{"cves":["CVE-2012-2688","CVE-2011-1398","CVE-2012-0831"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[5.3.3-22]\n- php-xml provides php-xmlreader and php-xmlwriter (#874987)\n- fix possible NULL derefence and buffer overflow (#879179)\n- fix zend garbage collector (#848186, #868375)\n\n[5.3.3-21]\n- fix CVE reference in previous changelog entry\n\n[5.3.3-20]\n- remove reproducer from security fix for CVE-2012-0781\n\n[5.3.3-19]\n- add FastCGI Process Manager (php-fpm) SAPI (#806132, #824293)\n\n[5.3.3-18]\n- php script hangs when it exceeds max_execution_time\n  when inside an ODBC call (#864951)\n\n[5.3.3-17]\n- add security fixes for CVE-2012-2688, CVE-2012-0831, CVE-2011-1398\n\n[5.3.3-16]\n- fix stream support in fileinfo (#858653)\n- fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859371)\n\n[5.3.3-15]\n- fix permission on source files (#676364)\n- fix negative keys with var_export (#771738)\n- fix setDate when DateTime created from timestamp (#812819)\n- add php(language) and missing provides (#837042)\n- use arch-specific requires (#833545)\n- fix possible buffer overflow in pdo_odbc (#836264)\n- fix possible segfault in pdo_mysql (#824199)","id":"ELSA-2013-0514","ovalId":"oval:com.oracle.elsa:def:20130514","source":"oracle_linux","title":"ELSA-2013-0514:  php security, bug fix and enhancement update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2013-0514.html"}