Security update for php53
php53 was updated to fix five security issues. These security issues were fixed: - CVE-2016-5769: mcrypt: Heap Overflow due to integer overflows (bsc#986388). - CVE-2015-8935: XSS in header() with Internet Explorer (bsc#986004). - CVE-2016-5772: Double Free Courruption in wddx_deserialize (bsc#986244). - CVE-2016-5766: Integer Overflow in _gd2GetHeader() resulting in heap overflow (bsc#986386). - CVE-2016-5767: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow (bsc#986393).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
php53 was updated to fix five security issues. These security issues were fixed: - CVE-2016-5769: mcrypt: Heap Overflow due to integer overflows (bsc#986388). - CVE-2015-8935: XSS in header() with Internet Explorer (bsc#986004). - CVE-2016-5772: Double Free Courruption in wddx_deserialize (bsc#986244). - CVE-2016-5766: Integer Overflow in _gd2GetHeader() resulting in heap overflow (bsc#986386). - CVE-2016-5767: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow (bsc#986393).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/986004
- https://bugzilla.suse.com/986244
- https://bugzilla.suse.com/986386
- https://bugzilla.suse.com/986388
- https://bugzilla.suse.com/986393
- https://www.suse.com/security/cve/CVE-2015-8935
- https://www.suse.com/security/cve/CVE-2016-5766
- https://www.suse.com/security/cve/CVE-2016-5767
- https://www.suse.com/security/cve/CVE-2016-5769
- https://www.suse.com/security/cve/CVE-2016-5772
- https://www.suse.com/support/update/announcement/2016/suse-su-20162013-1/