MGASA-2018-0222

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2018-0222.html

Import Source

https://advisories.mageia.org/MGASA-2018-0222.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2018-0222

Related

Published

2018-05-04T17:29:33Z

Modified

2018-05-04T16:54:23Z

Summary

Updated php packages fix security vulnerabilities

Details

Heap Buffer Overflow (READ: 1786) in exifiifadd_value (CVE-2018-10549)
Stream filter convert.iconv leads to infinite loop on invalid sequence (CVE-2018-10546)
Malicious LDAP-Server Response causes Crash. (CVE-2018-10548)
incomplete PHAR Fix (CVE-2018-10547)

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.6.36-1.mga5

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.6.36-1.mga6

{
    "section": "core"
}