php, php53 security update

CentOS Errata and Security Advisory CESA-2013:1813

PHP is an HTML-embedded scripting language commonly used with the Apache
HTTP Server.

A memory corruption flaw was found in the way the openssl_x509_parse()
function of the PHP openssl extension parsed X.509 certificates. A remote
attacker could use this flaw to provide a malicious self-signed certificate
or a certificate signed by a trusted authority to a PHP application using
the aforementioned function, causing the application to crash or, possibly,
allow the attacker to execute arbitrary code with the privileges of the
user running the PHP interpreter. (CVE-2013-6420)

Red Hat would like to thank the PHP project for reporting this issue.
Upstream acknowledges Stefan Esser as the original reporter of this issue.

All php53 and php users are advised to upgrade to these updated packages,
which contain a backported patch to correct this issue. After installing
the updated packages, the httpd daemon must be restarted for the update to
take effect.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2013-December/082223.html
https://lists.centos.org/pipermail/centos-announce/2013-December/082225.html

Affected packages:
php
php-bcmath
php-cli
php-common
php-dba
php-devel
php-embedded
php-enchant
php-fpm
php-gd
php-imap
php-intl
php-ldap
php-mbstring
php-mysql
php-odbc
php-pdo
php-pgsql
php-process
php-pspell
php-recode
php-snmp
php-soap
php-tidy
php-xml
php-xmlrpc
php-zts
php53
php53-bcmath
php53-cli
php53-common
php53-dba
php53-devel
php53-gd
php53-imap
php53-intl
php53-ldap
php53-mbstring
php53-mysql
php53-odbc
php53-pdo
php53-pgsql
php53-process
php53-pspell
php53-snmp
php53-soap
php53-xml
php53-xmlrpc

Upstream details at:
https://access.redhat.com/errata/RHSA-2013:1813