Bug 141135

Summary: CAN-2004-1018 Multiple issues in PHP (CAN-2004-1019 CAN-2004-1020)
Product: [Fedora] Fedora Reporter: Josh Bressers <bressers>
Component: phpAssignee: Joe Orton <jorton>
Status: CLOSED ERRATA QA Contact:
Severity: high Docs Contact:
Priority: medium    
Version: 3CC: eric.eisenhart, mattdm, security-response-team
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard: impact=important,public=20051215
Fixed In Version: 4.3.10-3.2 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2004-12-21 22:20:47 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Comment 3 Mark J. Cox 2004-12-15 21:59:20 UTC
See http://www.hardened-php.net/advisories/012004.txt for issues
affected PHP

Comment 4 Matthew Miller 2004-12-16 02:25:13 UTC
For the record, looks like this affects FC2 as well.

Comment 5 Robert Scheck 2004-12-16 14:48:13 UTC
PHP 4.3.10 fixes this issues (and a few minor problems), see: 
http://www.php.net/ChangeLog-4.php#4.3.10

Comment 6 Matthew Miller 2004-12-21 16:32:42 UTC
Any word on an update here? It's apparently being exploited in real life.

(I see that a RHEL update is in the works in bug #141132....)

Comment 7 Joe Orton 2004-12-21 18:52:55 UTC
It's being pushed right now.

Comment 8 Matthew Miller 2004-12-21 19:06:21 UTC
Excellent; thank you.