Oracle Errata System
Oracle Linux
5.3
2021-09-09T12:48:21
ELSA-2016-2598: php security and bug fix update (MODERATE)
Oracle Linux 7
[5.4.16-42]
- bz2: fix improper error handling in bzread() CVE-2016-5399
[5.4.16-41]
- gd: fix integer overflow in _gd2GetHeader() resulting in
heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
CVE-2016-5768
[5.4.16-40]
- don't set environmental variable based on user supplied Proxy
request header CVE-2016-5385
[5.4.16-39]
- fix segmentation fault in header_register_callback #1344578
[5.4.16-38]
- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979
[5.4.16-37]
- session: fix segfault in session with rfc1867 #1297179
MODERATE
Copyright 2016 Oracle, Inc.
CVE-2016-5399
CVE-2016-5767
CVE-2016-5768
CVE-2016-5766
php-pspell
php-pdo
php-soap
php-xml
php-mbstring
php-pgsql
php-process
php-intl
php-xmlrpc
php-snmp
php-mysql
php-common
php-gd
php-odbc
php-devel
php-ldap
php-embedded
php-enchant
php
php-mysqlnd
oraclelinux-release
php-fpm
php-dba
php-recode
php-bcmath
php-cli
72f97b74ec551f03
^7
aarch64
0:5.4.16-42.el7
x86_64