The following security-related issues were resolved :

Out-of-bounds read in imagescale (CVE-2013-7456)

Integer underflow causing arbitrary null write in fread/gzread (CVE-2016-5096)

The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause a denial of service (uninitialized pointer dereference) or possibly have unspecified other impact via a crafted TAR archive. (CVE-2016-4343)

Integer overflow in php_html_entities() (CVE-2016-5094)

Integer overflow in php_filter_full_special_chars() (CVE-2016-5095)

Out-of-bounds heap read in get_icu_value_internal (CVE-2016-5093)

(Updated 2016-06-15: CVE-2016-5095 was fixed in this version, but was not previously listed in this errata.)

This update for php5 fixes the following issues :

  - CVE-2013-7456: imagescale out-of-bounds read     (bnc#982009).

  - CVE-2016-5093: get_icu_value_internal out-of-bounds read     (bnc#982010).

  - CVE-2016-5094: Don't create strings with lengths outside     of valid range (bnc#982011).

  - CVE-2016-5095: Don't create strings with lengths outside     of valid range (bnc#982012).

  - CVE-2016-5096: int/size_t confusion in fread     (bsc#982013).

  - CVE-2015-8877: The gdImageScaleTwoPass function in     gd_interpolation.c in the GD Graphics Library (aka     libgd) as used in PHP used inconsistent allocate and     free approaches, which allowed remote attackers to cause     a denial of service (memory consumption) via a crafted     call, as demonstrated by a call to the PHP imagescale     function (bsc#981061).

  - CVE-2015-8876: Zend/zend_exceptions.c in PHP did not     validate certain Exception objects, which allowed remote     attackers to cause a denial of service (NULL pointer     dereference and application crash) or trigger unintended     method execution via crafted serialized data     (bsc#981049).

  - CVE-2015-8879: The odbc_bindcols function in     ext/odbc/php_odbc.c in PHP mishandles driver behavior     for SQL_WVARCHAR columns, which allowed remote attackers     to cause a denial of service (application crash) in     opportunistic circumstances by leveraging use of the     odbc_fetch_array function to access a certain type of     Microsoft SQL Server table (bsc#981050).

This update was imported from the SUSE:SLE-12:Update update project.

- CVE-2016-5093.patch Absence of null character causes     unexpected zend_string length and leaks heap memory. The     test script uses locale_get_primary_language to reach     get_icu_value_internal but there are some other     functions that also trigger this issue:
    locale_canonicalize, locale_filter_matches,     locale_lookup, locale_parse

  - CVE-2016-5094.patch don't create strings with lengths     outside int range

  - CVE-2016-5095.patch similar to CVE-2016-5094 don't     create strings with lengths outside int range

  - CVE-2016-5096.patch int/size_t confusion in fread

  - CVE-TEMP-bug-70661.patch bug70661: Use After Free     Vulnerability in WDDX Packet Deserialization

  - CVE-TEMP-bug-70728.patch bug70728: Type Confusion     Vulnerability in PHP_to_XMLRPC_worker()

  - CVE-TEMP-bug-70741.patch bug70741: Session WDDX Packet     Deserialization Type Confusion Vulnerability

  - CVE-TEMP-bug-70480-raw.patch bug70480:
    php_url_parse_ex() buffer overflow read

For Debian 7 'Wheezy', these problems have been fixed in version 5.4.45-0+deb7u4.

We recommend that you upgrade your php5 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
91466	Amazon Linux AMI : php55 (ALAS-2016-707)	Nessus	Amazon Linux Local Security Checks	2016/6/6	2018/4/18	high
91869	openSUSE Security Update : php5 (openSUSE-2016-776)	Nessus	SuSE Local Security Checks	2016/6/28	2021/1/19	critical
91900	Debian DLA-533-1 : php5 security update	Nessus	Debian Local Security Checks	2016/7/1	2021/1/11	high
131592	EulerOS 2.0 SP2 : php (EulerOS-SA-2019-2438)	Nessus	Huawei Local Security Checks	2019/12/4	2023/4/25	critical

检测

插件搜索

high

critical

high

critical