Synopsis

Moderate: php53 and php security update

Type/Severity

Security Advisory: Moderate

Topic

Updated php53 and php packages that fix two security issues are now
available for Red Hat Enterprise Linux 5 and 6 respectively.

The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.

Description

PHP is an HTML-embedded scripting language commonly used with the Apache
HTTP Server.

It was found that the hashing routine used by PHP arrays was susceptible
to predictable hash collisions. If an HTTP POST request to a PHP
application contained many parameters whose names map to the same hash
value, a large amount of CPU time would be consumed. This flaw has been
mitigated by adding a new configuration directive, max_input_vars, that
limits the maximum number of parameters processed per request. By
default, max_input_vars is set to 1000. (CVE-2011-4885)

An integer overflow flaw was found in the PHP exif extension. On 32-bit
systems, a specially-crafted image file could cause the PHP interpreter to
crash or disclose portions of its memory when a PHP script tries to extract
Exchangeable image file format (Exif) metadata from the image file.
(CVE-2011-4566)

Red Hat would like to thank oCERT for reporting CVE-2011-4885. oCERT
acknowledges Julian Walde and Alexander Klink as the original reporters of
CVE-2011-4885.

All php53 and php users should upgrade to these updated packages, which
contain backported patches to resolve these issues. After installing the
updated packages, the httpd daemon must be restarted for the update to take
effect.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Server - Extended Update Support 6.2 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 6.2 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.2 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.2 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.2 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.2 i386
• Red Hat Storage 2.0 x86_64
• Red Hat Gluster Storage Server for On-premise 2.0 x86_64
• Red Hat Storage for Public Cloud (via RHUI) 2.0 x86_64
• Red Hat Enterprise Linux Server - AUS 6.2 x86_64

Fixes

• BZ - 750547 - CVE-2011-4885 php: hash table collisions CPU usage DoS (oCERT-2011-003)
• BZ - 758413 - CVE-2011-4566 php: integer overflow in exif_process_IFD_TAG() may lead to DoS or arbitrary memory disclosure

CVEs

• CVE-2011-4885
• CVE-2011-4566

References

• https://access.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 5

SRPM
x86_64
php53-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: c90dccdd089467e928aae99008d35477482830efc2b6cd644420c8e256268018
php53-bcmath-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 588035389d187f1146e222916311aa52f36af12e18852846d428c13ad576ffe0
php53-cli-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: b2b824d03f6f37d4d8dab6117a288d70e7fec2f91572452179051af24407713f
php53-common-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 80ccd895fd4e0a163bde1e16a1e4c3edffac3807666ec42760307fe32dafb75f
php53-dba-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 09d0ab16a611358369b19ae1c64ca0f4917d50b4f99cb4ff12bad73d1d1de22b
php53-devel-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 95072393a8ac2dde4a9069643bd786b10fb3cf0bfe96181046346450cedcb011
php53-gd-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: ac5abf70c8991d2a753715dc0eb5bcabc7c82a6636f470b0a1681ec9945befd4
php53-imap-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: e028a61435a9200a203dc03ee8006f27e466a6a0a05e3447d9ef818f35cb6d1e
php53-intl-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 8cd1c5f1bf2876b2d1e530c39894c76681aa45e37588a708d6b792091233fe96
php53-ldap-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 52100360865dc1bdede8500ed1a2a5140f0b7d147bc6b2ac8c07876949b44e49
php53-mbstring-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 89f7b8167a00ea9abebd1f78411a1c3e4770ec3c2fc440751e1726b84f5c793f
php53-mysql-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 7d939b979ffbce99f1028c21aa9c037607e9a5426044e22380c353049e5edaf1
php53-odbc-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 8057c9fe4c5befc411716a8f41f72ddb49619327801d06208f499027cea609b5
php53-pdo-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: e47892bb154ff227aff8345397df9ed2c95ac0297b431472a1560dc6aab026a2
php53-pgsql-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: d043772860e1e6e76d138ce2807125afa1153a0545a43db82eaf511683bfea2d
php53-process-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 061076441354f307b0e3ddae1f605db3b7efd08f9002fcbd95a83149516eaead
php53-pspell-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: e3b0f8c22e32659d06e0318891cb5fee6ec64736e92f9e57f281767e103c837f
php53-snmp-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: d760d42ea4fe23823ae2d3c2a0627e8d478fa53386ea03ee85c6bf1f9efce5f8
php53-soap-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 2e3df0adbf32367e8fa891e26214e3c0082c9f7e3eb0015cb2a1da68962e8d2d
php53-xml-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: fc557f05cdf92d1b0e2662061c8dc355189d7d7b4a263b9dc35366b73c920a4c
php53-xmlrpc-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: bcebe03553dacea049b19df9d3c66d8780047eac1955d0669d2b56d3833c8278

Red Hat Enterprise Linux Workstation 5

SRPM
x86_64
php53-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: c90dccdd089467e928aae99008d35477482830efc2b6cd644420c8e256268018
php53-bcmath-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 588035389d187f1146e222916311aa52f36af12e18852846d428c13ad576ffe0
php53-cli-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: b2b824d03f6f37d4d8dab6117a288d70e7fec2f91572452179051af24407713f
php53-common-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 80ccd895fd4e0a163bde1e16a1e4c3edffac3807666ec42760307fe32dafb75f
php53-dba-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 09d0ab16a611358369b19ae1c64ca0f4917d50b4f99cb4ff12bad73d1d1de22b
php53-devel-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 95072393a8ac2dde4a9069643bd786b10fb3cf0bfe96181046346450cedcb011
php53-gd-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: ac5abf70c8991d2a753715dc0eb5bcabc7c82a6636f470b0a1681ec9945befd4
php53-imap-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: e028a61435a9200a203dc03ee8006f27e466a6a0a05e3447d9ef818f35cb6d1e
php53-intl-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 8cd1c5f1bf2876b2d1e530c39894c76681aa45e37588a708d6b792091233fe96
php53-ldap-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 52100360865dc1bdede8500ed1a2a5140f0b7d147bc6b2ac8c07876949b44e49
php53-mbstring-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 89f7b8167a00ea9abebd1f78411a1c3e4770ec3c2fc440751e1726b84f5c793f
php53-mysql-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 7d939b979ffbce99f1028c21aa9c037607e9a5426044e22380c353049e5edaf1
php53-odbc-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 8057c9fe4c5befc411716a8f41f72ddb49619327801d06208f499027cea609b5
php53-pdo-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: e47892bb154ff227aff8345397df9ed2c95ac0297b431472a1560dc6aab026a2
php53-pgsql-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: d043772860e1e6e76d138ce2807125afa1153a0545a43db82eaf511683bfea2d
php53-process-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 061076441354f307b0e3ddae1f605db3b7efd08f9002fcbd95a83149516eaead
php53-pspell-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: e3b0f8c22e32659d06e0318891cb5fee6ec64736e92f9e57f281767e103c837f
php53-snmp-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: d760d42ea4fe23823ae2d3c2a0627e8d478fa53386ea03ee85c6bf1f9efce5f8
php53-soap-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 2e3df0adbf32367e8fa891e26214e3c0082c9f7e3eb0015cb2a1da68962e8d2d
php53-xml-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: fc557f05cdf92d1b0e2662061c8dc355189d7d7b4a263b9dc35366b73c920a4c
php53-xmlrpc-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: bcebe03553dacea049b19df9d3c66d8780047eac1955d0669d2b56d3833c8278

Red Hat Enterprise Linux Server from RHUI 5

SRPM
x86_64
php53-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: c90dccdd089467e928aae99008d35477482830efc2b6cd644420c8e256268018
php53-bcmath-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 588035389d187f1146e222916311aa52f36af12e18852846d428c13ad576ffe0
php53-cli-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: b2b824d03f6f37d4d8dab6117a288d70e7fec2f91572452179051af24407713f
php53-common-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 80ccd895fd4e0a163bde1e16a1e4c3edffac3807666ec42760307fe32dafb75f
php53-dba-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 09d0ab16a611358369b19ae1c64ca0f4917d50b4f99cb4ff12bad73d1d1de22b
php53-devel-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 95072393a8ac2dde4a9069643bd786b10fb3cf0bfe96181046346450cedcb011
php53-gd-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: ac5abf70c8991d2a753715dc0eb5bcabc7c82a6636f470b0a1681ec9945befd4
php53-imap-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: e028a61435a9200a203dc03ee8006f27e466a6a0a05e3447d9ef818f35cb6d1e
php53-intl-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 8cd1c5f1bf2876b2d1e530c39894c76681aa45e37588a708d6b792091233fe96
php53-ldap-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 52100360865dc1bdede8500ed1a2a5140f0b7d147bc6b2ac8c07876949b44e49
php53-mbstring-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 89f7b8167a00ea9abebd1f78411a1c3e4770ec3c2fc440751e1726b84f5c793f
php53-mysql-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 7d939b979ffbce99f1028c21aa9c037607e9a5426044e22380c353049e5edaf1
php53-odbc-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 8057c9fe4c5befc411716a8f41f72ddb49619327801d06208f499027cea609b5
php53-pdo-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: e47892bb154ff227aff8345397df9ed2c95ac0297b431472a1560dc6aab026a2
php53-pgsql-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: d043772860e1e6e76d138ce2807125afa1153a0545a43db82eaf511683bfea2d
php53-process-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 061076441354f307b0e3ddae1f605db3b7efd08f9002fcbd95a83149516eaead
php53-pspell-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: e3b0f8c22e32659d06e0318891cb5fee6ec64736e92f9e57f281767e103c837f
php53-snmp-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: d760d42ea4fe23823ae2d3c2a0627e8d478fa53386ea03ee85c6bf1f9efce5f8
php53-soap-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: 2e3df0adbf32367e8fa891e26214e3c0082c9f7e3eb0015cb2a1da68962e8d2d
php53-xml-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: fc557f05cdf92d1b0e2662061c8dc355189d7d7b4a263b9dc35366b73c920a4c
php53-xmlrpc-5.3.3-1.el5_7.5.x86_64.rpm	SHA-256: bcebe03553dacea049b19df9d3c66d8780047eac1955d0669d2b56d3833c8278