php5 - security update

Fixed packages 1

Vulnerabilities 10

• High 8.1
  CVE-2016-5385 EPSS 50%

  HTTP Proxy header vulnerability

  PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redi…

  php5 php7.0 drupal/core guzzlehttp/guzzle Ubuntu Packagist
  Jul 19, 2016
• Unscored —
  CVE-2016-5399 Public exploit

  The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote atta…

  php5 php7.0 Ubuntu
  Apr 21, 2017
• Unscored —
  CVE-2016-6289

  Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, …

  php5 php7.0 Ubuntu
  Jul 25, 2016
• Unscored —
  CVE-2016-6290

  ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a cert…

  php5 php7.0 Ubuntu
  Jul 25, 2016
• Unscored —
  CVE-2016-6291

  The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before…

  php5 php7.0 Ubuntu
  Jul 25, 2016
• Unscored —
  CVE-2016-6292

  The exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0…

  php5 php7.0 Ubuntu
  Jul 25, 2016
• Unscored —
  CVE-2016-6294

  The locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and…

  php5 php7.0 Ubuntu
  Jul 25, 2016
• Unscored —
  CVE-2016-6295

  ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unseriali…

  php5 php7.0 Ubuntu
  Jul 25, 2016
• Unscored —
  CVE-2016-6296

  Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in P…

  php5 php7.0 xmlrpc-epi xmlrpc-epi Debian Ubuntu
  Jul 25, 2016
• Unscored —
  CVE-2016-6297

  Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.2…

  php5 php7.0 Ubuntu
  Jul 25, 2016