MGASA-2017-0040

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2017-0040.html

Import Source

https://advisories.mageia.org/MGASA-2017-0040.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2017-0040

Related

Published

2017-02-04T18:41:12Z

Modified

2017-02-04T18:32:06Z

Summary

Updated php packages fix security vulnerabilities

Details

Floating-point exception in php-exif when parsing a tag format (CVE-2016-10158).

Crash in php-phar while loading hostile phar archive (CVE-2016-10159).

Memory corruption in php-phar when loading hostile phar (CVE-2016-10160).

Heap out of bounds read on unserialize in finishnesteddata() (CVE-2016-10161).

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.6.30-1.mga5

{
    "section": "core"
}