RHSA-2015:1135

Vulnerability from csaf_opensuse - Published: 2015-06-23 00:00 - Updated: 2026-09-20 10:54
Summary
security update for php
Severity
Important
Notes
Title of the patch: security update for php
Description of the patch: This security update provides a functional equivalent of RHSA-2015:1135. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2015:1135.
Patchnames: RHSA-2015:1135
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2014-8142
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Threats
Impact low
CVE-2014-9652
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2014-9705
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2014-9709
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact low
CVE-2015-0231
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact low
CVE-2015-0232
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-0273
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-2301
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-2348
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-2783
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-2787
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact important
CVE-2015-3307
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact low
CVE-2015-3329
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact important
CVE-2015-3330
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-3411
6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-3412
5.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4021
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4022
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4024
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4025
7.4 (High)
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4026
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4147
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4148
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact low
CVE-2015-4598
6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4599
9.8 (Critical)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4600
9.8 (Critical)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4601
9.8 (Critical)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4602
9.8 (Critical)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4603
9.8 (Critical)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4604
7.5 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4605
7.5 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/r… self
https://www.suse.com/security/cve/CVE-2014-8142/ self
https://www.suse.com/security/cve/CVE-2014-9652/ self
https://www.suse.com/security/cve/CVE-2014-9705/ self
https://www.suse.com/security/cve/CVE-2014-9709/ self
https://www.suse.com/security/cve/CVE-2015-0231/ self
https://www.suse.com/security/cve/CVE-2015-0232/ self
https://www.suse.com/security/cve/CVE-2015-0273/ self
https://www.suse.com/security/cve/CVE-2015-2301/ self
https://www.suse.com/security/cve/CVE-2015-2348/ self
https://www.suse.com/security/cve/CVE-2015-2783/ self
https://www.suse.com/security/cve/CVE-2015-2787/ self
https://www.suse.com/security/cve/CVE-2015-3307/ self
https://www.suse.com/security/cve/CVE-2015-3329/ self
https://www.suse.com/security/cve/CVE-2015-3330/ self
https://www.suse.com/security/cve/CVE-2015-3411/ self
https://www.suse.com/security/cve/CVE-2015-3412/ self
https://www.suse.com/security/cve/CVE-2015-4021/ self
https://www.suse.com/security/cve/CVE-2015-4022/ self
https://www.suse.com/security/cve/CVE-2015-4024/ self
https://www.suse.com/security/cve/CVE-2015-4025/ self
https://www.suse.com/security/cve/CVE-2015-4026/ self
https://www.suse.com/security/cve/CVE-2015-4147/ self
https://www.suse.com/security/cve/CVE-2015-4148/ self
https://www.suse.com/security/cve/CVE-2015-4598/ self
https://www.suse.com/security/cve/CVE-2015-4599/ self
https://www.suse.com/security/cve/CVE-2015-4600/ self
https://www.suse.com/security/cve/CVE-2015-4601/ self
https://www.suse.com/security/cve/CVE-2015-4602/ self
https://www.suse.com/security/cve/CVE-2015-4603/ self
https://www.suse.com/security/cve/CVE-2015-4604/ self
https://www.suse.com/security/cve/CVE-2015-4605/ self
https://www.suse.com/security/cve/CVE-2014-8142 external
https://bugzilla.suse.com/910659 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2014-9652 external
https://bugzilla.suse.com/917150 external
https://bugzilla.suse.com/917302 external
https://bugzilla.suse.com/918768 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2014-9705 external
https://bugzilla.suse.com/922451 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2014-9709 external
https://bugzilla.suse.com/923945 external
https://bugzilla.suse.com/923946 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-0231 external
https://bugzilla.suse.com/910659 external
https://bugzilla.suse.com/924972 external
https://bugzilla.suse.com/980366 external
https://bugzilla.suse.com/992991 external
https://www.suse.com/security/cve/CVE-2015-0232 external
https://bugzilla.suse.com/914690 external
https://bugzilla.suse.com/980366 external
https://bugzilla.suse.com/992991 external
https://www.suse.com/security/cve/CVE-2015-0273 external
https://bugzilla.suse.com/917302 external
https://bugzilla.suse.com/918768 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-2301 external
https://bugzilla.suse.com/922452 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-2348 external
https://bugzilla.suse.com/924970 external
https://bugzilla.suse.com/935227 external
https://www.suse.com/security/cve/CVE-2015-2783 external
https://bugzilla.suse.com/928408 external
https://bugzilla.suse.com/928506 external
https://bugzilla.suse.com/928511 external
https://bugzilla.suse.com/931418 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-2787 external
https://bugzilla.suse.com/924972 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-3307 external
https://bugzilla.suse.com/931418 external
https://www.suse.com/security/cve/CVE-2015-3329 external
https://bugzilla.suse.com/928408 external
https://bugzilla.suse.com/928506 external
https://bugzilla.suse.com/928511 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-3330 external
https://bugzilla.suse.com/908782 external
https://bugzilla.suse.com/928408 external
https://bugzilla.suse.com/928506 external
https://bugzilla.suse.com/928511 external
https://www.suse.com/security/cve/CVE-2015-3411 external
https://bugzilla.suse.com/935074 external
https://bugzilla.suse.com/935227 external
https://bugzilla.suse.com/935229 external
https://bugzilla.suse.com/935232 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-3412 external
https://bugzilla.suse.com/935227 external
https://bugzilla.suse.com/935229 external
https://bugzilla.suse.com/935232 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4021 external
https://bugzilla.suse.com/931769 external
https://bugzilla.suse.com/935074 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4022 external
https://bugzilla.suse.com/931769 external
https://bugzilla.suse.com/931772 external
https://bugzilla.suse.com/935275 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4024 external
https://bugzilla.suse.com/931421 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4025 external
https://bugzilla.suse.com/1067090 external
https://bugzilla.suse.com/893855 external
https://www.suse.com/security/cve/CVE-2015-4026 external
https://bugzilla.suse.com/931776 external
https://bugzilla.suse.com/935227 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4147 external
https://bugzilla.suse.com/925109 external
https://bugzilla.suse.com/933227 external
https://www.suse.com/security/cve/CVE-2015-4148 external
https://bugzilla.suse.com/933227 external
https://bugzilla.suse.com/935074 external
https://bugzilla.suse.com/935226 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4598 external
https://bugzilla.suse.com/935227 external
https://bugzilla.suse.com/935232 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4599 external
https://bugzilla.suse.com/935074 external
https://bugzilla.suse.com/935226 external
https://bugzilla.suse.com/935234 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4600 external
https://bugzilla.suse.com/935226 external
https://bugzilla.suse.com/935234 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4601 external
https://bugzilla.suse.com/935226 external
https://bugzilla.suse.com/935234 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4602 external
https://bugzilla.suse.com/935074 external
https://bugzilla.suse.com/935224 external
https://bugzilla.suse.com/935226 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4603 external
https://bugzilla.suse.com/935074 external
https://bugzilla.suse.com/935226 external
https://bugzilla.suse.com/935234 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4604 external
https://bugzilla.suse.com/935225 external
https://www.suse.com/security/cve/CVE-2015-4605 external
https://bugzilla.suse.com/935225 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for php",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2015:1135.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2015:1135.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2015:1135",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2015_1135.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8142 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8142/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9652 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9652/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9705 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9705/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9709 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9709/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0231 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0231/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0232 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0232/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0273 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0273/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-2301 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-2301/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-2348 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-2348/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-2783 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-2783/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-2787 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-2787/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3307 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3307/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3329 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3329/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3330 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3330/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3411 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3411/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3412 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3412/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4021 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4021/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4022 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4022/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4024 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4024/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4025 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4025/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4026 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4026/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4147 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4147/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4148 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4148/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4598 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4598/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4599 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4599/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4600 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4600/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4601 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4601/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4602 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4602/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4603 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4603/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4604 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4604/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4605 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4605/"
      }
    ],
    "title": "security update for php",
    "tracking": {
      "current_release_date": "2026-09-20T10:54:26Z",
      "generator": {
        "date": "2015-06-23T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2015:1135",
      "initial_release_date": "2015-06-23T00:00:00Z",
      "revision_history": [
        {
          "date": "2015-06-23T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T10:54:26Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "php-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-bcmath-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-bcmath-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-bcmath-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-bcmath@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-cli-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-cli-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-cli-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-cli@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-common-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-common-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-common-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-common@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-dba-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-dba-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-dba-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-dba@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-devel-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-devel-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-devel-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-devel@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-embedded-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-embedded-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-embedded-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-embedded@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-enchant-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-enchant-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-enchant-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-enchant@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-fpm-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-fpm-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-fpm-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-fpm@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-gd-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-gd-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-gd-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-gd@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-intl-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-intl-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-intl-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-intl@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-ldap-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-ldap-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-ldap-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-ldap@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-mbstring-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-mbstring-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-mbstring-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-mbstring@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-mysql-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-mysql-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-mysql-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-mysql@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-mysqlnd@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-odbc-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-odbc-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-odbc-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-odbc@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-pdo-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-pdo-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-pdo-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-pdo@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-pgsql-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-pgsql-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-pgsql-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-pgsql@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-process-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-process-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-process-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-process@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-pspell-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-pspell-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-pspell-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-pspell@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-recode-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-recode-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-recode-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-recode@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-snmp-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-snmp-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-snmp-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-snmp@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-soap-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-soap-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-soap-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-soap@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-xml-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-xml-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-xml-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-xml@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-xmlrpc-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-xmlrpc-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-xmlrpc-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-xmlrpc@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-bcmath-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-bcmath-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-cli-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-cli-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-common-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-common-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-dba-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-dba-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-devel-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-devel-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-embedded-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-embedded-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-enchant-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-enchant-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-fpm-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-fpm-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-gd-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-gd-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-intl-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-intl-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-ldap-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-ldap-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-mbstring-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-mbstring-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-mysql-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-mysql-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-mysqlnd-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-odbc-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-odbc-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-pdo-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-pdo-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-pgsql-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-pgsql-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-process-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-process-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-pspell-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-pspell-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-recode-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-recode-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-snmp-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-snmp-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-soap-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-soap-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-xml-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-xml-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-xmlrpc-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-xmlrpc-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-8142",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8142"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8142",
          "url": "https://www.suse.com/security/cve/CVE-2014-8142"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910659 for CVE-2014-8142",
          "url": "https://bugzilla.suse.com/910659"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2014-8142",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2014-8142"
    },
    {
      "cve": "CVE-2014-9652",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9652"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9652",
          "url": "https://www.suse.com/security/cve/CVE-2014-9652"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917150 for CVE-2014-9652",
          "url": "https://bugzilla.suse.com/917150"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917302 for CVE-2014-9652",
          "url": "https://bugzilla.suse.com/917302"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 918768 for CVE-2014-9652",
          "url": "https://bugzilla.suse.com/918768"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2014-9652",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-9652"
    },
    {
      "cve": "CVE-2014-9705",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9705"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9705",
          "url": "https://www.suse.com/security/cve/CVE-2014-9705"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 922451 for CVE-2014-9705",
          "url": "https://bugzilla.suse.com/922451"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2014-9705",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-9705"
    },
    {
      "cve": "CVE-2014-9709",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9709"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9709",
          "url": "https://www.suse.com/security/cve/CVE-2014-9709"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 923945 for CVE-2014-9709",
          "url": "https://bugzilla.suse.com/923945"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 923946 for CVE-2014-9709",
          "url": "https://bugzilla.suse.com/923946"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2014-9709",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2014-9709"
    },
    {
      "cve": "CVE-2015-0231",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0231"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0231",
          "url": "https://www.suse.com/security/cve/CVE-2015-0231"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910659 for CVE-2015-0231",
          "url": "https://bugzilla.suse.com/910659"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 924972 for CVE-2015-0231",
          "url": "https://bugzilla.suse.com/924972"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-0231",
          "url": "https://bugzilla.suse.com/980366"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-0231",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-0231"
    },
    {
      "cve": "CVE-2015-0232",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0232"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0232",
          "url": "https://www.suse.com/security/cve/CVE-2015-0232"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914690 for CVE-2015-0232",
          "url": "https://bugzilla.suse.com/914690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-0232",
          "url": "https://bugzilla.suse.com/980366"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-0232",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-0232"
    },
    {
      "cve": "CVE-2015-0273",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0273"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0273",
          "url": "https://www.suse.com/security/cve/CVE-2015-0273"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917302 for CVE-2015-0273",
          "url": "https://bugzilla.suse.com/917302"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 918768 for CVE-2015-0273",
          "url": "https://bugzilla.suse.com/918768"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-0273",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-0273"
    },
    {
      "cve": "CVE-2015-2301",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-2301"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-2301",
          "url": "https://www.suse.com/security/cve/CVE-2015-2301"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 922452 for CVE-2015-2301",
          "url": "https://bugzilla.suse.com/922452"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-2301",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-2301"
    },
    {
      "cve": "CVE-2015-2348",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-2348"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 truncates a pathname upon encountering a \\x00 character, which allows remote attackers to bypass intended extension restrictions and create files with unexpected names via a crafted second argument.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-2348",
          "url": "https://www.suse.com/security/cve/CVE-2015-2348"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 924970 for CVE-2015-2348",
          "url": "https://bugzilla.suse.com/924970"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935227 for CVE-2015-2348",
          "url": "https://bugzilla.suse.com/935227"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-2348"
    },
    {
      "cve": "CVE-2015-2783",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-2783"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-2783",
          "url": "https://www.suse.com/security/cve/CVE-2015-2783"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928408 for CVE-2015-2783",
          "url": "https://bugzilla.suse.com/928408"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928506 for CVE-2015-2783",
          "url": "https://bugzilla.suse.com/928506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928511 for CVE-2015-2783",
          "url": "https://bugzilla.suse.com/928511"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931418 for CVE-2015-2783",
          "url": "https://bugzilla.suse.com/931418"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-2783",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-2783"
    },
    {
      "cve": "CVE-2015-2787",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-2787"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages use of the unset function within an __wakeup function, a related issue to CVE-2015-0231.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-2787",
          "url": "https://www.suse.com/security/cve/CVE-2015-2787"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 924972 for CVE-2015-2787",
          "url": "https://bugzilla.suse.com/924972"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-2787",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-2787"
    },
    {
      "cve": "CVE-2015-3307",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3307"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) or possibly have unspecified other impact via a crafted tar archive.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3307",
          "url": "https://www.suse.com/security/cve/CVE-2015-3307"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931418 for CVE-2015-3307",
          "url": "https://bugzilla.suse.com/931418"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-3307"
    },
    {
      "cve": "CVE-2015-3329",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3329"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a (1) tar, (2) phar, or (3) ZIP archive.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3329",
          "url": "https://www.suse.com/security/cve/CVE-2015-3329"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928408 for CVE-2015-3329",
          "url": "https://bugzilla.suse.com/928408"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928506 for CVE-2015-3329",
          "url": "https://bugzilla.suse.com/928506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928511 for CVE-2015-3329",
          "url": "https://bugzilla.suse.com/928511"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-3329",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-3329"
    },
    {
      "cve": "CVE-2015-3330",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3330"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, when the Apache HTTP Server 2.4.x is used, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via pipelined HTTP requests that result in a \"deconfigured interpreter.\"",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3330",
          "url": "https://www.suse.com/security/cve/CVE-2015-3330"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 908782 for CVE-2015-3330",
          "url": "https://bugzilla.suse.com/908782"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928408 for CVE-2015-3330",
          "url": "https://bugzilla.suse.com/928408"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928506 for CVE-2015-3330",
          "url": "https://bugzilla.suse.com/928506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928511 for CVE-2015-3330",
          "url": "https://bugzilla.suse.com/928511"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-3330"
    },
    {
      "cve": "CVE-2015-3411",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3411"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument load method, (2) the xmlwriter_open_uri function, (3) the finfo_file function, or (4) the hash_hmac_file function, as demonstrated by a filename\\0.xml attack that bypasses an intended configuration in which client users may read only .xml files.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3411",
          "url": "https://www.suse.com/security/cve/CVE-2015-3411"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935074 for CVE-2015-3411",
          "url": "https://bugzilla.suse.com/935074"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935227 for CVE-2015-3411",
          "url": "https://bugzilla.suse.com/935227"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935229 for CVE-2015-3411",
          "url": "https://bugzilla.suse.com/935229"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935232 for CVE-2015-3411",
          "url": "https://bugzilla.suse.com/935232"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-3411",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-3411"
    },
    {
      "cve": "CVE-2015-3412",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3412"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read arbitrary files via crafted input to an application that calls the stream_resolve_include_path function in ext/standard/streamsfuncs.c, as demonstrated by a filename\\0.extension attack that bypasses an intended configuration in which client users may read files with only one specific extension.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3412",
          "url": "https://www.suse.com/security/cve/CVE-2015-3412"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935227 for CVE-2015-3412",
          "url": "https://bugzilla.suse.com/935227"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935229 for CVE-2015-3412",
          "url": "https://bugzilla.suse.com/935229"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935232 for CVE-2015-3412",
          "url": "https://bugzilla.suse.com/935232"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-3412",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-3412"
    },
    {
      "cve": "CVE-2015-4021",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4021"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \\0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4021",
          "url": "https://www.suse.com/security/cve/CVE-2015-4021"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931769 for CVE-2015-4021",
          "url": "https://bugzilla.suse.com/931769"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935074 for CVE-2015-4021",
          "url": "https://bugzilla.suse.com/935074"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4021",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4021"
    },
    {
      "cve": "CVE-2015-4022",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4022"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4022",
          "url": "https://www.suse.com/security/cve/CVE-2015-4022"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931769 for CVE-2015-4022",
          "url": "https://bugzilla.suse.com/931769"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931772 for CVE-2015-4022",
          "url": "https://bugzilla.suse.com/931772"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935275 for CVE-2015-4022",
          "url": "https://bugzilla.suse.com/935275"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4022",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4022"
    },
    {
      "cve": "CVE-2015-4024",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4024"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4024",
          "url": "https://www.suse.com/security/cve/CVE-2015-4024"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931421 for CVE-2015-4024",
          "url": "https://bugzilla.suse.com/931421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4024",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4024"
    },
    {
      "cve": "CVE-2015-4025",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4025"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \\x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to (1) set_include_path, (2) tempnam, (3) rmdir, or (4) readlink.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4025",
          "url": "https://www.suse.com/security/cve/CVE-2015-4025"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1067090 for CVE-2015-4025",
          "url": "https://bugzilla.suse.com/1067090"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 893855 for CVE-2015-4025",
          "url": "https://bugzilla.suse.com/893855"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4025"
    },
    {
      "cve": "CVE-2015-4026",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4026"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \\x00 character, which might allow remote attackers to bypass intended extension restrictions and execute files with unexpected names via a crafted first argument.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4026",
          "url": "https://www.suse.com/security/cve/CVE-2015-4026"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931776 for CVE-2015-4026",
          "url": "https://bugzilla.suse.com/931776"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935227 for CVE-2015-4026",
          "url": "https://bugzilla.suse.com/935227"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4026",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4026"
    },
    {
      "cve": "CVE-2015-4147",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4147"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __default_headers is an array, which allows remote attackers to execute arbitrary code by providing crafted serialized data with an unexpected data type, related to a \"type confusion\" issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4147",
          "url": "https://www.suse.com/security/cve/CVE-2015-4147"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 925109 for CVE-2015-4147",
          "url": "https://bugzilla.suse.com/925109"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 933227 for CVE-2015-4147",
          "url": "https://bugzilla.suse.com/933227"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4147"
    },
    {
      "cve": "CVE-2015-4148",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4148"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri property is a string, which allows remote attackers to obtain sensitive information by providing crafted serialized data with an int data type, related to a \"type confusion\" issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4148",
          "url": "https://www.suse.com/security/cve/CVE-2015-4148"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 933227 for CVE-2015-4148",
          "url": "https://bugzilla.suse.com/933227"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935074 for CVE-2015-4148",
          "url": "https://bugzilla.suse.com/935074"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935226 for CVE-2015-4148",
          "url": "https://bugzilla.suse.com/935226"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4148",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-4148"
    },
    {
      "cve": "CVE-2015-4598",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4598"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument save method or (2) the GD imagepsloadfont function, as demonstrated by a filename\\0.html attack that bypasses an intended configuration in which client users may write to only .html files.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4598",
          "url": "https://www.suse.com/security/cve/CVE-2015-4598"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935227 for CVE-2015-4598",
          "url": "https://bugzilla.suse.com/935227"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935232 for CVE-2015-4598",
          "url": "https://bugzilla.suse.com/935232"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4598",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4598"
    },
    {
      "cve": "CVE-2015-4599",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4599"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information, cause a denial of service (application crash), or possibly execute arbitrary code via an unexpected data type, related to a \"type confusion\" issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4599",
          "url": "https://www.suse.com/security/cve/CVE-2015-4599"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935074 for CVE-2015-4599",
          "url": "https://bugzilla.suse.com/935074"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935226 for CVE-2015-4599",
          "url": "https://bugzilla.suse.com/935226"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935234 for CVE-2015-4599",
          "url": "https://bugzilla.suse.com/935234"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4599",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4599"
    },
    {
      "cve": "CVE-2015-4600",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4600"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to \"type confusion\" issues in the (1) SoapClient::__getLastRequest, (2) SoapClient::__getLastResponse, (3) SoapClient::__getLastRequestHeaders, (4) SoapClient::__getLastResponseHeaders, (5) SoapClient::__getCookies, and (6) SoapClient::__setCookie methods.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4600",
          "url": "https://www.suse.com/security/cve/CVE-2015-4600"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935226 for CVE-2015-4600",
          "url": "https://bugzilla.suse.com/935226"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935234 for CVE-2015-4600",
          "url": "https://bugzilla.suse.com/935234"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4600",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4600"
    },
    {
      "cve": "CVE-2015-4601",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4601"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to \"type confusion\" issues in (1) ext/soap/php_encoding.c, (2) ext/soap/php_http.c, and (3) ext/soap/soap.c, a different issue than CVE-2015-4600.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4601",
          "url": "https://www.suse.com/security/cve/CVE-2015-4601"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935226 for CVE-2015-4601",
          "url": "https://bugzilla.suse.com/935226"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935234 for CVE-2015-4601",
          "url": "https://bugzilla.suse.com/935234"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4601",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4601"
    },
    {
      "cve": "CVE-2015-4602",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4602"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to a \"type confusion\" issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4602",
          "url": "https://www.suse.com/security/cve/CVE-2015-4602"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935074 for CVE-2015-4602",
          "url": "https://bugzilla.suse.com/935074"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935224 for CVE-2015-4602",
          "url": "https://bugzilla.suse.com/935224"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935226 for CVE-2015-4602",
          "url": "https://bugzilla.suse.com/935226"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4602",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4602"
    },
    {
      "cve": "CVE-2015-4603",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4603"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to execute arbitrary code via an unexpected data type, related to a \"type confusion\" issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4603",
          "url": "https://www.suse.com/security/cve/CVE-2015-4603"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935074 for CVE-2015-4603",
          "url": "https://bugzilla.suse.com/935074"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935226 for CVE-2015-4603",
          "url": "https://bugzilla.suse.com/935226"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935234 for CVE-2015-4603",
          "url": "https://bugzilla.suse.com/935234"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4603",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4603"
    },
    {
      "cve": "CVE-2015-4604",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4604"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a \"Python script text executable\" rule.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4604",
          "url": "https://www.suse.com/security/cve/CVE-2015-4604"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935225 for CVE-2015-4604",
          "url": "https://bugzilla.suse.com/935225"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4604"
    },
    {
      "cve": "CVE-2015-4605",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4605"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a \"Python script text executable\" rule.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4605",
          "url": "https://www.suse.com/security/cve/CVE-2015-4605"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935225 for CVE-2015-4605",
          "url": "https://bugzilla.suse.com/935225"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4605"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.