php5 - security update

Fixed packages 1

Vulnerabilities 19

• Unscored —
  CVE-2016-4473

  /ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as p…

  Jun 8, 2017
• Unscored —
  CVE-2016-4538

  The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies c…

  php5 php7.0 Ubuntu
  May 22, 2016
• Unscored —
  CVE-2016-5114

  sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of t…

  php5 Ubuntu
  Aug 7, 2016
• Unscored —
  CVE-2016-5399 Public exploit

  The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote atta…

  php5 php7.0 Ubuntu
  Apr 21, 2017
• Unscored —
  CVE-2016-5768

  Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in…

  php5 php7.0 Ubuntu
  Aug 7, 2016
• Unscored —
  CVE-2016-5769

  Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x befor…

  php5 php7.0 Ubuntu
  Aug 7, 2016
• Unscored —
  CVE-2016-5770

  Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and …

  Aug 7, 2016
• Unscored —
  CVE-2016-5771 EPSS 15%

  spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize…

  php5 Ubuntu
  Aug 7, 2016
• Unscored —
  CVE-2016-5772

  Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5…

  php5 php7.0 Ubuntu
  Aug 7, 2016
• Unscored —
  CVE-2016-5773

  php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts wit…

  php5 php7.0 Ubuntu
  Aug 7, 2016
• Unscored —
  CVE-2016-6289

  Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, …

  php5 php7.0 Ubuntu
  Jul 25, 2016
• Unscored —
  CVE-2016-6290

  ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a cert…

  php5 php7.0 Ubuntu
  Jul 25, 2016
• Unscored —
  CVE-2016-6291

  The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before…

  php5 php7.0 Ubuntu
  Jul 25, 2016
• Unscored —
  CVE-2016-6292

  The exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0…

  php5 php7.0 Ubuntu
  Jul 25, 2016
• Unscored —
  CVE-2016-6294

  The locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and…

  php5 php7.0 Ubuntu
  Jul 25, 2016
• Unscored —
  CVE-2016-6295

  ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unseriali…

  php5 php7.0 Ubuntu
  Jul 25, 2016
• Unscored —
  CVE-2016-6296

  Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in P…

  php5 php7.0 xmlrpc-epi xmlrpc-epi Debian Ubuntu
  Jul 25, 2016
• Unscored —
  CVE-2016-6297

  Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.2…

  php5 php7.0 Ubuntu
  Jul 25, 2016
• Unscored —
  CVE-2016-7125

  ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers inc…

  php5 php7.0 Ubuntu
  Sep 12, 2016