php5 - security update

Fixed packages 1

Vulnerabilities 14

• High 8.1
  CVE-2016-5385 EPSS 50%

  HTTP Proxy header vulnerability

  PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redi…

  php5 php7.0 drupal/core guzzlehttp/guzzle Ubuntu Packagist
  Jul 19, 2016
• Unscored —
  CVE-2016-7124 EPSS 16%

  ext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which al…

  php5 php7.0 Ubuntu
  Sep 12, 2016
• Unscored —
  CVE-2016-7128

  The exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case…

  php5 php7.0 Ubuntu
  Sep 12, 2016
• Unscored —
  CVE-2016-7129

  The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attacker…

  php5 php7.0 Ubuntu
  Sep 12, 2016
• Unscored —
  CVE-2016-7130

  The php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers…

  php5 php7.0 Ubuntu
  Sep 12, 2016
• Unscored —
  CVE-2016-7131

  ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL p…

  php5 php7.0 Ubuntu
  Sep 12, 2016
• Unscored —
  CVE-2016-7132

  ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL p…

  php5 php7.0 Ubuntu
  Sep 12, 2016
• Unscored —
  CVE-2016-7411

  ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote a…

  php5 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7412

  ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the …

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7413

  Use-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before …

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7414

  The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressed…

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7416

  ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale …

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7417

  ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validatin…

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7418 EPSS 11%

  The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attacker…

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016