ELSA-2016-2598

ELSA-2016-2598 - php security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2016-11-09

Description

[5.4.16-42]
- bz2: fix improper error handling in bzread() CVE-2016-5399

[5.4.16-41]
- gd: fix integer overflow in _gd2GetHeader() resulting in
heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
CVE-2016-5768

[5.4.16-40]
- don't set environmental variable based on user supplied Proxy
request header CVE-2016-5385

[5.4.16-39]
- fix segmentation fault in header_register_callback #1344578

[5.4.16-38]
- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979

[5.4.16-37]
- session: fix segfault in session with rfc1867 #1297179

Related CVEs

CVE-2016-5399

CVE-2016-5767

CVE-2016-5768

CVE-2016-5766

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	php-5.4.16-42.el7.src.rpm	2f254bd9f5857d4b33458b2b0a14a93dbf910026eba5771dd47fc4b8b14e20b3	ELSA-2020-1112	ol7_aarch64_latest
	php-5.4.16-42.el7.src.rpm	2f254bd9f5857d4b33458b2b0a14a93dbf910026eba5771dd47fc4b8b14e20b3	ELSA-2020-1112	ol7_aarch64_optional_latest
	php-5.4.16-42.el7.aarch64.rpm	ddacf4ec04797b17417c9f7f43de1bce3f8f1fb1fe24c8b518ce47aa13b0e73b	ELSA-2020-1112	ol7_aarch64_latest
	php-bcmath-5.4.16-42.el7.aarch64.rpm	b7a6959504c386ffe69667f0cd198e4194e76857388c1816704ca64b52033112	ELSA-2020-1112	ol7_aarch64_optional_latest
	php-cli-5.4.16-42.el7.aarch64.rpm	9b9cce20f4cf718fb9d9dda4a6f4511b34f1af4c6a80bebbec918c1c8988c4f3	ELSA-2020-1112	ol7_aarch64_latest
	php-common-5.4.16-42.el7.aarch64.rpm	f1eb4591634c841e1652b22d25144753d2f4440a3603f189e4529cf430ec584b	ELSA-2020-1112	ol7_aarch64_latest
	php-dba-5.4.16-42.el7.aarch64.rpm	49002a100d59715337f770f13d350bb533f3866ea54d91e70bb2177634a8a320	ELSA-2020-1112	ol7_aarch64_optional_latest
	php-devel-5.4.16-42.el7.aarch64.rpm	9e33d433767982eef8cc892180bd38208a70fd15d04bd251cd08ef9bcac59d36	ELSA-2020-1112	ol7_aarch64_optional_latest
	php-embedded-5.4.16-42.el7.aarch64.rpm	7d8233818094671b73491e16b380d7179c5108076eb21c20d500250c7c513a8f	ELSA-2020-1112	ol7_aarch64_optional_latest
	php-enchant-5.4.16-42.el7.aarch64.rpm	4779747584af2d1bc5ea06f55262b0372f8ab6bde20532a55ff7c15773ec5b22	ELSA-2020-1112	ol7_aarch64_optional_latest
	php-fpm-5.4.16-42.el7.aarch64.rpm	3abbbfa2ecc599eca1ffed935253a04e1022f9dfa83bfed505c4317c9ec090c6	ELSA-2020-1112	ol7_aarch64_optional_latest
	php-gd-5.4.16-42.el7.aarch64.rpm	6f018b017e71e2197896ef28f4d218bdce28ad844fbba7441b3910da1c0de2ed	ELSA-2020-1112	ol7_aarch64_latest
	php-intl-5.4.16-42.el7.aarch64.rpm	b64343196bd1bab5d661daa70e048eaab1ed6fbaf0d490baf013316cea5be398	ELSA-2020-1112	ol7_aarch64_optional_latest
	php-ldap-5.4.16-42.el7.aarch64.rpm	1f1415930972633ddad8b064d4e780c1d15d49ec69729bee71043cb0c40f3773	ELSA-2020-1112	ol7_aarch64_latest
	php-mbstring-5.4.16-42.el7.aarch64.rpm	aedeaf906fe27df2b71f78392ba9024d2a1d3771ef072049f967496402ec28f3	ELSA-2020-1112	ol7_aarch64_optional_latest
	php-mysql-5.4.16-42.el7.aarch64.rpm	96e5af8db9b39d071c496980633f192fc5505a34365a91c224fb6d5233e1f6a6	ELSA-2020-1112	ol7_aarch64_latest
	php-mysqlnd-5.4.16-42.el7.aarch64.rpm	05b7a340198ab717abb4aae0567f67f072c34d2c55b21c91e7be77fdb3fa0071	ELSA-2020-1112	ol7_aarch64_optional_latest
	php-odbc-5.4.16-42.el7.aarch64.rpm	776ba1f857544969560a6c7275fdee0f62d919f86e82bdc3c23f279c6e98f4d8	ELSA-2020-1112	ol7_aarch64_latest
	php-pdo-5.4.16-42.el7.aarch64.rpm	56efd94e02f2eefa0a16f6aeba48e95e49e8632cee309b5b0ffaef5755cc9bf8	ELSA-2020-1112	ol7_aarch64_latest
	php-pgsql-5.4.16-42.el7.aarch64.rpm	5514e2da293248ff906a46aff4252f4bb3641d43992e934dfada1ba1ca04b90f	ELSA-2020-1112	ol7_aarch64_latest
	php-process-5.4.16-42.el7.aarch64.rpm	5d5c49c19d59b18656a16b67dbb4bcb4525a1c4f1947032362eebd49604e9b68	ELSA-2020-1112	ol7_aarch64_latest
	php-pspell-5.4.16-42.el7.aarch64.rpm	a966d87acb415e12b298c89d4c4fc17ee47db70818e637ee4c8200e3647502cc	ELSA-2020-1112	ol7_aarch64_optional_latest
	php-recode-5.4.16-42.el7.aarch64.rpm	c25d73c1b55622ab714f7143ede3e271be4d3806130da26c07c2715c5b85cfb0	ELSA-2020-1112	ol7_aarch64_latest
	php-snmp-5.4.16-42.el7.aarch64.rpm	06c39af25160f3b83c8678d9761e5fb91a61d9ba1b6b8321f0cf90a262a67130	ELSA-2020-1112	ol7_aarch64_optional_latest
	php-soap-5.4.16-42.el7.aarch64.rpm	8ec6a37fd9f5cb17dd68588442f89f39ab2b55d1397c35c05b764bb88a7e89b1	ELSA-2020-1112	ol7_aarch64_latest
	php-xml-5.4.16-42.el7.aarch64.rpm	37aef050717487a08bf49678298916160a6ac9fa2c8e5f01153eca91087b7e0d	ELSA-2020-1112	ol7_aarch64_latest
	php-xmlrpc-5.4.16-42.el7.aarch64.rpm	e5e582e4d90b8cd2126908f06d51e339568994375e0b790b03c414f78c95a009	ELSA-2020-1112	ol7_aarch64_latest
Oracle Linux 7 (x86_64)	php-5.4.16-42.el7.src.rpm	2f254bd9f5857d4b33458b2b0a14a93dbf910026eba5771dd47fc4b8b14e20b3	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-5.4.16-42.el7.src.rpm	2f254bd9f5857d4b33458b2b0a14a93dbf910026eba5771dd47fc4b8b14e20b3	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-5.4.16-42.el7.src.rpm	2f254bd9f5857d4b33458b2b0a14a93dbf910026eba5771dd47fc4b8b14e20b3	ELSA-2020-1112	ol7_x86_64_u3_base
	php-5.4.16-42.el7.src.rpm	2f254bd9f5857d4b33458b2b0a14a93dbf910026eba5771dd47fc4b8b14e20b3	ELSA-2020-1112	ol7_x86_64_u4_base
	php-5.4.16-42.el7.x86_64.rpm	362dd69ca6d59da0f15e57bf6ac55fca38dd2fe792972b26a0014beb7e7ef5a9	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-5.4.16-42.el7.x86_64.rpm	362dd69ca6d59da0f15e57bf6ac55fca38dd2fe792972b26a0014beb7e7ef5a9	ELSA-2020-1112	ol7_x86_64_u3_base
	php-5.4.16-42.el7.x86_64.rpm	362dd69ca6d59da0f15e57bf6ac55fca38dd2fe792972b26a0014beb7e7ef5a9	ELSA-2020-1112	ol7_x86_64_u4_base
	php-bcmath-5.4.16-42.el7.x86_64.rpm	8395e5b6e04e7771bdc57d3ac915b1d810167aa49d6b2180647f248d01e7aef9	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-cli-5.4.16-42.el7.x86_64.rpm	c611f115a77d4ad58ee4392b1fed11873612b9835bb7115fd23140d4cbb18efe	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-cli-5.4.16-42.el7.x86_64.rpm	c611f115a77d4ad58ee4392b1fed11873612b9835bb7115fd23140d4cbb18efe	ELSA-2020-1112	ol7_x86_64_u3_base
	php-cli-5.4.16-42.el7.x86_64.rpm	c611f115a77d4ad58ee4392b1fed11873612b9835bb7115fd23140d4cbb18efe	ELSA-2020-1112	ol7_x86_64_u4_base
	php-common-5.4.16-42.el7.x86_64.rpm	a81cc6d4d139ba0d44809eb43958838e89ce56567e61bc53998f101d8daa9978	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-common-5.4.16-42.el7.x86_64.rpm	a81cc6d4d139ba0d44809eb43958838e89ce56567e61bc53998f101d8daa9978	ELSA-2020-1112	ol7_x86_64_u3_base
	php-common-5.4.16-42.el7.x86_64.rpm	a81cc6d4d139ba0d44809eb43958838e89ce56567e61bc53998f101d8daa9978	ELSA-2020-1112	ol7_x86_64_u4_base
	php-dba-5.4.16-42.el7.x86_64.rpm	09860a704d37a53f4f2cf120a56e5307fed9a5f467483484ede9588e97d27dd6	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-devel-5.4.16-42.el7.x86_64.rpm	4498bfb387df74eeb74606a743cda64d3afc019d679726387c0d96f4f7203a56	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-embedded-5.4.16-42.el7.x86_64.rpm	b36df94814f15761fb41d58babe396d59a7b401fe1704c4e625693899645c9bf	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-enchant-5.4.16-42.el7.x86_64.rpm	008186b33e057b302516d6f3df6baae9b8036184053f6dd6b289504b2614dfc1	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-fpm-5.4.16-42.el7.x86_64.rpm	5af388989266bcd04646b8ac05e91fdbc2df8386117fdd990ce51920f09c4449	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-gd-5.4.16-42.el7.x86_64.rpm	2c9a4088307fe1032f1f374b6a737d2d32038210f42794947857275995e420f9	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-gd-5.4.16-42.el7.x86_64.rpm	2c9a4088307fe1032f1f374b6a737d2d32038210f42794947857275995e420f9	ELSA-2020-1112	ol7_x86_64_u3_base
	php-gd-5.4.16-42.el7.x86_64.rpm	2c9a4088307fe1032f1f374b6a737d2d32038210f42794947857275995e420f9	ELSA-2020-1112	ol7_x86_64_u4_base
	php-intl-5.4.16-42.el7.x86_64.rpm	825bbecaa5254a2695aa73f5cbbccb9100c5afdd72b289f0a60085727a1264c7	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-ldap-5.4.16-42.el7.x86_64.rpm	bef1cc5e5b1f3fdc407bbecc8b305333329588c67c24e5df3a95323f259c1159	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-ldap-5.4.16-42.el7.x86_64.rpm	bef1cc5e5b1f3fdc407bbecc8b305333329588c67c24e5df3a95323f259c1159	ELSA-2020-1112	ol7_x86_64_u3_base
	php-ldap-5.4.16-42.el7.x86_64.rpm	bef1cc5e5b1f3fdc407bbecc8b305333329588c67c24e5df3a95323f259c1159	ELSA-2020-1112	ol7_x86_64_u4_base
	php-mbstring-5.4.16-42.el7.x86_64.rpm	886af9fbcf18dbc8a16ed4edb93e2d31cdd2f422da7c89047cd94f120d067c89	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-mysql-5.4.16-42.el7.x86_64.rpm	33266f4b94b1e44f22ca50582e23cc2a6da8482b947223bdfce9dccc622c4ac1	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-mysql-5.4.16-42.el7.x86_64.rpm	33266f4b94b1e44f22ca50582e23cc2a6da8482b947223bdfce9dccc622c4ac1	ELSA-2020-1112	ol7_x86_64_u3_base
	php-mysql-5.4.16-42.el7.x86_64.rpm	33266f4b94b1e44f22ca50582e23cc2a6da8482b947223bdfce9dccc622c4ac1	ELSA-2020-1112	ol7_x86_64_u4_base
	php-mysqlnd-5.4.16-42.el7.x86_64.rpm	28aa345ee8f5f6b9db29a6dd9f02a6269426fb84c07a60b845a61e25c0f55f9f	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-odbc-5.4.16-42.el7.x86_64.rpm	715c92880de3ec41ee85fb2551a8c35706116f0bbb50c3e4a44136bc279a8712	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-odbc-5.4.16-42.el7.x86_64.rpm	715c92880de3ec41ee85fb2551a8c35706116f0bbb50c3e4a44136bc279a8712	ELSA-2020-1112	ol7_x86_64_u3_base
	php-odbc-5.4.16-42.el7.x86_64.rpm	715c92880de3ec41ee85fb2551a8c35706116f0bbb50c3e4a44136bc279a8712	ELSA-2020-1112	ol7_x86_64_u4_base
	php-pdo-5.4.16-42.el7.x86_64.rpm	cbd7d582827336dfc28914cdfdc03f3c2ed386af9957b9b52f8a6cbaa20daecb	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-pdo-5.4.16-42.el7.x86_64.rpm	cbd7d582827336dfc28914cdfdc03f3c2ed386af9957b9b52f8a6cbaa20daecb	ELSA-2020-1112	ol7_x86_64_u3_base
	php-pdo-5.4.16-42.el7.x86_64.rpm	cbd7d582827336dfc28914cdfdc03f3c2ed386af9957b9b52f8a6cbaa20daecb	ELSA-2020-1112	ol7_x86_64_u4_base
	php-pgsql-5.4.16-42.el7.x86_64.rpm	a23ef3779d6cca4487e015245914033c07dae33ada4ad2f1d60c898390425cd2	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-pgsql-5.4.16-42.el7.x86_64.rpm	a23ef3779d6cca4487e015245914033c07dae33ada4ad2f1d60c898390425cd2	ELSA-2020-1112	ol7_x86_64_u3_base
	php-pgsql-5.4.16-42.el7.x86_64.rpm	a23ef3779d6cca4487e015245914033c07dae33ada4ad2f1d60c898390425cd2	ELSA-2020-1112	ol7_x86_64_u4_base
	php-process-5.4.16-42.el7.x86_64.rpm	8fd5dffe9ed6c51a89f1fe8f96f22352d20433678161af95e8da9c605c644f83	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-process-5.4.16-42.el7.x86_64.rpm	8fd5dffe9ed6c51a89f1fe8f96f22352d20433678161af95e8da9c605c644f83	ELSA-2020-1112	ol7_x86_64_u3_base
	php-process-5.4.16-42.el7.x86_64.rpm	8fd5dffe9ed6c51a89f1fe8f96f22352d20433678161af95e8da9c605c644f83	ELSA-2020-1112	ol7_x86_64_u4_base
	php-pspell-5.4.16-42.el7.x86_64.rpm	cc25b23141259082b989e969091a0387a1d69dfa45f1b9aca515d9d61beb51e6	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-recode-5.4.16-42.el7.x86_64.rpm	0fc5d1527878220b4aed9f7456a1a809ed6422b50cbc5235d7e3ea33608e25c5	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-recode-5.4.16-42.el7.x86_64.rpm	0fc5d1527878220b4aed9f7456a1a809ed6422b50cbc5235d7e3ea33608e25c5	ELSA-2020-1112	ol7_x86_64_u3_base
	php-recode-5.4.16-42.el7.x86_64.rpm	0fc5d1527878220b4aed9f7456a1a809ed6422b50cbc5235d7e3ea33608e25c5	ELSA-2020-1112	ol7_x86_64_u4_base
	php-snmp-5.4.16-42.el7.x86_64.rpm	2916535926e0ee5575491567cbdd594a034c591d3f50aa4a846acfd376f3c57b	ELSA-2020-1112	ol7_x86_64_optional_archive
	php-soap-5.4.16-42.el7.x86_64.rpm	216798d15760d5687f3634b38d68cb7f2b017e52495529cc5c8a322f693ada35	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-soap-5.4.16-42.el7.x86_64.rpm	216798d15760d5687f3634b38d68cb7f2b017e52495529cc5c8a322f693ada35	ELSA-2020-1112	ol7_x86_64_u3_base
	php-soap-5.4.16-42.el7.x86_64.rpm	216798d15760d5687f3634b38d68cb7f2b017e52495529cc5c8a322f693ada35	ELSA-2020-1112	ol7_x86_64_u4_base
	php-xml-5.4.16-42.el7.x86_64.rpm	899481874b8bc5a8aa854a1137f33cb075dbff1f9f5df1aa3cc16d08d6de73b7	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-xml-5.4.16-42.el7.x86_64.rpm	899481874b8bc5a8aa854a1137f33cb075dbff1f9f5df1aa3cc16d08d6de73b7	ELSA-2020-1112	ol7_x86_64_u3_base
	php-xml-5.4.16-42.el7.x86_64.rpm	899481874b8bc5a8aa854a1137f33cb075dbff1f9f5df1aa3cc16d08d6de73b7	ELSA-2020-1112	ol7_x86_64_u4_base
	php-xmlrpc-5.4.16-42.el7.x86_64.rpm	d3abd82b3d777609956fc900d86807dfab117f9f6652b6c9b7cd664d7801bbc6	ELSA-2020-1112	ol7_x86_64_latest_archive
	php-xmlrpc-5.4.16-42.el7.x86_64.rpm	d3abd82b3d777609956fc900d86807dfab117f9f6652b6c9b7cd664d7801bbc6	ELSA-2020-1112	ol7_x86_64_u3_base
	php-xmlrpc-5.4.16-42.el7.x86_64.rpm	d3abd82b3d777609956fc900d86807dfab117f9f6652b6c9b7cd664d7801bbc6	ELSA-2020-1112	ol7_x86_64_u4_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team