{"id":"MGASA-2013-0172","summary":"Updated php packages fix security vulnerabilies","details":"Heap based buffer overflow in quoted_printable_encode() in PHP before\nversion 5.4.16 (CVE-2013-2110).\n\nInteger overflow in the SdnToJewish function in jewish.c in the Calendar\ncomponent in PHP before 5.3.26 and 5.4.x before 5.4.16 allows\ncontext-dependent attackers to cause a denial of service (application hang)\nvia a large argument to the jdtojewish function. (CVE-2013-4635)\n\nThis update provides PHP version 5.4.16 which fixes this as well as\nseveral other issues.\n","modified":"2026-04-16T04:44:41.542403906Z","published":"2013-06-18T15:00:10Z","upstream":["CVE-2013-2110","CVE-2013-4635"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2013-0172.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=10456"},{"type":"WEB","url":"http://www.php.net/ChangeLog-5.php"},{"type":"WEB","url":"http://lwn.net/Vulnerabilities/559055/"}],"affected":[{"package":{"name":"php","ecosystem":"Mageia:3","purl":"pkg:rpm/mageia/php?arch=source&distro=mageia-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-1.mga3"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2013-0172.json"}},{"package":{"name":"php-apc","ecosystem":"Mageia:3","purl":"pkg:rpm/mageia/php-apc?arch=source&distro=mageia-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.14-7.1.mga3"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2013-0172.json"}},{"package":{"name":"php-gd-bundled","ecosystem":"Mageia:3","purl":"pkg:rpm/mageia/php-gd-bundled?arch=source&distro=mageia-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-1.mga3"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2013-0172.json"}},{"package":{"name":"php-timezonedb","ecosystem":"Mageia:3","purl":"pkg:rpm/mageia/php-timezonedb?arch=source&distro=mageia-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2013.3-1.mga3"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2013-0172.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}