Packages
- php5 - HTML-embedded scripting language interpreter
Details
It was discovered that the Fileinfo component in php5 contains an integer
overflow. An attacker could use this flaw to cause a denial of service
or possibly execute arbitrary code via a crafted CDF file. (CVE-2014-3587)
It was discovered that the php_parserr function contains multiple buffer
overflows. An attacker could use this flaw to cause a denial of service
or possibly execute arbitrary code via crafted DNS records. (CVE-2014-3597)
It was discovered that the Fileinfo component in php5 contains an integer
overflow. An attacker could use this flaw to cause a denial of service
or possibly execute arbitrary code via a crafted CDF file. (CVE-2014-3587)
It was discovered that the php_parserr function contains multiple buffer
overflows. An attacker could use this flaw to cause a denial of service
or possibly execute arbitrary code via crafted DNS records. (CVE-2014-3597)
Update instructions
After a standard system update you need to restart Apache or php5-fpm to make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
| 14.04 trusty | libapache2-mod-php5 – 5.5.9+dfsg-1ubuntu4.4 | ||
| php5 – 5.5.9+dfsg-1ubuntu4.4 | |||
| php5-cgi – 5.5.9+dfsg-1ubuntu4.4 | |||
| php5-fpm – 5.5.9+dfsg-1ubuntu4.4 | |||
| 12.04 precise | libapache2-mod-php5 – 5.3.10-1ubuntu3.14 | ||
| php5 – 5.3.10-1ubuntu3.14 | |||
| php5-cgi – 5.3.10-1ubuntu3.14 | |||
| php5-fpm – 5.3.10-1ubuntu3.14 | |||
| 10.04 lucid | libapache2-mod-php5 – 5.3.2-1ubuntu4.27 | ||
| php5 – 5.3.2-1ubuntu4.27 | |||
| php5-cgi – 5.3.2-1ubuntu4.27 | |||
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.