SUSE-SU-2015:1466-1
Advisory lineage Upstream: 2 Downstream: 0
Upstream
Published: 29 Jul 2015, 09:45
Last modified:04 Feb 2026, 03:54
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
29 Jul 2015, 09:45
Published
Vulnerability first disclosed
04 Feb 2026, 03:54
Last Modified
Vulnerability information updated
Description
Security update for php53 PHP was updated to fix two security issues. The following vulnerabilities were fixed: * CVE-2015-5589: PHP could be crashed when processing an invalid file with the 'phar' extension with a segfault in Phar::convertToData, leading to Denial of Service (DOS) (bsc#938721) * CVE-2015-5590: PHP could be crashed or have unspecified other impact due to a buffer overlow in phar_fix_filepath (bsc#938719)
Affected Systems
- suse•php53&distro=SUSE Linux Enterprise Server 11 SP3
< 5.3.17-45.1
- suse•php53&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA
< 5.3.17-45.1
- suse•php53&distro=SUSE Linux Enterprise Server 11 SP4
< 5.3.17-45.1
- suse•php53&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP3
< 5.3.17-45.1
- suse•php53&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4
< 5.3.17-45.1
- suse•php53&distro=SUSE Linux Enterprise Software Development Kit 11 SP3
< 5.3.17-45.1
- suse•php53&distro=SUSE Linux Enterprise Software Development Kit 11 SP4
< 5.3.17-45.1