4-43.66
mod_php4-core - 4.3.4-43.66
mod_php4-servlet - 4.3.4-43.66
php4 - 4.3.4-43.66
php4-curl - 4.3.4-43.66
php4-devel - 4.3.4-43.66
php4-exif - 4.3.4-43.66
php4-fastcgi - 4.3.4-43.66
php4-gd - 4.3.4-43.66
php4-imap - 4.3.4-43.66
php4-mbstring - 4.3.4-43.66
php4-mysql - 4.3.4-43.66
php4-pear - 4.3.4-43.66
php4-pgsql - 4.3.4-43.66
php4-recode - 4.3.4-43.66
php4-servlet - 4.3.4-43.66
php4-session - 4.3.4-43.66
php4-sysvshm - 4.3.4-43.66
php4-wddx - 4.3.4-43.66
openSUSE 9.1:
i586:
php4 - 4.3.4-43.58
php4-imap - 4.3.4-43.58
php4-session - 4.3.4-43.58
php4-wddx - 4.3.4-43.58
apache2-mod_php4 - 4.3.4-43.58
mod_php4-core - 4.3.4-43.58
php4-gd - 4.3.4-43.58
php4-sysvshm - 4.3.4-43.58
php4-devel - 4.3.4-43.58
php4-fastcgi - 4.3.4-43.58
php4-servlet - 4.3.4-43.58
php4-mysql - 4.3.4-43.58
php4-exif - 4.3.4-43.58
php4-mbstring - 4.3.4-43.58
php4-recode - 4.3.4-43.58
php4-pear - 4.3.4-43.58
mod_php4-servlet - 4.3.4-43.58
openSUSE 9.3:
i586:
php5-mysqli - 5.0.3-14.23
apache2-mod_php5 - 5.0.3-14.23
php5-devel - 5.0.3-14.23
php4-sysvshm - 4.3.10-14.23
php4-session - 4.3.10-14.23
php4-pear - 4.3.10-14.23
php5-fastcgi - 5.0.3-14.23
php4 - 4.3.10-14.23
php4-fastcgi - 4.3.10-14.23
php4-exif - 4.3.10-14.23
php5-sysvmsg - 5.0.3-14.23
php5-mbstring - 5.0.3-14.23
php5-pear - 5.0.3-14.23
php4-gd - 4.3.10-14.23
php5 - 5.0.3-14.23
apache2-mod_php4 - 4.3.10-14.23
php4-mbstring - 4.3.10-14.23
php5-exif - 5.0.3-14.23
php5-sysvshm - 5.0.3-14.23
php5-gd - 5.0.3-14.23
php4-devel - 4.3.10-14.23
mod_php4-servlet - 4.3.10-14.23
SUSE Linux Enterprise Server 9:
s390x:
apache-mod_php4 - 4.3.4-43.69
apache2-mod_php4 - 4.3.4-43.69
mod_php4-core - 4.3.4-43.69
mod_php4-servlet - 4.3.4-43.69
php4 - 4.3.4-43.69
php4-curl - 4.3.4-43.69
php4-devel - 4.3.4-43.69
php4-exif - 4.3.4-43.69
php4-fastcgi - 4.3.4-43.69
php4-gd - 4.3.4-43.69
php4-imap - 4.3.4-43.69
php4-mbstring - 4.3.4-43.69
php4-mysql - 4.3.4-43.69
php4-pear - 4.3.4-43.69
php4-pgsql - 4.3.4-43.69
php4-recode - 4.3.4-43.69
php4-servlet - 4.3.4-43.69
php4-session - 4.3.4-43.69
php4-sysvshm - 4.3.4-43.69
php4-wddx - 4.3.4-43.69
apache-mod_php4 - 4.3.4-43.66
apache2-mod_php4 - 4.3.4-43.66
mod_php4-core - 4.3.4-43.66
mod_php4-servlet - 4.3.4-43.66
php4 - 4.3.4-43.66
php4-curl - 4.3.4-43.66
php4-devel - 4.3.4-43.66
php4-exif - 4.3.4-43.66
php4-fastcgi - 4.3.4-43.66
php4-gd - 4.3.4-43.66
php4-imap - 4.3.4-43.66
php4-mbstring - 4.3.4-43.66
php4-mysql - 4.3.4-43.66
php4-pear - 4.3.4-43.66
php4-pgsql - 4.3.4-43.66
php4-recode - 4.3.4-43.66
php4-servlet - 4.3.4-43.66
php4-session - 4.3.4-43.66
php4-sysvshm - 4.3.4-43.66
php4-wddx - 4.3.4-43.66
SUSE LINUX Standard Server 8, SUSE LINUX Enterprise Server 8, SUSE LINUX Openexchange Server 4.0, SUSE LINUX Retail Solution 8:
x86_64:
mod_php4 - 4.2.2-515
mod_php4-core - 4.2.2-515
mod_php4-devel - 4.2.2-515
mod_php4-servlet - 4.2.2-515
mod_php4 - 4.2.2-512
mod_php4-core - 4.2.2-512
mod_php4-devel - 4.2.2-512
mod_php4-servlet - 4.2.2-512

https://www.suse.com/support/security/advisories/2006_31_php.html

Источник: CVE
Наименование: CVE-2006-2906
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2906

Источник: CVE
Наименование: CVE-2006-2657
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2657

Источник: CVE
Наименование: CVE-2006-1990
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1990

Источник: CVE
Наименование: CVE-2006-1991
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1991