php5 - security update

Fixed packages 1

Vulnerabilities 16

• Unscored —
  CVE-2016-7124 EPSS 16%

  ext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which al…

  php5 php7.0 Ubuntu
  Sep 12, 2016
• Unscored —
  CVE-2016-7125

  ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers inc…

  php5 php7.0 Ubuntu
  Sep 12, 2016
• Unscored —
  CVE-2016-7126

  The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly valida…

  Sep 12, 2016
• Unscored —
  CVE-2016-7127

  The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gam…

  php5 php7.0 Ubuntu
  Sep 12, 2016
• Unscored —
  CVE-2016-7128

  The exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case…

  php5 php7.0 Ubuntu
  Sep 12, 2016
• Unscored —
  CVE-2016-7129

  The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attacker…

  php5 php7.0 Ubuntu
  Sep 12, 2016
• Unscored —
  CVE-2016-7130

  The php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers…

  php5 php7.0 Ubuntu
  Sep 12, 2016
• Unscored —
  CVE-2016-7131

  ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL p…

  php5 php7.0 Ubuntu
  Sep 12, 2016
• Unscored —
  CVE-2016-7132

  ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL p…

  php5 php7.0 Ubuntu
  Sep 12, 2016
• Unscored —
  CVE-2016-7411

  ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote a…

  php5 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7412

  ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the …

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7413

  Use-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before …

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7414

  The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressed…

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7416

  ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale …

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7417

  ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validatin…

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7418 EPSS 11%

  The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attacker…

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016