Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2018-1138

Критический

ALT-PU-2018-1138: package php7 update to version 7.1.14-alt1.S1

Источник
errata.altlinux.org
Дата публикации
07.02.2018
Дата обновления
07.02.2018
Устраненные уязвимости
8
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades php7 to version 7.1.14-alt1.S1.

Устраненные уязвимости8

Ссылки1

ALT-PU-2018-1138https://errata.altlinux.org/ALT-PU-2018-1138

Связанные уязвимости

ubuntu логотип

CVE-2015-8866

CVSS3: 9.6
ubuntu
больше 10 лет назад

ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads, which allows remote attackers to conduct XML External Entity (XXE) and XML Entity Expansion (XEE) attacks via a crafted XML document, a related issue to CVE-2015-5161.

redhat логотип

CVE-2015-8866

CVSS3: 3.7
redhat
больше 10 лет назад

ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads, which allows remote attackers to conduct XML External Entity (XXE) and XML Entity Expansion (XEE) attacks via a crafted XML document, a related issue to CVE-2015-5161.

nvd логотип

CVE-2015-8866

CVSS3: 9.6
nvd
больше 10 лет назад

ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads, which allows remote attackers to conduct XML External Entity (XXE) and XML Entity Expansion (XEE) attacks via a crafted XML document, a related issue to CVE-2015-5161.

debian логотип

CVE-2015-8866

CVSS3: 9.6
debian
больше 10 лет назад

ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when ...

github логотип

GHSA-x5qj-644j-7xc7

CVSS3: 9.6
github
больше 4 лет назад

ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads, which allows remote attackers to conduct XML External Entity (XXE) and XML Entity Expansion (XEE) attacks via a crafted XML document, a related issue to CVE-2015-5161.