gpp_maybe Security update for php5

SUSE-SLE-SDK-12-SP1-2016-1446

This update for php5 fixes the following security issues: * CVE-2016-7411: php5: Memory corruption when destructing deserialized object * CVE-2016-7412: Heap overflow in mysqlnd when not receiving UNSIGNED_FLAG in BIT field * CVE-2016-7413: Use after free in wddx_deserialize * CVE-2016-7414: Out of bounds heap read when verifying signature of zip phar in phar_parse_zipfile * CVE-2016-7416: Stack based buffer overflow in msgfmt_format_message * CVE-2016-7417: Missing type check when unserializing SplArray * CVE-2016-7418: Null pointer dereference in php_wddx_push_element

• Release Date
  Oct 7 2016
• References
  Bugzilla: 999679, 999685, 999684, 999680, 999682, 999820, 999819
  CVEs: CVE-2016-7418, CVE-2016-7417, CVE-2016-7416, CVE-2016-7414, CVE-2016-7413, CVE-2016-7412, CVE-2016-7411
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.1 ppc64le

• Packages
  php5
  PHP5 Core Files

  5.5.14-78.1 lock src

  php5-devel
  Include files of PHP5

  5.5.14-78.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.1 s390x

• Packages
  php5
  PHP5 Core Files

  5.5.14-78.1 lock src

  php5-devel
  Include files of PHP5

  5.5.14-78.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.1 x86_64

• Packages
  php5
  PHP5 Core Files

  5.5.14-78.1 lock src

  php5-devel
  Include files of PHP5

  5.5.14-78.1 lock rpm