php5 - security update

Fixed packages 1

Vulnerabilities 11

• Unscored —
  CVE-2016-10158

  The exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1…

  php5 php7.0 Ubuntu
  Jan 24, 2017
• Unscored —
  CVE-2016-10159

  Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 al…

  php5 php7.0 Ubuntu
  Jan 24, 2017
• Unscored —
  CVE-2016-10160

  Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 al…

  php5 php7.0 Ubuntu
  Jan 24, 2017
• Unscored —
  CVE-2016-10161 EPSS 13%

  The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x bef…

  php5 php7.0 Ubuntu
  Jan 24, 2017
• Unscored —
  CVE-2016-10712

  In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can b…

  php5 Ubuntu
  Feb 9, 2018
• Unscored —
  CVE-2016-2554 EPSS 11%

  Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows re…

  php5 Ubuntu
  May 16, 2016
• Unscored —
  CVE-2016-3141 Public exploit EPSS 36%

  Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote…

  php5 Ubuntu
  Mar 31, 2016
• Unscored —
  CVE-2016-3142

  The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remo…

  php5 Ubuntu
  Mar 31, 2016
• Unscored —
  CVE-2016-4342

  ext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompres…

  php5 Ubuntu
  May 22, 2016
• Unscored —
  CVE-2016-9934

  ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL p…

  php5 Ubuntu
  Jan 4, 2017
• Unscored —
  CVE-2016-9935

  The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attacker…

  php5 php7.0 Ubuntu
  Jan 4, 2017