Skip to content
OpenAdvisories
Unscored DSA-3380-1 2 CVEs

php5 - security update

Published Oct 27, 2015 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 php5 5.4.45-0+deb7u2
Debian · 8 php5 5.6.14+dfsg-0+deb8u1

Vulnerabilities 2

  • Unscored —
    CVE-2015-7803 EPSS 10%

    The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attacker…

  • Unscored —

    Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allo…