{ "document": { "aggregate_severity": { "text": "High" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_alt_common/el8/vex/2016/cve-2016-5385-els_alt_common-el8.json" } ], "tracking": { "current_release_date": "2026-10-26T22:41:17Z", "generator": { "date": "2026-10-26T22:41:17Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2016-5385-ELS_ALT_COMMON-EL8", "initial_release_date": "2016-07-19T02:00:00Z", "revision_history": [ { "date": "2016-07-19T02:00:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-26T22:41:17Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2016-5385" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 8", "product": { "name": "Community Enterprise Operating System 8", "product_id": "CentOS-8", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "alt-php-internal-mbstring-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-mbstring-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-mbstring-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-mbstring@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-ldap-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-ldap-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-ldap-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-ldap@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-soap-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-soap-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-soap-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-soap@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-gd-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-gd-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-gd-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-gd@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-pspell-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-pspell-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-pspell-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-pspell@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-sodium-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-sodium-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-sodium-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-sodium@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-process-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-process-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-process-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-process@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-enchant-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-enchant-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-enchant-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-enchant@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-imap-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-imap-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-imap-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-imap@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-pdo-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-pdo-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-pdo-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-pdo@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-firebird-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-firebird-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-firebird-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-firebird@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-common-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-common-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-common-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-common@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-cli-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-cli-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-cli-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-cli@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-xml-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-xml-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-xml-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-xml@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-intl-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-intl-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-intl-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-intl@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-devel-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-devel-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-devel-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-devel@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-pgsql-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-pgsql-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-pgsql-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-pgsql@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-odbc-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-odbc-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-odbc-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-odbc@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-tidy-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-tidy-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-tidy-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-tidy@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-opcache-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-opcache-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-opcache-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-opcache@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-snmp-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-snmp-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-snmp-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-snmp@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-bcmath-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-bcmath-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-bcmath-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-bcmath@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-mysqlnd-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-mysqlnd-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-mysqlnd-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-mysqlnd@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-gmp-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-gmp-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-gmp-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-gmp@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-php-internal-dba-0:8.2.35-1.el8.x86_64", "product": { "name": "alt-php-internal-dba-0:8.2.35-1.el8.x86_64", "product_id": "alt-php-internal-dba-0:8.2.35-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-php-internal-dba@8.2.35-1.el8?arch=x86_64&os_name=centos&os_version=8" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-mbstring-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-mbstring-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-mbstring-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-ldap-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-ldap-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-ldap-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-soap-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-soap-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-soap-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-gd-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-gd-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-gd-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-pspell-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-pspell-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-pspell-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-sodium-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-sodium-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-sodium-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-process-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-process-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-process-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-enchant-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-enchant-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-enchant-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-imap-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-imap-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-imap-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-pdo-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-pdo-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-pdo-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-firebird-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-firebird-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-firebird-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-common-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-common-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-common-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-cli-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-cli-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-cli-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-xml-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-xml-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-xml-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-intl-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-intl-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-intl-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-devel-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-devel-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-devel-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-pgsql-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-pgsql-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-pgsql-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-odbc-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-odbc-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-odbc-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-tidy-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-tidy-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-tidy-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-opcache-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-opcache-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-opcache-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-snmp-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-snmp-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-snmp-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-bcmath-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-bcmath-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-bcmath-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-mysqlnd-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-mysqlnd-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-mysqlnd-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-gmp-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-gmp-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-gmp-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-php-internal-dba-0:8.2.35-1.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-php-internal-dba-0:8.2.35-1.el8.x86_64" }, "product_reference": "alt-php-internal-dba-0:8.2.35-1.el8.x86_64", "relates_to_product_reference": "CentOS-8" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-5385", "cwe": { "id": "CWE-601", "name": "URL Redirection to Untrusted Site ('Open Redirect')" }, "notes": [ { "category": "description", "text": "PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an \"httpoxy\" issue.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-8:alt-php-internal-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-bcmath-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-cli-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-common-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-dba-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-devel-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-enchant-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-firebird-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-gd-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-gmp-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-imap-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-intl-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-ldap-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-mbstring-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-mysqlnd-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-odbc-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-opcache-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-pdo-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-pgsql-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-process-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-pspell-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-snmp-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-soap-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-sodium-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-tidy-0:8.2.35-1.el8.x86_64", "CentOS-8:alt-php-internal-xml-0:8.2.35-1.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2016-5385" }, { "category": "external", "summary": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html", "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html" }, { "category": "external", "summary": "http://rhn.redhat.com/errata/RHSA-2016-1609.html", "url": "http://rhn.redhat.com/errata/RHSA-2016-1609.html" }, { "category": "external", "summary": "http://rhn.redhat.com/errata/RHSA-2016-1610.html", "url": "http://rhn.redhat.com/errata/RHSA-2016-1610.html" }, { "category": "external", "summary": "http://rhn.redhat.com/errata/RHSA-2016-1611.html", "url": "http://rhn.redhat.com/errata/RHSA-2016-1611.html" }, { "category": "external", "summary": "http://rhn.redhat.com/errata/RHSA-2016-1612.html", "url": "http://rhn.redhat.com/errata/RHSA-2016-1612.html" }, { "category": "external", "summary": "http://rhn.redhat.com/errata/RHSA-2016-1613.html", "url": "http://rhn.redhat.com/errata/RHSA-2016-1613.html" }, { "category": "external", "summary": "http://www.debian.org/security/2016/dsa-3631", "url": "http://www.debian.org/security/2016/dsa-3631" }, { "category": "external", "summary": "http://www.kb.cert.org/vuls/id/797896", "url": "http://www.kb.cert.org/vuls/id/797896" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html", "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html", "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html" }, { "category": "external", "summary": "http://www.securityfocus.com/bid/91821", "url": "http://www.securityfocus.com/bid/91821" }, { "category": "external", "summary": "http://www.securitytracker.com/id/1036335", "url": "http://www.securitytracker.com/id/1036335" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=1353794", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1353794" }, { "category": "external", "summary": "https://github.com/guzzle/guzzle/releases/tag/6.2.1", "url": "https://github.com/guzzle/guzzle/releases/tag/6.2.1" }, { "category": "external", "summary": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03770en_us", "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03770en_us" }, { "category": "external", "summary": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149", "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149" }, { "category": "external", "summary": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05333297", "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05333297" }, { "category": "external", "summary": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722", "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722" }, { "category": "external", "summary": "https://httpoxy.org/", "url": "https://httpoxy.org/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RMYXAVNYL2MOBJTFATE73TOVOEZYC5R/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RMYXAVNYL2MOBJTFATE73TOVOEZYC5R/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXFEIMZPSVGZQQAYIQ7U7DFVX3IBSDLF/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXFEIMZPSVGZQQAYIQ7U7DFVX3IBSDLF/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZOIUYZDBWNDDHC6XTOLZYRMRXZWTJCP/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZOIUYZDBWNDDHC6XTOLZYRMRXZWTJCP/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/201611-22", "url": "https://security.gentoo.org/glsa/201611-22" }, { "category": "external", "summary": "https://www.drupal.org/SA-CORE-2016-003", "url": "https://www.drupal.org/SA-CORE-2016-003" } ], "release_date": "2016-07-19T02:00:00Z", "threats": [ { "category": "impact", "details": "Important" } ] } ] }