SUSE-SU-2015:1425-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 06 Aug 2015, 13:14
Last modified:04 Feb 2026, 02:24

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Aug 2015, 13:14
Published
Vulnerability first disclosed
04 Feb 2026, 02:24
Last Modified
Vulnerability information updated

Description

Security update for php5 PHP was updated to fix two security issues. The following vulnerabilities were fixed: * CVE-2015-5589: PHP could be crashed when processing an invalid file with the 'phar' extension with a segfault in Phar::convertToData, leading to Denial of Service (DOS) (bsc#938721) * CVE-2015-5590: PHP could be crashed or have unspecified other impact due to a buffer overlow in phar_fix_filepath (bsc#938719) This update ships the php5-opcache package (FATE#319034 bsc#940807) and the php5-posix package. (FATE#319094 bsc#940821)

Affected Systems

  • suse•php5&distro=SUSE Linux Enterprise Module for Web and Scripting 12

    < 5.5.14-33.2

  • suse•php5&distro=SUSE Linux Enterprise Software Development Kit 12

    < 5.5.14-33.2

References (7)