Security update for php5 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:2080-1 Final 1 1 2016-08-16T07:26:11Z current 2016-08-16T07:26:11Z 2016-08-16T07:26:11Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for php5 php5 was updated to fix the following security issues: - CVE-2016-6297: Stack-based buffer overflow vulnerability in php_stream_zip_opener (bsc#991426). - CVE-2016-6291: Out-of-bounds access in exif_process_IFD_in_MAKERNOTE (bsc#991427). - CVE-2016-6289: Integer overflow leads to buffer overflow in virtual_file_ex (bsc#991428). - CVE-2016-6290: Use after free in unserialize() with Unexpected Session Deserialization (bsc#991429). - CVE-2016-5399: Improper error handling in bzread() (bsc#991430). - CVE-2016-6288: Buffer over-read in php_url_parse_ex (bsc#991433). - CVE-2016-6296: Heap buffer overflow vulnerability in simplestring_addn in simplestring.c (bsc#991437). - CVE-2016-5769: Mcrypt: Heap Overflow due to integer overflows (bsc#986388). - CVE-2015-8935: XSS in header() with Internet Explorer (bsc#986004). - CVE-2016-5772: Double free corruption in wddx_deserialize (bsc#986244). - CVE-2016-5766: Integer Overflow in _gd2GetHeader() resulting in heap overflow (bsc#986386). - CVE-2016-5767: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow (bsc#986393). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). slessp2-php5-12696 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20162080-1/ Link for SUSE-SU-2016:2080-1 https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00039.html E-Mail link for SUSE-SU-2016:2080-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/986004 SUSE Bug 986004 https://bugzilla.suse.com/986244 SUSE Bug 986244 https://bugzilla.suse.com/986386 SUSE Bug 986386 https://bugzilla.suse.com/986388 SUSE Bug 986388 https://bugzilla.suse.com/986393 SUSE Bug 986393 https://bugzilla.suse.com/991426 SUSE Bug 991426 https://bugzilla.suse.com/991427 SUSE Bug 991427 https://bugzilla.suse.com/991428 SUSE Bug 991428 https://bugzilla.suse.com/991429 SUSE Bug 991429 https://bugzilla.suse.com/991430 SUSE Bug 991430 https://bugzilla.suse.com/991433 SUSE Bug 991433 https://bugzilla.suse.com/991437 SUSE Bug 991437 https://www.suse.com/security/cve/CVE-2015-8935/ SUSE CVE CVE-2015-8935 page https://www.suse.com/security/cve/CVE-2016-5399/ SUSE CVE CVE-2016-5399 page https://www.suse.com/security/cve/CVE-2016-5766/ SUSE CVE CVE-2016-5766 page https://www.suse.com/security/cve/CVE-2016-5767/ SUSE CVE CVE-2016-5767 page https://www.suse.com/security/cve/CVE-2016-5769/ SUSE CVE CVE-2016-5769 page https://www.suse.com/security/cve/CVE-2016-5772/ SUSE CVE CVE-2016-5772 page https://www.suse.com/security/cve/CVE-2016-6288/ SUSE CVE CVE-2016-6288 page https://www.suse.com/security/cve/CVE-2016-6289/ SUSE CVE CVE-2016-6289 page https://www.suse.com/security/cve/CVE-2016-6290/ SUSE CVE CVE-2016-6290 page https://www.suse.com/security/cve/CVE-2016-6291/ SUSE CVE CVE-2016-6291 page https://www.suse.com/security/cve/CVE-2016-6296/ SUSE CVE CVE-2016-6296 page https://www.suse.com/security/cve/CVE-2016-6297/ SUSE CVE CVE-2016-6297 page SUSE Linux Enterprise Server 11 SP2-LTSS apache2-mod_php5-5.2.14-0.7.30.89.1 php5-5.2.14-0.7.30.89.1 php5-bcmath-5.2.14-0.7.30.89.1 php5-bz2-5.2.14-0.7.30.89.1 php5-calendar-5.2.14-0.7.30.89.1 php5-ctype-5.2.14-0.7.30.89.1 php5-curl-5.2.14-0.7.30.89.1 php5-dba-5.2.14-0.7.30.89.1 php5-dbase-5.2.14-0.7.30.89.1 php5-dom-5.2.14-0.7.30.89.1 php5-exif-5.2.14-0.7.30.89.1 php5-fastcgi-5.2.14-0.7.30.89.1 php5-ftp-5.2.14-0.7.30.89.1 php5-gd-5.2.14-0.7.30.89.1 php5-gettext-5.2.14-0.7.30.89.1 php5-gmp-5.2.14-0.7.30.89.1 php5-hash-5.2.14-0.7.30.89.1 php5-iconv-5.2.14-0.7.30.89.1 php5-json-5.2.14-0.7.30.89.1 php5-ldap-5.2.14-0.7.30.89.1 php5-mbstring-5.2.14-0.7.30.89.1 php5-mcrypt-5.2.14-0.7.30.89.1 php5-mysql-5.2.14-0.7.30.89.1 php5-odbc-5.2.14-0.7.30.89.1 php5-openssl-5.2.14-0.7.30.89.1 php5-pcntl-5.2.14-0.7.30.89.1 php5-pdo-5.2.14-0.7.30.89.1 php5-pear-5.2.14-0.7.30.89.1 php5-pgsql-5.2.14-0.7.30.89.1 php5-pspell-5.2.14-0.7.30.89.1 php5-shmop-5.2.14-0.7.30.89.1 php5-snmp-5.2.14-0.7.30.89.1 php5-soap-5.2.14-0.7.30.89.1 php5-suhosin-5.2.14-0.7.30.89.1 php5-sysvmsg-5.2.14-0.7.30.89.1 php5-sysvsem-5.2.14-0.7.30.89.1 php5-sysvshm-5.2.14-0.7.30.89.1 php5-tokenizer-5.2.14-0.7.30.89.1 php5-wddx-5.2.14-0.7.30.89.1 php5-xmlreader-5.2.14-0.7.30.89.1 php5-xmlrpc-5.2.14-0.7.30.89.1 php5-xmlwriter-5.2.14-0.7.30.89.1 php5-xsl-5.2.14-0.7.30.89.1 php5-zip-5.2.14-0.7.30.89.1 php5-zlib-5.2.14-0.7.30.89.1 apache2-mod_php5-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-bcmath-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-bz2-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-calendar-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-ctype-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-curl-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-dba-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-dbase-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-dom-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-exif-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-fastcgi-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-ftp-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-gd-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-gettext-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-gmp-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-hash-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-iconv-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-json-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-ldap-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-mbstring-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-mcrypt-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-mysql-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-odbc-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-openssl-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-pcntl-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-pdo-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-pear-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-pgsql-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-pspell-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-shmop-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-snmp-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-soap-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-suhosin-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-sysvmsg-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-sysvsem-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-sysvshm-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-tokenizer-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-wddx-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-xmlreader-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-xmlrpc-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-xmlwriter-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-xsl-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-zip-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS php5-zlib-5.2.14-0.7.30.89.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function. CVE-2015-8935 SUSE Linux Enterprise Server 11 SP2-LTSS:apache2-mod_php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bcmath-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bz2-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-calendar-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ctype-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-curl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dba-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dbase-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dom-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-exif-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-fastcgi-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ftp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gd-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gettext-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-hash-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-iconv-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-json-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ldap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mbstring-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mcrypt-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mysql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-odbc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-openssl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pcntl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pdo-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pear-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pgsql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pspell-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-shmop-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-snmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-soap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-suhosin-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvmsg-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvsem-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvshm-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-tokenizer-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-wddx-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlreader-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlrpc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlwriter-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xsl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zip-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zlib-5.2.14-0.7.30.89.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162080-1/ https://www.suse.com/security/cve/CVE-2015-8935.html CVE-2015-8935 https://bugzilla.suse.com/986004 SUSE Bug 986004 The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive. CVE-2016-5399 SUSE Linux Enterprise Server 11 SP2-LTSS:apache2-mod_php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bcmath-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bz2-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-calendar-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ctype-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-curl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dba-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dbase-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dom-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-exif-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-fastcgi-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ftp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gd-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gettext-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-hash-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-iconv-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-json-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ldap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mbstring-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mcrypt-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mysql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-odbc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-openssl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pcntl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pdo-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pear-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pgsql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pspell-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-shmop-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-snmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-soap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-suhosin-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvmsg-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvsem-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvshm-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-tokenizer-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-wddx-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlreader-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlrpc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlwriter-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xsl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zip-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zlib-5.2.14-0.7.30.89.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162080-1/ https://www.suse.com/security/cve/CVE-2016-5399.html CVE-2016-5399 https://bugzilla.suse.com/991430 SUSE Bug 991430 Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image. CVE-2016-5766 SUSE Linux Enterprise Server 11 SP2-LTSS:apache2-mod_php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bcmath-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bz2-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-calendar-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ctype-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-curl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dba-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dbase-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dom-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-exif-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-fastcgi-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ftp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gd-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gettext-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-hash-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-iconv-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-json-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ldap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mbstring-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mcrypt-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mysql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-odbc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-openssl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pcntl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pdo-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pear-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pgsql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pspell-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-shmop-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-snmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-soap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-suhosin-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvmsg-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvsem-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvshm-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-tokenizer-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-wddx-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlreader-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlrpc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlwriter-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xsl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zip-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zlib-5.2.14-0.7.30.89.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162080-1/ https://www.suse.com/security/cve/CVE-2016-5766.html CVE-2016-5766 https://bugzilla.suse.com/986386 SUSE Bug 986386 Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions. CVE-2016-5767 SUSE Linux Enterprise Server 11 SP2-LTSS:apache2-mod_php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bcmath-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bz2-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-calendar-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ctype-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-curl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dba-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dbase-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dom-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-exif-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-fastcgi-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ftp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gd-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gettext-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-hash-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-iconv-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-json-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ldap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mbstring-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mcrypt-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mysql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-odbc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-openssl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pcntl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pdo-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pear-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pgsql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pspell-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-shmop-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-snmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-soap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-suhosin-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvmsg-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvsem-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvshm-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-tokenizer-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-wddx-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlreader-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlrpc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlwriter-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xsl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zip-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zlib-5.2.14-0.7.30.89.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162080-1/ https://www.suse.com/security/cve/CVE-2016-5767.html CVE-2016-5767 https://bugzilla.suse.com/986393 SUSE Bug 986393 Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted length value, related to the (1) mcrypt_generic and (2) mdecrypt_generic functions. CVE-2016-5769 SUSE Linux Enterprise Server 11 SP2-LTSS:apache2-mod_php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bcmath-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bz2-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-calendar-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ctype-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-curl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dba-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dbase-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dom-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-exif-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-fastcgi-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ftp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gd-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gettext-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-hash-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-iconv-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-json-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ldap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mbstring-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mcrypt-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mysql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-odbc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-openssl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pcntl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pdo-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pear-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pgsql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pspell-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-shmop-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-snmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-soap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-suhosin-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvmsg-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvsem-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvshm-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-tokenizer-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-wddx-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlreader-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlrpc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlwriter-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xsl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zip-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zlib-5.2.14-0.7.30.89.1 moderate 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162080-1/ https://www.suse.com/security/cve/CVE-2016-5769.html CVE-2016-5769 https://bugzilla.suse.com/986388 SUSE Bug 986388 Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted XML data that is mishandled in a wddx_deserialize call. CVE-2016-5772 SUSE Linux Enterprise Server 11 SP2-LTSS:apache2-mod_php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bcmath-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bz2-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-calendar-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ctype-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-curl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dba-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dbase-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dom-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-exif-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-fastcgi-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ftp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gd-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gettext-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-hash-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-iconv-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-json-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ldap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mbstring-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mcrypt-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mysql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-odbc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-openssl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pcntl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pdo-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pear-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pgsql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pspell-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-shmop-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-snmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-soap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-suhosin-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvmsg-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvsem-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvshm-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-tokenizer-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-wddx-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlreader-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlrpc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlwriter-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xsl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zip-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zlib-5.2.14-0.7.30.89.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162080-1/ https://www.suse.com/security/cve/CVE-2016-5772.html CVE-2016-5772 https://bugzilla.suse.com/986244 SUSE Bug 986244 The php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via vectors involving the smart_str data type. CVE-2016-6288 SUSE Linux Enterprise Server 11 SP2-LTSS:apache2-mod_php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bcmath-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bz2-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-calendar-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ctype-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-curl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dba-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dbase-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dom-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-exif-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-fastcgi-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ftp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gd-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gettext-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-hash-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-iconv-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-json-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ldap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mbstring-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mcrypt-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mysql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-odbc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-openssl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pcntl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pdo-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pear-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pgsql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pspell-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-shmop-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-snmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-soap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-suhosin-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvmsg-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvsem-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvshm-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-tokenizer-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-wddx-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlreader-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlrpc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlwriter-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xsl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zip-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zlib-5.2.14-0.7.30.89.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162080-1/ https://www.suse.com/security/cve/CVE-2016-6288.html CVE-2016-6288 https://bugzilla.suse.com/991433 SUSE Bug 991433 Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted extract operation on a ZIP archive. CVE-2016-6289 SUSE Linux Enterprise Server 11 SP2-LTSS:apache2-mod_php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bcmath-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bz2-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-calendar-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ctype-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-curl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dba-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dbase-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dom-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-exif-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-fastcgi-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ftp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gd-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gettext-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-hash-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-iconv-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-json-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ldap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mbstring-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mcrypt-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mysql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-odbc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-openssl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pcntl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pdo-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pear-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pgsql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pspell-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-shmop-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-snmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-soap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-suhosin-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvmsg-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvsem-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvshm-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-tokenizer-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-wddx-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlreader-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlrpc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlwriter-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xsl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zip-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zlib-5.2.14-0.7.30.89.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162080-1/ https://www.suse.com/security/cve/CVE-2016-6289.html CVE-2016-6289 https://bugzilla.suse.com/991428 SUSE Bug 991428 ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a certain hash data structure, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to session deserialization. CVE-2016-6290 SUSE Linux Enterprise Server 11 SP2-LTSS:apache2-mod_php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bcmath-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bz2-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-calendar-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ctype-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-curl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dba-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dbase-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dom-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-exif-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-fastcgi-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ftp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gd-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gettext-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-hash-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-iconv-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-json-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ldap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mbstring-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mcrypt-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mysql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-odbc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-openssl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pcntl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pdo-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pear-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pgsql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pspell-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-shmop-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-snmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-soap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-suhosin-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvmsg-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvsem-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvshm-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-tokenizer-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-wddx-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlreader-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlrpc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlwriter-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xsl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zip-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zlib-5.2.14-0.7.30.89.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162080-1/ https://www.suse.com/security/cve/CVE-2016-6290.html CVE-2016-6290 https://bugzilla.suse.com/991429 SUSE Bug 991429 The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds array access and memory corruption), obtain sensitive information from process memory, or possibly have unspecified other impact via a crafted JPEG image. CVE-2016-6291 SUSE Linux Enterprise Server 11 SP2-LTSS:apache2-mod_php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bcmath-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bz2-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-calendar-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ctype-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-curl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dba-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dbase-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dom-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-exif-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-fastcgi-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ftp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gd-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gettext-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-hash-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-iconv-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-json-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ldap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mbstring-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mcrypt-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mysql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-odbc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-openssl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pcntl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pdo-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pear-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pgsql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pspell-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-shmop-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-snmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-soap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-suhosin-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvmsg-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvsem-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvshm-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-tokenizer-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-wddx-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlreader-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlrpc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlwriter-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xsl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zip-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zlib-5.2.14-0.7.30.89.1 important 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162080-1/ https://www.suse.com/security/cve/CVE-2016-6291.html CVE-2016-6291 https://bugzilla.suse.com/991427 SUSE Bug 991427 Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a long first argument to the PHP xmlrpc_encode_request function. CVE-2016-6296 SUSE Linux Enterprise Server 11 SP2-LTSS:apache2-mod_php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bcmath-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bz2-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-calendar-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ctype-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-curl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dba-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dbase-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dom-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-exif-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-fastcgi-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ftp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gd-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gettext-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-hash-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-iconv-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-json-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ldap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mbstring-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mcrypt-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mysql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-odbc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-openssl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pcntl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pdo-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pear-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pgsql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pspell-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-shmop-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-snmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-soap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-suhosin-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvmsg-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvsem-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvshm-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-tokenizer-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-wddx-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlreader-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlrpc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlwriter-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xsl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zip-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zlib-5.2.14-0.7.30.89.1 important 3.7 AV:L/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162080-1/ https://www.suse.com/security/cve/CVE-2016-6296.html CVE-2016-6296 https://bugzilla.suse.com/991437 SUSE Bug 991437 Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted zip:// URL. CVE-2016-6297 SUSE Linux Enterprise Server 11 SP2-LTSS:apache2-mod_php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bcmath-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-bz2-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-calendar-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ctype-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-curl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dba-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dbase-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-dom-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-exif-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-fastcgi-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ftp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gd-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gettext-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-gmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-hash-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-iconv-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-json-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-ldap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mbstring-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mcrypt-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-mysql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-odbc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-openssl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pcntl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pdo-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pear-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pgsql-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-pspell-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-shmop-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-snmp-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-soap-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-suhosin-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvmsg-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvsem-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-sysvshm-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-tokenizer-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-wddx-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlreader-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlrpc-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xmlwriter-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-xsl-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zip-5.2.14-0.7.30.89.1 SUSE Linux Enterprise Server 11 SP2-LTSS:php5-zlib-5.2.14-0.7.30.89.1 important 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162080-1/ https://www.suse.com/security/cve/CVE-2016-6297.html CVE-2016-6297 https://bugzilla.suse.com/991426 SUSE Bug 991426