FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

php5 -- multiple vulnerabilities

Affected packages
	php55-phar	<	5.5.33
	php55-wddx	<	5.5.33
	php56-phar	<	5.6.19
	php56-wddx	<	5.6.19

Details

VuXML ID	e991ef79-e920-11e5-92ce-002590263bf5
Discovery	2016-03-03
Entry	2016-03-13

The PHP Group reports:

Phar:

Fixed bug #71498 (Out-of-Bound Read in phar_parse_zipfile()).

WDDX:

Fixed bug #71587 (Use-After-Free / Double-Free in WDDX Deserialize).

[source]

References

URL	http://php.net/ChangeLog-5.php#5.5.33
URL	http://php.net/ChangeLog-5.php#5.6.19