php5 - security update

Fixed packages 1

Vulnerabilities 16

• Unscored —
  CVE-2015-8865

  The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo component in PHP before 5.5.34, 5.6…

  php5 php7.0 file file Debian Ubuntu
  May 20, 2016
• Unscored —
  CVE-2015-8866

  ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread fro…

  php5 Ubuntu
  May 22, 2016
• Unscored —
  CVE-2015-8878

  main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows…

  May 22, 2016
• Unscored —
  CVE-2015-8879

  The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR colu…

  php5 Ubuntu
  May 22, 2016
• Unscored —
  CVE-2016-4070

  Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP before 5.5.34, 5.6.x before 5.6.20, an…

  php5 php7.0 Ubuntu
  May 20, 2016
• Unscored —
  CVE-2016-4071 Public exploit EPSS 20%

  Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20…

  php5 php7.0 Ubuntu
  May 20, 2016
• Unscored —
  CVE-2016-4072

  The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute a…

  php5 php7.0 Ubuntu
  May 20, 2016
• Unscored —
  CVE-2016-4073

  Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.…

  php5 php7.0 Ubuntu
  May 20, 2016
• Unscored —
  CVE-2016-4343

  The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size…

  php5 Ubuntu
  May 22, 2016
• Unscored —
  CVE-2016-4537

  The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a …

  php5 php7.0 Ubuntu
  May 22, 2016
• Unscored —
  CVE-2016-4539

  The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 all…

  php5 php7.0 Ubuntu
  May 22, 2016
• Unscored —
  CVE-2016-4540

  The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x…

  php5 php7.0 Ubuntu
  May 22, 2016
• Unscored —
  CVE-2016-4541

  The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x …

  php5 php7.0 Ubuntu
  May 22, 2016
• Unscored —
  CVE-2016-4542

  The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 do…

  php5 php7.0 Ubuntu
  May 22, 2016
• Unscored —
  CVE-2016-4543 EPSS 12%

  The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.…

  php5 php7.0 Ubuntu
  May 22, 2016
• Unscored —
  CVE-2016-4544

  The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0…

  php5 php7.0 Ubuntu
  May 22, 2016