ALAS-2016-728: CVEs fixed (Amazon Linux)

ALAS-2016-728 fixes 3 tracked CVEs. Affected systems and fixed versions.

• CVE-2016-5772 CRITICAL 9.8 UPGRADE DOWNGRADE Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before
• CVE-2016-5771 CRITICAL 9.8 UPGRADE MITIGATE spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the un
• CVE-2016-5770 CRITICAL 9.8 UPGRADE MITIGATE Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.

Applies to

• Amazon Linux 1

← Back to latest CVEs