php-5.1.6-45.0.1.AXS3

エラータID: AXSA:2014-794:03

リリース日: 
2014/11/19 Wednesday - 13:00
題名: 
php-5.1.6-45.0.1.AXS3
影響のあるチャネル: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- PHP の ext/standard/var_unserializer.c の object_custom 関数には整数オーバーフローが存在し，大きい長さの値の計算のきっかけとなる unserialize 関数への引数によって，リモートの攻撃者がサービス拒否 (アプリケーションのクラッシュ) を引き起こす，あるいは任意のコードを実行する可能性のある脆弱性があります。(CVE-2014-3669)

- PHP の EXIF 拡張の exif.c の exif_ifd_make_value 関数は浮動小数点の配列上で誤って操作し，exif_thumbnail 関数によって不適切に処理される，TIFF サムネールデータを持つ巧妙に細工されたイメージによって，リモートの攻撃者がサービス拒否 (ヒープメモリの破壊とアプリケーションのクラッシュ) を引き起こす，あるいは任意のコードを実行する脆弱性があります。 (CVE-2014-3670)

現時点では CVE-2014-8626 の情報が公開されておりません。
CVE の情報が公開され次第情報をアップデートいたします。

一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2014-3669
Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an argument to the unserialize function that triggers calculation of a large length value.
CVE-2014-3670
The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted JPEG image with TIFF thumbnail data that is improperly handled by the exif_thumbnail function.
CVE-2014-8626
Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by including a timezone field in a date, leading to improper XML-RPC encoding.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. php-5.1.6-45.0.1.AXS3.src.rpm
    MD5: fd4fd7b8ebcce38f76c1660888486e29
    SHA-256: bfed8ab15eb47e2025d59a5012938eac0dfcc96682746dc410b318fee2769610
    Size: 8.10 MB

Asianux Server 3 for x86
  1. php-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 48c6768de57f068c92824d9c9f50bdd6
    SHA-256: 2592142ff7fe0a7c344deb1cca0278779272010c185158bc3da33564a656e0a0
    Size: 2.33 MB
  2. php-bcmath-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 4caf7458a68d6d9c399bd7b4d4174d99
    SHA-256: 899b71d15e699867b67220542e501f2b725d02615e74ee64e9a86fa2fa4429fa
    Size: 37.30 kB
  3. php-cli-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 19ab187e814524c81b28c3e58aeec05d
    SHA-256: 04f24a995c5ea61dcbd09a842f0afc28602133454862b00ff0246a27008aebcc
    Size: 2.12 MB
  4. php-common-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 2e8169a4a56c7a97212ba326b4329ee4
    SHA-256: f675f8e827f6fa29fd7ca8962212cbc4d6f8782626e1b40afb48cf43d60c3ef3
    Size: 155.52 kB
  5. php-dba-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 5bbf8c9b803a573e5b1b4802db947c4e
    SHA-256: ae5a48cfb0ddcb0e4742489d9c79e0c2d0c0ab782a3952ec444c2055bad1298f
    Size: 44.29 kB
  6. php-devel-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 17349e9777351816c0f63549b7abcf84
    SHA-256: 1045eab3396a0215bbb985b374e59e55461e9ea8053ab0f1e50cc28b489b524e
    Size: 506.47 kB
  7. php-gd-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 90738807e45bc2dd349c6b61c11642c1
    SHA-256: 0a2bc5cf48e5917ce397470ecdafa25669330fa7de6cc153078b8c6fc1b05996
    Size: 120.27 kB
  8. php-imap-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 844c8492b02aa4a7682a7e21d351f04d
    SHA-256: ab054a8262f29e29953ac182376d23c67a33a286d97174d7ba2081f6d879f72f
    Size: 57.50 kB
  9. php-ldap-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: c31000d1821e46e4961e49c4630aa52e
    SHA-256: 0393f17506de9d7d892c1d812958deb06a5348ec7bebc3b4c2fae6d4bb8b6fd2
    Size: 39.67 kB
  10. php-mbstring-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 316ef8d25448d92e86c5d671a8b82483
    SHA-256: 2ce7bcb93b7b5d5990f3538840619996da7dec5b1b67c2885149bf61229707ef
    Size: 1.06 MB
  11. php-mysql-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 52c6dd8624b4427fe336876d6517592b
    SHA-256: c758046ab23f7e630989bc1f01344a1ad9bf3d208ce0a6f1687e801b351cc220
    Size: 88.78 kB
  12. php-ncurses-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 3700ba433ee97dd64b85989abd4e553e
    SHA-256: d8a273a5702276d13b545573f789a0ac13874fee85d8a76584ad861cdb44c050
    Size: 44.63 kB
  13. php-oci8-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 014d599d2e96c83e1a3842e675122ea6
    SHA-256: eae5ef793b197a372e3eed3533f8451ec88f5f7eb3912fe609598bd64935ebe1
    Size: 78.73 kB
  14. php-odbc-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 0ffac231c5a08858ad464e1dd7156e10
    SHA-256: e174da14e662b476533c57a3503a1a50e4f03b7ff3e7e99ade7f241b9c1a07db
    Size: 56.17 kB
  15. php-pdo-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: eaff9970135b01881f7677323df62d8c
    SHA-256: e5501642796cf4448a5203ba522eda74dc630aad3be0809a70e970e1e30092b2
    Size: 67.69 kB
  16. php-pgsql-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 7f0058b98f7854fe08f976fe57f824b4
    SHA-256: 7c7ed1556c7501a56bdedccbd5d74d034e08666783396872d61d5b80bccdebd8
    Size: 70.89 kB
  17. php-snmp-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: dceea3fe5892b3d06e28af80b91ab33f
    SHA-256: d427a870cd8b3188d6e3af2648dc2e3eb085a14c7748a5cbbedf7005111e2435
    Size: 32.77 kB
  18. php-soap-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 4fa812ffdb5ee2da2da6299633b35980
    SHA-256: 0fe56d7d3d8b4cefa3c4a0e40c619a0413edc03afa5c4b4354e03e2441189481
    Size: 139.54 kB
  19. php-xml-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: e05079ce72b4d937e057c8400997abc1
    SHA-256: 4c12853611e726b6a47b7970880b2b2eb6ef8de5296265a28753efaae68953a2
    Size: 100.25 kB
  20. php-xmlrpc-5.1.6-45.0.1.AXS3.i386.rpm
    MD5: 2489c566d2cac873e8fc804605abbd70
    SHA-256: 050954245012e474fa19e1cfaae7f33bca52f882947d25f1a114047991c4dd6b
    Size: 60.39 kB

Asianux Server 3 for x86_64
  1. php-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: ee3ab7f8fdb1ceef9292190cd9d41c6c
    SHA-256: 045832d64fbfd48f626f3f6332bbf0f42f2de3d7459744591fe62a0b852e8871
    Size: 2.37 MB
  2. php-bcmath-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: 793db2d58dcc1b6aac6e8a00e4cab08d
    SHA-256: 7a6e2853a34fbf372924a6d273278d6a68e11e779fc419a69ec7bfcbe7819cc7
    Size: 37.60 kB
  3. php-cli-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: 44678930125271a13c0b9b75a03bf8c2
    SHA-256: 76e3dae1bcf2bb111bf74d45d0c239e4dcdb1f2247acfa5388faaac0c8a8102b
    Size: 2.19 MB
  4. php-common-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: 5350ba98e5cc74a6a1dc5cd1395e8f5d
    SHA-256: 59faaa71906ea3b056388aca2e9381fe89c4ea2e6c10078de8a75f0299f1c516
    Size: 155.92 kB
  5. php-dba-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: a6e10533d3cc9be0a976f57387a7a4f8
    SHA-256: 89bb720c2edab297ff96a18c60da4dcdc6195ae31f272d25cc4dcfc6d9a6a50e
    Size: 44.21 kB
  6. php-devel-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: eec565404aa8bd95a658a8c3dd1de48e
    SHA-256: 5981b922c9fcf28c046a8fdc43cf31c1aabf497e5b55200edbfa6f0fff86ce8d
    Size: 506.48 kB
  7. php-gd-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: db688857a36c09d81abf3b72f36e1fb1
    SHA-256: bc34ee647e8ea7e6c00617ee0fe2d5548dd960958b9299c8abbd9936b2b77622
    Size: 120.48 kB
  8. php-imap-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: 5f6f2cad273d7c83ec2c7c0d7fba275b
    SHA-256: a2fc60c90e066805bccf611923ad6fe08ef33da561eba99840d2b99ca7650a46
    Size: 57.98 kB
  9. php-ldap-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: e25c3f2ec88c929b1aff4196d945a2a7
    SHA-256: 3900227111dbbe35588aaaaf6caa59f81b10b0c20a593137901b0f6b51b884ac
    Size: 40.64 kB
  10. php-mbstring-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: b6bb7755beff3ca534b9ef46f037fff6
    SHA-256: 63fdf994e16ef4cfe3c3a006a9e38ee38077f75aa7c61c3e2e90b1b166dc8af4
    Size: 1.07 MB
  11. php-mysql-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: bcc98495d60f6b8205ccc2d75920966d
    SHA-256: 48699485f8ba42bb707bdf6b228d1b832a4c5ebc1472e5f641ab2ef7520a7886
    Size: 92.25 kB
  12. php-ncurses-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: c19cf8fca692935a86170504d459f4d6
    SHA-256: ea876d58fff28c479f9d7940e117337ab6b974010ddef65103a3e359d7df91b0
    Size: 45.85 kB
  13. php-oci8-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: a7ac97f89671b009cf748d71194f61f4
    SHA-256: 1e6e733e1d5f15c0743aea92cdfdb3e9665e9100fee5f9aa0882d6fbbfcdaa4e
    Size: 81.26 kB
  14. php-odbc-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: a1ea7c7e8826f02bf186c4c15249ebdc
    SHA-256: 3ec309272c5dc15e0aed15f6eea9ca5d764a6cff2209797b84bd63d9384d5318
    Size: 57.14 kB
  15. php-pdo-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: f3e016017a9f1d4005e5ead63b8590ce
    SHA-256: 6102894661f363aca5c97f95f4792554f5efadb059bf20eafd43735ba2b257ad
    Size: 68.67 kB
  16. php-pgsql-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: 949d5984909f5d1e9519cef4a0ed0966
    SHA-256: 3e485ae79a694026b72ed786f853f4121d1ffca2712df256fda7b3fd8ebb10d2
    Size: 72.86 kB
  17. php-snmp-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: be95cfa09c53ae08cb5955595b057958
    SHA-256: a9e465ff792eca3a39dc4f73c8eb7bddfec903ba13137d04b03b2d8674617163
    Size: 33.10 kB
  18. php-soap-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: a12b5406dd68ff25bf8a7d53d8a1fc0d
    SHA-256: ab799924a107d962e2a515606b58d3874742237207a8e29455efed53d31b2a35
    Size: 139.36 kB
  19. php-xml-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: ad20624e7cea9bf568f02d07ec5b1a87
    SHA-256: f6a4571a1654498418404f206c5e60c8a6cb5820f52bd87b170c35510069bba9
    Size: 105.09 kB
  20. php-xmlrpc-5.1.6-45.0.1.AXS3.x86_64.rpm
    MD5: dcda4456043de68fb81ea92737e9ee33
    SHA-256: 2fec4d2e68af30d37d24a87ae58b11c3d420449ac407fb4add72536979ce41cd
    Size: 60.23 kB