Scientific Linux 5.x: SLSA-2013:1813-1 Critical: PHP Memory Flaw

Date: Wed, 11 Dec 2013 15:58:48 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Critical: php53 and php on SL5.x,
 SL6.x i386/x86_64
MIME-Version: 1.0

Synopsis: Critical: php53 and php security update
Advisory ID: SLSA-2013:1813-1
Issue Date: 2013-12-11
CVE Numbers: CVE-2013-6420
--

A memory corruption flaw was found in the way the openssl_x509_parse()
function of the PHP openssl extension parsed X.509 certificates. A remote
attacker could use this flaw to provide a malicious self-signed
certificate or a certificate signed by a trusted authority to a PHP
application using the aforementioned function, causing the application to
crash or, possibly, allow the attacker to execute arbitrary code with the
privileges of the user running the PHP interpreter. (CVE-2013-6420)

After installing the updated packages, the httpd daemon must be restarted
for the update to take effect.
--

SL5
 x86_64
 php53-5.3.3-22.el5_10.x86_64.rpm
 php53-bcmath-5.3.3-22.el5_10.x86_64.rpm
 php53-cli-5.3.3-22.el5_10.x86_64.rpm
 php53-common-5.3.3-22.el5_10.x86_64.rpm
 php53-dba-5.3.3-22.el5_10.x86_64.rpm
 php53-debuginfo-5.3.3-22.el5_10.x86_64.rpm
 php53-devel-5.3.3-22.el5_10.x86_64.rpm
 php53-gd-5.3.3-22.el5_10.x86_64.rpm
 php53-imap-5.3.3-22.el5_10.x86_64.rpm
 php53-intl-5.3.3-22.el5_10.x86_64.rpm
 php53-ldap-5.3.3-22.el5_10.x86_64.rpm
 php53-mbstring-5.3.3-22.el5_10.x86_64.rpm
 php53-mysql-5.3.3-22.el5_10.x86_64.rpm
 php53-odbc-5.3.3-22.el5_10.x86_64.rpm
 php53-pdo-5.3.3-22.el5_10.x86_64.rpm
 php53-pgsql-5.3.3-22.el5_10.x86_64.rpm
 php53-process-5.3.3-22.el5_10.x86_64.rpm
 php53-pspell-5.3.3-22.el5_10.x86_64.rpm
 php53-snmp-5.3.3-22.el5_10.x86_64.rpm
 php53-soap-5.3.3-22.el5_10.x86_64.rpm
 php53-xml-5.3.3-22.el5_10.x86_64.rpm
 php53-xmlrpc-5.3.3-22.el5_10.x86_64.rpm
 i386
 php53-5.3.3-22.el5_10.i386.rpm
 php53-bcmath-5.3.3-22.el5_10.i386.rpm
 php53-cli-5.3.3-22.el5_10.i386.rpm
 php53-common-5.3.3-22.el5_10.i386.rpm
 php53-dba-5.3.3-22.el5_10.i386.rpm
 php53-debuginfo-5.3.3-22.el5_10.i386.rpm
 php53-devel-5.3.3-22.el5_10.i386.rpm
 php53-gd-5.3.3-22.el5_10.i386.rpm
 php53-imap-5.3.3-22.el5_10.i386.rpm
 php53-intl-5.3.3-22.el5_10.i386.rpm
 php53-ldap-5.3.3-22.el5_10.i386.rpm
 php53-mbstring-5.3.3-22.el5_10.i386.rpm
 php53-mysql-5.3.3-22.el5_10.i386.rpm
 php53-odbc-5.3.3-22.el5_10.i386.rpm
 php53-pdo-5.3.3-22.el5_10.i386.rpm
 php53-pgsql-5.3.3-22.el5_10.i386.rpm
 php53-process-5.3.3-22.el5_10.i386.rpm
 php53-pspell-5.3.3-22.el5_10.i386.rpm
 php53-snmp-5.3.3-22.el5_10.i386.rpm
 php53-soap-5.3.3-22.el5_10.i386.rpm
 php53-xml-5.3.3-22.el5_10.i386.rpm
 php53-xmlrpc-5.3.3-22.el5_10.i386.rpm
SL6
 x86_64
 php-5.3.3-27.el6_5.x86_64.rpm
 php-bcmath-5.3.3-27.el6_5.x86_64.rpm
 php-cli-5.3.3-27.el6_5.x86_64.rpm
 php-common-5.3.3-27.el6_5.x86_64.rpm
 php-dba-5.3.3-27.el6_5.x86_64.rpm
 php-debuginfo-5.3.3-27.el6_5.x86_64.rpm
 php-devel-5.3.3-27.el6_5.x86_64.rpm
 php-embedded-5.3.3-27.el6_5.x86_64.rpm
 php-enchant-5.3.3-27.el6_5.x86_64.rpm
 php-fpm-5.3.3-27.el6_5.x86_64.rpm
 php-gd-5.3.3-27.el6_5.x86_64.rpm
 php-imap-5.3.3-27.el6_5.x86_64.rpm
 php-intl-5.3.3-27.el6_5.x86_64.rpm
 php-ldap-5.3.3-27.el6_5.x86_64.rpm
 php-mbstring-5.3.3-27.el6_5.x86_64.rpm
 php-mysql-5.3.3-27.el6_5.x86_64.rpm
 php-odbc-5.3.3-27.el6_5.x86_64.rpm
 php-pdo-5.3.3-27.el6_5.x86_64.rpm
 php-pgsql-5.3.3-27.el6_5.x86_64.rpm
 php-process-5.3.3-27.el6_5.x86_64.rpm
 php-pspell-5.3.3-27.el6_5.x86_64.rpm
 php-recode-5.3.3-27.el6_5.x86_64.rpm
 php-snmp-5.3.3-27.el6_5.x86_64.rpm
 php-soap-5.3.3-27.el6_5.x86_64.rpm
 php-tidy-5.3.3-27.el6_5.x86_64.rpm
 php-xml-5.3.3-27.el6_5.x86_64.rpm
 php-xmlrpc-5.3.3-27.el6_5.x86_64.rpm
 php-zts-5.3.3-27.el6_5.x86_64.rpm
 i386
 php-5.3.3-27.el6_5.i686.rpm
 php-bcmath-5.3.3-27.el6_5.i686.rpm
 php-cli-5.3.3-27.el6_5.i686.rpm
 php-common-5.3.3-27.el6_5.i686.rpm
 php-dba-5.3.3-27.el6_5.i686.rpm
 php-debuginfo-5.3.3-27.el6_5.i686.rpm
 php-devel-5.3.3-27.el6_5.i686.rpm
 php-embedded-5.3.3-27.el6_5.i686.rpm
 php-enchant-5.3.3-27.el6_5.i686.rpm
 php-fpm-5.3.3-27.el6_5.i686.rpm
 php-gd-5.3.3-27.el6_5.i686.rpm
 php-imap-5.3.3-27.el6_5.i686.rpm
 php-intl-5.3.3-27.el6_5.i686.rpm
 php-ldap-5.3.3-27.el6_5.i686.rpm
 php-mbstring-5.3.3-27.el6_5.i686.rpm
 php-mysql-5.3.3-27.el6_5.i686.rpm
 php-odbc-5.3.3-27.el6_5.i686.rpm
 php-pdo-5.3.3-27.el6_5.i686.rpm
 php-pgsql-5.3.3-27.el6_5.i686.rpm
 php-process-5.3.3-27.el6_5.i686.rpm
 php-pspell-5.3.3-27.el6_5.i686.rpm
 php-recode-5.3.3-27.el6_5.i686.rpm
 php-snmp-5.3.3-27.el6_5.i686.rpm
 php-soap-5.3.3-27.el6_5.i686.rpm
 php-tidy-5.3.3-27.el6_5.i686.rpm
 php-xml-5.3.3-27.el6_5.i686.rpm
 php-xmlrpc-5.3.3-27.el6_5.i686.rpm
 php-zts-5.3.3-27.el6_5.i686.rpm

- Scientific Linux Development Team