<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="051e60b1cd753810bd1e57e8fa1e5d07"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="1993">
  <id>dbg111-apache2-mod_php5</id>
  <title>php5: fix for several vulnerabilities</title>
  <release>openSUSE 11.1</release>
  <issued date="1265987822"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=557157" id="557157" title="bug number 557157" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=none" id="none" title="none" type="cve"/>
  </references>
  <description>This update of php5 fixes: CVE-2008-5624: CVSS v2 Base
Score: 7.5 (HIGH) (AV:N/AC:L/Au:N/C:P/I:P/A:P):
Permissions, Privileges, and Access Control (CWE-264)
CVE-2008-5625: CVSS v2 Base Score: 7.5 (HIGH)
(AV:N/AC:L/Au:N/C:P/I:P/A:P): Permissions, Privileges, and
Access Control (CWE-264) CVE-2008-5814: CVSS v2 Base Score:
2.6 (LOW) (AV:N/AC:H/Au:N/C:N/I:P/A:N): Cross-Site
Scripting (XSS) (CWE-79) CVE-2009-2626: CVSS v2 Base Score:
6.4 (MEDIUM) (AV:N/AC:L/Au:N/C:P/I:N/A:P): Other
(CWE-Other) CVE-2009-2687: CVSS v2 Base Score: 4.3 (MEDIUM)
(AV:N/AC:M/Au:N/C:N/I:N/A:P): Input Validation (CWE-20)
CVE-2009-3546: CVSS v2 Base Score: 4.4 (moderate)
(AV:L/AC:M/Au:N/C:P/I:P/A:P): Other (CWE-Other)
CVE-2009-4017: CVSS v2 Base Score: 5.0 (moderate)
(AV:N/AC:L/Au:N/C:N/I:N/A:P): Other (CWE-Other)
CVE-2009-4142: CVSS v2 Base Score: 4.3 (MEDIUM)
(AV:N/AC:M/Au:N/C:N/I:P/A:N): Cross-Site Scripting (XSS)
(CWE-79)
</description>
  <pkglist>
    <collection>
        <package name="php5-debuginfo" arch="i586" version="5.2.12" release="0.1.1">
          <filename>php5-debuginfo-5.2.12-0.1.1.i586.rpm</filename>
        </package>
        <package name="php5-debuginfo" arch="ppc" version="5.2.12" release="0.1.1">
          <filename>php5-debuginfo-5.2.12-0.1.1.ppc.rpm</filename>
        </package>
        <package name="php5-debuginfo" arch="x86_64" version="5.2.12" release="0.1.1">
          <filename>php5-debuginfo-5.2.12-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="php5-debugsource" arch="i586" version="5.2.12" release="0.1.1">
          <filename>php5-debugsource-5.2.12-0.1.1.i586.rpm</filename>
        </package>
        <package name="php5-debugsource" arch="ppc" version="5.2.12" release="0.1.1">
          <filename>php5-debugsource-5.2.12-0.1.1.ppc.rpm</filename>
        </package>
        <package name="php5-debugsource" arch="x86_64" version="5.2.12" release="0.1.1">
          <filename>php5-debugsource-5.2.12-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
