PHP Mail Function ASCII Control Character Header Spoofing Vulnerability Solution:
Mandrake has released a new security advisory, (MDKSA-2003:082). Information on obtaining and applying fixes can be found in the referenced advisory.
OpenPKG has released a new security advisory, OpenPKG-SA-2003.032. Information on obtaining and applying fixes can be found in the referenced advisory.
RedHat has released a new security advisory, RHSA-2002:213-06. Information on obtaining and applying fixes can be found in the referenced advisory.
HP has released an advisory for HP Secure OS, and has advised users to upgrade using the packages listed in Red Hat Security Advisory RHSA-2002:213-06.
Gentoo Linux has released an advisory. Users of dev-php/php-4.2.2-r1 and/or dev-php/mod_php-4.2.2-r1 and earlier are advised to update systems by issuing the following commands:
emerge rsync
emerge php
and/or
emerge mod_php
emerge clean
SCO has released an advisory for OpenLinux. Users are advised to apply the appropriate fixes as soon as possible.
Fixes available:
PHP PHP 3.0.18
PHP PHP 4.0.3
PHP PHP 4.0.4
PHP PHP 4.0.6
PHP PHP 4.1 .0
PHP PHP 4.1.2
PHP PHP 4.2.2
