Gentoo Security Advisory GLSA 201110-06 (php) Network Vulnerability

Summary

The remote host is missing updates announced in advisory GLSA 201110-06.

Solution

All PHP users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-lang/php-5.3.8' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20201110-06 http://bugs.gentoo.org/show_bug.cgi?id=306939 http://bugs.gentoo.org/show_bug.cgi?id=332039 http://bugs.gentoo.org/show_bug.cgi?id=340807 http://bugs.gentoo.org/show_bug.cgi?id=350908 http://bugs.gentoo.org/show_bug.cgi?id=355399 http://bugs.gentoo.org/show_bug.cgi?id=358791 http://bugs.gentoo.org/show_bug.cgi?id=358975 http://bugs.gentoo.org/show_bug.cgi?id=369071 http://bugs.gentoo.org/show_bug.cgi?id=372745 http://bugs.gentoo.org/show_bug.cgi?id=373965 http://bugs.gentoo.org/show_bug.cgi?id=380261

Insight

Multiple vulnerabilities were found in PHP, the worst of which leading to remote execution of arbitrary code.

Severity

Classification

CVE

CVE-2006-7243, CVE-2009-5016, CVE-2010-1128, CVE-2010-1129, CVE-2010-1130, CVE-2010-1860, CVE-2010-1861, CVE-2010-1862, CVE-2010-1864, CVE-2010-1866, CVE-2010-1868, CVE-2010-1914, CVE-2010-1915, CVE-2010-1917, CVE-2010-2093, CVE-2010-2094, CVE-2010-2097, CVE-2010-2100, CVE-2010-2101, CVE-2010-2190, CVE-2010-2191, CVE-2010-2225, CVE-2010-2484, CVE-2010-2531, CVE-2010-2950, CVE-2010-3062, CVE-2010-3063, CVE-2010-3064, CVE-2010-3065, CVE-2010-3436, CVE-2010-3709, CVE-2010-3710, CVE-2010-3870, CVE-2010-4150, CVE-2010-4409, CVE-2010-4645, CVE-2010-4697, CVE-2010-4698, CVE-2010-4699, CVE-2010-4700, CVE-2011-0420, CVE-2011-0421, CVE-2011-0708, CVE-2011-0752, CVE-2011-0753, CVE-2011-0755, CVE-2011-1092, CVE-2011-1148, CVE-2011-1153, CVE-2011-1464, CVE-2011-1466, CVE-2011-1467, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470, CVE-2011-1471, CVE-2011-1657, CVE-2011-1938, CVE-2011-2202, CVE-2011-2483, CVE-2011-3182, CVE-2011-3189, CVE-2011-3267, CVE-2011-3268

CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C

Related Vulnerabilities

Take action and discover your vulnerabilities