php-5.1.6-27.5.0.2.AXS3

エラータID: AXSA:2012-178:02

リリース日: 
2012/02/20 Monday - 19:55
題名: 
php-5.1.6-27.5.0.2.AXS3
影響のあるチャネル: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

以下項目について対処しました。<br /><br />
<br /><br />
[Security Fix]<br /><br />
- PHP の php_variables.c の php_register_variable_ex 関数には，大量の変数を含むリクエストによって，リモートの攻撃者が任意のコードを実行する脆弱性があります。なお，この脆弱性は CVE-2011-4885 の誤った修正によるものです。(CVE-2012-0830)<br /><br />
<br /><br />
一部CVEの翻訳文はJVNからの引用になります。<br /><br />
http://jvndb.jvn.jp/ <br /><br />

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2012-0830
The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885.


追加情報: 

N/A

ダウンロード: 

SRPMS
  1. php-5.1.6-27.5.0.2.AXS3.src.rpm
    MD5: af7b94fdc4e636c1213fff65b99bd24e
    SHA-256: 0ffa30bbf65416ddff88c098876ae79c74c274652dfee9d88f4914ea7ea02a8b
    Size: 8.08 MB

Asianux Server 3 for x86
  1. php-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: 4375cf9749f365217e33d9de7c2a5d7a
    SHA-256: 734d4ece1bf10f1e1b3fe970dbc6b107e9e6a6cb6c4f95ea79757cad7d5de504
    Size: 2.33 MB
  2. php-bcmath-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: f3ddf69e19fce5a9e5d43dcef7885032
    SHA-256: f0b094dd77252b70412d1ba321764c8c3c6f695bb6a4ffc09898ed2ab4e2ac95
    Size: 35.87 kB
  3. php-cli-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: 4969080d52d3d6338d57ab637278101c
    SHA-256: 8bc88f89849b5ab434920ef20942d25de74ed2fda721ec76ef5b731771ba00e2
    Size: 2.11 MB
  4. php-common-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: 0b9e2bfa7d56945294e2abd55927bbfe
    SHA-256: 6e31af6b8fb3f0cb657dab50aa9feb75a02ec2c579cedf4e558f685fda8e6188
    Size: 154.84 kB
  5. php-dba-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: c88e1431bd324b8cb9a08b79a02e8840
    SHA-256: 4f31bafffdc8fc50a6782c3f3461d9a1bb33eb1a684c122bc38b58845d502911
    Size: 42.87 kB
  6. php-devel-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: 21e5f8efce80a37de6fe5334c4a18f14
    SHA-256: 32afe3a6eaa0b47e39f81135403fd4cf0346aa0e854ba4257fe0e7514b60e028
    Size: 511.14 kB
  7. php-gd-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: c211a32a812025e77a6e7b14c5958512
    SHA-256: 141cbd9df2f34314d37eeb591f809e0fddbfab528e934362bcc3f79802a5ebfd
    Size: 118.77 kB
  8. php-imap-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: c1db8be481d452f07ecdb45f6689711e
    SHA-256: 3d4749177516c41430c24439bea52f194aaa0190103c800126fc1f5e3d8ed33a
    Size: 55.80 kB
  9. php-ldap-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: 51b8d1cecd8bfbd67f40a19648089d44
    SHA-256: 3f4b9af63111e96864b6880c0db45668053a51119160c122b195645c0bb56d3a
    Size: 38.25 kB
  10. php-mbstring-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: 948e2bd6bbf5e36f64fc62bb772306bd
    SHA-256: a5b905ef4f1e8da61d417beaa0d0a4990b6d83afc002558ad520e8dd92f90c84
    Size: 1.06 MB
  11. php-mysql-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: 732bf563449e224510b45ffeb95d428a
    SHA-256: d7534bc370d6c6d507f827372ba2ce32195b89785fa03bb8f443ca983a63f635
    Size: 87.48 kB
  12. php-ncurses-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: d773b9d9af948832a8a7f4b3c7db4950
    SHA-256: 2f5ef1a14f06d0ff155652fe462a77a09b660db7a895993fb8a9445b365dfe2f
    Size: 43.20 kB
  13. php-oci8-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: b250d665db2435055bba85d24e45fbeb
    SHA-256: 13a938135fbdd7856140f3309a2e1ee67979834d234235ee54ad4e3062ba11ac
    Size: 77.39 kB
  14. php-odbc-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: 8087cadbd26af1de2bcfabef0d7e8312
    SHA-256: d18d83d81ac42a8e902a95ce6bad746940f5c73fdb95551369a7eb550b27f230
    Size: 54.75 kB
  15. php-pdo-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: 7ef1051dd48accf7cf650f7b8c477e7b
    SHA-256: ac3dbdeea4530ddb01232dd990b80fa1937ec62258f0352a52d5accb1e04cd05
    Size: 66.32 kB
  16. php-pgsql-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: c8b3cf6ea3c4d151c55310953a14f585
    SHA-256: bbafe45f6a80ea8fb475626e373d8abeee21c1e67cc6bba62f6e3a288b71e1aa
    Size: 69.50 kB
  17. php-snmp-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: a1af122b6a318f21442456425d8daf04
    SHA-256: 0fd9f77be9022491b9955807eb8f3b1fc5ac0d067463286ef102dc01259d5e67
    Size: 31.35 kB
  18. php-soap-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: dc6d64a0731555d8fad7363eb6e961c4
    SHA-256: da55aa369c209d477859c4a80ad40b91d23b91bee41dbc38175581c22d221ad0
    Size: 138.10 kB
  19. php-xml-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: d1cb5c1df816595f8a018a1259948d4b
    SHA-256: 6ad78c7659feccb4166b63aa736a0de4581c354a3f285bffbb3d637697258974
    Size: 98.31 kB
  20. php-xmlrpc-5.1.6-27.5.0.2.AXS3.i386.rpm
    MD5: 6fe9375ac7e442371cdaf7a416b059bb
    SHA-256: d675ade22857f852a23f098de5cf1ce807814beb1ac4ce39bd814f94fe7299bd
    Size: 58.90 kB

Asianux Server 3 for x86_64
  1. php-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: 16a999ebb948b9ab8371466fc22ead7d
    SHA-256: 124c81cc91ded572f1fd96f1838c749f5ef665982aa7400a6b02eda722627337
    Size: 2.36 MB
  2. php-bcmath-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: ce954ff4147c570a07f18631b28b3e54
    SHA-256: 4afcb50ebc150994bc64caec950ae0657a0dbc378bdc694e4602003944a73e06
    Size: 36.18 kB
  3. php-cli-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: aae52cd9a3979459f62156024e51d730
    SHA-256: e2e57dc7fe50b009b6fbc6fab4f38b758a2c2d111f0fdadc54d4c0bb5ae9e298
    Size: 2.18 MB
  4. php-common-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: 738a46743b5734686815671326156ed2
    SHA-256: d8143822c0cd082e325d259568cbf0c8becd23edf4782d14a01f4ed32193a1ef
    Size: 155.23 kB
  5. php-dba-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: 598e1f60a7a971a5daefed4d04dd2e9c
    SHA-256: f33d5bd95bb24d5b8c6968fbb4f4d2728f3672ceca437c8cd60af8d935d65b04
    Size: 42.78 kB
  6. php-devel-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: 827dca48e87d8ce942d068920c9348fc
    SHA-256: 4f3268c3e675fad91473a6b8d346f42cd7a40c395bb55b63ec735e68b1560def
    Size: 511.03 kB
  7. php-gd-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: 3a16fa4744dbcf90df1dbce864da19a8
    SHA-256: b7389cbb8d79d14233541c4d58924b528e1a034ec2464ca3b46ffb57a21310fd
    Size: 118.93 kB
  8. php-imap-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: a602193bdc41b7b6b03e3f9b660bbb3e
    SHA-256: 01ce7087d9bdfe53bafe004cd16fe086c0f85943c02af03f9ee3d093ef2073c0
    Size: 56.20 kB
  9. php-ldap-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: 8aa4f490f40c9ba52302bd7f6fe767af
    SHA-256: 620f1144148b0b4c6e713ef6b0380a469943b3baac44a0a314a5abaaa04d8eca
    Size: 39.22 kB
  10. php-mbstring-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: c16f861e8ccd7da6b2725761c308b06a
    SHA-256: 703dc94de966ef76d14d94224de7a3f49ff27129048117e68f55bef818751750
    Size: 1.07 MB
  11. php-mysql-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: 776385fd4f21307e5e3f9bbbfb720167
    SHA-256: a056fd8ec8f234738cfc05f541ee36d4fb43cbc56fbb9792d731c3d51c534623
    Size: 90.94 kB
  12. php-ncurses-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: e2572a2e085c1c2f5975e6f26f69de55
    SHA-256: 5f80463bad30502aac25f98c42e8f71fcc135ca2d5240f970f665592f09ac226
    Size: 44.43 kB
  13. php-oci8-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: d60eb7c0e303809dfe72488977efb71c
    SHA-256: c2ccec41d5af5f1501afbab2ed65008db5feaaca2ad040718f45df7abf2dda5d
    Size: 79.93 kB
  14. php-odbc-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: a502789a76b7fd2ecfec2ffc54927abf
    SHA-256: 7ef86b8226c20479174136fe8beb5bc35cddfd1cd8ca8411b86cafddee9ed816
    Size: 55.70 kB
  15. php-pdo-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: a5490d979256a015545888954bebb751
    SHA-256: 3dd40e4190dac9f9002289dd7a7d237980afbb9b647db8c18f35084933d4cda1
    Size: 67.31 kB
  16. php-pgsql-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: ba6e2eb0e51f0a1484476693a4a20bc6
    SHA-256: d614b68684e9e5e0d0ba48ac59ea722cdcdf675be62eda90f8ce56bfa42fdfbd
    Size: 71.45 kB
  17. php-snmp-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: c27a88091d56e47aef1793fa7fc840f1
    SHA-256: de93c2ffc7f7483b0804741e06d9483ecf30e778161b0c123239e814068bf05d
    Size: 31.69 kB
  18. php-soap-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: 0fe0331a52468cb8039375620ccdb698
    SHA-256: d5fb5a77da485865b14d72fe826979ca1f304abf4fd93fdf0cdf768e576d6c88
    Size: 137.95 kB
  19. php-xml-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: 4b7963144074e4770456fe7a4343b31b
    SHA-256: 84ef5bc10d832754214810452e8c1db7bf2d7b922ee20d7c4503d57f8e1a95ca
    Size: 103.21 kB
  20. php-xmlrpc-5.1.6-27.5.0.2.AXS3.x86_64.rpm
    MD5: e7fe898a07bdd237ca393d3c52781ced
    SHA-256: 2f27bf0c180845da48237e416eacff219385cf8b36760bfe031da364857ed662
    Size: 58.76 kB