Bug 141135 - CAN-2004-1018 Multiple issues in PHP (CAN-2004-1019 CAN-2004-1020)
Summary: CAN-2004-1018 Multiple issues in PHP (CAN-2004-1019 CAN-2004-1020)
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: php
Version: 3
Hardware: All
OS: Linux
medium
high
Target Milestone: ---
Assignee: Joe Orton
QA Contact:
URL:
Whiteboard: impact=important,public=20051215
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2004-11-29 15:54 UTC by Josh Bressers
Modified: 2007-11-30 22:10 UTC (History)
3 users (show)

Fixed In Version: 4.3.10-3.2
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2004-12-21 22:20:47 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Comment 3 Mark J. Cox 2004-12-15 21:59:20 UTC 
See http://www.hardened-php.net/advisories/012004.txt for issues
affected PHP
Comment 4 Matthew Miller 2004-12-16 02:25:13 UTC 
For the record, looks like this affects FC2 as well.
Comment 5 Robert Scheck 2004-12-16 14:48:13 UTC 
PHP 4.3.10 fixes this issues (and a few minor problems), see: 
http://www.php.net/ChangeLog-4.php#4.3.10
Comment 6 Matthew Miller 2004-12-21 16:32:42 UTC 
Any word on an update here? It's apparently being exploited in real life.

(I see that a RHEL update is in the works in bug #141132....)
Comment 7 Joe Orton 2004-12-21 18:52:55 UTC 
It's being pushed right now.
Comment 8 Matthew Miller 2004-12-21 19:06:21 UTC 
Excellent; thank you.
Comment 9 Joe Orton 2004-12-21 22:20:47 UTC 
http://www.redhat.com/archives/fedora-announce-list/2004-December/msg00091.html
Note You need to log in before you can comment on or make changes to this bug.