RHSA-2015:1135

Vulnerability from csaf_opensuse - Published: 2015-06-23 00:00 - Updated: 2026-09-20 10:54
Summary
security update for php
Severity
Important
Notes
Title of the patch: security update for php
Description of the patch: This security update provides a functional equivalent of RHSA-2015:1135. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2015:1135.
Patchnames: RHSA-2015:1135
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2014-8142
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64 —
Vendor Fix
Threats
Impact low
CVE-2014-9652
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2014-9705
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2014-9709
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact low
CVE-2015-0231
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact low
CVE-2015-0232
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-0273
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-2301
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-2348
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-2783
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-2787
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact important
CVE-2015-3307
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact low
CVE-2015-3329
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact important
CVE-2015-3330
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-3411
6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-3412
5.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4021
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4022
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4024
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4025
7.4 (High)
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4026
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4147
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4148
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact low
CVE-2015-4598
6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4599
9.8 (Critical)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4600
9.8 (Critical)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4601
9.8 (Critical)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4602
9.8 (Critical)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4603
9.8 (Critical)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4604
7.5 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
CVE-2015-4605
7.5 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 25 products, the same list as for CVE-2014-8142
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/r… self
https://www.suse.com/security/cve/CVE-2014-8142/ self
https://www.suse.com/security/cve/CVE-2014-9652/ self
https://www.suse.com/security/cve/CVE-2014-9705/ self
https://www.suse.com/security/cve/CVE-2014-9709/ self
https://www.suse.com/security/cve/CVE-2015-0231/ self
https://www.suse.com/security/cve/CVE-2015-0232/ self
https://www.suse.com/security/cve/CVE-2015-0273/ self
https://www.suse.com/security/cve/CVE-2015-2301/ self
https://www.suse.com/security/cve/CVE-2015-2348/ self
https://www.suse.com/security/cve/CVE-2015-2783/ self
https://www.suse.com/security/cve/CVE-2015-2787/ self
https://www.suse.com/security/cve/CVE-2015-3307/ self
https://www.suse.com/security/cve/CVE-2015-3329/ self
https://www.suse.com/security/cve/CVE-2015-3330/ self
https://www.suse.com/security/cve/CVE-2015-3411/ self
https://www.suse.com/security/cve/CVE-2015-3412/ self
https://www.suse.com/security/cve/CVE-2015-4021/ self
https://www.suse.com/security/cve/CVE-2015-4022/ self
https://www.suse.com/security/cve/CVE-2015-4024/ self
https://www.suse.com/security/cve/CVE-2015-4025/ self
https://www.suse.com/security/cve/CVE-2015-4026/ self
https://www.suse.com/security/cve/CVE-2015-4147/ self
https://www.suse.com/security/cve/CVE-2015-4148/ self
https://www.suse.com/security/cve/CVE-2015-4598/ self
https://www.suse.com/security/cve/CVE-2015-4599/ self
https://www.suse.com/security/cve/CVE-2015-4600/ self
https://www.suse.com/security/cve/CVE-2015-4601/ self
https://www.suse.com/security/cve/CVE-2015-4602/ self
https://www.suse.com/security/cve/CVE-2015-4603/ self
https://www.suse.com/security/cve/CVE-2015-4604/ self
https://www.suse.com/security/cve/CVE-2015-4605/ self
https://www.suse.com/security/cve/CVE-2014-8142 external
https://bugzilla.suse.com/910659 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2014-9652 external
https://bugzilla.suse.com/917150 external
https://bugzilla.suse.com/917302 external
https://bugzilla.suse.com/918768 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2014-9705 external
https://bugzilla.suse.com/922451 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2014-9709 external
https://bugzilla.suse.com/923945 external
https://bugzilla.suse.com/923946 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-0231 external
https://bugzilla.suse.com/910659 external
https://bugzilla.suse.com/924972 external
https://bugzilla.suse.com/980366 external
https://bugzilla.suse.com/992991 external
https://www.suse.com/security/cve/CVE-2015-0232 external
https://bugzilla.suse.com/914690 external
https://bugzilla.suse.com/980366 external
https://bugzilla.suse.com/992991 external
https://www.suse.com/security/cve/CVE-2015-0273 external
https://bugzilla.suse.com/917302 external
https://bugzilla.suse.com/918768 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-2301 external
https://bugzilla.suse.com/922452 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-2348 external
https://bugzilla.suse.com/924970 external
https://bugzilla.suse.com/935227 external
https://www.suse.com/security/cve/CVE-2015-2783 external
https://bugzilla.suse.com/928408 external
https://bugzilla.suse.com/928506 external
https://bugzilla.suse.com/928511 external
https://bugzilla.suse.com/931418 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-2787 external
https://bugzilla.suse.com/924972 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-3307 external
https://bugzilla.suse.com/931418 external
https://www.suse.com/security/cve/CVE-2015-3329 external
https://bugzilla.suse.com/928408 external
https://bugzilla.suse.com/928506 external
https://bugzilla.suse.com/928511 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-3330 external
https://bugzilla.suse.com/908782 external
https://bugzilla.suse.com/928408 external
https://bugzilla.suse.com/928506 external
https://bugzilla.suse.com/928511 external
https://www.suse.com/security/cve/CVE-2015-3411 external
https://bugzilla.suse.com/935074 external
https://bugzilla.suse.com/935227 external
https://bugzilla.suse.com/935229 external
https://bugzilla.suse.com/935232 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-3412 external
https://bugzilla.suse.com/935227 external
https://bugzilla.suse.com/935229 external
https://bugzilla.suse.com/935232 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4021 external
https://bugzilla.suse.com/931769 external
https://bugzilla.suse.com/935074 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4022 external
https://bugzilla.suse.com/931769 external
https://bugzilla.suse.com/931772 external
https://bugzilla.suse.com/935275 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4024 external
https://bugzilla.suse.com/931421 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4025 external
https://bugzilla.suse.com/1067090 external
https://bugzilla.suse.com/893855 external
https://www.suse.com/security/cve/CVE-2015-4026 external
https://bugzilla.suse.com/931776 external
https://bugzilla.suse.com/935227 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4147 external
https://bugzilla.suse.com/925109 external
https://bugzilla.suse.com/933227 external
https://www.suse.com/security/cve/CVE-2015-4148 external
https://bugzilla.suse.com/933227 external
https://bugzilla.suse.com/935074 external
https://bugzilla.suse.com/935226 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4598 external
https://bugzilla.suse.com/935227 external
https://bugzilla.suse.com/935232 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4599 external
https://bugzilla.suse.com/935074 external
https://bugzilla.suse.com/935226 external
https://bugzilla.suse.com/935234 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4600 external
https://bugzilla.suse.com/935226 external
https://bugzilla.suse.com/935234 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4601 external
https://bugzilla.suse.com/935226 external
https://bugzilla.suse.com/935234 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4602 external
https://bugzilla.suse.com/935074 external
https://bugzilla.suse.com/935224 external
https://bugzilla.suse.com/935226 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4603 external
https://bugzilla.suse.com/935074 external
https://bugzilla.suse.com/935226 external
https://bugzilla.suse.com/935234 external
https://bugzilla.suse.com/980366 external
https://www.suse.com/security/cve/CVE-2015-4604 external
https://bugzilla.suse.com/935225 external
https://www.suse.com/security/cve/CVE-2015-4605 external
https://bugzilla.suse.com/935225 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for php",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2015:1135.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2015:1135.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2015:1135",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2015_1135.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8142 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8142/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9652 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9652/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9705 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9705/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9709 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9709/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0231 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0231/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0232 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0232/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0273 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0273/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-2301 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-2301/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-2348 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-2348/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-2783 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-2783/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-2787 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-2787/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3307 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3307/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3329 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3329/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3330 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3330/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3411 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3411/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3412 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3412/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4021 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4021/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4022 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4022/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4024 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4024/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4025 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4025/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4026 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4026/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4147 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4147/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4148 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4148/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4598 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4598/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4599 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4599/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4600 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4600/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4601 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4601/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4602 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4602/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4603 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4603/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4604 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4604/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4605 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4605/"
      }
    ],
    "title": "security update for php",
    "tracking": {
      "current_release_date": "2026-09-20T10:54:26Z",
      "generator": {
        "date": "2015-06-23T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2015:1135",
      "initial_release_date": "2015-06-23T00:00:00Z",
      "revision_history": [
        {
          "date": "2015-06-23T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T10:54:26Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "php-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-bcmath-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-bcmath-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-bcmath-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-bcmath@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-cli-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-cli-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-cli-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-cli@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-common-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-common-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-common-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-common@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-dba-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-dba-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-dba-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-dba@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-devel-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-devel-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-devel-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-devel@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-embedded-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-embedded-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-embedded-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-embedded@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-enchant-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-enchant-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-enchant-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-enchant@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-fpm-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-fpm-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-fpm-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-fpm@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-gd-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-gd-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-gd-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-gd@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-intl-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-intl-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-intl-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-intl@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-ldap-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-ldap-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-ldap-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-ldap@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-mbstring-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-mbstring-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-mbstring-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-mbstring@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-mysql-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-mysql-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-mysql-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-mysql@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-mysqlnd@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-odbc-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-odbc-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-odbc-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-odbc@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-pdo-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-pdo-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-pdo-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-pdo@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-pgsql-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-pgsql-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-pgsql-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-pgsql@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-process-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-process-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-process-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-process@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-pspell-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-pspell-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-pspell-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-pspell@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-recode-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-recode-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-recode-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-recode@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-snmp-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-snmp-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-snmp-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-snmp@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-soap-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-soap-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-soap-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-soap@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-xml-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-xml-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-xml-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-xml@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-xmlrpc-0:5.4.16-36.el7_1.x86_64",
                "product": {
                  "name": "php-xmlrpc-0:5.4.16-36.el7_1.x86_64",
                  "product_id": "php-xmlrpc-0:5.4.16-36.el7_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/php-xmlrpc@5.4.16-36.el7_1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-bcmath-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-bcmath-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-cli-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-cli-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-common-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-common-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-dba-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-dba-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-devel-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-devel-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-embedded-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-embedded-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-enchant-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-enchant-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-fpm-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-fpm-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-gd-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-gd-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-intl-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-intl-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-ldap-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-ldap-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-mbstring-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-mbstring-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-mysql-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-mysql-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-mysqlnd-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-odbc-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-odbc-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-pdo-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-pdo-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-pgsql-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-pgsql-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-process-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-process-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-pspell-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-pspell-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-recode-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-recode-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-snmp-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-snmp-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-soap-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-soap-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-xml-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-xml-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-xmlrpc-0:5.4.16-36.el7_1.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        },
        "product_reference": "php-xmlrpc-0:5.4.16-36.el7_1.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-8142",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8142"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8142",
          "url": "https://www.suse.com/security/cve/CVE-2014-8142"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910659 for CVE-2014-8142",
          "url": "https://bugzilla.suse.com/910659"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2014-8142",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2014-8142"
    },
    {
      "cve": "CVE-2014-9652",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9652"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9652",
          "url": "https://www.suse.com/security/cve/CVE-2014-9652"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917150 for CVE-2014-9652",
          "url": "https://bugzilla.suse.com/917150"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917302 for CVE-2014-9652",
          "url": "https://bugzilla.suse.com/917302"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 918768 for CVE-2014-9652",
          "url": "https://bugzilla.suse.com/918768"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2014-9652",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-9652"
    },
    {
      "cve": "CVE-2014-9705",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9705"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9705",
          "url": "https://www.suse.com/security/cve/CVE-2014-9705"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 922451 for CVE-2014-9705",
          "url": "https://bugzilla.suse.com/922451"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2014-9705",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-9705"
    },
    {
      "cve": "CVE-2014-9709",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9709"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9709",
          "url": "https://www.suse.com/security/cve/CVE-2014-9709"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 923945 for CVE-2014-9709",
          "url": "https://bugzilla.suse.com/923945"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 923946 for CVE-2014-9709",
          "url": "https://bugzilla.suse.com/923946"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2014-9709",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2014-9709"
    },
    {
      "cve": "CVE-2015-0231",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0231"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0231",
          "url": "https://www.suse.com/security/cve/CVE-2015-0231"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910659 for CVE-2015-0231",
          "url": "https://bugzilla.suse.com/910659"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 924972 for CVE-2015-0231",
          "url": "https://bugzilla.suse.com/924972"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-0231",
          "url": "https://bugzilla.suse.com/980366"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-0231",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-0231"
    },
    {
      "cve": "CVE-2015-0232",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0232"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0232",
          "url": "https://www.suse.com/security/cve/CVE-2015-0232"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914690 for CVE-2015-0232",
          "url": "https://bugzilla.suse.com/914690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-0232",
          "url": "https://bugzilla.suse.com/980366"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-0232",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-0232"
    },
    {
      "cve": "CVE-2015-0273",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0273"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0273",
          "url": "https://www.suse.com/security/cve/CVE-2015-0273"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917302 for CVE-2015-0273",
          "url": "https://bugzilla.suse.com/917302"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 918768 for CVE-2015-0273",
          "url": "https://bugzilla.suse.com/918768"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-0273",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-0273"
    },
    {
      "cve": "CVE-2015-2301",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-2301"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-2301",
          "url": "https://www.suse.com/security/cve/CVE-2015-2301"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 922452 for CVE-2015-2301",
          "url": "https://bugzilla.suse.com/922452"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-2301",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-2301"
    },
    {
      "cve": "CVE-2015-2348",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-2348"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 truncates a pathname upon encountering a \\x00 character, which allows remote attackers to bypass intended extension restrictions and create files with unexpected names via a crafted second argument.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-2348",
          "url": "https://www.suse.com/security/cve/CVE-2015-2348"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 924970 for CVE-2015-2348",
          "url": "https://bugzilla.suse.com/924970"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935227 for CVE-2015-2348",
          "url": "https://bugzilla.suse.com/935227"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-2348"
    },
    {
      "cve": "CVE-2015-2783",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-2783"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-2783",
          "url": "https://www.suse.com/security/cve/CVE-2015-2783"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928408 for CVE-2015-2783",
          "url": "https://bugzilla.suse.com/928408"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928506 for CVE-2015-2783",
          "url": "https://bugzilla.suse.com/928506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928511 for CVE-2015-2783",
          "url": "https://bugzilla.suse.com/928511"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931418 for CVE-2015-2783",
          "url": "https://bugzilla.suse.com/931418"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-2783",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-2783"
    },
    {
      "cve": "CVE-2015-2787",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-2787"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages use of the unset function within an __wakeup function, a related issue to CVE-2015-0231.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-2787",
          "url": "https://www.suse.com/security/cve/CVE-2015-2787"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 924972 for CVE-2015-2787",
          "url": "https://bugzilla.suse.com/924972"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-2787",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-2787"
    },
    {
      "cve": "CVE-2015-3307",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3307"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) or possibly have unspecified other impact via a crafted tar archive.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3307",
          "url": "https://www.suse.com/security/cve/CVE-2015-3307"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931418 for CVE-2015-3307",
          "url": "https://bugzilla.suse.com/931418"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-3307"
    },
    {
      "cve": "CVE-2015-3329",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3329"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a (1) tar, (2) phar, or (3) ZIP archive.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3329",
          "url": "https://www.suse.com/security/cve/CVE-2015-3329"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928408 for CVE-2015-3329",
          "url": "https://bugzilla.suse.com/928408"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928506 for CVE-2015-3329",
          "url": "https://bugzilla.suse.com/928506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928511 for CVE-2015-3329",
          "url": "https://bugzilla.suse.com/928511"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-3329",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-3329"
    },
    {
      "cve": "CVE-2015-3330",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3330"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, when the Apache HTTP Server 2.4.x is used, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via pipelined HTTP requests that result in a \"deconfigured interpreter.\"",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3330",
          "url": "https://www.suse.com/security/cve/CVE-2015-3330"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 908782 for CVE-2015-3330",
          "url": "https://bugzilla.suse.com/908782"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928408 for CVE-2015-3330",
          "url": "https://bugzilla.suse.com/928408"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928506 for CVE-2015-3330",
          "url": "https://bugzilla.suse.com/928506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928511 for CVE-2015-3330",
          "url": "https://bugzilla.suse.com/928511"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-3330"
    },
    {
      "cve": "CVE-2015-3411",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3411"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument load method, (2) the xmlwriter_open_uri function, (3) the finfo_file function, or (4) the hash_hmac_file function, as demonstrated by a filename\\0.xml attack that bypasses an intended configuration in which client users may read only .xml files.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3411",
          "url": "https://www.suse.com/security/cve/CVE-2015-3411"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935074 for CVE-2015-3411",
          "url": "https://bugzilla.suse.com/935074"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935227 for CVE-2015-3411",
          "url": "https://bugzilla.suse.com/935227"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935229 for CVE-2015-3411",
          "url": "https://bugzilla.suse.com/935229"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935232 for CVE-2015-3411",
          "url": "https://bugzilla.suse.com/935232"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-3411",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-3411"
    },
    {
      "cve": "CVE-2015-3412",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3412"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read arbitrary files via crafted input to an application that calls the stream_resolve_include_path function in ext/standard/streamsfuncs.c, as demonstrated by a filename\\0.extension attack that bypasses an intended configuration in which client users may read files with only one specific extension.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3412",
          "url": "https://www.suse.com/security/cve/CVE-2015-3412"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935227 for CVE-2015-3412",
          "url": "https://bugzilla.suse.com/935227"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935229 for CVE-2015-3412",
          "url": "https://bugzilla.suse.com/935229"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935232 for CVE-2015-3412",
          "url": "https://bugzilla.suse.com/935232"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-3412",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-3412"
    },
    {
      "cve": "CVE-2015-4021",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4021"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \\0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4021",
          "url": "https://www.suse.com/security/cve/CVE-2015-4021"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931769 for CVE-2015-4021",
          "url": "https://bugzilla.suse.com/931769"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935074 for CVE-2015-4021",
          "url": "https://bugzilla.suse.com/935074"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4021",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4021"
    },
    {
      "cve": "CVE-2015-4022",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4022"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4022",
          "url": "https://www.suse.com/security/cve/CVE-2015-4022"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931769 for CVE-2015-4022",
          "url": "https://bugzilla.suse.com/931769"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931772 for CVE-2015-4022",
          "url": "https://bugzilla.suse.com/931772"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935275 for CVE-2015-4022",
          "url": "https://bugzilla.suse.com/935275"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4022",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4022"
    },
    {
      "cve": "CVE-2015-4024",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4024"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4024",
          "url": "https://www.suse.com/security/cve/CVE-2015-4024"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931421 for CVE-2015-4024",
          "url": "https://bugzilla.suse.com/931421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4024",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4024"
    },
    {
      "cve": "CVE-2015-4025",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4025"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \\x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to (1) set_include_path, (2) tempnam, (3) rmdir, or (4) readlink.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4025",
          "url": "https://www.suse.com/security/cve/CVE-2015-4025"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1067090 for CVE-2015-4025",
          "url": "https://bugzilla.suse.com/1067090"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 893855 for CVE-2015-4025",
          "url": "https://bugzilla.suse.com/893855"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4025"
    },
    {
      "cve": "CVE-2015-4026",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4026"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \\x00 character, which might allow remote attackers to bypass intended extension restrictions and execute files with unexpected names via a crafted first argument.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4026",
          "url": "https://www.suse.com/security/cve/CVE-2015-4026"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931776 for CVE-2015-4026",
          "url": "https://bugzilla.suse.com/931776"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935227 for CVE-2015-4026",
          "url": "https://bugzilla.suse.com/935227"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4026",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4026"
    },
    {
      "cve": "CVE-2015-4147",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4147"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __default_headers is an array, which allows remote attackers to execute arbitrary code by providing crafted serialized data with an unexpected data type, related to a \"type confusion\" issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4147",
          "url": "https://www.suse.com/security/cve/CVE-2015-4147"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 925109 for CVE-2015-4147",
          "url": "https://bugzilla.suse.com/925109"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 933227 for CVE-2015-4147",
          "url": "https://bugzilla.suse.com/933227"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4147"
    },
    {
      "cve": "CVE-2015-4148",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4148"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri property is a string, which allows remote attackers to obtain sensitive information by providing crafted serialized data with an int data type, related to a \"type confusion\" issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4148",
          "url": "https://www.suse.com/security/cve/CVE-2015-4148"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 933227 for CVE-2015-4148",
          "url": "https://bugzilla.suse.com/933227"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935074 for CVE-2015-4148",
          "url": "https://bugzilla.suse.com/935074"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935226 for CVE-2015-4148",
          "url": "https://bugzilla.suse.com/935226"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4148",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-4148"
    },
    {
      "cve": "CVE-2015-4598",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4598"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument save method or (2) the GD imagepsloadfont function, as demonstrated by a filename\\0.html attack that bypasses an intended configuration in which client users may write to only .html files.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4598",
          "url": "https://www.suse.com/security/cve/CVE-2015-4598"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935227 for CVE-2015-4598",
          "url": "https://bugzilla.suse.com/935227"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935232 for CVE-2015-4598",
          "url": "https://bugzilla.suse.com/935232"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4598",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4598"
    },
    {
      "cve": "CVE-2015-4599",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4599"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information, cause a denial of service (application crash), or possibly execute arbitrary code via an unexpected data type, related to a \"type confusion\" issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4599",
          "url": "https://www.suse.com/security/cve/CVE-2015-4599"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935074 for CVE-2015-4599",
          "url": "https://bugzilla.suse.com/935074"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935226 for CVE-2015-4599",
          "url": "https://bugzilla.suse.com/935226"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935234 for CVE-2015-4599",
          "url": "https://bugzilla.suse.com/935234"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4599",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4599"
    },
    {
      "cve": "CVE-2015-4600",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4600"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to \"type confusion\" issues in the (1) SoapClient::__getLastRequest, (2) SoapClient::__getLastResponse, (3) SoapClient::__getLastRequestHeaders, (4) SoapClient::__getLastResponseHeaders, (5) SoapClient::__getCookies, and (6) SoapClient::__setCookie methods.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4600",
          "url": "https://www.suse.com/security/cve/CVE-2015-4600"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935226 for CVE-2015-4600",
          "url": "https://bugzilla.suse.com/935226"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935234 for CVE-2015-4600",
          "url": "https://bugzilla.suse.com/935234"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4600",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4600"
    },
    {
      "cve": "CVE-2015-4601",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4601"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to \"type confusion\" issues in (1) ext/soap/php_encoding.c, (2) ext/soap/php_http.c, and (3) ext/soap/soap.c, a different issue than CVE-2015-4600.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4601",
          "url": "https://www.suse.com/security/cve/CVE-2015-4601"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935226 for CVE-2015-4601",
          "url": "https://bugzilla.suse.com/935226"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935234 for CVE-2015-4601",
          "url": "https://bugzilla.suse.com/935234"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4601",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4601"
    },
    {
      "cve": "CVE-2015-4602",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4602"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to a \"type confusion\" issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4602",
          "url": "https://www.suse.com/security/cve/CVE-2015-4602"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935074 for CVE-2015-4602",
          "url": "https://bugzilla.suse.com/935074"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935224 for CVE-2015-4602",
          "url": "https://bugzilla.suse.com/935224"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935226 for CVE-2015-4602",
          "url": "https://bugzilla.suse.com/935226"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4602",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4602"
    },
    {
      "cve": "CVE-2015-4603",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4603"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to execute arbitrary code via an unexpected data type, related to a \"type confusion\" issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4603",
          "url": "https://www.suse.com/security/cve/CVE-2015-4603"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935074 for CVE-2015-4603",
          "url": "https://bugzilla.suse.com/935074"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935226 for CVE-2015-4603",
          "url": "https://bugzilla.suse.com/935226"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935234 for CVE-2015-4603",
          "url": "https://bugzilla.suse.com/935234"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980366 for CVE-2015-4603",
          "url": "https://bugzilla.suse.com/980366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4603"
    },
    {
      "cve": "CVE-2015-4604",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4604"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a \"Python script text executable\" rule.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4604",
          "url": "https://www.suse.com/security/cve/CVE-2015-4604"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935225 for CVE-2015-4604",
          "url": "https://bugzilla.suse.com/935225"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4604"
    },
    {
      "cve": "CVE-2015-4605",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4605"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a \"Python script text executable\" rule.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
          "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4605",
          "url": "https://www.suse.com/security/cve/CVE-2015-4605"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 935225 for CVE-2015-4605",
          "url": "https://bugzilla.suse.com/935225"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:php-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-bcmath-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-cli-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-common-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-dba-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-devel-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-embedded-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-enchant-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-fpm-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-gd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-intl-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-ldap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mbstring-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-mysqlnd-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-odbc-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pdo-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pgsql-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-process-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-pspell-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-recode-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-snmp-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-soap-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xml-0:5.4.16-36.el7_1.x86_64",
            "SUSE Liberty Linux 7:php-xmlrpc-0:5.4.16-36.el7_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-23T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4605"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.