MGASA-2015-0169

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2015-0169.html

Import Source

https://advisories.mageia.org/MGASA-2015-0169.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2015-0169

Related

Published

2015-04-25T20:15:07Z

Modified

2015-04-25T20:02:12Z

Summary

Updated php packages fix security vulnerabilities

Details

Updated php packages fix security vulnerabilities:

Buffer Over-read in unserialize when parsing Phar (CVE-2015-2783).

Buffer Overflow when parsing tar/zip/phar in pharsetinode (CVE-2015-3329).

Potential remote code execution with apache 2.4 apache2handler (CVE-2015-3330).

PHP has been updated to version 5.5.24, which fixes these issues and other bugs.

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.5.24-1.mga4

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.1.15-4.14.mga4

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2015.3-1.mga4

{
    "section": "core"
}