OpenPNE 2.13.8 to 2.14.1.1

[Thu Nov 19 11:33:42 2009] [error] [client 210.255.122.209] PHP Warning:  imagecreatefrompng() [<a href='function.imagecreatefrompng'>function.imagecreatefrompng</a>]: gd-png:  fatal libpng error: [00][00][00][00]: unknown critical chunk in /usr/home/openpne/lib/include/kcaptcha/kcaptcha.php on line 49, referer: http://www.smb.net/~openpne/?m=pc&a=page_h_invite
[Thu Nov 19 11:33:42 2009] [error] [client 210.255.122.209] PHP Warning:  imagecreatefrompng() [<a href='function.imagecreatefrompng'>function.imagecreatefrompng</a>]: gd-png error: setjmp returns error condition in /usr/home/openpne/lib/include/kcaptcha/kcaptcha.php on line 49, referer: http://www.smb.net/~openpne/?m=pc&a=page_h_invite
[Thu Nov 19 11:33:42 2009] [error] [client 210.255.122.209] PHP Warning:  imagecreatefrompng() [<a href='function.imagecreatefrompng'>function.imagecreatefrompng</a>]: '/usr/home/openpne/lib/include/kcaptcha/fonts/cambria.png' is not a valid PNG file in /usr/home/openpne/lib/include/kcaptcha/kcaptcha.php on line 49, referer: http://www.smb.net/~openpne/?m=pc&a=page_h_invite
[Thu Nov 19 11:33:42 2009] [error] [client 210.255.122.209] PHP Warning:  imagealphablending(): supplied argument is not a valid Image resource in /usr/home/openpne/lib/include/kcaptcha/kcaptcha.php on line 50, referer: http://www.smb.net/~openpne/?m=pc&a=page_h_invite
[Thu Nov 19 11:33:42 2009] [error] [client 210.255.122.209] PHP Warning:  imagesx(): supplied argument is not a valid Image resource in /usr/home/openpne/lib/include/kcaptcha/kcaptcha.php on line 51, referer: http://www.smb.net/~openpne/?m=pc&a=page_h_invite
[Thu Nov 19 11:33:42 2009] [error] [client 210.255.122.209] PHP Warning:  imagesy(): supplied argument is not a valid Image resource in /usr/home/openpne/lib/include/kcaptcha/kcaptcha.php on line 52, referer: http://www.smb.net/~openpne/?m=pc&a=page_h_invite
[Thu Nov 19 11:33:42 2009] [error] [client 210.255.122.209] PHP Warning:  imagecopy(): supplied argument is not a valid Image resource in /usr/home/openpne/lib/include/kcaptcha/kcaptcha.php on line 123, referer: http://www.smb.net/~openpne/?m=pc&a=page_h_invite
[Thu Nov 19 11:33:42 2009] [error] [client 210.255.122.209] PHP Warning:  imagecopy(): supplied argument is not a valid Image resource in /usr/home/openpne/lib/include/kcaptcha/kcaptcha.php on line 123, referer: http://www.smb.net/~openpne/?m=pc&a=page_h_invite
[Thu Nov 19 11:33:42 2009] [error] [client 210.255.122.209] PHP Warning:  imagecopy(): supplied argument is not a valid Image resource in /usr/home/openpne/lib/include/kcaptcha/kcaptcha.php on line 123, referer: http://www.smb.net/~openpne/?m=pc&a=page_h_invite
[Thu Nov 19 11:33:42 2009] [error] [client 210.255.122.209] PHP Warning:  imagecopy(): supplied argument is not a valid Image resource in /usr/home/openpne/lib/include/kcaptcha/kcaptcha.php on line 123, referer: http://www.smb.net/~openpne/?m=pc&a=page_h_invite
[Thu Nov 19 11:33:42 2009] [error] [client 210.255.122.209] PHP Warning:  imagecopy(): supplied argument is not a valid Image resource in /usr/home/openpne/lib/include/kcaptcha/kcaptcha.php on line 123, referer: http://www.smb.net/~openpne/?m=pc&a=page_h_invite
[Thu Nov 19 11:33:42 2009] [error] [client 210.255.122.209] PHP Warning:  imagecopy(): supplied argument is not a valid Image resource in /usr/home/openpne/lib/include/kcaptcha/kcaptcha.php on line 123, referer: http://www.smb.net/~openpne/?m=pc&a=page_h_invite

Affected package: p5-HTML-Parser-3.60 Type of problem: p5-HTML-Parser -- denial of service. Reference: <http://www.FreeBSD.org/ports/portaudit/68bda678-caab-11de-a97e-be89dfd1042e.html>

Affected package: gd-2.0.35,1 Type of problem: gd -- '_gdGetColors' remote buffer overflow vulnerability. Reference: <http://www.FreeBSD.org/ports/portaudit/4e8344a3-ca52-11de-8ee8-00215c6a37bb.html>

Affected package: php5-gd-5.2.11_1 Type of problem: gd -- '_gdGetColors' remote buffer overflow vulnerability. Reference: <http://www.FreeBSD.org/ports/portaudit/4e8344a3-ca52-11de-8ee8-00215c6a37bb.html>

Affected package: php5-gd-5.2.9 Type of problem: gd -- '_gdGetColors' remote buffer overflow vulnerability. Reference: <http://www.FreeBSD.org/ports/portaudit/4e8344a3-ca52-11de-8ee8-00215c6a37bb.html>

4 problem(s) in your installed packages found.

You are advised to update or deinstall the affected package(s) immediately.

http://blog.c-production.com/archives/2006/05/freebsdgd1.html

libpngをダウングレードしてみる。

blackcube# pwd
/usr/local/src
 /usr/local/bin/wget http://ufpr.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.32.tar.bz2
blackcube# tar xvfz libpng-1.2.32.tar.bz2
blackcube# cd libpng-1.2.32
blackcube# cp scripts/makefile.freebsd Makefile
make 
make install
  198  15:46   wget http://ufpr.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.32.tar.bz2
  199  15:48   pwd
  200  15:49   wget http://ufpr.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.32.tar.bz2
  201  15:49   wget http://ufpr.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.32.tar.bz2
  202  15:51   /usr/local/bin/wget http://ufpr.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.32.tar.bz2
  203  15:52   ll
  204  15:52   tar xvfz libpng-1.2.32.tar.bz2
  205  15:52   ll
  206  15:52   cd libpng-1.2.32
  207  15:53   cp scripts/makefile.freebsd Makefile
  208  15:53   make
  209  15:54   make install
  210  15:54   rehash
  211  15:54   apachectl restart
  212  16:04   make
  213  16:11   pwd
  214  16:11   cp -ip scripts/makefile.linux makefile
  215  16:14   cp -ip scripts/makefile.linux Makefile
  216  16:14   cp -ip scripts/makefile.linux Makefile
  217  16:16   make
  218  16:17   make install
  219  16:17   apachectl restart
  220  16:21   hist
  221  16:21   histry
  222  16:25   history

/usr/local/src/libpng-1.2.32/Makefile

# Where the zlib library and include files are located.
ZLIBLIB=/usr/local/lib
ZLIBINC=/usr/local/include
#ZLIBLIB=../zlib
#ZLIBINC=../zlib
   72  13:29   locate php5-gd
   73  13:29   cd /usr/ports/graphics/php5-gd
   74  13:30   portinstall
   75  13:30   make deinstall
   76  13:30   make reinstall
   77  13:31   apachectl restart
   78  5:37    apachectl restart
   79  5:39    reboot
   80  5:41    screen
   81  6:57    shutdown now
   82  15:47   locate wget
   83  15:47   portinstall ftp/wget
   84  15:48   rehash
   85  15:49   rehash
   86  15:50   locate wget
   87  15:50   cd /usr/local/bin/
   88  15:50   ll
   89  15:51   pwd
   90  16:56   screen
   91  6:42    screen -r
   92  6:42    screen -r 1297.ttyp0.blackcube
   93  8:21    screen -r
   94  8:21    screen -r 1297.ttyp0.blackcube
   95  11:32   screen -r
   96  11:32   screen -r 1297.ttyp0.blackcube
   97  16:06   screen -r
   98  16:07   screen -r 1297.ttyp0.blackcube
   99  5:09    reboot
  100  5:14    screen
  101  6:34    te php5-zip
  102  5:41    cd /usr/ports/archivers/php5-zip
  103  5:41    make deinstall
  104  5:41    ll
  105  5:41    make rmconfig
  106  5:41    mv work work-pre
  107  5:42    locate php5-zlib
  108  5:42    cd /usr/ports/archivers/php5-zlib
  109  5:42    make deinstall
  110  5:46    locate mb_language
  111  5:47    locate php5
  112  6:34    history
PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20060613/pdo_mysql.so' - Cannot open "/usr/local/lib/php/20060613/pdo_mysql.so" in Unknown on line 0
PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20060613/pdf.so' - Cannot open "/usr/local/lib/php/20060613/pdf.so" in Unknown on line 0
PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20060613/mcrypt.so' - Cannot open "/usr/local/lib/php/20060613/mcrypt.so" in Unknown on line 0
PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20060613/openssl.so' - Cannot open "/usr/local/lib/php/20060613/openssl.so" in Unknown on line 0
PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20060613/mysqli.so' - Cannot open "/usr/local/lib/php/20060613/mysqli.so" in Unknown on line 0
blackcube# cd /usr/ports/security/php5-openssl
blackcube# make deinstall
===>  Deinstalling for security/php5-openssl
===>   Deinstalling php5-openssl-5.2.11_1
pkg_delete: package 'php5-openssl-5.2.11_1' is required by these other packages
and may not be deinstalled (but I'll delete it anyway):
phpMyAdmin-3.2.2.1
pkg_delete: file '/usr/local/lib/php/20060613/openssl.so' doesn't exist
pkg_delete: couldn't entirely delete package (perhaps the packing list is
incorrectly specified?)
blackcube# make reinstall
===>  Installing for php5-openssl-5.2.11_1
===>   php5-openssl-5.2.11_1 depends on file: /usr/local/include/php/main/php.h - found
===>   Generating temporary packing list
===>  Checking if security/php5-openssl already installed
===>   Registering installation for php5-openssl-5.2.11_1
****************************************************************************

The following line has been added to your /usr/local/etc/php/extensions.ini
configuration file to automatically load the installed extension:

extension=openssl.so

****************************************************************************
blackcube# php -v
PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20060613/pdf.so' - Cannot open "/usr/local/lib/php/20060613/pdf.so" in Unknown on line 0
PHP 5.2.11 with Suhosin-Patch 0.9.7 (cli) (built: Nov 20 2009 05:50:16)
Copyright (c) 1997-2009 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2009 Zend Technologies

トップ   新規 一覧 検索 最終更新   ヘルプ   最終更新のRSS