[WBEL-users] Severe PHP vulnerability??

Craig White craigwhite@azapple.com
Tue, 21 Dec 2004 14:05:40 -0700


On Tue, 2004-12-21 at 14:50 -0600, John Morris wrote:
> On Tue, 21 Dec 2004, Jesse wrote:
> 
> > >>> Red Hat hasn't released an official errata yet.
> > 
> > FWIW, RedHat just released a php update.
> 
> Just found it and it is building now.  It wasn't there a few hours ago.  
> Also looks like U4 is working its way out as well.  I'll give those a few 
> more hours to make sure they are all there.
----
Yeah - there is a s$#t-pot full of updates coming down to one of my RHEL
servers right now. Post up when you get these things rebuilt and
mirrored so I can update.

Not meaning to rush you, just not wanting to bother with the updates
before they are done.

Craig

from an i386 system...
Name                                    Version        Rel
----------------------------------------------------------
XFree86                                 4.3.0          78.EL
i386
XFree86-100dpi-fonts                    4.3.0          78.EL
i386
XFree86-75dpi-fonts                     4.3.0          78.EL
i386
XFree86-Mesa-libGL                      4.3.0          78.EL
i386
XFree86-Mesa-libGLU                     4.3.0          78.EL
i386
XFree86-Xnest                           4.3.0          78.EL
i386
XFree86-Xvfb                            4.3.0          78.EL
i386
XFree86-base-fonts                      4.3.0          78.EL
i386
XFree86-doc                             4.3.0          78.EL
i386
XFree86-font-utils                      4.3.0          78.EL
i386
XFree86-libs                            4.3.0          78.EL
i386
XFree86-libs-data                       4.3.0          78.EL
i386
XFree86-tools                           4.3.0          78.EL
i386
XFree86-truetype-fonts                  4.3.0          78.EL
i386
XFree86-twm                             4.3.0          78.EL
i386
XFree86-xauth                           4.3.0          78.EL
i386
XFree86-xdm                             4.3.0          78.EL
i386
XFree86-xfs                             4.3.0          78.EL
i386
arts                                    1.1.3          2.3
i386
aspell                                  0.33.7.1       25.1
i386
aspell-devel                            0.33.7.1       25.1
i386
autofs                                  4.1.3          47
i386
bind                                    9.2.4          1_EL3
i386
bind-libs                               9.2.4          1_EL3
i386
bind-utils                              9.2.4          1_EL3
i386
curl                                    7.10.6         4.2
i386
curl-devel                              7.10.6         4.2
i386
devlabel                                0.48.03        6
i386
dhclient                                3.0.1          10_EL3
i386
dhcp                                    3.0.1          10_EL3
i386
e2fsprogs                               1.32           15.1
i386
e2fsprogs-devel                         1.32           15.1
i386
esound                                  0.2.28         6
i386
evolution                               1.4.5          9
i386
fam                                     2.6.8          15
i386
fam-devel                               2.6.8          15
i386
firstboot                               1.1.31         1
noarch
gd                                      1.8.4          12.3.1
i386
gdb                                     6.1post        1.20040607.52
i386
ghostscript                             7.05           32.1.9
i386
gimp-print                              4.2.4          5.1
i386
gimp-print-utils                        4.2.4          5.1
i386
glibc                                   2.3.2          95.30
i686
glibc-common                            2.3.2          95.30
i386
glibc-devel                             2.3.2          95.30
i386
glibc-headers                           2.3.2          95.30
i386
glibc-profile                           2.3.2          95.30
i386
glibc-utils                             2.3.2          95.30
i386
gphoto2                                 2.1.0          7.1
i386
gtk2                                    2.2.4          12
i386
hesiod                                  3.0.2          28.1
i386
hesiod-devel                            3.0.2          28.1
i386
hpijs                                   1.3            32.1.9
i386
hwdata                                  0.101.14       1
noarch
imlib                                   1.9.13         13.4
i386
initscripts                             7.31.18.EL     1
i386
ipsec-tools                             0.2.5          0.6
i386
iputils                                 20020927       11.30.1
i386
kdebase                                 3.1.3          5.5
i386
kernel                                  2.4.21         27.EL
i686
kernel-smp                              2.4.21         27.EL
i686
kernel-smp-unsupported                  2.4.21         27.EL
i686
kernel-source                           2.4.21         27.EL
i386
kernel-unsupported                      2.4.21         27.EL
i686
krb5-devel                              1.2.7          31
i386
krb5-libs                               1.2.7          31
i386
krb5-workstation                        1.2.7          31
i386
kudzu                                   1.1.22.9       1
i386
kudzu-devel                             1.1.22.9       1
i386
laus-libs                               0.1            66RHEL3
i386
libaio                                  0.3.96         5
i386
libaio-devel                            0.3.96         5
i386
libao                                   0.8.3          3.1
i386
libao-devel                             0.8.3          3.1
i386
libraw1394                              0.9.0          10.RHEL3
i386
librsvg2                                2.2.3          6
i386
libtabe                                 0.2.6          6.EL
i386
libxml                                  1.8.17         9.2
i386
libxslt                                 1.0.33         5
i386
man-pages                               1.60           4.2
noarch
metacity                                2.4.55         7.12
i386
mikmod                                  3.1.6          21.2
i386
modutils                                2.4.25         14.EL
i386
modutils-devel                          2.4.25         14.EL
i386
net-tools                               1.60           20E.1
i386
netconfig                               0.8.19         1.1
i386
nfs-utils                               1.0.6          33EL
i386
nptl-devel                              2.3.2          95.30
i686
nscd                                    2.3.2          95.30
i386
openjade                                1.3.1          12.1
i386
openssh                                 3.6.1p2        33.30.3
i386
openssh-askpass                         3.6.1p2        33.30.3
i386
openssh-askpass-gnome                   3.6.1p2        33.30.3
i386
openssh-clients                         3.6.1p2        33.30.3
i386
openssh-server                          3.6.1p2        33.30.3
i386
pam                                     0.75           62
i386
pam-devel                               0.75           62
i386
pango                                   1.2.5          5
i386
pcre                                    3.9            10.1
i386
perl                                    5.8.0          88.9
i386
perl-CGI                                2.81           88.9
i386
perl-CPAN                               1.61           88.9
i386
perl-DB_File                            1.804          88.9
i386
php                                     4.3.2          19.ent
i386
php-imap                                4.3.2          19.ent
i386
php-ldap                                4.3.2          19.ent
i386
popt                                    1.8.2          13
i386
procps                                  2.0.17         13
i386
psacct                                  6.3.2          28.rhel3
i386
quota                                   3.10           4
i386
redhat-artwork                          0.73.2         2E
i386
redhat-config-date                      1.5.22         3
noarch
redhat-config-netboot                   0.1.5          1
i386
redhat-config-printer                   0.6.47.3.23    1
i386
redhat-config-printer-gui               0.6.47.3.23    1
i386
redhat-config-services                  0.8.5          19.RHEL3.1
noarch
redhat-config-users                     1.1.18         2
noarch
rh-postgresql-devel                     7.3.8          2
i386
rh-postgresql-libs                      7.3.8          2
i386
rh-postgresql-python                    7.3.8          2
i386
rhn-applet                              2.1.18         4
i386
rpm                                     4.2.3          13
i386
rpm-build                               4.2.3          13
i386
rpm-devel                               4.2.3          13
i386
rpm-libs                                4.2.3          13
i386
rpm-python                              4.2.3          13
i386
samba                                   3.0.9          1.3E.1
i386
samba-client                            3.0.9          1.3E.1
i386
samba-common                            3.0.9          1.3E.1
i386
sane-backends                           1.0.9          5.7
i386
scrollkeeper                            0.3.11         8E
i386
shadow-utils                            4.0.3          22.02
i386
sysreport                               1.3.7.2        2
noarch
tcp_wrappers                            7.6            34.1
i386
tcsh                                    6.12           11.EL3
i386
tftp                                    0.39           0.EL3.1
i386
tftp-server                             0.39           0.EL3.1
i386
up2date                                 4.2.57         2
i386
up2date-gnome                           4.2.57         2
i386
usermode                                1.68           5E.2
i386
usermode-gtk                            1.68           5E.2
i386
vim-common                              6.3.029        1.30E.3
i386
vim-enhanced                            6.3.029        1.30E.3
i386
vim-minimal                             6.3.029        1.30E.3
i386
vnc-server                              4.0            0.beta4.1.4
i386
vsftpd                                  1.2.1          3E.1
i386
vte                                     0.11.10        11
i386
xscreensaver                            4.10           8
i386
ypbind                                  1.12           5.21.1
i386
ypserv                                  2.8            11
i386
zip                                     2.3            16.1
i386