FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

php5 -- multiple vulnerabilities

Affected packages
	php5-dom	<	5.4.42
	php5-ftp	<	5.4.42
	php5-gd	<	5.4.42
	php5-pgsql	<	5.4.42
	php55-dom	<	5.5.26
	php55-ftp	<	5.5.26
	php55-gd	<	5.5.26
	php55-pgsql	<	5.5.26
	php56-dom	<	5.6.10
	php56-ftp	<	5.6.10
	php56-gd	<	5.6.10
	php56-psql	<	5.6.10

Details

VuXML ID	cdff0af2-1492-11e5-a1cf-002590263bf5
Discovery	2015-06-11
Entry	2015-06-23

The PHP project reports:

DOM and GD:

Fixed bug #69719 (Incorrect handling of paths with NULs).

FTP:

Improved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in heap overflow). (CVE-2015-4643)

Postgres:

Fixed bug #69667 (segfault in php_pgsql_meta_data). (CVE-2015-4644)

[source]

References

CVE Name	CVE-2015-4643
CVE Name	CVE-2015-4644
Message	http://openwall.com/lists/oss-security/2015/06/18/3
URL	http://www.php.net/ChangeLog-5.php#5.4.42
URL	http://www.php.net/ChangeLog-5.php#5.5.26
URL	http://www.php.net/ChangeLog-5.php#5.6.10