Security update for php5 SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2016:3239-1 Final 1 1 2016-12-22T09:58:20Z current 2016-12-22T09:58:20Z 2016-12-22T09:58:20Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for php5 This security update for php5 fixes the following issues: - a call to ImageFillToBorder() could cause a stack overflow leading to stack exhaustion when the image used was not truecolor (CVE-2016-9933, boo#1015187) - deserialization of a WDDX packet containing a PDORow object could crash php (CVE-2016-9934, boo#1015188) - deserialization of a WDDX packet containing an empty boolean element could crash php (CVE-2016-9935, boo#1015189) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html E-Mail link for openSUSE-SU-2016:3239-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE 13.2 apache2-mod_php5-5.6.1-89.1 apache2-mod_php5-debuginfo-5.6.1-89.1 php5-5.6.1-89.1 php5-bcmath-5.6.1-89.1 php5-bcmath-debuginfo-5.6.1-89.1 php5-bz2-5.6.1-89.1 php5-bz2-debuginfo-5.6.1-89.1 php5-calendar-5.6.1-89.1 php5-calendar-debuginfo-5.6.1-89.1 php5-ctype-5.6.1-89.1 php5-ctype-debuginfo-5.6.1-89.1 php5-curl-5.6.1-89.1 php5-curl-debuginfo-5.6.1-89.1 php5-dba-5.6.1-89.1 php5-dba-debuginfo-5.6.1-89.1 php5-debuginfo-5.6.1-89.1 php5-debugsource-5.6.1-89.1 php5-devel-5.6.1-89.1 php5-dom-5.6.1-89.1 php5-dom-debuginfo-5.6.1-89.1 php5-enchant-5.6.1-89.1 php5-enchant-debuginfo-5.6.1-89.1 php5-exif-5.6.1-89.1 php5-exif-debuginfo-5.6.1-89.1 php5-fastcgi-5.6.1-89.1 php5-fastcgi-debuginfo-5.6.1-89.1 php5-fileinfo-5.6.1-89.1 php5-fileinfo-debuginfo-5.6.1-89.1 php5-firebird-5.6.1-89.1 php5-firebird-debuginfo-5.6.1-89.1 php5-fpm-5.6.1-89.1 php5-fpm-debuginfo-5.6.1-89.1 php5-ftp-5.6.1-89.1 php5-ftp-debuginfo-5.6.1-89.1 php5-gd-5.6.1-89.1 php5-gd-debuginfo-5.6.1-89.1 php5-gettext-5.6.1-89.1 php5-gettext-debuginfo-5.6.1-89.1 php5-gmp-5.6.1-89.1 php5-gmp-debuginfo-5.6.1-89.1 php5-iconv-5.6.1-89.1 php5-iconv-debuginfo-5.6.1-89.1 php5-imap-5.6.1-89.1 php5-imap-debuginfo-5.6.1-89.1 php5-intl-5.6.1-89.1 php5-intl-debuginfo-5.6.1-89.1 php5-json-5.6.1-89.1 php5-json-debuginfo-5.6.1-89.1 php5-ldap-5.6.1-89.1 php5-ldap-debuginfo-5.6.1-89.1 php5-mbstring-5.6.1-89.1 php5-mbstring-debuginfo-5.6.1-89.1 php5-mcrypt-5.6.1-89.1 php5-mcrypt-debuginfo-5.6.1-89.1 php5-mssql-5.6.1-89.1 php5-mssql-debuginfo-5.6.1-89.1 php5-mysql-5.6.1-89.1 php5-mysql-debuginfo-5.6.1-89.1 php5-odbc-5.6.1-89.1 php5-odbc-debuginfo-5.6.1-89.1 php5-opcache-5.6.1-89.1 php5-opcache-debuginfo-5.6.1-89.1 php5-openssl-5.6.1-89.1 php5-openssl-debuginfo-5.6.1-89.1 php5-pcntl-5.6.1-89.1 php5-pcntl-debuginfo-5.6.1-89.1 php5-pdo-5.6.1-89.1 php5-pdo-debuginfo-5.6.1-89.1 php5-pear-5.6.1-89.1 php5-pgsql-5.6.1-89.1 php5-pgsql-debuginfo-5.6.1-89.1 php5-phar-5.6.1-89.1 php5-phar-debuginfo-5.6.1-89.1 php5-posix-5.6.1-89.1 php5-posix-debuginfo-5.6.1-89.1 php5-pspell-5.6.1-89.1 php5-pspell-debuginfo-5.6.1-89.1 php5-readline-5.6.1-89.1 php5-readline-debuginfo-5.6.1-89.1 php5-shmop-5.6.1-89.1 php5-shmop-debuginfo-5.6.1-89.1 php5-snmp-5.6.1-89.1 php5-snmp-debuginfo-5.6.1-89.1 php5-soap-5.6.1-89.1 php5-soap-debuginfo-5.6.1-89.1 php5-sockets-5.6.1-89.1 php5-sockets-debuginfo-5.6.1-89.1 php5-sqlite-5.6.1-89.1 php5-sqlite-debuginfo-5.6.1-89.1 php5-suhosin-5.6.1-89.1 php5-suhosin-debuginfo-5.6.1-89.1 php5-sysvmsg-5.6.1-89.1 php5-sysvmsg-debuginfo-5.6.1-89.1 php5-sysvsem-5.6.1-89.1 php5-sysvsem-debuginfo-5.6.1-89.1 php5-sysvshm-5.6.1-89.1 php5-sysvshm-debuginfo-5.6.1-89.1 php5-tidy-5.6.1-89.1 php5-tidy-debuginfo-5.6.1-89.1 php5-tokenizer-5.6.1-89.1 php5-tokenizer-debuginfo-5.6.1-89.1 php5-wddx-5.6.1-89.1 php5-wddx-debuginfo-5.6.1-89.1 php5-xmlreader-5.6.1-89.1 php5-xmlreader-debuginfo-5.6.1-89.1 php5-xmlrpc-5.6.1-89.1 php5-xmlrpc-debuginfo-5.6.1-89.1 php5-xmlwriter-5.6.1-89.1 php5-xmlwriter-debuginfo-5.6.1-89.1 php5-xsl-5.6.1-89.1 php5-xsl-debuginfo-5.6.1-89.1 php5-zip-5.6.1-89.1 php5-zip-debuginfo-5.6.1-89.1 php5-zlib-5.6.1-89.1 php5-zlib-debuginfo-5.6.1-89.1 apache2-mod_php5-5.6.1-89.1 as a component of openSUSE 13.2 apache2-mod_php5-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-5.6.1-89.1 as a component of openSUSE 13.2 php5-bcmath-5.6.1-89.1 as a component of openSUSE 13.2 php5-bcmath-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-bz2-5.6.1-89.1 as a component of openSUSE 13.2 php5-bz2-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-calendar-5.6.1-89.1 as a component of openSUSE 13.2 php5-calendar-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-ctype-5.6.1-89.1 as a component of openSUSE 13.2 php5-ctype-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-curl-5.6.1-89.1 as a component of openSUSE 13.2 php5-curl-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-dba-5.6.1-89.1 as a component of openSUSE 13.2 php5-dba-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-debugsource-5.6.1-89.1 as a component of openSUSE 13.2 php5-devel-5.6.1-89.1 as a component of openSUSE 13.2 php5-dom-5.6.1-89.1 as a component of openSUSE 13.2 php5-dom-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-enchant-5.6.1-89.1 as a component of openSUSE 13.2 php5-enchant-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-exif-5.6.1-89.1 as a component of openSUSE 13.2 php5-exif-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-fastcgi-5.6.1-89.1 as a component of openSUSE 13.2 php5-fastcgi-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-fileinfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-fileinfo-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-firebird-5.6.1-89.1 as a component of openSUSE 13.2 php5-firebird-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-fpm-5.6.1-89.1 as a component of openSUSE 13.2 php5-fpm-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-ftp-5.6.1-89.1 as a component of openSUSE 13.2 php5-ftp-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-gd-5.6.1-89.1 as a component of openSUSE 13.2 php5-gd-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-gettext-5.6.1-89.1 as a component of openSUSE 13.2 php5-gettext-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-gmp-5.6.1-89.1 as a component of openSUSE 13.2 php5-gmp-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-iconv-5.6.1-89.1 as a component of openSUSE 13.2 php5-iconv-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-imap-5.6.1-89.1 as a component of openSUSE 13.2 php5-imap-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-intl-5.6.1-89.1 as a component of openSUSE 13.2 php5-intl-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-json-5.6.1-89.1 as a component of openSUSE 13.2 php5-json-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-ldap-5.6.1-89.1 as a component of openSUSE 13.2 php5-ldap-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-mbstring-5.6.1-89.1 as a component of openSUSE 13.2 php5-mbstring-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-mcrypt-5.6.1-89.1 as a component of openSUSE 13.2 php5-mcrypt-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-mssql-5.6.1-89.1 as a component of openSUSE 13.2 php5-mssql-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-mysql-5.6.1-89.1 as a component of openSUSE 13.2 php5-mysql-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-odbc-5.6.1-89.1 as a component of openSUSE 13.2 php5-odbc-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-opcache-5.6.1-89.1 as a component of openSUSE 13.2 php5-opcache-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-openssl-5.6.1-89.1 as a component of openSUSE 13.2 php5-openssl-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-pcntl-5.6.1-89.1 as a component of openSUSE 13.2 php5-pcntl-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-pdo-5.6.1-89.1 as a component of openSUSE 13.2 php5-pdo-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-pear-5.6.1-89.1 as a component of openSUSE 13.2 php5-pgsql-5.6.1-89.1 as a component of openSUSE 13.2 php5-pgsql-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-phar-5.6.1-89.1 as a component of openSUSE 13.2 php5-phar-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-posix-5.6.1-89.1 as a component of openSUSE 13.2 php5-posix-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-pspell-5.6.1-89.1 as a component of openSUSE 13.2 php5-pspell-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-readline-5.6.1-89.1 as a component of openSUSE 13.2 php5-readline-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-shmop-5.6.1-89.1 as a component of openSUSE 13.2 php5-shmop-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-snmp-5.6.1-89.1 as a component of openSUSE 13.2 php5-snmp-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-soap-5.6.1-89.1 as a component of openSUSE 13.2 php5-soap-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-sockets-5.6.1-89.1 as a component of openSUSE 13.2 php5-sockets-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-sqlite-5.6.1-89.1 as a component of openSUSE 13.2 php5-sqlite-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-suhosin-5.6.1-89.1 as a component of openSUSE 13.2 php5-suhosin-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-sysvmsg-5.6.1-89.1 as a component of openSUSE 13.2 php5-sysvmsg-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-sysvsem-5.6.1-89.1 as a component of openSUSE 13.2 php5-sysvsem-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-sysvshm-5.6.1-89.1 as a component of openSUSE 13.2 php5-sysvshm-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-tidy-5.6.1-89.1 as a component of openSUSE 13.2 php5-tidy-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-tokenizer-5.6.1-89.1 as a component of openSUSE 13.2 php5-tokenizer-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-wddx-5.6.1-89.1 as a component of openSUSE 13.2 php5-wddx-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-xmlreader-5.6.1-89.1 as a component of openSUSE 13.2 php5-xmlreader-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-xmlrpc-5.6.1-89.1 as a component of openSUSE 13.2 php5-xmlrpc-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-xmlwriter-5.6.1-89.1 as a component of openSUSE 13.2 php5-xmlwriter-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-xsl-5.6.1-89.1 as a component of openSUSE 13.2 php5-xsl-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-zip-5.6.1-89.1 as a component of openSUSE 13.2 php5-zip-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 php5-zlib-5.6.1-89.1 as a component of openSUSE 13.2 php5-zlib-debuginfo-5.6.1-89.1 as a component of openSUSE 13.2 Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value. CVE-2016-9933 openSUSE 13.2:apache2-mod_php5-5.6.1-89.1 openSUSE 13.2:apache2-mod_php5-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-5.6.1-89.1 openSUSE 13.2:php5-bcmath-5.6.1-89.1 openSUSE 13.2:php5-bcmath-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-bz2-5.6.1-89.1 openSUSE 13.2:php5-bz2-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-calendar-5.6.1-89.1 openSUSE 13.2:php5-calendar-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-ctype-5.6.1-89.1 openSUSE 13.2:php5-ctype-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-curl-5.6.1-89.1 openSUSE 13.2:php5-curl-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-dba-5.6.1-89.1 openSUSE 13.2:php5-dba-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-debugsource-5.6.1-89.1 openSUSE 13.2:php5-devel-5.6.1-89.1 openSUSE 13.2:php5-dom-5.6.1-89.1 openSUSE 13.2:php5-dom-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-enchant-5.6.1-89.1 openSUSE 13.2:php5-enchant-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-exif-5.6.1-89.1 openSUSE 13.2:php5-exif-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-fastcgi-5.6.1-89.1 openSUSE 13.2:php5-fastcgi-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-fileinfo-5.6.1-89.1 openSUSE 13.2:php5-fileinfo-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-firebird-5.6.1-89.1 openSUSE 13.2:php5-firebird-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-fpm-5.6.1-89.1 openSUSE 13.2:php5-fpm-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-ftp-5.6.1-89.1 openSUSE 13.2:php5-ftp-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-gd-5.6.1-89.1 openSUSE 13.2:php5-gd-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-gettext-5.6.1-89.1 openSUSE 13.2:php5-gettext-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-gmp-5.6.1-89.1 openSUSE 13.2:php5-gmp-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-iconv-5.6.1-89.1 openSUSE 13.2:php5-iconv-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-imap-5.6.1-89.1 openSUSE 13.2:php5-imap-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-intl-5.6.1-89.1 openSUSE 13.2:php5-intl-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-json-5.6.1-89.1 openSUSE 13.2:php5-json-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-ldap-5.6.1-89.1 openSUSE 13.2:php5-ldap-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-mbstring-5.6.1-89.1 openSUSE 13.2:php5-mbstring-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-mcrypt-5.6.1-89.1 openSUSE 13.2:php5-mcrypt-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-mssql-5.6.1-89.1 openSUSE 13.2:php5-mssql-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-mysql-5.6.1-89.1 openSUSE 13.2:php5-mysql-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-odbc-5.6.1-89.1 openSUSE 13.2:php5-odbc-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-opcache-5.6.1-89.1 openSUSE 13.2:php5-opcache-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-openssl-5.6.1-89.1 openSUSE 13.2:php5-openssl-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-pcntl-5.6.1-89.1 openSUSE 13.2:php5-pcntl-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-pdo-5.6.1-89.1 openSUSE 13.2:php5-pdo-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-pear-5.6.1-89.1 openSUSE 13.2:php5-pgsql-5.6.1-89.1 openSUSE 13.2:php5-pgsql-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-phar-5.6.1-89.1 openSUSE 13.2:php5-phar-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-posix-5.6.1-89.1 openSUSE 13.2:php5-posix-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-pspell-5.6.1-89.1 openSUSE 13.2:php5-pspell-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-readline-5.6.1-89.1 openSUSE 13.2:php5-readline-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-shmop-5.6.1-89.1 openSUSE 13.2:php5-shmop-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-snmp-5.6.1-89.1 openSUSE 13.2:php5-snmp-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-soap-5.6.1-89.1 openSUSE 13.2:php5-soap-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-sockets-5.6.1-89.1 openSUSE 13.2:php5-sockets-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-sqlite-5.6.1-89.1 openSUSE 13.2:php5-sqlite-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-suhosin-5.6.1-89.1 openSUSE 13.2:php5-suhosin-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-sysvmsg-5.6.1-89.1 openSUSE 13.2:php5-sysvmsg-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-sysvsem-5.6.1-89.1 openSUSE 13.2:php5-sysvsem-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-sysvshm-5.6.1-89.1 openSUSE 13.2:php5-sysvshm-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-tidy-5.6.1-89.1 openSUSE 13.2:php5-tidy-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-tokenizer-5.6.1-89.1 openSUSE 13.2:php5-tokenizer-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-wddx-5.6.1-89.1 openSUSE 13.2:php5-wddx-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-xmlreader-5.6.1-89.1 openSUSE 13.2:php5-xmlreader-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-xmlrpc-5.6.1-89.1 openSUSE 13.2:php5-xmlrpc-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-xmlwriter-5.6.1-89.1 openSUSE 13.2:php5-xmlwriter-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-xsl-5.6.1-89.1 openSUSE 13.2:php5-xsl-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-zip-5.6.1-89.1 openSUSE 13.2:php5-zip-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-zlib-5.6.1-89.1 openSUSE 13.2:php5-zlib-debuginfo-5.6.1-89.1 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P Please Install the update. http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html https://www.suse.com/security/cve/CVE-2016-9933.html CVE-2016-9933 https://bugzilla.suse.com/1015187 SUSE Bug 1015187 ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string. CVE-2016-9934 openSUSE 13.2:apache2-mod_php5-5.6.1-89.1 openSUSE 13.2:apache2-mod_php5-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-5.6.1-89.1 openSUSE 13.2:php5-bcmath-5.6.1-89.1 openSUSE 13.2:php5-bcmath-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-bz2-5.6.1-89.1 openSUSE 13.2:php5-bz2-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-calendar-5.6.1-89.1 openSUSE 13.2:php5-calendar-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-ctype-5.6.1-89.1 openSUSE 13.2:php5-ctype-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-curl-5.6.1-89.1 openSUSE 13.2:php5-curl-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-dba-5.6.1-89.1 openSUSE 13.2:php5-dba-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-debugsource-5.6.1-89.1 openSUSE 13.2:php5-devel-5.6.1-89.1 openSUSE 13.2:php5-dom-5.6.1-89.1 openSUSE 13.2:php5-dom-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-enchant-5.6.1-89.1 openSUSE 13.2:php5-enchant-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-exif-5.6.1-89.1 openSUSE 13.2:php5-exif-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-fastcgi-5.6.1-89.1 openSUSE 13.2:php5-fastcgi-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-fileinfo-5.6.1-89.1 openSUSE 13.2:php5-fileinfo-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-firebird-5.6.1-89.1 openSUSE 13.2:php5-firebird-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-fpm-5.6.1-89.1 openSUSE 13.2:php5-fpm-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-ftp-5.6.1-89.1 openSUSE 13.2:php5-ftp-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-gd-5.6.1-89.1 openSUSE 13.2:php5-gd-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-gettext-5.6.1-89.1 openSUSE 13.2:php5-gettext-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-gmp-5.6.1-89.1 openSUSE 13.2:php5-gmp-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-iconv-5.6.1-89.1 openSUSE 13.2:php5-iconv-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-imap-5.6.1-89.1 openSUSE 13.2:php5-imap-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-intl-5.6.1-89.1 openSUSE 13.2:php5-intl-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-json-5.6.1-89.1 openSUSE 13.2:php5-json-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-ldap-5.6.1-89.1 openSUSE 13.2:php5-ldap-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-mbstring-5.6.1-89.1 openSUSE 13.2:php5-mbstring-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-mcrypt-5.6.1-89.1 openSUSE 13.2:php5-mcrypt-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-mssql-5.6.1-89.1 openSUSE 13.2:php5-mssql-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-mysql-5.6.1-89.1 openSUSE 13.2:php5-mysql-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-odbc-5.6.1-89.1 openSUSE 13.2:php5-odbc-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-opcache-5.6.1-89.1 openSUSE 13.2:php5-opcache-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-openssl-5.6.1-89.1 openSUSE 13.2:php5-openssl-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-pcntl-5.6.1-89.1 openSUSE 13.2:php5-pcntl-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-pdo-5.6.1-89.1 openSUSE 13.2:php5-pdo-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-pear-5.6.1-89.1 openSUSE 13.2:php5-pgsql-5.6.1-89.1 openSUSE 13.2:php5-pgsql-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-phar-5.6.1-89.1 openSUSE 13.2:php5-phar-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-posix-5.6.1-89.1 openSUSE 13.2:php5-posix-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-pspell-5.6.1-89.1 openSUSE 13.2:php5-pspell-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-readline-5.6.1-89.1 openSUSE 13.2:php5-readline-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-shmop-5.6.1-89.1 openSUSE 13.2:php5-shmop-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-snmp-5.6.1-89.1 openSUSE 13.2:php5-snmp-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-soap-5.6.1-89.1 openSUSE 13.2:php5-soap-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-sockets-5.6.1-89.1 openSUSE 13.2:php5-sockets-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-sqlite-5.6.1-89.1 openSUSE 13.2:php5-sqlite-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-suhosin-5.6.1-89.1 openSUSE 13.2:php5-suhosin-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-sysvmsg-5.6.1-89.1 openSUSE 13.2:php5-sysvmsg-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-sysvsem-5.6.1-89.1 openSUSE 13.2:php5-sysvsem-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-sysvshm-5.6.1-89.1 openSUSE 13.2:php5-sysvshm-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-tidy-5.6.1-89.1 openSUSE 13.2:php5-tidy-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-tokenizer-5.6.1-89.1 openSUSE 13.2:php5-tokenizer-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-wddx-5.6.1-89.1 openSUSE 13.2:php5-wddx-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-xmlreader-5.6.1-89.1 openSUSE 13.2:php5-xmlreader-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-xmlrpc-5.6.1-89.1 openSUSE 13.2:php5-xmlrpc-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-xmlwriter-5.6.1-89.1 openSUSE 13.2:php5-xmlwriter-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-xsl-5.6.1-89.1 openSUSE 13.2:php5-xsl-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-zip-5.6.1-89.1 openSUSE 13.2:php5-zip-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-zlib-5.6.1-89.1 openSUSE 13.2:php5-zlib-debuginfo-5.6.1-89.1 moderate 1.8 AV:L/AC:M/Au:N/C:N/I:N/A:P Please Install the update. http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html https://www.suse.com/security/cve/CVE-2016-9934.html CVE-2016-9934 https://bugzilla.suse.com/1015188 SUSE Bug 1015188 The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document. CVE-2016-9935 openSUSE 13.2:apache2-mod_php5-5.6.1-89.1 openSUSE 13.2:apache2-mod_php5-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-5.6.1-89.1 openSUSE 13.2:php5-bcmath-5.6.1-89.1 openSUSE 13.2:php5-bcmath-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-bz2-5.6.1-89.1 openSUSE 13.2:php5-bz2-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-calendar-5.6.1-89.1 openSUSE 13.2:php5-calendar-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-ctype-5.6.1-89.1 openSUSE 13.2:php5-ctype-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-curl-5.6.1-89.1 openSUSE 13.2:php5-curl-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-dba-5.6.1-89.1 openSUSE 13.2:php5-dba-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-debugsource-5.6.1-89.1 openSUSE 13.2:php5-devel-5.6.1-89.1 openSUSE 13.2:php5-dom-5.6.1-89.1 openSUSE 13.2:php5-dom-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-enchant-5.6.1-89.1 openSUSE 13.2:php5-enchant-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-exif-5.6.1-89.1 openSUSE 13.2:php5-exif-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-fastcgi-5.6.1-89.1 openSUSE 13.2:php5-fastcgi-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-fileinfo-5.6.1-89.1 openSUSE 13.2:php5-fileinfo-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-firebird-5.6.1-89.1 openSUSE 13.2:php5-firebird-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-fpm-5.6.1-89.1 openSUSE 13.2:php5-fpm-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-ftp-5.6.1-89.1 openSUSE 13.2:php5-ftp-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-gd-5.6.1-89.1 openSUSE 13.2:php5-gd-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-gettext-5.6.1-89.1 openSUSE 13.2:php5-gettext-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-gmp-5.6.1-89.1 openSUSE 13.2:php5-gmp-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-iconv-5.6.1-89.1 openSUSE 13.2:php5-iconv-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-imap-5.6.1-89.1 openSUSE 13.2:php5-imap-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-intl-5.6.1-89.1 openSUSE 13.2:php5-intl-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-json-5.6.1-89.1 openSUSE 13.2:php5-json-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-ldap-5.6.1-89.1 openSUSE 13.2:php5-ldap-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-mbstring-5.6.1-89.1 openSUSE 13.2:php5-mbstring-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-mcrypt-5.6.1-89.1 openSUSE 13.2:php5-mcrypt-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-mssql-5.6.1-89.1 openSUSE 13.2:php5-mssql-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-mysql-5.6.1-89.1 openSUSE 13.2:php5-mysql-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-odbc-5.6.1-89.1 openSUSE 13.2:php5-odbc-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-opcache-5.6.1-89.1 openSUSE 13.2:php5-opcache-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-openssl-5.6.1-89.1 openSUSE 13.2:php5-openssl-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-pcntl-5.6.1-89.1 openSUSE 13.2:php5-pcntl-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-pdo-5.6.1-89.1 openSUSE 13.2:php5-pdo-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-pear-5.6.1-89.1 openSUSE 13.2:php5-pgsql-5.6.1-89.1 openSUSE 13.2:php5-pgsql-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-phar-5.6.1-89.1 openSUSE 13.2:php5-phar-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-posix-5.6.1-89.1 openSUSE 13.2:php5-posix-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-pspell-5.6.1-89.1 openSUSE 13.2:php5-pspell-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-readline-5.6.1-89.1 openSUSE 13.2:php5-readline-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-shmop-5.6.1-89.1 openSUSE 13.2:php5-shmop-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-snmp-5.6.1-89.1 openSUSE 13.2:php5-snmp-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-soap-5.6.1-89.1 openSUSE 13.2:php5-soap-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-sockets-5.6.1-89.1 openSUSE 13.2:php5-sockets-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-sqlite-5.6.1-89.1 openSUSE 13.2:php5-sqlite-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-suhosin-5.6.1-89.1 openSUSE 13.2:php5-suhosin-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-sysvmsg-5.6.1-89.1 openSUSE 13.2:php5-sysvmsg-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-sysvsem-5.6.1-89.1 openSUSE 13.2:php5-sysvsem-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-sysvshm-5.6.1-89.1 openSUSE 13.2:php5-sysvshm-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-tidy-5.6.1-89.1 openSUSE 13.2:php5-tidy-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-tokenizer-5.6.1-89.1 openSUSE 13.2:php5-tokenizer-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-wddx-5.6.1-89.1 openSUSE 13.2:php5-wddx-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-xmlreader-5.6.1-89.1 openSUSE 13.2:php5-xmlreader-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-xmlrpc-5.6.1-89.1 openSUSE 13.2:php5-xmlrpc-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-xmlwriter-5.6.1-89.1 openSUSE 13.2:php5-xmlwriter-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-xsl-5.6.1-89.1 openSUSE 13.2:php5-xsl-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-zip-5.6.1-89.1 openSUSE 13.2:php5-zip-debuginfo-5.6.1-89.1 openSUSE 13.2:php5-zlib-5.6.1-89.1 openSUSE 13.2:php5-zlib-debuginfo-5.6.1-89.1 moderate 1.5 AV:L/AC:M/Au:S/C:N/I:N/A:P Please Install the update. http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html https://www.suse.com/security/cve/CVE-2016-9935.html CVE-2016-9935 https://bugzilla.suse.com/1015189 SUSE Bug 1015189 https://bugzilla.suse.com/1048097 SUSE Bug 1048097