SUSE-SU-2016:1310-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 17 May 2016, 10:01
Last modified:04 Feb 2026, 03:05

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

17 May 2016, 10:01
Published
Vulnerability first disclosed
04 Feb 2026, 03:05
Last Modified
Vulnerability information updated

Description

Security update for php53 This update for php53 fixes the following security issues: - CVE-2016-4073: A remote attacker could have caused denial of service, or possibly execute arbitrary code, due to incorrect handling of string length calculations in mb_strcut() (bsc#977003) - CVE-2015-8867: The PHP function openssl_random_pseudo_bytes() did not return cryptographically secure random bytes (bsc#977005) - CVE-2016-4070: The libxml_disable_entity_loader() setting was shared between threads, which could have resulted in XML external entity injection and entity expansion issues (bsc#976997) - CVE-2015-8866: A remote attacker could have caused denial of service due to incorrect handling of large strings in php_raw_url_encode() (bsc#976996)

Affected Systems

  • suse•php53&distro=SUSE Linux Enterprise Server 11 SP4

    < 5.3.17-62.1

  • suse•php53&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4

    < 5.3.17-62.1

  • suse•php53&distro=SUSE Linux Enterprise Software Development Kit 11 SP4

    < 5.3.17-62.1

References (9)