[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250038

 
 

909

 
 

195843

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2016:2459-1 -- SLES apache2-mod_php53, php53

ID: oval:org.secpod.oval:def:89045388Date: (C)2021-08-03   (M)2024-04-17
Class: PATCHFamily: unix




This update for php53 fixes the following security issues: * CVE-2016-7124: Create an Unexpected Object and Don"t Invoke __wakeup in Deserialization * CVE-2016-7125: PHP Session Data Injection Vulnerability * CVE-2016-7126: select_colors write out-of-bounds * CVE-2016-7127: imagegammacorrect allowed arbitrary write access * CVE-2016-7128: Memory Leakage In exif_process_IFD_in_TIFF * CVE-2016-7129: wddx_deserialize allows illegal memory access * CVE-2016-7130: wddx_deserialize null dereference * CVE-2016-7131: wddx_deserialize null dereference with invalid xml * CVE-2016-7132: wddx_deserialize null dereference in php_wddx_pop_element * CVE-2016-7411: php5: Memory corruption when destructing deserialized object * CVE-2016-7412: Heap overflow in mysqlnd when not receiving UNSIGNED_FLAG in BIT field * CVE-2016-7413: Use after free in wddx_deserialize * CVE-2016-7414: Out of bounds heap read when verifying signature of zip phar in phar_parse_zipfile * CVE-2016-7416: Stack based buffer overflow in msgfmt_format_message * CVE-2016-7417: Missing type check when unserializing SplArray * CVE-2016-7418: Null pointer dereference in php_wddx_push_element

Platform:
SUSE Linux Enterprise Server 11 SP4
Product:
apache2-mod_php53
php53
Reference:
SUSE-SU-2016:2459-1
CVE-2016-7124
CVE-2016-7125
CVE-2016-7126
CVE-2016-7127
CVE-2016-7128
CVE-2016-7129
CVE-2016-7130
CVE-2016-7131
CVE-2016-7132
CVE-2016-7411
CVE-2016-7412
CVE-2016-7413
CVE-2016-7414
CVE-2016-7416
CVE-2016-7417
CVE-2016-7418
CVE    16
CVE-2016-7127
CVE-2016-7125
CVE-2016-7126
CVE-2016-7124
...
CPE    5
cpe:/a:apache2:apache2-mod_php53
cpe:/a:php:php
cpe:/o:suse:suse_linux_enterprise_server:11:sp4
cpe:/a:php:php:7.0.0
...

© SecPod Technologies