Security update for php5
php5 was updated to fix four security issues.
The following vulnerabilities were fixed:
* CVE-2015-4024: Multipart/form-data remote dos Vulnerability (bnc#931421)
* CVE-2015-4026: pcntl_exec() does not check path validity (bnc#931776)
* CVE-2015-4022: overflow in ftp_genlist() resulting in heap overflow (bnc#931772)
* CVE-2015-4021: memory corruption in phar_parse_tarfile when entry filename starts with NULL (bnc#931769)
-
Submitted by
Petr Gajdos (pgajdos)
Fixed bugs
bnc#931769
VUL-0: CVE-2015-4021: php5, php53: memory corruption in phar_parse_tarfile when entry filename starts with NULL
bnc#931421
VUL-0: CVE-2015-4024: php5, php53: Multipart/form-data remote dos Vulnerability
bnc#931772
VUL-0: CVE-2015-4022: php5, php53: overflow in ftp_genlist() resulting in heap overflow
bnc#931776
VUL-0: CVE-2015-4026: php: pcntl_exec() does not check path validity
