php5 - security update

Fixed packages 1

Vulnerabilities 20

• Unscored —
  CVE-2015-3307

  The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 a…

  Jun 9, 2015
• Unscored —
  CVE-2015-3411

  PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which…

  php5 Ubuntu
  May 16, 2016
• Unscored —
  CVE-2015-3412

  PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which…

  php5 Ubuntu
  May 16, 2016
• Unscored —
  CVE-2015-4021 EPSS 20%

  The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 doe…

  php5 Ubuntu
  Jun 9, 2015
• Unscored —
  CVE-2015-4022 EPSS 20%

  Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x befo…

  php5 Ubuntu
  Jun 9, 2015
• Unscored —
  CVE-2015-4025 EPSS 17%

  PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character …

  php5 Ubuntu
  Jun 9, 2015
• Unscored —
  CVE-2015-4026 EPSS 19%

  The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname up…

  php5 Ubuntu
  Jun 9, 2015
• Unscored —
  CVE-2015-4147 EPSS 12%

  The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does…

  php5 Ubuntu
  Jun 9, 2015
• Unscored —
  CVE-2015-4148 Public exploit EPSS 20%

  The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not…

  php5 Ubuntu
  Jun 9, 2015
• Unscored —
  CVE-2015-4598

  PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, whic…

  php5 Ubuntu
  May 16, 2016
• Unscored —
  CVE-2015-4599 EPSS 10%

  The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 a…

  php5 Ubuntu
  May 16, 2016
• Unscored —
  CVE-2015-4600 EPSS 10%

  The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers…

  php5 Ubuntu
  May 16, 2016
• Unscored —
  CVE-2015-4601

  PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbi…

  php5 Ubuntu
  May 16, 2016
• Unscored —
  CVE-2015-4602 EPSS 10%

  The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5…

  php5 Ubuntu
  May 16, 2016
• Unscored —
  CVE-2015-4604

  The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.…

  May 16, 2016
• Unscored —
  CVE-2015-4605

  The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5…

  May 16, 2016
• Unscored —
  CVE-2015-4643 EPSS 15%

  Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x befo…

  php5 Ubuntu
  May 16, 2016
• Unscored —
  CVE-2015-4644

  The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before …

  php5 Ubuntu
  May 16, 2016
• Unscored —
  CVE-2015-5589

  The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x befor…

  php5 Ubuntu
  May 16, 2016
• Unscored —
  CVE-2015-5590

  Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5…

  php5 Ubuntu
  Jan 19, 2016