{"id":"SUSE-SU-2015:1818-1","summary":"Security update for php53","details":"\nThis update of PHP5 brings several security fixes.\n\nSecurity fixes:\n* CVE-2015-6831: A use after free vulnerability in unserialize() has been fixed which could be used to crash php or potentially execute code. [bnc#942291] [bnc#942294] [bnc#942295]\n* CVE-2015-6836: A SOAP serialize_function_call() type confusion leading to remote code execution problem was fixed. [bnc#945428]\n* CVE-2015-6837 CVE-2015-6838: Two NULL pointer dereferences in the XSLTProcessor class were fixed. [bnc#945412]\n\nIt also includes a bugfix for the odbc module:\n* compare with SQL_NULL_DATA correctly [bnc#935074]\n  ","modified":"2026-02-04T02:28:51.260660Z","published":"2015-09-22T07:31:29Z","related":["CVE-2015-6831","CVE-2015-6833","CVE-2015-6836","CVE-2015-6837","CVE-2015-6838"],"upstream":["CVE-2015-6831","CVE-2015-6833","CVE-2015-6836","CVE-2015-6837","CVE-2015-6838"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151818-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/935074"},{"type":"REPORT","url":"https://bugzilla.suse.com/942291"},{"type":"REPORT","url":"https://bugzilla.suse.com/942294"},{"type":"REPORT","url":"https://bugzilla.suse.com/942295"},{"type":"REPORT","url":"https://bugzilla.suse.com/942296"},{"type":"REPORT","url":"https://bugzilla.suse.com/945412"},{"type":"REPORT","url":"https://bugzilla.suse.com/945428"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-6831"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-6833"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-6836"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-6837"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-6838"}],"affected":[{"package":{"name":"php53","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","purl":"pkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-48.1"}]}],"ecosystem_specific":{"binaries":[{"php53-tidy":"5.3.17-48.1","php53-devel":"5.3.17-48.1","php53-imap":"5.3.17-48.1","php53-posix":"5.3.17-48.1","php53-readline":"5.3.17-48.1","php53-sockets":"5.3.17-48.1","php53-sqlite":"5.3.17-48.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1818-1.json"}},{"package":{"name":"php53","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","purl":"pkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-48.1"}]}],"ecosystem_specific":{"binaries":[{"php53-sockets":"5.3.17-48.1","php53-sqlite":"5.3.17-48.1","php53-tidy":"5.3.17-48.1","php53-devel":"5.3.17-48.1","php53-imap":"5.3.17-48.1","php53-posix":"5.3.17-48.1","php53-readline":"5.3.17-48.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1818-1.json"}},{"package":{"name":"php53","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","purl":"pkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-48.1"}]}],"ecosystem_specific":{"binaries":[{"php53-intl":"5.3.17-48.1","php53-pgsql":"5.3.17-48.1","php53-sysvsem":"5.3.17-48.1","php53-wddx":"5.3.17-48.1","php53-curl":"5.3.17-48.1","php53-pear":"5.3.17-48.1","php53-shmop":"5.3.17-48.1","php53-openssl":"5.3.17-48.1","apache2-mod_php53":"5.3.17-48.1","php53-gmp":"5.3.17-48.1","php53-mbstring":"5.3.17-48.1","php53-calendar":"5.3.17-48.1","php53-fastcgi":"5.3.17-48.1","php53-gettext":"5.3.17-48.1","php53-ldap":"5.3.17-48.1","php53-pspell":"5.3.17-48.1","php53-soap":"5.3.17-48.1","php53-sysvmsg":"5.3.17-48.1","php53-tokenizer":"5.3.17-48.1","php53-mcrypt":"5.3.17-48.1","php53-mysql":"5.3.17-48.1","php53-xmlrpc":"5.3.17-48.1","php53-xmlwriter":"5.3.17-48.1","php53-zip":"5.3.17-48.1","php53":"5.3.17-48.1","php53-bz2":"5.3.17-48.1","php53-dba":"5.3.17-48.1","php53-iconv":"5.3.17-48.1","php53-pcntl":"5.3.17-48.1","php53-snmp":"5.3.17-48.1","php53-sysvshm":"5.3.17-48.1","php53-bcmath":"5.3.17-48.1","php53-ctype":"5.3.17-48.1","php53-dom":"5.3.17-48.1","php53-exif":"5.3.17-48.1","php53-fileinfo":"5.3.17-48.1","php53-odbc":"5.3.17-48.1","php53-xsl":"5.3.17-48.1","php53-pdo":"5.3.17-48.1","php53-ftp":"5.3.17-48.1","php53-gd":"5.3.17-48.1","php53-json":"5.3.17-48.1","php53-suhosin":"5.3.17-48.1","php53-xmlreader":"5.3.17-48.1","php53-zlib":"5.3.17-48.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1818-1.json"}},{"package":{"name":"php53","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","purl":"pkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-48.1"}]}],"ecosystem_specific":{"binaries":[{"php53-gmp":"5.3.17-48.1","php53-json":"5.3.17-48.1","php53-openssl":"5.3.17-48.1","php53-pgsql":"5.3.17-48.1","php53-suhosin":"5.3.17-48.1","php53-sysvsem":"5.3.17-48.1","php53-exif":"5.3.17-48.1","php53-gd":"5.3.17-48.1","php53-pspell":"5.3.17-48.1","php53-snmp":"5.3.17-48.1","php53-soap":"5.3.17-48.1","php53-xmlwriter":"5.3.17-48.1","php53-calendar":"5.3.17-48.1","php53-ctype":"5.3.17-48.1","php53-ftp":"5.3.17-48.1","php53-mcrypt":"5.3.17-48.1","php53-tokenizer":"5.3.17-48.1","php53-zlib":"5.3.17-48.1","php53-dom":"5.3.17-48.1","php53-iconv":"5.3.17-48.1","php53-mbstring":"5.3.17-48.1","php53-odbc":"5.3.17-48.1","php53-pdo":"5.3.17-48.1","php53-pear":"5.3.17-48.1","php53-sysvshm":"5.3.17-48.1","php53-xmlrpc":"5.3.17-48.1","php53-fastcgi":"5.3.17-48.1","php53-gettext":"5.3.17-48.1","php53-intl":"5.3.17-48.1","php53-sysvmsg":"5.3.17-48.1","php53-xmlreader":"5.3.17-48.1","php53-zip":"5.3.17-48.1","php53-pcntl":"5.3.17-48.1","apache2-mod_php53":"5.3.17-48.1","php53-bcmath":"5.3.17-48.1","php53-dba":"5.3.17-48.1","php53-fileinfo":"5.3.17-48.1","php53-ldap":"5.3.17-48.1","php53-mysql":"5.3.17-48.1","php53-shmop":"5.3.17-48.1","php53-bz2":"5.3.17-48.1","php53-curl":"5.3.17-48.1","php53-wddx":"5.3.17-48.1","php53-xsl":"5.3.17-48.1","php53":"5.3.17-48.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1818-1.json"}},{"package":{"name":"php53","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","purl":"pkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-48.1"}]}],"ecosystem_specific":{"binaries":[{"apache2-mod_php53":"5.3.17-48.1","php53-calendar":"5.3.17-48.1","php53-curl":"5.3.17-48.1","php53-fileinfo":"5.3.17-48.1","php53-openssl":"5.3.17-48.1","php53-pdo":"5.3.17-48.1","php53-snmp":"5.3.17-48.1","php53-wddx":"5.3.17-48.1","php53-dba":"5.3.17-48.1","php53-fastcgi":"5.3.17-48.1","php53-ftp":"5.3.17-48.1","php53-gmp":"5.3.17-48.1","php53-odbc":"5.3.17-48.1","php53-pcntl":"5.3.17-48.1","php53-pear":"5.3.17-48.1","php53-suhosin":"5.3.17-48.1","php53-ctype":"5.3.17-48.1","php53-iconv":"5.3.17-48.1","php53-mcrypt":"5.3.17-48.1","php53-mysql":"5.3.17-48.1","php53-sysvmsg":"5.3.17-48.1","php53-tokenizer":"5.3.17-48.1","php53-zip":"5.3.17-48.1","php53-shmop":"5.3.17-48.1","php53-xmlwriter":"5.3.17-48.1","php53-zlib":"5.3.17-48.1","php53-exif":"5.3.17-48.1","php53-ldap":"5.3.17-48.1","php53-sysvsem":"5.3.17-48.1","php53-xmlreader":"5.3.17-48.1","php53-xmlrpc":"5.3.17-48.1","php53":"5.3.17-48.1","php53-bcmath":"5.3.17-48.1","php53-mbstring":"5.3.17-48.1","php53-pgsql":"5.3.17-48.1","php53-pspell":"5.3.17-48.1","php53-xsl":"5.3.17-48.1","php53-bz2":"5.3.17-48.1","php53-gd":"5.3.17-48.1","php53-intl":"5.3.17-48.1","php53-json":"5.3.17-48.1","php53-dom":"5.3.17-48.1","php53-gettext":"5.3.17-48.1","php53-soap":"5.3.17-48.1","php53-sysvshm":"5.3.17-48.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1818-1.json"}},{"package":{"name":"php53","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","purl":"pkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-48.1"}]}],"ecosystem_specific":{"binaries":[{"php53-gd":"5.3.17-48.1","php53-sysvmsg":"5.3.17-48.1","php53-curl":"5.3.17-48.1","php53-mcrypt":"5.3.17-48.1","php53-pcntl":"5.3.17-48.1","php53-shmop":"5.3.17-48.1","php53-tokenizer":"5.3.17-48.1","php53-ftp":"5.3.17-48.1","php53-iconv":"5.3.17-48.1","php53-mysql":"5.3.17-48.1","php53-snmp":"5.3.17-48.1","php53-pdo":"5.3.17-48.1","php53-pear":"5.3.17-48.1","php53-calendar":"5.3.17-48.1","php53-gmp":"5.3.17-48.1","php53-json":"5.3.17-48.1","php53-ldap":"5.3.17-48.1","php53-suhosin":"5.3.17-48.1","php53-ctype":"5.3.17-48.1","php53-dom":"5.3.17-48.1","php53-xmlwriter":"5.3.17-48.1","php53":"5.3.17-48.1","php53-dba":"5.3.17-48.1","php53-intl":"5.3.17-48.1","php53-pgsql":"5.3.17-48.1","php53-pspell":"5.3.17-48.1","php53-soap":"5.3.17-48.1","php53-zlib":"5.3.17-48.1","php53-bcmath":"5.3.17-48.1","php53-exif":"5.3.17-48.1","php53-fastcgi":"5.3.17-48.1","php53-fileinfo":"5.3.17-48.1","php53-odbc":"5.3.17-48.1","php53-sysvsem":"5.3.17-48.1","php53-sysvshm":"5.3.17-48.1","php53-zip":"5.3.17-48.1","php53-bz2":"5.3.17-48.1","php53-gettext":"5.3.17-48.1","php53-mbstring":"5.3.17-48.1","php53-openssl":"5.3.17-48.1","php53-wddx":"5.3.17-48.1","php53-xmlreader":"5.3.17-48.1","php53-xmlrpc":"5.3.17-48.1","php53-xsl":"5.3.17-48.1","apache2-mod_php53":"5.3.17-48.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1818-1.json"}},{"package":{"name":"php53","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","purl":"pkg:rpm/suse/php53&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-48.1"}]}],"ecosystem_specific":{"binaries":[{"php53-ftp":"5.3.17-48.1","php53-json":"5.3.17-48.1","php53-mysql":"5.3.17-48.1","php53-pdo":"5.3.17-48.1","php53-pspell":"5.3.17-48.1","php53-sysvshm":"5.3.17-48.1","php53-xmlrpc":"5.3.17-48.1","php53-gettext":"5.3.17-48.1","php53-intl":"5.3.17-48.1","php53-odbc":"5.3.17-48.1","php53-calendar":"5.3.17-48.1","php53-ctype":"5.3.17-48.1","php53-curl":"5.3.17-48.1","php53-dom":"5.3.17-48.1","php53-fastcgi":"5.3.17-48.1","php53-mbstring":"5.3.17-48.1","php53-mcrypt":"5.3.17-48.1","php53-suhosin":"5.3.17-48.1","php53-gmp":"5.3.17-48.1","php53-snmp":"5.3.17-48.1","php53-sysvmsg":"5.3.17-48.1","php53-tokenizer":"5.3.17-48.1","php53-xmlwriter":"5.3.17-48.1","php53-zip":"5.3.17-48.1","php53-dba":"5.3.17-48.1","php53-exif":"5.3.17-48.1","php53-iconv":"5.3.17-48.1","php53-pear":"5.3.17-48.1","php53-soap":"5.3.17-48.1","php53-xmlreader":"5.3.17-48.1","php53":"5.3.17-48.1","php53-openssl":"5.3.17-48.1","php53-pgsql":"5.3.17-48.1","php53-sysvsem":"5.3.17-48.1","php53-wddx":"5.3.17-48.1","apache2-mod_php53":"5.3.17-48.1","php53-bcmath":"5.3.17-48.1","php53-fileinfo":"5.3.17-48.1","php53-gd":"5.3.17-48.1","php53-ldap":"5.3.17-48.1","php53-xsl":"5.3.17-48.1","php53-pcntl":"5.3.17-48.1","php53-shmop":"5.3.17-48.1","php53-zlib":"5.3.17-48.1","php53-bz2":"5.3.17-48.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1818-1.json"}}],"schema_version":"1.7.3"}