php54-php-5.4.40-4.AXS4

エラータID: AXSA:2016-620:01

リリース日: 
2016/08/12 Friday - 06:27
題名: 
php54-php-5.4.40-4.AXS4
影響のあるチャネル: 
Asianux Server 4 for x86_64
Severity: 
Moderate
Description: 

[修正内容]
以下項目について対処しました。

[Security Fix]
- PHP は、RFC 3875 section 4.1.18 の名前空間のコンフリクト処理を試みておらず、その結果、HTTP_PROXY 環境変数の信頼できないクライントデータから、アプリケーションを保護しないため、HTTP リクエストの巧妙に細工された Proxy ヘッダーによって、リモートの攻撃者がアプリケーションのアウトバウンド HTTP トラフィックを、任意のプロキシサーバにリダイレクトする可能性のある脆弱性があります。(CVE-2016-5385)

一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2016-5385
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. php54-php-5.4.40-4.AXS4.src.rpm
    MD5: aa22f33fb20225f0198f7bc7a8a7da70
    SHA-256: d08a53c77015e1c3001f0d575c822b56fde3cf14c0b031211dce994eabfd1021
    Size: 11.79 MB

Asianux Server 4 for x86_64
  1. php54-php-5.4.40-4.AXS4.x86_64.rpm
    MD5: 9bdfb3b1dc32b70d83e2b6932a4b0a3e
    SHA-256: a71dcbcf7573cfedfe6e568a79afbc2f0f1165642cd28d61425afdb57511f348
    Size: 1.34 MB
  2. php54-php-bcmath-5.4.40-4.AXS4.x86_64.rpm
    MD5: ab1e15331a1cc546c9fa4f542e5c3e61
    SHA-256: 1630e1862f80d5133b655c229254b7080f5e00496243c99ca85e09d48dafb3a9
    Size: 52.56 kB
  3. php54-php-cli-5.4.40-4.AXS4.x86_64.rpm
    MD5: 0709cf942ca191b10ba8d5dedd55dc1b
    SHA-256: 4c2f668f1add8e229674ab006b6219f883183f113a0a8892d383463b0f5541b9
    Size: 2.60 MB
  4. php54-php-common-5.4.40-4.AXS4.x86_64.rpm
    MD5: f22460006f805b209a35c0197d6f7348
    SHA-256: 553a17d88c8715394794bf54fe06aa86900ccc71f995c0838a0c3b8ea8eebc39
    Size: 594.37 kB
  5. php54-php-dba-5.4.40-4.AXS4.x86_64.rpm
    MD5: 192de3437a3f7f36b2c68d5d0cbdc945
    SHA-256: aed98345ba46d5e21025f1a0bad823a2d5a6e1af90447656a8352106c3ec0e5a
    Size: 49.24 kB
  6. php54-php-devel-5.4.40-4.AXS4.x86_64.rpm
    MD5: 373c6cde1712d5ca3294c5712761db18
    SHA-256: 404c55b8e16545acf5ea89b971633e9fecef6c5e6d4854abc1464f1ef7602a9e
    Size: 640.20 kB
  7. php54-php-enchant-5.4.40-4.AXS4.x86_64.rpm
    MD5: 7f4a821a87f40501a4fca1065c9dc765
    SHA-256: 5ec0d505c3cb3c92547ac941e3be86fe4e95ded0f617c2efd1c36ab4ddb6d8a2
    Size: 37.41 kB
  8. php54-php-fpm-5.4.40-4.AXS4.x86_64.rpm
    MD5: fb9edc8840e0eccdc6a7c311e84d3822
    SHA-256: e09d642a2f4fc76c3a8758e0c0f4a58cbdc94f5cf642d7480daa2f53fa149135
    Size: 1.34 MB
  9. php54-php-gd-5.4.40-4.AXS4.x86_64.rpm
    MD5: 252d388198d004f7e921d6ec5c038351
    SHA-256: b818cd2a5bb543e877a1c5f6a223e448f02ffca0b2e77eda372a88a3cc68938c
    Size: 118.24 kB
  10. php54-php-imap-5.4.40-4.AXS4.x86_64.rpm
    MD5: f224eca124b93768d7e06ad093c3e9d7
    SHA-256: 5bbc4def9b7a8ceba87c5f16325e6f6eeb60e2a3450faf49cabe60f7d3436d3c
    Size: 58.92 kB
  11. php54-php-intl-5.4.40-4.AXS4.x86_64.rpm
    MD5: b561555126925a5aa3ea6d798138c247
    SHA-256: d2de42b0195bb4ac39f814c7f19b408d5e8d8e364b8deb67a77b817740fbf20d
    Size: 88.07 kB
  12. php54-php-ldap-5.4.40-4.AXS4.x86_64.rpm
    MD5: 0b8e805ad809df9e42ee251dbd00bc64
    SHA-256: 906ec295704f67ddb6d79e8ee2b235049d6820591c3fb8f09b5c89de9a6d05c2
    Size: 49.36 kB
  13. php54-php-mbstring-5.4.40-4.AXS4.x86_64.rpm
    MD5: c0a2b8c18d9cc1d52aa7c8cb82f85fd6
    SHA-256: 70dd65f79f6c41bfcf286ff36ae2a165ec919a59aa114389cc46b94972f24698
    Size: 491.34 kB
  14. php54-php-mysqlnd-5.4.40-4.AXS4.x86_64.rpm
    MD5: 9d9ee0635122805c6bd82a8f4668854d
    SHA-256: d86362eab44b060c9f16b44b16955b1f502a2b16e39a3dec12a8b25706f1cce8
    Size: 1.83 MB
  15. php54-php-odbc-5.4.40-4.AXS4.x86_64.rpm
    MD5: 9e6f6445085b5ad24452a41a93d7542d
    SHA-256: 9e9708869cb0ee0fda9ae5594f90542e5166bb02fe551f06cb1cb35e50a4d43b
    Size: 59.32 kB
  16. php54-php-pdo-5.4.40-4.AXS4.x86_64.rpm
    MD5: 68725aeacebb3ac11b41f557a352b1c1
    SHA-256: f056dda5cdd75829fd70d9870dc69be75d6d47031952d76c74e50fa185ae8476
    Size: 85.19 kB
  17. php54-php-pgsql-5.4.40-4.AXS4.x86_64.rpm
    MD5: 80571f1c200e50f46e772fd3291264eb
    SHA-256: 03bbd5d139ed129933f5fe9bff7799adfbe4d97b8cc97088b628c100ba8691bd
    Size: 79.89 kB
  18. php54-php-process-5.4.40-4.AXS4.x86_64.rpm
    MD5: 6143c2d6734d25e221c7451713694d61
    SHA-256: aee2a20ae4205785796d1f35545e30c2c7d5991438181f632d3f049ca9422eea
    Size: 47.92 kB
  19. php54-php-pspell-5.4.40-4.AXS4.x86_64.rpm
    MD5: f3963389e6849d507031723a3a2a15f2
    SHA-256: e40a067fe5972ff15b4c0e69d301b85c12af10c67f40174a2f891515fce8ea17
    Size: 36.84 kB
  20. php54-php-recode-5.4.40-4.AXS4.x86_64.rpm
    MD5: 5d6c02bd5f1cb8d5a01fcab382fbf68a
    SHA-256: 8d6c90d2aa942a94a5c33b93476d5020f5e9ef41c3e16e65dd0a9b697aca70d0
    Size: 33.86 kB
  21. php54-php-snmp-5.4.40-4.AXS4.x86_64.rpm
    MD5: 0e5ac37626101a0f7c0379a3034fc485
    SHA-256: db851cec933d62d834cc73fcd0aff980df822cc6bc5fb8429918b3a555261d0f
    Size: 47.48 kB
  22. php54-php-soap-5.4.40-4.AXS4.x86_64.rpm
    MD5: 57c9e51411d13d5c04dd57f591e35a1c
    SHA-256: c730438faadf15e09dc39966cb4cc7437a8504e6c0507a03b12fdd663d41840f
    Size: 149.85 kB
  23. php54-php-tidy-5.4.40-4.AXS4.x86_64.rpm
    MD5: e4f909a4186602da7b570fea31dfcb95
    SHA-256: 4a0a752482a832bb6141740dd5ebf7dddc5745a2e1b1d322ffc186c9789e24bd
    Size: 44.86 kB
  24. php54-php-xml-5.4.40-4.AXS4.x86_64.rpm
    MD5: a2e8b57e5ec738f0315394f63fb23693
    SHA-256: 38503f3c3938dea89c568e482ad2d650e14f95c0539519df3e061e6929946673
    Size: 112.61 kB
  25. php54-php-xmlrpc-5.4.40-4.AXS4.x86_64.rpm
    MD5: 25473fdf251c4eb57b9515ed8b1c8d5c
    SHA-256: df5a73ae2b4efcf0537e84307b4fb0e36eea339fe738c8e55d435903f6601a56
    Size: 61.14 kB