FreshPorts - VuXML

php development team reports:

Security Enhancements and Fixes in PHP 5.3.9:

• Added max_input_vars directive to prevent attacks based on hash collisions. (CVE-2011-4885)
• Fixed bug #60150 (Integer overflow during the parsing of invalid exif header). (CVE-2011-4566)

< 5.3.9

< 5.2.17_5

< 5.2.17_6

PHP development team reports:

Fixed bug #69364 (PHP Multipart/form-data remote DoS Vulnerability). (CVE-2015-4024)

Fixed bug #69418 (CVE-2006-7243 fix regressions in 5.4+). (CVE-2015-4025)

Fixed bug #69545 (Integer overflow in ftp_genlist() resulting in heap overflow). (CVE-2015-4022)

Fixed bug #68598 (pcntl_exec() should not allow null char). (CVE-2015-4026)

Fixed bug #69453 (Memory Corruption in phar_parse_tarfile when entry filename starts with null). (CVE-2015-4021)

< 5.4.41

< 5.5.25

< 5.6.9

The PHP project reports:

The PHP development team announces the immediate availability of PHP 5.4.40. 14 security-related bugs were fixed in this release, including CVE-2014-9709, CVE-2015-2301, CVE-2015-2783, CVE-2015-1352. All PHP 5.4 users are encouraged to upgrade to this version.

The PHP development team announces the immediate availability of PHP 5.5.24. Several bugs have been fixed, some of them being security related, like CVE-2015-1351 and CVE-2015-1352. All PHP 5.5 users are encouraged to upgrade to this version.

The PHP development team announces the immediate availability of PHP 5.6.8. Several bugs have been fixed, some of them being security related, like CVE-2015-1351 and CVE-2015-1352. All PHP 5.6 users are encouraged to upgrade to this version.

< 5.4.40

< 5.5.24

< 5.6.8

The PHP Development Team reports:

The release of PHP 5.4.15 and 5.4.5 fix a potential overflow in _php_stream_scandir

gt 5.4 lt 5.4.5

ge 5.3 lt 5.3.15

ge 5.2 lt 5.2.17_10

< 5.3.15

< 5.2.17_10

PHP development team reports:

Security Enhancements and Fixes in PHP 5.3.7:

• Updated crypt_blowfish to 1.2. (CVE-2011-2483)
• Fixed crash in error_log(). Reported by Mateusz Kocielski
• Fixed buffer overflow on overlog salt in crypt().
• Fixed bug #54939 (File path injection vulnerability in RFC1867 File upload filename). Reported by Krzysztof Kotowicz. (CVE-2011-2202)
• Fixed stack buffer overflow in socket_connect(). (CVE-2011-1938)
• Fixed bug #54238 (use-after-free in substr_replace()). (CVE-2011-1148)

< 5.3.7

The PHP Development Team reports:

The release of PHP 5.4.13 and 5.4.3 complete a fix for the vulnerability in CGI-based setups as originally described in CVE-2012-1823. (CVE-2012-2311)

Note: mod_php and php-fpm are not vulnerable to this attack.

PHP 5.4.3 fixes a buffer overflow vulnerability in the apache_request_headers() (CVE-2012-2329).

gt 5.4 lt 5.4.3

< 5.3.13

< 5.3.13

< 5.2.17_9

The PHP development team reports:

A Heap-based buffer overflow flaw was found in the php quoted_printable_encode() function. A remote attacker could use this flaw to cause php to crash or execute arbirary code with the permission of the user running php

< 5.4.16

< 5.3.26

php development team reports:

Security Enhancements for both PHP 5.3.11 and PHP 5.4.1:

• Insufficient validating of upload name leading to corrupted $_FILES indices. (CVE-2012-1172)
• Add open_basedir checks to readline_write_history and readline_read_history.

Security Enhancements for both PHP 5.3.11 only:

• Regression in magic_quotes_gpc fix for CVE-2012-0831.

< 5.3.11

< 5.3.11

The PHP project reports:

The PHP development team announces the immediate availability of PHP 5.6.7. Several bugs have been fixed as well as CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.6 users are encouraged to upgrade to this version.

The PHP development team announces the immediate availability of PHP 5.5.23. Several bugs have been fixed as well as CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.5 users are encouraged to upgrade to this version.

The PHP development team announces the immediate availability of PHP 5.4.39. Six security-related bugs were fixed in this release, including CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.4 users are encouraged to upgrade to this version.

le 5.3.29_5

< 5.4.39

< 5.5.23

< 5.6.7

Symeon Paraschoudis reports:

Use-after-free vulnerability in spl_recursive_it_move_forward_ex()

< 5.6.11

< 5.5.27

< 5.4.43

Rui Hirokawa reports:

As of PHP 5.1.2, header() can no longer be used to send multiple response headers in a single call to prevent the HTTP Response Splitting Attack. header() only checks the linefeed (LF, 0x0A) as line-end marker, it doesn't check the carriage-return (CR, 0x0D).

However, some browsers including Google Chrome, IE also recognize CR as the line-end.

The current specification of header() still has the vulnerability against the HTTP header splitting attack.

ge 5.2 lt 5.2.17_11

ge 5.3 lt 5.3.11

ge 5.4 lt 5.4.1

< 5.2.17_11

< 5.3.11

php development team reports:

Security Enhancements and Fixes in PHP 5.3.12:

• Initial fix for cgi-bin ?-s cmdarg parse issue (CVE-2012-1823)

gt 5.4 lt 5.4.2

< 5.3.12

< 5.3.12

< 4.4.10

< 5.2.17_8

PHP reports:

• Core:
  • Fixed bug #70172 (Use After Free Vulnerability in unserialize()).
  • Fixed bug #70219 (Use after free vulnerability in session deserializer).
• EXIF:
  • Fixed bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes).
• hash:
  • Fixed bug #70312 (HAVAL gives wrong hashes in specific cases).
• PCRE:
  • Fixed bug #70345 (Multiple vulnerabilities related to PCRE functions).
• SOAP:
  • Fixed bug #70388 (SOAP serialize_function_call() type confusion / RCE).
• SPL:
  • Fixed bug #70365 (Use-after-free vulnerability in unserialize() with SplObjectStorage).
  • Fixed bug #70366 (Use-after-free vulnerability in unserialize() with SplDoublyLinkedList).
• XSLT:
  • Fixed bug #69782 (NULL pointer dereference).
• ZIP:
  • Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when creating directories).

< 5.4.45

< 5.5.29

< 5.6.13

The PHP project reports:

Core:

• Fixed bug #69793 (Remotely triggerable stack exhaustion via recursive method calls).
• Fixed bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref).

OpenSSL:

• Fixed bug #70014 (openssl_random_pseudo_bytes() is not cryptographically secure).

Phar:

• Improved fix for bug #69441.
• Fixed bug #70019 (Files extracted from archive may be placed outside of destination directory).

SOAP:

• Fixed bug #70081 (SoapClient info leak / null pointer dereference via multiple type confusions).

SPL:

• Fixed bug #70068 (Dangling pointer in the unserialization of ArrayObject items).
• Fixed bug #70166 (Use After Free Vulnerability in unserialize() with SPLArrayObject).
• Fixed bug #70168 (Use After Free Vulnerability in unserialize() with SplObjectStorage).
• Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList).

< 5.4.44

< 5.5.28

< 5.6.12

cmb reports:

When delayed variable substitution is enabled (can be set in the Registry, for instance), !ENV! works similar to %ENV%, and the value of the environment variable ENV will be subsituted.

< 5.6.11

< 5.5.27

< 5.4.43

The PHP development team reports:

PHP does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory.

The SOAP parser in PHP allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions.

< 5.4.13

< 5.3.23

The PHP Project reports:

Use after free vulnerability in unserialize() with DateTimeZone.

Mitigation for CVE-2015-0235 -- GHOST: glibc gethostbyname buffer overflow.

< 5.4.38

< 5.5.22

< 5.6.6

These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take caution and find alternative software as soon as possible.

ge 0

ge 0

< 5.18

ge 0

< 2.1,1

ge 0

ge 0

ge 0

ge 0

ge 0

MITRE CVE team reports:

Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.

ge 5.2 lt 5.2.17_11

ge 5.3 lt 5.3.9

< 5.2.17_11

< 5.3.9