Security update for php5 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:0556-1 Final 1 1 2017-02-23T09:00:51Z current 2017-02-23T09:00:51Z 2017-02-23T09:00:51Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for php5 This update for php5 fixes the following issues: - CVE-2016-7478: When unserializing untrusted input data, PHP could end up in an infinite loop, causing denial of service (bsc#1019550) - CVE-2016-10158: The exif_convert_any_to_int function in ext/exif/exif.c in PHP allowed remote attackers to cause a denial of service (application crash) via crafted EXIF data that triggers an attempt to divide the minimum representable negative integer by -1. (bsc#1022219) - CVE-2016-10159: Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP allowed remote attackers to cause a denial of service (memory consumption or application crash) via a truncated manifest entry in a PHAR archive. (bsc#1022255) - CVE-2016-10160: Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP allowed remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch. (bsc#1022257) - CVE-2016-10161: The object_common1 function in ext/standard/var_unserializer.c in PHP allowed remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a finish_nested_data call. (bsc#1022260) - CVE-2016-10166: A potential unsigned underflow in gd interpolation functions could lead to memory corruption in the PHP gd module (bsc#1022263) - CVE-2016-10167: A denial of service problem in gdImageCreateFromGd2Ctx() could lead to php out of memory even on small files. (bsc#1022264) - CVE-2016-10168: A signed integer overflow in the gd module could lead to memory corruption (bsc#1022265) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-Module-Web-Scripting-12-2017-293,SUSE-SLE-SDK-12-SP1-2017-293,SUSE-SLE-SDK-12-SP2-2017-293 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20170556-1/ Link for SUSE-SU-2017:0556-1 https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00041.html E-Mail link for SUSE-SU-2017:0556-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1019550 SUSE Bug 1019550 https://bugzilla.suse.com/1022219 SUSE Bug 1022219 https://bugzilla.suse.com/1022255 SUSE Bug 1022255 https://bugzilla.suse.com/1022257 SUSE Bug 1022257 https://bugzilla.suse.com/1022260 SUSE Bug 1022260 https://bugzilla.suse.com/1022263 SUSE Bug 1022263 https://bugzilla.suse.com/1022264 SUSE Bug 1022264 https://bugzilla.suse.com/1022265 SUSE Bug 1022265 https://www.suse.com/security/cve/CVE-2016-10158/ SUSE CVE CVE-2016-10158 page https://www.suse.com/security/cve/CVE-2016-10159/ SUSE CVE CVE-2016-10159 page https://www.suse.com/security/cve/CVE-2016-10160/ SUSE CVE CVE-2016-10160 page https://www.suse.com/security/cve/CVE-2016-10161/ SUSE CVE CVE-2016-10161 page https://www.suse.com/security/cve/CVE-2016-10166/ SUSE CVE CVE-2016-10166 page https://www.suse.com/security/cve/CVE-2016-10167/ SUSE CVE CVE-2016-10167 page https://www.suse.com/security/cve/CVE-2016-10168/ SUSE CVE CVE-2016-10168 page https://www.suse.com/security/cve/CVE-2016-7478/ SUSE CVE CVE-2016-7478 page SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 apache2-mod_php5-5.5.14-96.1 php5-5.5.14-96.1 php5-bcmath-5.5.14-96.1 php5-bz2-5.5.14-96.1 php5-calendar-5.5.14-96.1 php5-ctype-5.5.14-96.1 php5-curl-5.5.14-96.1 php5-dba-5.5.14-96.1 php5-dom-5.5.14-96.1 php5-enchant-5.5.14-96.1 php5-exif-5.5.14-96.1 php5-fastcgi-5.5.14-96.1 php5-fileinfo-5.5.14-96.1 php5-fpm-5.5.14-96.1 php5-ftp-5.5.14-96.1 php5-gd-5.5.14-96.1 php5-gettext-5.5.14-96.1 php5-gmp-5.5.14-96.1 php5-iconv-5.5.14-96.1 php5-imap-5.5.14-96.1 php5-intl-5.5.14-96.1 php5-json-5.5.14-96.1 php5-ldap-5.5.14-96.1 php5-mbstring-5.5.14-96.1 php5-mcrypt-5.5.14-96.1 php5-mysql-5.5.14-96.1 php5-odbc-5.5.14-96.1 php5-opcache-5.5.14-96.1 php5-openssl-5.5.14-96.1 php5-pcntl-5.5.14-96.1 php5-pdo-5.5.14-96.1 php5-pear-5.5.14-96.1 php5-pgsql-5.5.14-96.1 php5-phar-5.5.14-96.1 php5-posix-5.5.14-96.1 php5-pspell-5.5.14-96.1 php5-shmop-5.5.14-96.1 php5-snmp-5.5.14-96.1 php5-soap-5.5.14-96.1 php5-sockets-5.5.14-96.1 php5-sqlite-5.5.14-96.1 php5-suhosin-5.5.14-96.1 php5-sysvmsg-5.5.14-96.1 php5-sysvsem-5.5.14-96.1 php5-sysvshm-5.5.14-96.1 php5-tokenizer-5.5.14-96.1 php5-wddx-5.5.14-96.1 php5-xmlreader-5.5.14-96.1 php5-xmlrpc-5.5.14-96.1 php5-xmlwriter-5.5.14-96.1 php5-xsl-5.5.14-96.1 php5-zip-5.5.14-96.1 php5-zlib-5.5.14-96.1 php5-devel-5.5.14-96.1 apache2-mod_php5-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-bcmath-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-bz2-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-calendar-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-ctype-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-curl-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-dba-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-dom-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-enchant-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-exif-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-fastcgi-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-fileinfo-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-fpm-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-ftp-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-gd-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-gettext-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-gmp-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-iconv-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-imap-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-intl-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-json-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-ldap-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-mbstring-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-mcrypt-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-mysql-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-odbc-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-opcache-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-openssl-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pcntl-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pdo-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pear-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pgsql-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-phar-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-posix-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pspell-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-shmop-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-snmp-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-soap-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sockets-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sqlite-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-suhosin-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sysvmsg-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sysvsem-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sysvshm-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-tokenizer-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-wddx-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xmlreader-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xmlrpc-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xmlwriter-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xsl-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-zip-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-zlib-5.5.14-96.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-devel-5.5.14-96.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 php5-devel-5.5.14-96.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 The exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (application crash) via crafted EXIF data that triggers an attempt to divide the minimum representable negative integer by -1. CVE-2016-10158 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP1:php5-devel-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP2:php5-devel-5.5.14-96.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170556-1/ https://www.suse.com/security/cve/CVE-2016-10158.html CVE-2016-10158 https://bugzilla.suse.com/1022219 SUSE Bug 1022219 Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory consumption or application crash) via a truncated manifest entry in a PHAR archive. CVE-2016-10159 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP1:php5-devel-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP2:php5-devel-5.5.14-96.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170556-1/ https://www.suse.com/security/cve/CVE-2016-10159.html CVE-2016-10159 https://bugzilla.suse.com/1022255 SUSE Bug 1022255 https://bugzilla.suse.com/1048094 SUSE Bug 1048094 Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch. CVE-2016-10160 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP1:php5-devel-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP2:php5-devel-5.5.14-96.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170556-1/ https://www.suse.com/security/cve/CVE-2016-10160.html CVE-2016-10160 https://bugzilla.suse.com/1022257 SUSE Bug 1022257 https://bugzilla.suse.com/1048094 SUSE Bug 1048094 The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a finish_nested_data call. CVE-2016-10161 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP1:php5-devel-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP2:php5-devel-5.5.14-96.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170556-1/ https://www.suse.com/security/cve/CVE-2016-10161.html CVE-2016-10161 https://bugzilla.suse.com/1022260 SUSE Bug 1022260 Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable. CVE-2016-10166 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP1:php5-devel-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP2:php5-devel-5.5.14-96.1 moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170556-1/ https://www.suse.com/security/cve/CVE-2016-10166.html CVE-2016-10166 https://bugzilla.suse.com/1022069 SUSE Bug 1022069 https://bugzilla.suse.com/1022263 SUSE Bug 1022263 The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file. CVE-2016-10167 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP1:php5-devel-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP2:php5-devel-5.5.14-96.1 low 1.9 AV:L/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170556-1/ https://www.suse.com/security/cve/CVE-2016-10167.html CVE-2016-10167 https://bugzilla.suse.com/1022069 SUSE Bug 1022069 https://bugzilla.suse.com/1022264 SUSE Bug 1022264 Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image. CVE-2016-10168 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP1:php5-devel-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP2:php5-devel-5.5.14-96.1 moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170556-1/ https://www.suse.com/security/cve/CVE-2016-10168.html CVE-2016-10168 https://bugzilla.suse.com/1022069 SUSE Bug 1022069 https://bugzilla.suse.com/1022265 SUSE Bug 1022265 Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876. CVE-2016-7478 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-96.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP1:php5-devel-5.5.14-96.1 SUSE Linux Enterprise Software Development Kit 12 SP2:php5-devel-5.5.14-96.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170556-1/ https://www.suse.com/security/cve/CVE-2016-7478.html CVE-2016-7478 https://bugzilla.suse.com/1019550 SUSE Bug 1019550