php5 - several

Fixed packages 2

Vulnerabilities 8

• Unscored —
  CVE-2010-2531

  The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certai…

  Aug 20, 2010
• Unscored —
  CVE-2011-0420 Public exploit EPSS 14%

  The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-depende…

  Feb 18, 2011
• Unscored —
  CVE-2011-0421 Public exploit EPSS 14%

  The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a …

  libzip Debian
  Mar 20, 2011
• Unscored —
  CVE-2011-0708 Public exploit

  exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote at…

  Mar 20, 2011
• Unscored —
  CVE-2011-1153

  Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-de…

  Mar 16, 2011
• Unscored —
  CVE-2011-1466

  Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent att…

  Mar 20, 2011
• Unscored —
  CVE-2011-1471 Public exploit EPSS 13%

  Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to…

  Mar 20, 2011
• Unscored —
  CVE-2011-2202 Public exploit EPSS 20%

  The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipa…

  Jun 16, 2011