MGASA-2017-0412

Source
https://advisories.mageia.org/MGASA-2017-0412.html
Import Source
https://advisories.mageia.org/MGASA-2017-0412.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2017-0412
Published
2017-11-16T08:36:22Z
Modified
2026-04-16T04:27:13Z
Summary
Updated php packages fix security vulnerabilities
Details

Updated php packages fix security vulnerabilities:

Out-Of-Bounds Read in timelib_meridian() in the Date module (php#75055).

Arcfour encryption stream filter crashes php-mcrypt (php#72535).

References
Credits

Affected packages

Mageia:5 / php

Package

Name
php
Purl
pkg:rpm/mageia/php?arch=source&distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.6.32-1.mga5

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2017-0412.json"

Mageia:6 / php

Package

Name
php
Purl
pkg:rpm/mageia/php?arch=source&distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.6.32-1.mga6

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2017-0412.json"