Security update for php5

Announcement ID:	SUSE-SU-2016:1633-1
Rating:	moderate
References:	bsc#981049 bsc#981050 bsc#981061 bsc#982009 bsc#982010 bsc#982011 bsc#982012 bsc#982013
Cross-References:	CVE-2013-7456 CVE-2015-8876 CVE-2015-8877 CVE-2015-8879 CVE-2016-5093 CVE-2016-5094 CVE-2016-5095 CVE-2016-5096
CVSS scores:	CVE-2015-8876 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2015-8879 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2016-5093 ( NVD ): 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2016-5094 ( NVD ): 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2016-5095 ( NVD ): 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2016-5096 ( NVD ): 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Affected Products:	SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP2 SUSE Linux Enterprise High Performance Computing 12 SP3 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 Web and Scripting Module 12

An update that solves eight vulnerabilities can now be installed.

Description:

This update for php5 fixes the following issues:

• CVE-2013-7456: imagescale out-of-bounds read (bnc#982009).
• CVE-2016-5093: get_icu_value_internal out-of-bounds read (bnc#982010).
• CVE-2016-5094: Don't create strings with lengths outside of valid range (bnc#982011).
• CVE-2016-5095: Don't create strings with lengths outside of valid range (bnc#982012).
• CVE-2016-5096: int/size_t confusion in fread (bsc#982013).
• CVE-2015-8877: The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) as used in PHP used inconsistent allocate and free approaches, which allowed remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function (bsc#981061).
• CVE-2015-8876: Zend/zend_exceptions.c in PHP did not validate certain Exception objects, which allowed remote attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger unintended method execution via crafted serialized data (bsc#981049).
• CVE-2015-8879: The odbc_bindcols function in ext/odbc/php_odbc.c in PHP mishandles driver behavior for SQL_WVARCHAR columns, which allowed remote attackers to cause a denial of service (application crash) in opportunistic circumstances by leveraging use of the odbc_fetch_array function to access a certain type of Microsoft SQL Server table (bsc#981050).

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Desktop 12 SP1
  zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2016-968=1
• SUSE Linux Enterprise Desktop 12
  zypper in -t patch SUSE-SLE-DESKTOP-12-2016-968=1
• Web and Scripting Module 12
  zypper in -t patch SUSE-SLE-Module-Web-Scripting-12-2016-968=1
• SUSE Linux Enterprise Software Development Kit 12
  zypper in -t patch SUSE-SLE-SDK-12-2016-968=1
• SUSE Linux Enterprise Software Development Kit 12 SP1
  zypper in -t patch SUSE-SLE-SDK-12-SP1-2016-968=1
• SUSE Linux Enterprise Workstation Extension 12 SP1
  zypper in -t patch SUSE-SLE-WE-12-SP1-2016-968=1
• SUSE Linux Enterprise Workstation Extension 12
  zypper in -t patch SUSE-SLE-WE-12-2016-968=1

Package List:

• SUSE Linux Enterprise Desktop 12 SP1 (x86_64)
  • imap-debuginfo-2007e_suse-19.1
  • libc-client2007e_suse-debuginfo-2007e_suse-19.1
  • imap-debugsource-2007e_suse-19.1
  • libc-client2007e_suse-2007e_suse-19.1
• SUSE Linux Enterprise Desktop 12 (x86_64)
  • imap-debuginfo-2007e_suse-19.1
  • libc-client2007e_suse-debuginfo-2007e_suse-19.1
  • imap-debugsource-2007e_suse-19.1
  • libc-client2007e_suse-2007e_suse-19.1
• Web and Scripting Module 12 (ppc64le s390x x86_64)
  • php5-dba-debuginfo-5.5.14-64.5
  • php5-suhosin-5.5.14-64.5
  • php5-mbstring-debuginfo-5.5.14-64.5
  • php5-shmop-debuginfo-5.5.14-64.5
  • php5-mysql-5.5.14-64.5
  • php5-intl-debuginfo-5.5.14-64.5
  • php5-xmlreader-5.5.14-64.5
  • apache2-mod_php5-5.5.14-64.5
  • php5-debugsource-5.5.14-64.5
  • php5-soap-debuginfo-5.5.14-64.5
  • php5-bcmath-5.5.14-64.5
  • php5-mysql-debuginfo-5.5.14-64.5
  • php5-imap-debuginfo-5.5.14-64.5
  • php5-opcache-debuginfo-5.5.14-64.5
  • php5-gettext-5.5.14-64.5
  • php5-dom-debuginfo-5.5.14-64.5
  • php5-mcrypt-5.5.14-64.5
  • php5-enchant-debuginfo-5.5.14-64.5
  • php5-exif-5.5.14-64.5
  • php5-sysvmsg-debuginfo-5.5.14-64.5
  • php5-pspell-5.5.14-64.5
  • php5-pgsql-5.5.14-64.5
  • php5-mbstring-5.5.14-64.5
  • php5-odbc-debuginfo-5.5.14-64.5
  • php5-intl-5.5.14-64.5
  • php5-phar-debuginfo-5.5.14-64.5
  • php5-fpm-debuginfo-5.5.14-64.5
  • php5-wddx-debuginfo-5.5.14-64.5
  • php5-odbc-5.5.14-64.5
  • php5-curl-5.5.14-64.5
  • php5-sockets-5.5.14-64.5
  • php5-calendar-debuginfo-5.5.14-64.5
  • php5-ldap-5.5.14-64.5
  • php5-sysvshm-debuginfo-5.5.14-64.5
  • php5-exif-debuginfo-5.5.14-64.5
  • php5-ldap-debuginfo-5.5.14-64.5
  • php5-json-5.5.14-64.5
  • php5-xmlrpc-debuginfo-5.5.14-64.5
  • php5-suhosin-debuginfo-5.5.14-64.5
  • php5-fpm-5.5.14-64.5
  • php5-pcntl-5.5.14-64.5
  • php5-gmp-debuginfo-5.5.14-64.5
  • php5-enchant-5.5.14-64.5
  • php5-xmlrpc-5.5.14-64.5
  • php5-posix-5.5.14-64.5
  • php5-tokenizer-5.5.14-64.5
  • libc-client2007e_suse-debuginfo-2007e_suse-19.1
  • php5-zlib-debuginfo-5.5.14-64.5
  • php5-gd-5.5.14-64.5
  • php5-ctype-debuginfo-5.5.14-64.5
  • php5-debuginfo-5.5.14-64.5
  • php5-ftp-5.5.14-64.5
  • php5-imap-5.5.14-64.5
  • php5-mcrypt-debuginfo-5.5.14-64.5
  • php5-xsl-5.5.14-64.5
  • php5-curl-debuginfo-5.5.14-64.5
  • php5-fastcgi-5.5.14-64.5
  • php5-xmlwriter-5.5.14-64.5
  • php5-wddx-5.5.14-64.5
  • php5-pdo-debuginfo-5.5.14-64.5
  • php5-xmlreader-debuginfo-5.5.14-64.5
  • php5-sysvshm-5.5.14-64.5
  • php5-gettext-debuginfo-5.5.14-64.5
  • php5-zip-5.5.14-64.5
  • php5-ftp-debuginfo-5.5.14-64.5
  • php5-iconv-debuginfo-5.5.14-64.5
  • php5-sysvsem-5.5.14-64.5
  • php5-snmp-debuginfo-5.5.14-64.5
  • apache2-mod_php5-debuginfo-5.5.14-64.5
  • php5-sqlite-5.5.14-64.5
  • php5-sysvsem-debuginfo-5.5.14-64.5
  • php5-ctype-5.5.14-64.5
  • php5-pgsql-debuginfo-5.5.14-64.5
  • php5-fileinfo-5.5.14-64.5
  • php5-tokenizer-debuginfo-5.5.14-64.5
  • php5-bcmath-debuginfo-5.5.14-64.5
  • php5-phar-5.5.14-64.5
  • php5-zip-debuginfo-5.5.14-64.5
  • php5-pspell-debuginfo-5.5.14-64.5
  • php5-sockets-debuginfo-5.5.14-64.5
  • php5-pdo-5.5.14-64.5
  • php5-openssl-5.5.14-64.5
  • php5-xmlwriter-debuginfo-5.5.14-64.5
  • php5-posix-debuginfo-5.5.14-64.5
  • php5-dba-5.5.14-64.5
  • php5-iconv-5.5.14-64.5
  • php5-zlib-5.5.14-64.5
  • php5-opcache-5.5.14-64.5
  • php5-shmop-5.5.14-64.5
  • php5-pcntl-debuginfo-5.5.14-64.5
  • php5-dom-5.5.14-64.5
  • php5-sqlite-debuginfo-5.5.14-64.5
  • php5-soap-5.5.14-64.5
  • php5-sysvmsg-5.5.14-64.5
  • php5-bz2-debuginfo-5.5.14-64.5
  • php5-fileinfo-debuginfo-5.5.14-64.5
  • php5-gmp-5.5.14-64.5
  • php5-fastcgi-debuginfo-5.5.14-64.5
  • php5-5.5.14-64.5
  • php5-snmp-5.5.14-64.5
  • php5-gd-debuginfo-5.5.14-64.5
  • php5-xsl-debuginfo-5.5.14-64.5
  • php5-openssl-debuginfo-5.5.14-64.5
  • php5-json-debuginfo-5.5.14-64.5
  • php5-bz2-5.5.14-64.5
  • php5-calendar-5.5.14-64.5
  • libc-client2007e_suse-2007e_suse-19.1
• Web and Scripting Module 12 (noarch)
  • php5-pear-5.5.14-64.5
• SUSE Linux Enterprise Software Development Kit 12 (ppc64le s390x x86_64)
  • php5-devel-5.5.14-64.5
  • imap-devel-2007e_suse-19.1
  • php5-debugsource-5.5.14-64.5
  • imap-debuginfo-2007e_suse-19.1
  • php5-debuginfo-5.5.14-64.5
  • imap-debugsource-2007e_suse-19.1
  • libc-client2007e_suse-debuginfo-2007e_suse-19.1
  • libc-client2007e_suse-2007e_suse-19.1
• SUSE Linux Enterprise Software Development Kit 12 SP1 (ppc64le s390x x86_64)
  • php5-devel-5.5.14-64.5
  • imap-devel-2007e_suse-19.1
  • php5-debugsource-5.5.14-64.5
  • imap-debuginfo-2007e_suse-19.1
  • php5-debuginfo-5.5.14-64.5
  • imap-debugsource-2007e_suse-19.1
  • libc-client2007e_suse-debuginfo-2007e_suse-19.1
  • libc-client2007e_suse-2007e_suse-19.1
• SUSE Linux Enterprise Workstation Extension 12 SP1 (x86_64)
  • imap-debuginfo-2007e_suse-19.1
  • libc-client2007e_suse-debuginfo-2007e_suse-19.1
  • imap-debugsource-2007e_suse-19.1
  • libc-client2007e_suse-2007e_suse-19.1
• SUSE Linux Enterprise Workstation Extension 12 (x86_64)
  • imap-debuginfo-2007e_suse-19.1
  • libc-client2007e_suse-debuginfo-2007e_suse-19.1
  • imap-debugsource-2007e_suse-19.1
  • libc-client2007e_suse-2007e_suse-19.1

References:

• https://www.suse.com/security/cve/CVE-2013-7456.html
• https://www.suse.com/security/cve/CVE-2015-8876.html
• https://www.suse.com/security/cve/CVE-2015-8877.html
• https://www.suse.com/security/cve/CVE-2015-8879.html
• https://www.suse.com/security/cve/CVE-2016-5093.html
• https://www.suse.com/security/cve/CVE-2016-5094.html
• https://www.suse.com/security/cve/CVE-2016-5095.html
• https://www.suse.com/security/cve/CVE-2016-5096.html
• https://bugzilla.suse.com/show_bug.cgi?id=981049
• https://bugzilla.suse.com/show_bug.cgi?id=981050
• https://bugzilla.suse.com/show_bug.cgi?id=981061
• https://bugzilla.suse.com/show_bug.cgi?id=982009
• https://bugzilla.suse.com/show_bug.cgi?id=982010
• https://bugzilla.suse.com/show_bug.cgi?id=982011
• https://bugzilla.suse.com/show_bug.cgi?id=982012
• https://bugzilla.suse.com/show_bug.cgi?id=982013