php

• Author: kikadf
• Vulnerable: 5.5.18-2
• Unaffected: 5.5.22-1rigel1

Brian Carpenter discovered that the PHP CGI component incorrectly handled invalid files. Stefan Esser discovered that PHP incorrectly handled unserializing objects. Alex Eubanks discovered that PHP incorrectly handled EXIF data in JPEG images.

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8142
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9427
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0231
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0232
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0273