Lucene search

K
suseSuseOPENSUSE-SU-2016:2337-1
HistorySep 19, 2016 - 7:09 p.m.

Security update for php5 (important)

2016-09-1919:09:23
lists.opensuse.org
14

0.03 Low

EPSS

Percentile

89.8%

This update for php5 fixes the following security issues:

  • CVE-2016-7124: Create an Unexpected Object and Don’t Invoke __wakeup()
    in Deserialization
  • CVE-2016-7125: PHP Session Data Injection Vulnerability
  • CVE-2016-7126: select_colors write out-of-bounds
  • CVE-2016-7127: imagegammacorrect allowed arbitrary write access
  • CVE-2016-7128: Memory Leakage In exif_process_IFD_in_TIFF
  • CVE-2016-7129: wddx_deserialize allowed illegal memory access
  • CVE-2016-7130: wddx_deserialize null dereference
  • CVE-2016-7131: wddx_deserialize null dereference with invalid xml
  • CVE-2016-7132: wddx_deserialize null dereference in php_wddx_pop_element
  • CVE-2016-7134: Heap overflow in the function curl_escape