Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:1145-1

Опубликовано: 25 апр. 2016
Источник: suse-cvrf

Описание

Security update for php53

This update for php53 fixes the following issues:

  • CVE-2015-8838: mysqlnd was vulnerable to BACKRONYM (bnc#973792).
  • CVE-2015-8835: SoapClient s_call method suffered from a type confusion issue that could have lead to crashes [bsc#973351]
  • CVE-2016-2554: A NULL pointer dereference in phar_get_fp_offset could lead to crashes. [bsc#968284] Note: we do not ship the phar extension currently, so we are not affected.
  • CVE-2015-7803: A Stack overflow vulnerability when decompressing tar phar archives could potentially lead to code execution. [bsc#949961] Note: we do not ship the phar extension currently, so we are not affected.
  • CVE-2016-3141: A use-after-free / double-free in the WDDX deserialization could lead to crashes or potential code execution. [bsc#969821]
  • CVE-2016-3142: An Out-of-bounds read in phar_parse_zipfile() could lead to crashes. [bsc#971912] Note: we do not ship the phar extension currently, so we are not affected.
  • CVE-2014-9767: A directory traversal when extracting zip files was fixed that could lead to overwritten files. [bsc#971612]
  • CVE-2016-3185: A type confusion vulnerability in make_http_soap_request() could lead to crashes or potentially code execution. [bsc#971611]

Список пакетов

SUSE Linux Enterprise Server 11 SP4
apache2-mod_php53-5.3.17-59.1
php53-5.3.17-59.1
php53-bcmath-5.3.17-59.1
php53-bz2-5.3.17-59.1
php53-calendar-5.3.17-59.1
php53-ctype-5.3.17-59.1
php53-curl-5.3.17-59.1
php53-dba-5.3.17-59.1
php53-dom-5.3.17-59.1
php53-exif-5.3.17-59.1
php53-fastcgi-5.3.17-59.1
php53-fileinfo-5.3.17-59.1
php53-ftp-5.3.17-59.1
php53-gd-5.3.17-59.1
php53-gettext-5.3.17-59.1
php53-gmp-5.3.17-59.1
php53-iconv-5.3.17-59.1
php53-intl-5.3.17-59.1
php53-json-5.3.17-59.1
php53-ldap-5.3.17-59.1
php53-mbstring-5.3.17-59.1
php53-mcrypt-5.3.17-59.1
php53-mysql-5.3.17-59.1
php53-odbc-5.3.17-59.1
php53-openssl-5.3.17-59.1
php53-pcntl-5.3.17-59.1
php53-pdo-5.3.17-59.1
php53-pear-5.3.17-59.1
php53-pgsql-5.3.17-59.1
php53-pspell-5.3.17-59.1
php53-shmop-5.3.17-59.1
php53-snmp-5.3.17-59.1
php53-soap-5.3.17-59.1
php53-suhosin-5.3.17-59.1
php53-sysvmsg-5.3.17-59.1
php53-sysvsem-5.3.17-59.1
php53-sysvshm-5.3.17-59.1
php53-tokenizer-5.3.17-59.1
php53-wddx-5.3.17-59.1
php53-xmlreader-5.3.17-59.1
php53-xmlrpc-5.3.17-59.1
php53-xmlwriter-5.3.17-59.1
php53-xsl-5.3.17-59.1
php53-zip-5.3.17-59.1
php53-zlib-5.3.17-59.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
apache2-mod_php53-5.3.17-59.1
php53-5.3.17-59.1
php53-bcmath-5.3.17-59.1
php53-bz2-5.3.17-59.1
php53-calendar-5.3.17-59.1
php53-ctype-5.3.17-59.1
php53-curl-5.3.17-59.1
php53-dba-5.3.17-59.1
php53-dom-5.3.17-59.1
php53-exif-5.3.17-59.1
php53-fastcgi-5.3.17-59.1
php53-fileinfo-5.3.17-59.1
php53-ftp-5.3.17-59.1
php53-gd-5.3.17-59.1
php53-gettext-5.3.17-59.1
php53-gmp-5.3.17-59.1
php53-iconv-5.3.17-59.1
php53-intl-5.3.17-59.1
php53-json-5.3.17-59.1
php53-ldap-5.3.17-59.1
php53-mbstring-5.3.17-59.1
php53-mcrypt-5.3.17-59.1
php53-mysql-5.3.17-59.1
php53-odbc-5.3.17-59.1
php53-openssl-5.3.17-59.1
php53-pcntl-5.3.17-59.1
php53-pdo-5.3.17-59.1
php53-pear-5.3.17-59.1
php53-pgsql-5.3.17-59.1
php53-pspell-5.3.17-59.1
php53-shmop-5.3.17-59.1
php53-snmp-5.3.17-59.1
php53-soap-5.3.17-59.1
php53-suhosin-5.3.17-59.1
php53-sysvmsg-5.3.17-59.1
php53-sysvsem-5.3.17-59.1
php53-sysvshm-5.3.17-59.1
php53-tokenizer-5.3.17-59.1
php53-wddx-5.3.17-59.1
php53-xmlreader-5.3.17-59.1
php53-xmlrpc-5.3.17-59.1
php53-xmlwriter-5.3.17-59.1
php53-xsl-5.3.17-59.1
php53-zip-5.3.17-59.1
php53-zlib-5.3.17-59.1
SUSE Linux Enterprise Software Development Kit 11 SP4
php53-devel-5.3.17-59.1
php53-imap-5.3.17-59.1
php53-posix-5.3.17-59.1
php53-readline-5.3.17-59.1
php53-sockets-5.3.17-59.1
php53-sqlite-5.3.17-59.1
php53-tidy-5.3.17-59.1

Ссылки

Описание

Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:apache2-mod_php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bcmath-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bz2-5.3.17-59.1
Ссылки

Описание

The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that does not exist.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:apache2-mod_php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bcmath-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bz2-5.3.17-59.1
Ссылки

Описание

The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not properly retrieve keys, which allows remote attackers to cause a denial of service (NULL pointer dereference, type confusion, and application crash) or possibly execute arbitrary code via crafted serialized data representing a numerically indexed _cookies array, related to the SoapClient::__call method in ext/soap/soap.c.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:apache2-mod_php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bcmath-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bz2-5.3.17-59.1
Ссылки

Описание

ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:apache2-mod_php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bcmath-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bz2-5.3.17-59.1
Ссылки

Описание

Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:apache2-mod_php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bcmath-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bz2-5.3.17-59.1
Ссылки

Описание

Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact by triggering a wddx_deserialize call on XML data containing a crafted var element.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:apache2-mod_php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bcmath-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bz2-5.3.17-59.1
Ссылки

Описание

The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) by placing a PK\x05\x06 signature at an invalid location.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:apache2-mod_php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bcmath-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bz2-5.3.17-59.1
Ссылки

Описание

The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (type confusion and application crash) via crafted serialized _cookies data, related to the SoapClient::__call method in ext/soap/soap.c.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:apache2-mod_php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bcmath-5.3.17-59.1
SUSE Linux Enterprise Server 11 SP4:php53-bz2-5.3.17-59.1
Ссылки
Уязвимость SUSE-SU-2016:1145-1