Create an account

Subscribe to LWN

An "enum" for Python 3

An unexpected perf feature

LWN.net Weekly Edition for May 16, 2013

A look at the PyPy 2.0 release

PostgreSQL 9.3 beta: Federated databases and more

Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

php: integer overflow

Package(s):

php5

CVE #(s):

CVE-2012-2386

Created:

June 5, 2012

Updated:

July 16, 2012

Description:

From the openSUSE advisory:

Specially crafted tar archives could cause an integer overflow in the phar extension

Alerts:

openSUSE	openSUSE-SU-2012:0695-1	2012-06-05
Debian	DSA-2492-1	2012-06-10
Mandriva	MDVSA-2012:093	2012-06-15
Ubuntu	USN-1481-1	2012-06-19
Red Hat	RHSA-2012:1046-01	2012-06-27
Red Hat	RHSA-2012:1047-01	2012-06-27
CentOS	CESA-2012:1047	2012-06-27
Oracle	ELSA-2012-1047	2012-06-28
Fedora	FEDORA-2012-9490	2012-06-30
Fedora	FEDORA-2012-9490	2012-06-30
Oracle	ELSA-2012-1046	2012-06-30
Fedora	FEDORA-2012-9762	2012-07-02
Fedora	FEDORA-2012-9762	2012-07-02
Fedora	FEDORA-2012-9762	2012-07-02
SUSE	SUSE-SU-2012:0840-1	2012-07-05
Scientific Linux	SL-php5-20120705	2012-07-05
Scientific Linux	SL-php-20120709	2012-07-09
CentOS	CESA-2012:1046	2012-07-10
Slackware	SSA:2012-195-01	2012-07-14
Gentoo	201209-03	2012-09-23

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds