php55-php-5.5.21-5.AXS4

エラータID: AXSA:2016-625:01

リリース日: 
2016/08/12 Friday - 15:52
題名: 
php55-php-5.5.21-5.AXS4
影響のあるチャネル: 
Asianux Server 4 for x86_64
Severity: 
Moderate
Description: 

[修正内容]
以下項目について対処しました。

[Security Fix]
- PHP は、RFC 3875 section 4.1.18 の名前空間のコンフリクト処理を試みておらず、その結果、HTTP_PROXY 環境変数の信頼できないクライントデータから、アプリケーションを保護しないため、HTTP リクエストの巧妙に細工された Proxy ヘッダーによって、リモートの攻撃者がアプリケーションのアウトバウンド HTTP トラフィックを、任意のプロキシサーバにリダイレクトする可能性のある脆弱性があります。(CVE-2016-5385)

一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2016-5385
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. php55-php-5.5.21-5.AXS4.src.rpm
    MD5: 565ef29e039c6ded09110f7f190680c8
    SHA-256: 47932f8b4e2cf7f8b0d3a851a7ca0fae43b0c6272b68e69cb1f65b7ed6d7faba
    Size: 10.72 MB

Asianux Server 4 for x86_64
  1. php55-php-5.5.21-5.AXS4.x86_64.rpm
    MD5: a6921dc72395ca7a76b6c088d6dca918
    SHA-256: 8f0ebdf4286eba20507932db112a80e38575611e7bb460ea447df486322f8f45
    Size: 1.27 MB
  2. php55-php-bcmath-5.5.21-5.AXS4.x86_64.rpm
    MD5: 7fd89f440b91edd3c4ae5c87a736f8af
    SHA-256: f7387990f66967e84cc306acd1c4093442038b14c8088c0483dbb343584038ba
    Size: 54.74 kB
  3. php55-php-cli-5.5.21-5.AXS4.x86_64.rpm
    MD5: c45a0fc01c99c3c713d4dd3f999b4d99
    SHA-256: 2298b4a61caa6a9a3a4c1f858a3f74f0ebed64082e15b846076098637e5417aa
    Size: 2.47 MB
  4. php55-php-common-5.5.21-5.AXS4.x86_64.rpm
    MD5: 12aa15504570dfabdacf96a92290f48e
    SHA-256: fe3edc4a1ceb995dc69fc38b7103ab016b23dc7003f4a60d6b839fc438771b46
    Size: 689.68 kB
  5. php55-php-dba-5.5.21-5.AXS4.x86_64.rpm
    MD5: 2ad4a35ecb6d0140e1e54edc74a41ee4
    SHA-256: 15ab5877c33bcc572f3d2b4774047193b5a68512f095848af2299cf0a8927edd
    Size: 52.49 kB
  6. php55-php-devel-5.5.21-5.AXS4.x86_64.rpm
    MD5: ecd16ec7c520962597c0bc0a8d62274a
    SHA-256: 346cbd0b7e001af9edd776ffc473efce8a7495c9c1fb1e8ce32f925b461af609
    Size: 659.75 kB
  7. php55-php-enchant-5.5.21-5.AXS4.x86_64.rpm
    MD5: 39609e652a1fea2ee5e621d5b656c17f
    SHA-256: 33f79230acf7f2c13dbd92bf3c16c5b898f9712cf0f7cdae782114899f8664fc
    Size: 39.59 kB
  8. php55-php-fpm-5.5.21-5.AXS4.x86_64.rpm
    MD5: 030f149abd04b2a9a050046b47e98b89
    SHA-256: 51dd77cca7842b7027dceed1e73ff351bee4cbad0793d3f7a2d8fd88360924a8
    Size: 1.28 MB
  9. php55-php-gd-5.5.21-5.AXS4.x86_64.rpm
    MD5: 16020d1716cef0190c9e5b17df2f116c
    SHA-256: 51d21d1ed7c0cdd860ce9726f41c17bf3098f9ff73759f236a22dc266ce19497
    Size: 143.24 kB
  10. php55-php-gmp-5.5.21-5.AXS4.x86_64.rpm
    MD5: 725a1eeaec2704cae48ed1f5b4bf4ee4
    SHA-256: 8a0add7fcafaacc13aff703d263e78faa3639627f7abaff95caa7343c59553a6
    Size: 45.14 kB
  11. php55-php-imap-5.5.21-5.AXS4.x86_64.rpm
    MD5: e246f6a1cbacbf9d5aa5de84d94170dd
    SHA-256: 6f183073f6d5290dbae862a13e485423716b3a96939b1dfacb7e9d3fdf339e79
    Size: 60.88 kB
  12. php55-php-intl-5.5.21-5.AXS4.x86_64.rpm
    MD5: bf7f7848c718521fedf239baadb076bb
    SHA-256: 115835eed93f6c109fe6f806be44118683e68e1c2b646ddc846cd9eaba6e01d2
    Size: 136.15 kB
  13. php55-php-ldap-5.5.21-5.AXS4.x86_64.rpm
    MD5: fb623bfa352ae0edfd8ba49f541d3b4d
    SHA-256: 264d2b317d1df8723be467c94dc0ea66cc9c56eafa76b7abca1d3458d6b29776
    Size: 51.53 kB
  14. php55-php-mbstring-5.5.21-5.AXS4.x86_64.rpm
    MD5: 2fda997aadbf156cdd2a06253e69441e
    SHA-256: 43996ff03fcdb627e77dce14ed2f16214b74e5e6fc654a7806682a8162c7593c
    Size: 505.52 kB
  15. php55-php-mysqlnd-5.5.21-5.AXS4.x86_64.rpm
    MD5: 8b26660441262fd8de4a50997be30e77
    SHA-256: 8d64bb8be854c1ca0c28b61399875ffdc60e9102c2b0439ac2c0cad63264034c
    Size: 1.84 MB
  16. php55-php-odbc-5.5.21-5.AXS4.x86_64.rpm
    MD5: 1994d3ad0cc4f6c44a51f5b9def466a2
    SHA-256: 24935928be5c70ae6216e1e152d71080a144437b5b05b8fb425201e45dad5ea7
    Size: 61.50 kB
  17. php55-php-opcache-5.5.21-5.AXS4.x86_64.rpm
    MD5: d038a3047c9269ca71bcbbf86e92aba2
    SHA-256: ae702841933676d6769d50299d1fc84a2f4dc5d382dd5f5748eb2bdb0a14a4d2
    Size: 87.39 kB
  18. php55-php-pdo-5.5.21-5.AXS4.x86_64.rpm
    MD5: bc3b7b1076a834384f5a995010f27355
    SHA-256: 8e485a300c3b6b668c8bd4eb7661758f3d2ed43c5d9456491d7f5228279de0a0
    Size: 87.37 kB
  19. php55-php-pgsql-5.5.21-5.AXS4.x86_64.rpm
    MD5: 7ef8c12000e3cd5586e3af62d378b187
    SHA-256: e052a131d659184bb09870f9323e927e775cfb5b8c17d4ea72fcba1139b1e236
    Size: 82.28 kB
  20. php55-php-process-5.5.21-5.AXS4.x86_64.rpm
    MD5: 55296e7f0ee362d202dde516e922b099
    SHA-256: d6c2f00b3b5e3777cec8bd8d750cb5a4cf2ed486afd9a4453601dfa32d92d070
    Size: 52.59 kB
  21. php55-php-pspell-5.5.21-5.AXS4.x86_64.rpm
    MD5: 87ec61d08b409d4fcd9ba6f868959ea3
    SHA-256: 224ecaa748619d1c71b4d382300fb454daa6ce9edffb5e4a8fd24b44a44c274a
    Size: 39.02 kB
  22. php55-php-recode-5.5.21-5.AXS4.x86_64.rpm
    MD5: 542d153230eb81d62e7ee1fd129e44c1
    SHA-256: 72050cdca2dd242bd3606a45f986da0b7db8931cf3cac144e3e49a9f0097757b
    Size: 36.04 kB
  23. php55-php-snmp-5.5.21-5.AXS4.x86_64.rpm
    MD5: fb00df491a219cfdeb9fac34ae903c4e
    SHA-256: b7b6875fbd65ddcb45d5b6c2b9bc210fc2a039d2757350cc1cbf3a1280537a0c
    Size: 49.66 kB
  24. php55-php-soap-5.5.21-5.AXS4.x86_64.rpm
    MD5: 4f64b8040ef2691a4c25e34f32db6192
    SHA-256: 9a710c284f42a78bd4572e490da8e3e7ebe816bcea326fa172a0bb0cb5e110ce
    Size: 152.41 kB
  25. php55-php-tidy-5.5.21-5.AXS4.x86_64.rpm
    MD5: beba67b2e02436ba8ad3ac1cfee05cb2
    SHA-256: af61a0179e846f32ae96995f8febe63ecc8cf61f919a06a3a5c736abff9fddef
    Size: 47.04 kB
  26. php55-php-xml-5.5.21-5.AXS4.x86_64.rpm
    MD5: e3c5768045cde4a05ffd32470e81b753
    SHA-256: 99e0adbc59508fc4c9464db6c52ff6057d67a229e02762f41d5dc7fadd577bac
    Size: 142.59 kB
  27. php55-php-xmlrpc-5.5.21-5.AXS4.x86_64.rpm
    MD5: 07a4cbfd0ff2dd27f971fee0017695d3
    SHA-256: 123a78acb1e8e936ab6f35a565ec2ca3b118e96b52fd41b5da966516ecb1c7e2
    Size: 63.34 kB