SUSE: 2016:2013-1 Important: php53 XSS And Heap Overflow
suse
August 9, 2016
An update that fixes 5 vulnerabilities is now available
Summary
php53 was updated to fix five security issues. These security issues were fixed: - CVE-2016-5769: mcrypt: Heap Overflow due to integer overflows (bsc#986388). - CVE-2015-8935: XSS in header() with Internet Explorer (bsc#986004). - CVE-2016-5772: Double Free Courruption in wddx_deserialize (bsc#986244). - CVE-2016-5766: Integer Overflow in _gd2GetHeader() resulting in heap overflow (bsc#986386). - CVE-2016-5767: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow (bsc#986393). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-php53-12683=1 - SUSE Linux Enterprise Server 11-SP4:
Topics Covered
References
#986004 #986244 #986386 #986388 #986393
Cross- CVE-2015-8935 CVE-2016-5766 CVE-2016-5767
CVE-2016-5769 CVE-2016-5772
Affected Products:
SUSE Linux Enterprise Software Development Kit 11-SP4
SUSE Linux Enterprise Server 11-SP4
SUSE Linux Enterprise Debuginfo 11-SP4
https://www.suse.com/security/cve/CVE-2015-8935.html
https://www.suse.com/security/cve/CVE-2016-5766.html
https://www.suse.com/security/cve/CVE-2016-5767.html
https://www.suse.com/security/cve/CVE-2016-5769.html
https://www.suse.com/security/cve/CVE-2016-5772.html
https://bugzilla.suse.com/986004
https://bugzilla.suse.com/986244
https://bugzilla.suse.com/986386
https://bugzilla.suse.com/986388
https://bugzilla.suse.com/986393
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2016:2013-1
Rating: important
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!