Security update for php5 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:0038-1 Final 1 1 2017-01-05T14:36:15Z current 2017-01-05T14:36:15Z 2017-01-05T14:36:15Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for php5 This update for php5 fixes the following issues: * CVE-2016-9933 Possible stack overflow on truecolor images handling [bsc#1015187] * CVE-2016-9934 Dereference from NULL pointer could lead to crash [bsc#1015188] * CVE-2016-9935 Invalid read could lead to crash [bsc#1015189] The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-Module-Web-Scripting-12-2017-21,SUSE-SLE-SDK-12-SP1-2017-21,SUSE-SLE-SDK-12-SP2-2017-21 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20170038-1/ Link for SUSE-SU-2017:0038-1 https://lists.suse.com/pipermail/sle-security-updates/2017-January/002546.html E-Mail link for SUSE-SU-2017:0038-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1015187 SUSE Bug 1015187 https://bugzilla.suse.com/1015188 SUSE Bug 1015188 https://bugzilla.suse.com/1015189 SUSE Bug 1015189 https://www.suse.com/security/cve/CVE-2016-9933/ SUSE CVE CVE-2016-9933 page https://www.suse.com/security/cve/CVE-2016-9934/ SUSE CVE CVE-2016-9934 page https://www.suse.com/security/cve/CVE-2016-9935/ SUSE CVE CVE-2016-9935 page SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 apache2-mod_php5-5.5.14-89.2 php5-5.5.14-89.2 php5-bcmath-5.5.14-89.2 php5-bz2-5.5.14-89.2 php5-calendar-5.5.14-89.2 php5-ctype-5.5.14-89.2 php5-curl-5.5.14-89.2 php5-dba-5.5.14-89.2 php5-dom-5.5.14-89.2 php5-enchant-5.5.14-89.2 php5-exif-5.5.14-89.2 php5-fastcgi-5.5.14-89.2 php5-fileinfo-5.5.14-89.2 php5-fpm-5.5.14-89.2 php5-ftp-5.5.14-89.2 php5-gd-5.5.14-89.2 php5-gettext-5.5.14-89.2 php5-gmp-5.5.14-89.2 php5-iconv-5.5.14-89.2 php5-imap-5.5.14-89.2 php5-intl-5.5.14-89.2 php5-json-5.5.14-89.2 php5-ldap-5.5.14-89.2 php5-mbstring-5.5.14-89.2 php5-mcrypt-5.5.14-89.2 php5-mysql-5.5.14-89.2 php5-odbc-5.5.14-89.2 php5-opcache-5.5.14-89.2 php5-openssl-5.5.14-89.2 php5-pcntl-5.5.14-89.2 php5-pdo-5.5.14-89.2 php5-pear-5.5.14-89.2 php5-pgsql-5.5.14-89.2 php5-phar-5.5.14-89.2 php5-posix-5.5.14-89.2 php5-pspell-5.5.14-89.2 php5-shmop-5.5.14-89.2 php5-snmp-5.5.14-89.2 php5-soap-5.5.14-89.2 php5-sockets-5.5.14-89.2 php5-sqlite-5.5.14-89.2 php5-suhosin-5.5.14-89.2 php5-sysvmsg-5.5.14-89.2 php5-sysvsem-5.5.14-89.2 php5-sysvshm-5.5.14-89.2 php5-tokenizer-5.5.14-89.2 php5-wddx-5.5.14-89.2 php5-xmlreader-5.5.14-89.2 php5-xmlrpc-5.5.14-89.2 php5-xmlwriter-5.5.14-89.2 php5-xsl-5.5.14-89.2 php5-zip-5.5.14-89.2 php5-zlib-5.5.14-89.2 php5-devel-5.5.14-89.2 apache2-mod_php5-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-bcmath-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-bz2-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-calendar-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-ctype-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-curl-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-dba-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-dom-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-enchant-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-exif-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-fastcgi-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-fileinfo-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-fpm-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-ftp-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-gd-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-gettext-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-gmp-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-iconv-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-imap-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-intl-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-json-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-ldap-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-mbstring-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-mcrypt-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-mysql-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-odbc-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-opcache-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-openssl-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pcntl-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pdo-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pear-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pgsql-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-phar-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-posix-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pspell-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-shmop-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-snmp-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-soap-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sockets-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sqlite-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-suhosin-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sysvmsg-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sysvsem-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sysvshm-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-tokenizer-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-wddx-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xmlreader-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xmlrpc-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xmlwriter-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xsl-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-zip-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-zlib-5.5.14-89.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-devel-5.5.14-89.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 php5-devel-5.5.14-89.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value. CVE-2016-9933 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-89.2 SUSE Linux Enterprise Software Development Kit 12 SP1:php5-devel-5.5.14-89.2 SUSE Linux Enterprise Software Development Kit 12 SP2:php5-devel-5.5.14-89.2 low 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170038-1/ https://www.suse.com/security/cve/CVE-2016-9933.html CVE-2016-9933 https://bugzilla.suse.com/1015187 SUSE Bug 1015187 ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string. CVE-2016-9934 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-89.2 SUSE Linux Enterprise Software Development Kit 12 SP1:php5-devel-5.5.14-89.2 SUSE Linux Enterprise Software Development Kit 12 SP2:php5-devel-5.5.14-89.2 low 1.9 AV:L/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170038-1/ https://www.suse.com/security/cve/CVE-2016-9934.html CVE-2016-9934 https://bugzilla.suse.com/1015188 SUSE Bug 1015188 The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document. CVE-2016-9935 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-89.2 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-89.2 SUSE Linux Enterprise Software Development Kit 12 SP1:php5-devel-5.5.14-89.2 SUSE Linux Enterprise Software Development Kit 12 SP2:php5-devel-5.5.14-89.2 low 1.5 AV:L/AC:M/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170038-1/ https://www.suse.com/security/cve/CVE-2016-9935.html CVE-2016-9935 https://bugzilla.suse.com/1015189 SUSE Bug 1015189 https://bugzilla.suse.com/1048097 SUSE Bug 1048097