ELSA-2014-1013

ELSA-2014-1013 - php security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2014-08-06

Description

[5.4.16-23]
- fileinfo: cdf_unpack_summary_info() excessive looping
DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
loop. CVE-2014-0238
- fileinfo: cdf_check_stream_offset insufficient boundary
check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check
CVE-2014-3480
- fileinfo: cdf_read_short_sector insufficient boundary
check. CVE-2014-0207
- fileinfo: cdf_read_property_info insufficient boundary
check. CVE-2014-3487
- fileinfo: fix extensive backtracking CVE-2013-7345
- core: type confusion issue in phpinfo(). CVE-2014-4721
- core: fix heap-based buffer overflow in DNS TXT record
parsing. CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage
type confusion flaw. CVE-2014-3515

Related CVEs

CVE-2014-3479

CVE-2014-0237

CVE-2014-4721

CVE-2014-0238

CVE-2014-3515

CVE-2014-0207

CVE-2014-4049

CVE-2013-7345

CVE-2014-3480

CVE-2014-3487

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	php-5.4.16-23.el7_0.src.rpm	f0900c42ba5b682255ef0a8df6247e1c033d382c396985bb2435976336a7eff8	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-5.4.16-23.el7_0.src.rpm	f0900c42ba5b682255ef0a8df6247e1c033d382c396985bb2435976336a7eff8	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-5.4.16-23.el7_0.src.rpm	f0900c42ba5b682255ef0a8df6247e1c033d382c396985bb2435976336a7eff8	ELSA-2020-1112	ol7_x86_64_u0_patch
	php-5.4.16-23.el7_0.x86_64.rpm	99e1cc7117e3a63b32eab89c9d2cda53c7ce6fc23dc75834c819c4a440af9135	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-5.4.16-23.el7_0.x86_64.rpm	99e1cc7117e3a63b32eab89c9d2cda53c7ce6fc23dc75834c819c4a440af9135	ELSA-2020-1112	ol7_x86_64_u0_patch
	php-bcmath-5.4.16-23.el7_0.x86_64.rpm	c963eaeb2bdf0179dc504e497bae66e45ac93b5645f2720c59c22467793be58d	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-cli-5.4.16-23.el7_0.x86_64.rpm	662f4786f4b8047695e50ef2d27c40edf28581f8e139679ca23ad2483bc88669	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-cli-5.4.16-23.el7_0.x86_64.rpm	662f4786f4b8047695e50ef2d27c40edf28581f8e139679ca23ad2483bc88669	ELSA-2020-1112	ol7_x86_64_u0_patch
	php-common-5.4.16-23.el7_0.x86_64.rpm	ece1978af4ecab9b77137671f0e7773f611ffa0f46a7103e7bfc95640bbe20f6	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-common-5.4.16-23.el7_0.x86_64.rpm	ece1978af4ecab9b77137671f0e7773f611ffa0f46a7103e7bfc95640bbe20f6	ELSA-2020-1112	ol7_x86_64_u0_patch
	php-dba-5.4.16-23.el7_0.x86_64.rpm	72150b2ce954a5bc2e2162d1d4b1ba0479be2982c4827f53c7bdffcaf6d1de17	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-devel-5.4.16-23.el7_0.x86_64.rpm	03e9af4e91d7def8d4a8b9167139bffd6bd93cd68791155a1b2410174b019be5	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-embedded-5.4.16-23.el7_0.x86_64.rpm	0b0bcb3f1e40b1cc4675f60f2545c412701514a9c5ff7930c80e53c287dd9bd6	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-enchant-5.4.16-23.el7_0.x86_64.rpm	71a740e660299d62dfbf5d54f6f5d4edcdcded74f2a08a14c2366db80d7afd18	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-fpm-5.4.16-23.el7_0.x86_64.rpm	5385c55bf460fd87fdfe268cea95b658018e77450bf2e937feeea2d1cef1c862	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-gd-5.4.16-23.el7_0.x86_64.rpm	03e9db220481fa9f0f32b866dec158918e3143fcc4f82b94d23d56f9c2d1b280	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-gd-5.4.16-23.el7_0.x86_64.rpm	03e9db220481fa9f0f32b866dec158918e3143fcc4f82b94d23d56f9c2d1b280	ELSA-2020-1112	ol7_x86_64_u0_patch
	php-intl-5.4.16-23.el7_0.x86_64.rpm	8e82e6587318eb61e6e02078356d893fd70902cb8c516aefcef880b40cbea706	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-ldap-5.4.16-23.el7_0.x86_64.rpm	382098492a7ec1833688d8804c9f9cb7eef2a740c51d343a4d699a9594ed3b06	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-ldap-5.4.16-23.el7_0.x86_64.rpm	382098492a7ec1833688d8804c9f9cb7eef2a740c51d343a4d699a9594ed3b06	ELSA-2020-1112	ol7_x86_64_u0_patch
	php-mbstring-5.4.16-23.el7_0.x86_64.rpm	892c62d8881b90c812d060a32466fd66fd2e6201ca6f0e7b70a3a5eb1fe81451	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-mysql-5.4.16-23.el7_0.x86_64.rpm	bdec9befc2f2f59db20039bb25df9212051dffbe6e3a2c151ab64082d8d10f2f	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-mysql-5.4.16-23.el7_0.x86_64.rpm	bdec9befc2f2f59db20039bb25df9212051dffbe6e3a2c151ab64082d8d10f2f	ELSA-2020-1112	ol7_x86_64_u0_patch
	php-mysqlnd-5.4.16-23.el7_0.x86_64.rpm	7cba877aad47ffad7e779d2c9333f4bd317530b02fe4df64980a42bc9c2586f5	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-odbc-5.4.16-23.el7_0.x86_64.rpm	aff2250cf7cb441ff43c4967f02e1d53ba1d12dfe312cd59a101660e317d88f1	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-odbc-5.4.16-23.el7_0.x86_64.rpm	aff2250cf7cb441ff43c4967f02e1d53ba1d12dfe312cd59a101660e317d88f1	ELSA-2020-1112	ol7_x86_64_u0_patch
	php-pdo-5.4.16-23.el7_0.x86_64.rpm	5889311b0484bdaf51ae83d043931ac06ee4bd257c294d1aaa7f8ad196124cab	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-pdo-5.4.16-23.el7_0.x86_64.rpm	5889311b0484bdaf51ae83d043931ac06ee4bd257c294d1aaa7f8ad196124cab	ELSA-2020-1112	ol7_x86_64_u0_patch
	php-pgsql-5.4.16-23.el7_0.x86_64.rpm	c58ab6b74afc35dea901683bcbd09cad302240f4e83becd58b54235a77a7cfe7	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-pgsql-5.4.16-23.el7_0.x86_64.rpm	c58ab6b74afc35dea901683bcbd09cad302240f4e83becd58b54235a77a7cfe7	ELSA-2020-1112	ol7_x86_64_u0_patch
	php-process-5.4.16-23.el7_0.x86_64.rpm	ca9a059043bfb13ff8a9c35102bd82e844a73dad33cf709a92c4e01f9ea3694a	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-process-5.4.16-23.el7_0.x86_64.rpm	ca9a059043bfb13ff8a9c35102bd82e844a73dad33cf709a92c4e01f9ea3694a	ELSA-2020-1112	ol7_x86_64_u0_patch
	php-pspell-5.4.16-23.el7_0.x86_64.rpm	c590cc28a990bae06947fd644fe6ff9fd6eec6a55278f15396b44b8ed8a3e49c	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-recode-5.4.16-23.el7_0.x86_64.rpm	1f93eb39e84c008f676ef90b51f25e71f7deaaaed64343652e4368e69d5dcfd6	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-recode-5.4.16-23.el7_0.x86_64.rpm	1f93eb39e84c008f676ef90b51f25e71f7deaaaed64343652e4368e69d5dcfd6	ELSA-2020-1112	ol7_x86_64_u0_patch
	php-snmp-5.4.16-23.el7_0.x86_64.rpm	c0f48338e065bd027b4a09a4efbb2faccb53848518fbf6ece02a01d21653b74a	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-soap-5.4.16-23.el7_0.x86_64.rpm	5df9069f5cb4518e31f1f158e77ff28cd50f5e84c1fb6cd2cd0fec3a039cfcf8	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-soap-5.4.16-23.el7_0.x86_64.rpm	5df9069f5cb4518e31f1f158e77ff28cd50f5e84c1fb6cd2cd0fec3a039cfcf8	ELSA-2020-1112	ol7_x86_64_u0_patch
	php-xml-5.4.16-23.el7_0.x86_64.rpm	fd675f9a26e2f8e6a3f8bace0d2ac4fe5816749f2fde2415587906fee97221bf	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-xml-5.4.16-23.el7_0.x86_64.rpm	fd675f9a26e2f8e6a3f8bace0d2ac4fe5816749f2fde2415587906fee97221bf	ELSA-2020-1112	ol7_x86_64_u0_patch
	php-xmlrpc-5.4.16-23.el7_0.x86_64.rpm	a47349d0dc6d650ebbac26009fef4db5e278e5b5143592e1d52b296271d3d2d8	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-xmlrpc-5.4.16-23.el7_0.x86_64.rpm	a47349d0dc6d650ebbac26009fef4db5e278e5b5143592e1d52b296271d3d2d8	ELSA-2020-1112	ol7_x86_64_u0_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team