[SECURITY] Fedora 8 Update: php-pear-MDB2-2.4.1-2.fc8

updates at fedoraproject.org updates at fedoraproject.org
Thu Nov 15 03:44:10 UTC 2007


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-3376
2007-11-15 03:44:03.337746
--------------------------------------------------------------------------------

Name        : php-pear-MDB2
Product     : Fedora 8
Version     : 2.4.1
Release     : 2.fc8
URL         : http://pear.php.net/package/MDB2
Summary     : Database Abstraction Layer
Description :
PEAR::MDB2 is a merge of the PEAR::DB and Metabase php database abstraction
layers.

It provides a common API for all supported RDBMS. The main difference to most
other DB abstraction packages is that MDB2 goes much further to ensure
portability.

--------------------------------------------------------------------------------
Update Information:

This update fixes a security flaw CVE-2007-5934 with critical impact. All users of php-pear-MDB2 are strongly advised to upgrade to these updated packages.
--------------------------------------------------------------------------------
ChangeLog:

--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #379081 - CVE-2007-5934 MDB2 Data injection and disclosure
        https://bugzilla.redhat.com/show_bug.cgi?id=379081
  [ 2 ] Bug #379101 - MDB2 Data injection and disclosure [f8]
        https://bugzilla.redhat.com/show_bug.cgi?id=379101
  [ 3 ] Bug #379131 - MDB2 Data injection and disclosure [f8]
        https://bugzilla.redhat.com/show_bug.cgi?id=379131
  [ 4 ] Bug #379161 - MDB2 Data injection and disclosure [f8]
        https://bugzilla.redhat.com/show_bug.cgi?id=379161
--------------------------------------------------------------------------------
Updated packages:

f720e8b93c7e754697ba2050d4a4e59dfae59cdb php-pear-MDB2-2.4.1-2.fc8.noarch.rpm
b47bd9fe4b44c898bc757240b38dfad492492f86 php-pear-MDB2-2.4.1-2.fc8.src.rpm

This update can be installed with the "yum" update program.  Use 
su -c 'yum update php-pear-MDB2' 
at the command line.  For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------




More information about the package-announce mailing list