| Errata ID | 258 | 
|---|---|
| Date | 2014-12-19 | 
| Source package | php5 | 
| Fixed in version | 5.3.3-7.207.201411271302 | 
| Description | Multiple issues have been fixed in php5: * Denial of service in the file classifier (CVE-2014-1943) * Denial of service in libmagic (CVE-2014-2270) * Denial of service in the fileinfo classifier for CDF (CVE-2014-0237, CVE-2014-0238, CVE-2014-3480, CVE-2014-0207) * Memory disclosure information leak in phpinfo() (CVE-2014-4721) * Buffer overflow in the function to parse DNS TXT records (CVE-2014-4049, CVE-2014-3597) * Buffer overflow in the CDF parsing in the filemagic module (CVE-2014-3587) * Heap corruption issue in processing exif thumbnails (CVE-2014-3670) * Integer overflow in unserialize() (CVE-2014-3669) * Out of bounds read in mkgmtime() (CVE-2014-3668) * Buffer overflow in the xmlrpc date_from_ISO8601() function (CVE-2014-8626) * Out of bounds reads when parsing ELF section headers in the file extension (CVE-2014-3710)  | 
				
| Additional notes | |
| CVE ID | CVE-2014-1943 CVE-2014-2270 CVE-2014-0237 CVE-2014-0238 CVE-2014-3480 CVE-2014-0207 CVE-2014-4721 CVE-2014-4049 CVE-2014-3597 CVE-2014-3587 CVE-2014-3670 CVE-2014-3669 CVE-2014-3668 CVE-2014-8626 CVE-2014-3710  | 
  
| UCS Bug number | #34256 | 
