Skip to content
OpenAdvisories
Unscored DLA-1034-1 5 CVEs

php5 - security update

Published Jul 21, 2017 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 php5 5.4.45-0+deb7u9

Vulnerabilities 5

  • Unscored —

    In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be use…

  • Unscored —

    In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able…

  • Unscored —

    In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check t…

  • Unscored —

    In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian pars…

  • Unscored —

    In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious arc…