PHP Multiple Remote Code Execution Vulnerabilities

Multiple vulnerabilities were identified in PHP.  A remote user can execute arbitrary code on the target system.

1. A remote user can send specially crafted data to an application to trigger a use-after-free memory error in the unserialisation of objects in the DateTimeZone class.
2. A remote user can send specially crafted data to trigger a memory handling error in the phar extension and potentially execute arbitrary code on the target system.
3. A remote user can send specially crafted data to an application to trigger a heap overflow in the ereg extension and execute arbitrary code on the target system. The vulnerability resides in the Henry Spencer regex library. Only 32-bit systems are affected.