Lucene search

K
oraclelinuxOracleELSA-2014-1327
HistorySep 30, 2014 - 12:00 a.m.

php security update

2014-09-3000:00:00
Oracle
linux.oracle.com
25

0.951 High

EPSS

Percentile

99.1%

[5.4.16-23.1]

  • gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  • gd: fix NUL byte injection in file names. CVE-2014-5120
  • fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  • fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  • fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587
  • spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  • spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  • network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597