--- title: 'USN-3045-1: PHP vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-3045-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-3045-1 --- # USN-3045-1: PHP vulnerabilities Publication date 2 August 2016 Overview Several security issues were fixed in PHP. Releases [16.04 LTS](https://ubuntu.com/security/notices?release=xenial) [14.04 LTS](https://ubuntu.com/security/notices?release=trusty) [12.04](https://ubuntu.com/security/notices?release=precise) --- Open side navigation ## Packages * [php5](https://ubuntu.com/security/cves?package=php5) - HTML-embedded scripting language interpreter * [php7.0](https://ubuntu.com/security/cves?package=php7.0) - HTML-embedded scripting language interpreter ## Details It was discovered that PHP incorrectly handled certain SplMinHeap::compare operations. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. ([CVE-2015-4116](https://ubuntu.com/security/CVE-2015-4116)) It was discovered that PHP incorrectly handled recursive method calls. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. ([CVE-2015-8873](https://ubuntu.com/security/CVE-2015-8873)) It was discovered that PHP incorrectly validated certain Exception objects when unserializing data. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. ( --- Show more ## Update instructions In general, a standard system update will make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 16.04 LTS xenial | [libapache2-mod-php7.0](https://launchpad.net/ubuntu/+source/php7.0) –  [7.0.8-0ubuntu0.16.04.2](https://launchpad.net/ubuntu/+source/php7.0/7.0.8-0ubuntu0.16.04.2) | | | | [php7.0-cgi](https://launchpad.net/ubuntu/+source/php7.0) –  [7.0.8-0ubuntu0.16.04.2](https://launchpad.net/ubuntu/+source/php7.0/7.0.8-0ubuntu0.16.04.2) | | | | [php7.0-cli](https://launchpad.net/ubuntu/+source/php7.0) –  [7.0.8-0ubuntu0.16.04.2](https://launchpad.net/ubuntu/+source/php7.0/7.0.8-0ubuntu0.16.04.2) | | | | [php7.0-fpm](https://launchpad.net/ubuntu/+source/php7.0) –  [7.0.8-0ubuntu0.16.04.2](https://launchpad.net/ubuntu/+source/php7.0/7.0.8-0ubuntu0.16.04.2) | | | | 14.04 LTS trusty | [libapache2-mod-php5](https://launchpad.net/ubuntu/+source/php5) –  [5.5.9+dfsg-1ubuntu4.19](https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.19) | | | | [php5-cgi](https://launchpad.net/ubuntu/+source/php5) –  [5.5.9+dfsg-1ubuntu4.19](https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.19) | | | | [php5-cli](https://launchpad.net/ubuntu/+source/php5) –  [5.5.9+dfsg-1ubuntu4.19](https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.19) | | | | [php5-fpm](https://launchpad.net/ubuntu/+source/php5) –  [5.5.9+dfsg-1ubuntu4.19](https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.19) | | | | 12.04 precise | [libapache2-mod-php5](https://launchpad.net/ubuntu/+source/php5) –  [5.3.10-1ubuntu3.24](https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.24) | | | | [php5-cgi](https://launchpad.net/ubuntu/+source/php5) –  [5.3.10-1ubuntu3.24](https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.24) | | | | [php5-cli](https://launchpad.net/ubuntu/+source/php5) –  [5.3.10-1ubuntu3.24](https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.24) | | | | [php5-fpm](https://launchpad.net/ubuntu/+source/php5) –  [5.3.10-1ubuntu3.24](https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.24) | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References * [CVE-2016-6297](https://ubuntu.com/security/CVE-2016-6297) * [CVE-2016-6296](https://ubuntu.com/security/CVE-2016-6296) * [CVE-2016-6295](https://ubuntu.com/security/CVE-2016-6295) * [CVE-2016-6294](https://ubuntu.com/security/CVE-2016-6294) * [CVE-2016-6292](https://ubuntu.com/security/CVE-2016-6292) * [CVE-2016-6291](https://ubuntu.com/security/CVE-2016-6291) * [CVE-2016-6290](https://ubuntu.com/security/CVE-2016-6290) * [CVE-2016-6289](https://ubuntu.com/security/CVE-2016-6289) * [CVE-2016-6288](https://ubuntu.com/security/CVE-2016-6288) * [CVE-2016-5773](https://ubuntu.com/security/CVE-2016-5773) --- Show 15 more references ## Related notices * [USN-3059-1](https://ubuntu.com/security/notices/USN-3059-1)