http://www.php.net/releases/5_2_4.php # Fixed size calculation in chunk_split() (Reported by Gerhard Wagner)
This issue was due to an incomplete fix for CVE-2007-2872 (CVE-2007-2872), which has not been applied in Red Hat Enterprise Linux v2-5, nor Red Hat Application Stack v1.
I'm also adding CVE-2007-4660 to this issue as there is some confusion surrounding CVE-2007-4660 and how it pertains to CVE-2007-4661. CVE-2007-2872 was partially fixed in upstream PHP 5.2.3, but the code remained vulnerable to attack. This remaining vulnerability was named CVE-2007-4661. While this was fixed upstream in PHP 5.2.4, it took two separate commits to fully fix it, resulting in (likely by mistake) two separate entries in the NEWS file, which resulted in CVE-2007-4660 being assigned to the second (arguably duplicate) CVE. Because the incomplete fix for CVE-2007-2872 had not been applied to PHP packages in Red Hat Enterprise Linux 2 through 5, nor Red Hat Application Stack v1, neither CVE-2007-4660 or CVE-2007-4661 are applicable. The fix provided for Red Hat Application Stack v2 corrected both CVEs, via RHSA-2007:0917: https://rhn.redhat.com/errata/RHSA-2007-0917.html