Security update for php5

This update for php5 fixes the following issues:

Security issues fixed:

- CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server
to cause memory read outside the allocated areas (bsc#1126821).
- CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).
- CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read
allocated and unallocated memory when parsing a phar file (bsc#1127122).
- CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an
attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).
- CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).
- CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation
of rename function (bsc#1128722).

This update was imported from the SUSE:SLE-12:Update update project.

Fixed bugs
bnc#1126711
VUL-1: CVE-2019-9020: php5,php7,php53: Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap ou
bnc#1126713
VUL-1: CVE-2019-9021: php5,php7,php53: heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an
bnc#1127122
VUL-1: CVE-2018-20783: php5,php7,php53: buffer over-read in PHAR reading functions
bnc#1126823
VUL-1: CVE-2019-9023: php5,php7,php53: a number of heap-based buffer over-read instances are present in mbstring regular expression functions
bnc#1126821
VUL-0: CVE-2019-9024: php5,php7,php53: xmlrpc_decode() can allow a hostile XMLRPC server to read memory outside of allocated areas
bnc#1128722
VUL-1: CVE-2019-9641: php5,php7,php53: Uninitialized read in exif_process_IFD_in_TIFF
Selected Binaries
openSUSE Build Service is sponsored by