USN-2786-1: PHP vulnerabilities

Packages

php5 - HTML-embedded scripting language interpreter

Details

It was discovered that the PHP phar extension incorrectly handled certain
files. A remote attacker could use this issue to cause PHP to crash,
resulting in a denial of service. (CVE-2015-7803, CVE-2015-7804)

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
15.10 wily	libapache2-mod-php5 – 5.6.11+dfsg-1ubuntu3.1
	php5-cgi – 5.6.11+dfsg-1ubuntu3.1
	php5-cli – 5.6.11+dfsg-1ubuntu3.1
	php5-fpm – 5.6.11+dfsg-1ubuntu3.1
15.04 vivid	libapache2-mod-php5 – 5.6.4+dfsg-4ubuntu6.4
	php5-cgi – 5.6.4+dfsg-4ubuntu6.4
	php5-cli – 5.6.4+dfsg-4ubuntu6.4
	php5-fpm – 5.6.4+dfsg-4ubuntu6.4
14.04 trusty	libapache2-mod-php5 – 5.5.9+dfsg-1ubuntu4.14
	php5-cgi – 5.5.9+dfsg-1ubuntu4.14
	php5-cli – 5.5.9+dfsg-1ubuntu4.14
	php5-fpm – 5.5.9+dfsg-1ubuntu4.14
12.04 precise	libapache2-mod-php5 – 5.3.10-1ubuntu3.21
	php5-cgi – 5.3.10-1ubuntu3.21
	php5-cli – 5.3.10-1ubuntu3.21
	php5-fpm – 5.3.10-1ubuntu3.21

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

Packages

Details

Update instructions

Reduce your security exposure

References