Уведомление безопасности SUSE-SU-2015:1253-1

Критичная (10.0)

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

SUSE

php5-debuginfo (any) php5-debugsource (any) php5-devel (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Module for Web Scripting 12, SUSE Linux Enterprise Software Development Kit 12

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 12:
ppc64le, s390x, x86_64:
php5-debuginfo - 5.5.14-30.1
php5-debugsource - 5.5.14-30.1
php5-devel - 5.5.14-30.1
SUSE Linux Enterprise Module for Web Scripting 12:
s390x, x86_64:
php5-sockets - 5.5.14-30.1
php5-openssl-debuginfo - 5.5.14-30.1
php5-enchant - 5.5.14-30.1
php5-exif - 5.5.14-30.1
php5-soap - 5.5.14-30.1
php5-bcmath - 5.5.14-30.1
php5 - 5.5.14-30.1
php5-fileinfo - 5.5.14-30.1
php5-gettext-debuginfo - 5.5.14-30.1
php5-wddx - 5.5.14-30.1
php5-wddx-debuginfo - 5.5.14-30.1
php5-xmlreader - 5.5.14-30.1
php5-mcrypt - 5.5.14-30.1
php5-enchant-debuginfo - 5.5.14-30.1
php5-bcmath-debuginfo - 5.5.14-30.1
php5-pdo-debuginfo - 5.5.14-30.1
apache2-mod_php5 - 5.5.14-30.1
php5-json-debuginfo - 5.5.14-30.1
php5-xmlrpc - 5.5.14-30.1
php5-sysvmsg-debuginfo - 5.5.14-30.1
php5-mbstring-debuginfo - 5.5.14-30.1
php5-shmop-debuginfo - 5.5.14-30.1
php5-json - 5.5.14-30.1
php5-sysvmsg - 5.5.14-30.1
php5-ftp - 5.5.14-30.1
php5-tokenizer-debuginfo - 5.5.14-30.1
php5-curl - 5.5.14-30.1
php5-bz2-debuginfo - 5.5.14-30.1
php5-pspell-debuginfo - 5.5.14-30.1
php5-ftp-debuginfo - 5.5.14-30.1
php5-xmlwriter - 5.5.14-30.1
php5-pcntl-debuginfo - 5.5.14-30.1
php5-mcrypt-debuginfo - 5.5.14-30.1
php5-ctype-debuginfo - 5.5.14-30.1
php5-snmp - 5.5.14-30.1
php5-sysvshm-debuginfo - 5.5.14-30.1
php5-curl-debuginfo - 5.5.14-30.1
php5-intl - 5.5.14-30.1
php5-fpm-debuginfo - 5.5.14-30.1
php5-mbstring - 5.5.14-30.1
php5-xsl-debuginfo - 5.5.14-30.1
php5-sqlite - 5.5.14-30.1
php5-dom-debuginfo - 5.5.14-30.1
php5-sqlite-debuginfo - 5.5.14-30.1
php5-xsl - 5.5.14-30.1
php5-pgsql-debuginfo - 5.5.14-30.1
php5-zip - 5.5.14-30.1
php5-fastcgi - 5.5.14-30.1
php5-dba - 5.5.14-30.1
php5-odbc-debuginfo - 5.5.14-30.1
php5-exif-debuginfo - 5.5.14-30.1
php5-snmp-debuginfo - 5.5.14-30.1
php5-dom - 5.5.14-30.1
php5-suhosin - 5.5.14-30.1
php5-gettext - 5.5.14-30.1
php5-mysql - 5.5.14-30.1
php5-sysvshm - 5.5.14-30.1
php5-bz2 - 5.5.14-30.1
php5-zlib-debuginfo - 5.5.14-30.1
php5-iconv - 5.5.14-30.1
php5-ldap-debuginfo - 5.5.14-30.1
php5-xmlrpc-debuginfo - 5.5.14-30.1
php5-pdo - 5.5.14-30.1
php5-gmp - 5.5.14-30.1
php5-gd-debuginfo - 5.5.14-30.1
php5-ldap - 5.5.14-30.1
php5-debugsource - 5.5.14-30.1
php5-pcntl - 5.5.14-30.1
php5-tokenizer - 5.5.14-30.1
php5-gd - 5.5.14-30.1
php5-sysvsem-debuginfo - 5.5.14-30.1
php5-calendar - 5.5.14-30.1
php5-dba-debuginfo - 5.5.14-30.1
php5-zlib - 5.5.14-30.1
php5-pspell - 5.5.14-30.1
php5-mysql-debuginfo - 5.5.14-30.1
php5-ctype - 5.5.14-30.1
php5-soap-debuginfo - 5.5.14-30.1
php5-sockets-debuginfo - 5.5.14-30.1
apache2-mod_php5-debuginfo - 5.5.14-30.1
php5-shmop - 5.5.14-30.1
php5-intl-debuginfo - 5.5.14-30.1
php5-pgsql - 5.5.14-30.1
php5-zip-debuginfo - 5.5.14-30.1
php5-fpm - 5.5.14-30.1
php5-xmlwriter-debuginfo - 5.5.14-30.1
php5-sysvsem - 5.5.14-30.1
php5-calendar-debuginfo - 5.5.14-30.1
php5-odbc - 5.5.14-30.1
php5-suhosin-debuginfo - 5.5.14-30.1
php5-iconv-debuginfo - 5.5.14-30.1
php5-fileinfo-debuginfo - 5.5.14-30.1
php5-gmp-debuginfo - 5.5.14-30.1
php5-debuginfo - 5.5.14-30.1
php5-openssl - 5.5.14-30.1
php5-fastcgi-debuginfo - 5.5.14-30.1
php5-xmlreader-debuginfo - 5.5.14-30.1
SUSE Linux Enterprise Module for Web Scripting 12:
noarch:
php5-pear - 5.5.14-30.1

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00026.html
https://bugzilla.suse.com/919080
https://bugzilla.suse.com/927147
https://bugzilla.suse.com/931421
https://bugzilla.suse.com/931769
https://bugzilla.suse.com/931772
https://bugzilla.suse.com/931776
https://bugzilla.suse.com/933227
https://bugzilla.suse.com/935224
https://bugzilla.suse.com/935226
https://bugzilla.suse.com/935227
https://bugzilla.suse.com/935232
https://bugzilla.suse.com/935234
https://bugzilla.suse.com/935274
https://bugzilla.suse.com/935275

Источник: CVE
Наименование: CVE-2015-4021
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4021

Источник: CVE
Наименование: CVE-2015-3411
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3411

Источник: CVE
Наименование: CVE-2015-4148
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4148

Источник: CVE
Наименование: CVE-2015-4022
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4022

Источник: CVE
Наименование: CVE-2015-4024
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4024

Источник: CVE
Наименование: CVE-2015-4026
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4026

Источник: CVE
Наименование: CVE-2015-4601
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4601

Источник: CVE
Наименование: CVE-2015-4600
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4600

Источник: CVE
Наименование: CVE-2015-4603
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4603

Источник: CVE
Наименование: CVE-2015-4602
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4602

Источник: CVE
Наименование: CVE-2015-4599
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4599

Источник: CVE
Наименование: CVE-2015-4644
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4644

Источник: CVE
Наименование: CVE-2015-3412
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3412

Источник: CVE
Наименование: CVE-2015-4643
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4643

Источник: CVE
Наименование: CVE-2015-4598
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4598