Red Hat Security AdvisoryRHSA-2013:1061
php security update
Released 2013-07-15 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Compute Node EUS (v. 6.2) php-5.3.3-3.el6_2.10, php-cli-5.3.3-3.el6_2.10, php-common-5.3.3-3.el6_2.10
- Red Hat Enterprise Linux Compute Node EUS (v. 6.3) php-5.3.3-14.el6_3.1, php-cli-5.3.3-14.el6_3.1, php-common-5.3.3-14.el6_3.1
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.2) php-5.3.3-3.el6_2.10, php-bcmath-5.3.3-3.el6_2.10, php-dba-5.3.3-3.el6_2.10 +21
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.3) php-5.3.3-14.el6_3.1, php-bcmath-5.3.3-14.el6_3.1, php-dba-5.3.3-14.el6_3.1 +21
- Red Hat Enterprise Linux EUS (v. 5.6 server) php-5.1.6-27.el5_6.5, php-5.1.6-27.el5_6.5.i386, php-5.1.6-27.el5_6.5.ia64 +47
- Red Hat Enterprise Linux Long Life (v. 5.3 server) php-5.1.6-23.4.el5_3, php-5.1.6-23.4.el5_3.i386, php-5.1.6-23.4.el5_3.ia64 +47
- Red Hat Enterprise Linux Server EUS (v. 6.2) php-5.3.3-3.el6_2.10, php-cli-5.3.3-3.el6_2.10, php-common-5.3.3-3.el6_2.10 +9
- Red Hat Enterprise Linux Server EUS (v. 6.3) php-5.3.3-14.el6_3.1, php-cli-5.3.3-14.el6_3.1, php-common-5.3.3-14.el6_3.1 +9
- Red Hat Enterprise Linux Server Optional EUS (v. 6.2) php-5.3.3-3.el6_2.10, php-bcmath-5.3.3-3.el6_2.10, php-dba-5.3.3-3.el6_2.10 +12
- Red Hat Enterprise Linux Server Optional EUS (v. 6.3) php-5.3.3-14.el6_3.1, php-bcmath-5.3.3-14.el6_3.1, php-dba-5.3.3-14.el6_3.1 +12
Fixes 1 record
Priority LOW 38
ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted doc…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05186 · Published 2013-07-13 · Fixed CWE-787
