Red Hat Security AdvisoryRHSA-2013:1049
php security update
Released 2013-07-12 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) php-5.1.6-40.el5_9, php-5.1.6-40.el5_9.i386, php-5.1.6-40.el5_9.ia64 +47
- Red Hat Enterprise Linux Desktop Optional (v. 6) php-5.3.3-23.el6_4, php-bcmath-5.3.3-23.el6_4, php-cli-5.3.3-23.el6_4 +24
- Red Hat Enterprise Linux HPC Node (v. 6) php-5.3.3-23.el6_4, php-cli-5.3.3-23.el6_4, php-common-5.3.3-23.el6_4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) php-5.3.3-23.el6_4, php-bcmath-5.3.3-23.el6_4, php-dba-5.3.3-23.el6_4 +22
- Red Hat Enterprise Linux Server (v. 6) php-5.3.3-23.el6_4, php-cli-5.3.3-23.el6_4, php-common-5.3.3-23.el6_4 +9
- Red Hat Enterprise Linux Server Optional (v. 6) php-5.3.3-23.el6_4, php-bcmath-5.3.3-23.el6_4, php-dba-5.3.3-23.el6_4 +13
- Red Hat Enterprise Linux Workstation (v. 6) php-5.3.3-23.el6_4, php-cli-5.3.3-23.el6_4, php-common-5.3.3-23.el6_4 +9
- Red Hat Enterprise Linux Workstation Optional (v. 6) php-5.3.3-23.el6_4, php-bcmath-5.3.3-23.el6_4, php-dba-5.3.3-23.el6_4 +13
Fixes 1 record
Priority LOW 38
ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted doc…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05186 · Published 2013-07-13 · Fixed CWE-787
