MGASA-2015-0090

Dashboard / Vulnerabilities / MGASA-2015-0090

MGASA-2015-0090

Summary: Updated php packages fix security vulnerabilities

Details: Updated php packages fix security vulnerabilities: It was discovered that the PHP opcache component incorrectly handled memory. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2015-1351). It was discovered that the PHP PostgreSQL database extension incorrectly handled certain pointers. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2015-1352). Use after free vulnerability in unserialize() with DateTimeZone in PHP before 5.5.22 (CVE-2015-0273). PHP has been updated to version 5.5.22, which fixes these issues and other bugs.

References: https://advisories.mageia.org/MGASA-2015-0090.html, https://bugs.mageia.org/show_bug.cgi?id=15319, http://php.net/ChangeLog-5.php#5.5.22, http://www.ubuntu.com/usn/usn-2501-1/