RHSA-2006:0669: php security update

PHP is an HTML-embedded scripting language commonly used with the ApacheHTTP Web server.A response-splitting issue was discovered in the PHP session handling. Ifa remote attacker can force a carefully crafted session identifier to beused, a cross-site-scripting or response-splitting attack could bepossible. (CVE-2006-3016)A buffer overflow was discovered in the PHP sscanf() function. If a scriptused the sscanf() function with positional arguments in the format string,a remote attacker sending a carefully crafted request could executearbitrary code as the 'apache' user. (CVE-2006-4020)An integer overflow was discovered in the PHP wordwrap() and strrepeat()functions. If a script running on a 64-bit server used either of thesefunctions on untrusted user data, a remote attacker sending a carefullycrafted request might be able to cause a heap overflow. (CVE-2006-4482)A buffer overflow was discovered in the PHP gd extension. If a script wasset up to process GIF images from untrusted sources using the gd extension,a remote attacker could cause a heap overflow. (CVE-2006-4484)An integer overflow was discovered in the PHP memory allocation handling. On 64-bit platforms, the "memorylimit" setting was not enforced correctly,which could allow a denial of service attack by a remote user. (CVE-2006-4486)Users of PHP should upgrade to these updated packages which containbackported patches to correct these issues. These packages also contain afix for a bug where certain input strings to the metaphone() function couldcause memory corruption.