[ GLSA 201411-04 ] PHP: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: PHP: Multiple vulnerabilities (GLSA 201411-04)
Severity: normal
Exploitable: remote
Date: November 09, 2014
Updated: January 02, 2015
Bug(s): #525960
ID: 201411-04

Synopsis

Multiple vulnerabilities have been discovered in PHP, the worst of
which could lead to remote execution of arbitrary code.


Background

PHP is a widely-used general-purpose scripting language that is
especially suited for Web development and can be embedded into HTML.


Affected Packages

Package: dev-lang/php
Vulnerable: < 5.5.18
Unaffected: >= 5.5.18
Unaffected: >= 5.4.34 < 5.4.35
Unaffected: >= 5.3.29 < 5.3.30
Unaffected: >= 5.4.36 < 5.4.37
Unaffected: >= 5.4.37 < 5.4.38
Unaffected: >= 5.4.38 < 5.4.39
Unaffected: >= 5.4.39 < 5.4.40
Unaffected: >= 5.4.35 < 5.4.36
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in PHP. Please review the
CVE identifiers referenced below for details.


Impact

A context-dependent attacker can possibly execute arbitrary code or
create a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All PHP 5.5 users should upgrade to the latest version: