Skip to content
OpenAdvisories
Medium ELSA-2016-2598 4 CVEs

Moderate: php security and bug fix update (Oracle Linux 7)

Published Nov 9, 2016 · Updated Nov 9, 2016

Ecosystem: Oracle Linux

Summary

[5.4.16-42]
- bz2: fix improper error handling in bzread() CVE-2016-5399

[5.4.16-41]
- gd: fix integer overflow in _gd2GetHeader() resulting in
heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
CVE-2016-5768

[5.4.16-40]
- don't set environmental variable based on user supplied Proxy
request header CVE-2016-5385

[5.4.16-39]
- fix segmentation fault in header_register_callback #1344578

[5.4.16-38]
- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979

[5.4.16-37]
- session: fix segfault in session with rfc1867 #1297179

Fixed packages 25

ReleasePackageFixed in
Oracle Linux · 7 php 0:5.4.16-42.el7
Oracle Linux · 7 php-bcmath 0:5.4.16-42.el7
Oracle Linux · 7 php-cli 0:5.4.16-42.el7
Oracle Linux · 7 php-common 0:5.4.16-42.el7
Oracle Linux · 7 php-dba 0:5.4.16-42.el7
Oracle Linux · 7 php-devel 0:5.4.16-42.el7
Oracle Linux · 7 php-embedded 0:5.4.16-42.el7
Oracle Linux · 7 php-enchant 0:5.4.16-42.el7
Oracle Linux · 7 php-fpm 0:5.4.16-42.el7
Oracle Linux · 7 php-gd 0:5.4.16-42.el7
Oracle Linux · 7 php-intl 0:5.4.16-42.el7
Oracle Linux · 7 php-ldap 0:5.4.16-42.el7
Oracle Linux · 7 php-mbstring 0:5.4.16-42.el7
Oracle Linux · 7 php-mysql 0:5.4.16-42.el7
Oracle Linux · 7 php-mysqlnd 0:5.4.16-42.el7
Oracle Linux · 7 php-odbc 0:5.4.16-42.el7
Oracle Linux · 7 php-pdo 0:5.4.16-42.el7
Oracle Linux · 7 php-pgsql 0:5.4.16-42.el7
Oracle Linux · 7 php-process 0:5.4.16-42.el7
Oracle Linux · 7 php-pspell 0:5.4.16-42.el7
Oracle Linux · 7 php-recode 0:5.4.16-42.el7
Oracle Linux · 7 php-snmp 0:5.4.16-42.el7
Oracle Linux · 7 php-soap 0:5.4.16-42.el7
Oracle Linux · 7 php-xml 0:5.4.16-42.el7
Oracle Linux · 7 php-xmlrpc 0:5.4.16-42.el7

Vulnerabilities 4

  • Unscored —
    CVE-2016-5399 Public exploit

    The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote atta…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-5766

    Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used…

    libgd2 libgd2 gd Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-5767

    Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used…

    libgd2 gd Debian Alpine
  • Unscored —
    CVE-2016-5768

    Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in…

    php5 php7.0 Ubuntu