Skip to content
OpenAdvisories
Medium ELSA-2015-1219 8 CVEs

Moderate: php54-php security update (Oracle Linux 7)

Published Feb 4, 2016 · Updated Feb 4, 2016

Ecosystem: Oracle Linux

Summary

[5.4.40-3]
- fix more functions accept paths with NUL character #1213407

[5.4.40-2]
- core: fix multipart/form-data request can use excessive
amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
CVE-2015-4025, CVE-2015-4026
- ftp: fix integer overflow leading to heap overflow when
reading FTP file listing CVE-2015-4022
- phar: fix memory corruption in phar_parse_tarfile caused by
empty entry file name CVE-2015-4021
- pgsql: fix NULL pointer dereference CVE-2015-1352

Fixed packages 25

ReleasePackageFixed in
Oracle Linux · 7 php54-php 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-bcmath 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-cli 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-common 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-dba 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-devel 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-enchant 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-fpm 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-gd 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-imap 0:5.4.40-3.el6
Oracle Linux · 7 php54-php-intl 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-ldap 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-mbstring 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-mysqlnd 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-odbc 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-pdo 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-pgsql 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-process 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-pspell 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-recode 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-snmp 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-soap 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-tidy 0:5.4.40-3.el6
Oracle Linux · 7 php54-php-xml 0:5.4.40-3.el7
Oracle Linux · 7 php54-php-xmlrpc 0:5.4.40-3.el7

Vulnerabilities 8

  • Unscored —
    CVE-2015-4021 EPSS 20%

    The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 doe…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4022 EPSS 20%

    Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x befo…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4024 EPSS 42%

    Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4025 EPSS 17%

    PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character …

    php5 Ubuntu
  • Unscored —
    CVE-2015-4026 EPSS 19%

    The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname up…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4598

    PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, whic…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4643 EPSS 15%

    Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x befo…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4644

    The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before …

    php5 Ubuntu