Уведомление безопасности SUSE-SU-2014:1141-1

Высокая (5.1)

(AV:N/AC:H/Au:N/C:P/I:P/A:P)

SUSE

apache2-mod_php53 (any) php53 (any) php53-bcmath (any) php53-bz2 (any) php53-calendar (any) php53-ctype (any) php53-curl (any) php53-dba (any) php53-devel (any) php53-dom (any) php53-exif (any) php53-fastcgi (any) php53-fileinfo (any) php53-ftp (any) php53-gd (any) php53-gettext (any) php53-gmp (any) php53-iconv (any) php53-imap (any) php53-intl (any) php53-json (any) php53-ldap (any) php53-mbstring (any) php53-mcrypt (any) php53-mysql (any) php53-odbc (any) php53-openssl (any) php53-pcntl (any) php53-pdo (any) php53-pear (any) php53-pgsql (any) php53-posix (any) php53-pspell (any) php53-readline (any) php53-shmop (any) php53-snmp (any) php53-soap (any) php53-sockets (any) php53-sqlite (any) php53-suhosin (any) php53-sysvmsg (any) php53-sysvsem (any) php53-sysvshm (any) php53-tidy (any) php53-tokenizer (any) php53-wddx (any) php53-xmlreader (any) php53-xmlrpc (any) php53-xmlwriter (any) php53-xsl (any) php53-zip (any) php53-zlib (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Software Development Kit 11 SP3, SUSE Linux Enterprise Server 11 SP3, SUSE Linux Enterprise Server 11 SP3 for VMware

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 11 SP3:
i586, ia64, ppc64, s390x, x86_64:
php53-sockets - 5.3.17-0.29.1
php53-posix - 5.3.17-0.29.1
php53-readline - 5.3.17-0.29.1
php53-tidy - 5.3.17-0.29.1
php53-sqlite - 5.3.17-0.29.1
php53-imap - 5.3.17-0.29.1
php53-devel - 5.3.17-0.29.1
SUSE Linux Enterprise Server 11 SP3:
i586, ia64, ppc64, s390x, x86_64:
php53-gettext - 5.3.17-0.29.1
php53-mcrypt - 5.3.17-0.29.1
php53-tokenizer - 5.3.17-0.29.1
php53-ldap - 5.3.17-0.29.1
php53-xmlrpc - 5.3.17-0.29.1
php53-sysvmsg - 5.3.17-0.29.1
php53-pear - 5.3.17-0.29.1
php53-bcmath - 5.3.17-0.29.1
php53-snmp - 5.3.17-0.29.1
php53-xmlreader - 5.3.17-0.29.1
php53-wddx - 5.3.17-0.29.1
php53-curl - 5.3.17-0.29.1
php53-intl - 5.3.17-0.29.1
php53-zlib - 5.3.17-0.29.1
php53-fileinfo - 5.3.17-0.29.1
php53-dba - 5.3.17-0.29.1
php53-odbc - 5.3.17-0.29.1
php53-shmop - 5.3.17-0.29.1
php53-exif - 5.3.17-0.29.1
php53-ctype - 5.3.17-0.29.1
php53-suhosin - 5.3.17-0.29.1
php53-gd - 5.3.17-0.29.1
php53-gmp - 5.3.17-0.29.1
php53-zip - 5.3.17-0.29.1
php53-pcntl - 5.3.17-0.29.1
php53-ftp - 5.3.17-0.29.1
php53-mbstring - 5.3.17-0.29.1
php53-dom - 5.3.17-0.29.1
php53-xmlwriter - 5.3.17-0.29.1
php53-sysvshm - 5.3.17-0.29.1
php53-bz2 - 5.3.17-0.29.1
php53-soap - 5.3.17-0.29.1
php53-iconv - 5.3.17-0.29.1
php53-sysvsem - 5.3.17-0.29.1
apache2-mod_php53 - 5.3.17-0.29.1
php53-openssl - 5.3.17-0.29.1
php53 - 5.3.17-0.29.1
php53-fastcgi - 5.3.17-0.29.1
php53-pgsql - 5.3.17-0.29.1
php53-pspell - 5.3.17-0.29.1
php53-pdo - 5.3.17-0.29.1
php53-mysql - 5.3.17-0.29.1
php53-calendar - 5.3.17-0.29.1
php53-xsl - 5.3.17-0.29.1
php53-json - 5.3.17-0.29.1
SUSE Linux Enterprise Server 11 SP3 for VMware:
i586, x86_64:
php53-gettext - 5.3.17-0.29.1
php53-mcrypt - 5.3.17-0.29.1
php53-tokenizer - 5.3.17-0.29.1
php53-ldap - 5.3.17-0.29.1
php53-xmlrpc - 5.3.17-0.29.1
php53-sysvmsg - 5.3.17-0.29.1
php53-pear - 5.3.17-0.29.1
php53-bcmath - 5.3.17-0.29.1
php53-snmp - 5.3.17-0.29.1
php53-xmlreader - 5.3.17-0.29.1
php53-wddx - 5.3.17-0.29.1
php53-curl - 5.3.17-0.29.1
php53-intl - 5.3.17-0.29.1
php53-zlib - 5.3.17-0.29.1
php53-fileinfo - 5.3.17-0.29.1
php53-dba - 5.3.17-0.29.1
php53-odbc - 5.3.17-0.29.1
php53-shmop - 5.3.17-0.29.1
php53-exif - 5.3.17-0.29.1
php53-ctype - 5.3.17-0.29.1
php53-suhosin - 5.3.17-0.29.1
php53-gd - 5.3.17-0.29.1
php53-gmp - 5.3.17-0.29.1
php53-zip - 5.3.17-0.29.1
php53-pcntl - 5.3.17-0.29.1
php53-ftp - 5.3.17-0.29.1
php53-mbstring - 5.3.17-0.29.1
php53-dom - 5.3.17-0.29.1
php53-xmlwriter - 5.3.17-0.29.1
php53-sysvshm - 5.3.17-0.29.1
php53-bz2 - 5.3.17-0.29.1
php53-soap - 5.3.17-0.29.1
php53-iconv - 5.3.17-0.29.1
php53-sysvsem - 5.3.17-0.29.1
apache2-mod_php53 - 5.3.17-0.29.1
php53-openssl - 5.3.17-0.29.1
php53 - 5.3.17-0.29.1
php53-fastcgi - 5.3.17-0.29.1
php53-pgsql - 5.3.17-0.29.1
php53-pspell - 5.3.17-0.29.1
php53-pdo - 5.3.17-0.29.1
php53-mysql - 5.3.17-0.29.1
php53-calendar - 5.3.17-0.29.1
php53-xsl - 5.3.17-0.29.1
php53-json - 5.3.17-0.29.1

http://lists.suse.com/pipermail/sle-security-updates/2014-September/001007.html
https://bugzilla.novell.com/893849
https://bugzilla.novell.com/893853
http://download.suse.com/patch/finder/?keywords=621d50e26255ed12216a26f9f0d6e45c

Источник: CVE
Наименование: CVE-2014-4049
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049

Источник: CVE
Наименование: CVE-2014-5459
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5459