Red Hat Security AdvisoryRHSA-2013:1813
php53 and php security update
Released 2013-12-11 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) php53-5.3.3-22.el5_10, php53-5.3.3-22.el5_10.i386, php53-5.3.3-22.el5_10.ia64 +47
- Red Hat Enterprise Linux Desktop Optional (v. 6) php-5.3.3-27.el6_5, php-bcmath-5.3.3-27.el6_5, php-cli-5.3.3-27.el6_5 +24
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) php53-5.3.3-22.el5_10, php53-5.3.3-22.el5_10.i386, php53-bcmath-5.3.3-22.el5_10 +39
- Red Hat Enterprise Linux HPC Node (v. 6) php-5.3.3-27.el6_5, php-cli-5.3.3-27.el6_5, php-common-5.3.3-27.el6_5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) php-5.3.3-27.el6_5, php-bcmath-5.3.3-27.el6_5, php-dba-5.3.3-27.el6_5 +22
- Red Hat Enterprise Linux Server (v. 6) php-5.3.3-27.el6_5, php-cli-5.3.3-27.el6_5, php-common-5.3.3-27.el6_5 +9
- Red Hat Enterprise Linux Server Optional (v. 6) php-5.3.3-27.el6_5, php-bcmath-5.3.3-27.el6_5, php-dba-5.3.3-27.el6_5 +13
- Red Hat Enterprise Linux Workstation (v. 6) php-5.3.3-27.el6_5, php-cli-5.3.3-27.el6_5, php-common-5.3.3-27.el6_5 +9
- Red Hat Enterprise Linux Workstation Optional (v. 6) php-5.3.3-27.el6_5, php-bcmath-5.3.3-27.el6_5, php-dba-5.3.3-27.el6_5 +13
Fixes 1 record
Priority MEDIUM 59
The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.35635 · Published 2013-12-17 · Partial fix CWE-119
