php5 was updated to fix three security issues :

  - Insecure temporary file use for cache data was fixed by     switching to a different root only directory     /var/cache/php-pear (CVE-2014-5459)

  - An incomplete fix for CVE-2014-4049 (CVE-2014-3597) 

  - gd extension: NUL byte injection in filenames passed to     image handling functions was fixed (CVE-2014-5120)

Also a bug was fixed :

  - fixed suhosin crash if used with php     session_set_save_handler() [bnc#895658]

This php53 update fixes the following security issues :

  - Insecure temporary file used for cache data was fixed by     switching to a different root only directory     /var/cache/php-pear. (CVE-2014-5459)

  - An incomplete fix for CVE-2014-4049. (CVE-2014-3597)

ID	Name	Product	Family	Published	Updated	Severity
93161	SUSE SLES11 Security Update : php53 (SUSE-SU-2016:1638-1) (BACKRONYM)	Nessus	SuSE Local Security Checks	8/29/2016	1/19/2021	critical
77720	openSUSE Security Update : php5 (openSUSE-SU-2014:1133-1)	Nessus	SuSE Local Security Checks	9/17/2014	1/19/2021	medium
77742	SuSE 11.3 Security Update : php53 (SAT Patch Number 9718)	Nessus	SuSE Local Security Checks	9/18/2014	1/19/2021	medium

Detections

Analytics

Plugins Search

critical

medium

medium