shield Security update for php5

SUSE-SLE-SDK-12-SP1-2016-895

This update for php5 fixes the following issues: Security issues fixed: - CVE-2016-4346: heap overflow in ext/standard/string.c (bsc#977994) - CVE-2016-4342: heap corruption in tar/zip/phar parser (bsc#977991) - CVE-2016-4537, CVE-2016-4538: bcpowmod accepts negative scale causing heap buffer overflow corrupting _one_ definition (bsc#978827) - CVE-2016-4539: Malformed input causes segmentation fault in xml_parse_into_struct() function (bsc#978828) - CVE-2016-4540, CVE-2016-4541: Out-of-bounds memory read in zif_grapheme_stripos when given negative offset (bsc#978829) - CVE-2016-4542, CVE-2016-4543, CVE-2016-4544: Out-of-bounds heap memory read in exif_read_data() caused by malformed input (bsc#978830) - CVE-2015-4116: Use-after-free vulnerability in the spl_ptr_heap_insert function (bsc#980366) - CVE-2015-8873: Stack consumption vulnerability in Zend/zend_exceptions.c (bsc#980373) - CVE-2015-8874: Stack consumption vulnerability in GD (bsc#980375)

• Release Date
  Jun 6 2016
• References
  Bugzilla: 978827, 977994, 977991, 978829, 978828, 978830, 980366, 980375, 980373
  CVEs: CVE-2016-4540, CVE-2016-4537, CVE-2016-4543, CVE-2016-4542, CVE-2016-4541, CVE-2016-4539, CVE-2016-4544, CVE-2016-4346, CVE-2016-4342, CVE-2016-4538, CVE-2015-4116, CVE-2015-8873, CVE-2015-8874
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.1 s390x

• Packages
  php5
  PHP5 Core Files

  5.5.14-59.2 lock src

  php5-devel
  Include files of PHP5

  5.5.14-59.2 lock rpm

SUSE Linux Enterprise Software Development Kit 12.1 ppc64le

• Packages
  php5
  PHP5 Core Files

  5.5.14-59.2 lock src

  php5-devel
  Include files of PHP5

  5.5.14-59.2 lock rpm

SUSE Linux Enterprise Software Development Kit 12.1 x86_64

• Packages
  php5
  PHP5 Core Files

  5.5.14-59.2 lock src

  php5-devel
  Include files of PHP5

  5.5.14-59.2 lock rpm