Red Hat Security Advisory

RHSA-2013:1824

php security update

Released 2013-12-11 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Compute Node EUS (v. 6.2) php-5.3.3-3.el6_2.11, php-cli-5.3.3-3.el6_2.11, php-common-5.3.3-3.el6_2.11
Red Hat Enterprise Linux Compute Node EUS (v. 6.3) php-5.3.3-14.el6_3.3, php-cli-5.3.3-14.el6_3.3, php-common-5.3.3-14.el6_3.3
Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.2) php-5.3.3-3.el6_2.11, php-bcmath-5.3.3-3.el6_2.11, php-dba-5.3.3-3.el6_2.11 +21
Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.3) php-5.3.3-14.el6_3.3, php-bcmath-5.3.3-14.el6_3.3, php-dba-5.3.3-14.el6_3.3 +21
Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4) php-5.3.3-23.el6_4.1, php-bcmath-5.3.3-23.el6_4.1, php-dba-5.3.3-23.el6_4.1 +22
Red Hat Enterprise Linux EUS (v. 5.6 server) php-5.1.6-27.el5_6.6, php-5.1.6-27.el5_6.6.i386, php-5.1.6-27.el5_6.6.ia64 +47
Red Hat Enterprise Linux EUS (v. 5.9 server) php-5.1.6-40.el5_9.1, php-5.1.6-40.el5_9.1.i386, php-5.1.6-40.el5_9.1.ia64 +47
Red Hat Enterprise Linux HPC Node EUS (v. 6.4) php-5.3.3-23.el6_4.1, php-cli-5.3.3-23.el6_4.1, php-common-5.3.3-23.el6_4.1
Red Hat Enterprise Linux Long Life (v. 5.3 server) php-5.1.6-23.5.el5_3, php-5.1.6-23.5.el5_3.i386, php-5.1.6-23.5.el5_3.ia64 +47
Red Hat Enterprise Linux Server EUS (v. 6.2) php-5.3.3-3.el6_2.11, php-cli-5.3.3-3.el6_2.11, php-common-5.3.3-3.el6_2.11 +9
Red Hat Enterprise Linux Server EUS (v. 6.3) php-5.3.3-14.el6_3.3, php-cli-5.3.3-14.el6_3.3, php-common-5.3.3-14.el6_3.3 +9
Red Hat Enterprise Linux Server EUS (v. 6.4) php-5.3.3-23.el6_4.1, php-cli-5.3.3-23.el6_4.1, php-common-5.3.3-23.el6_4.1 +9
Red Hat Enterprise Linux Server Optional EUS (v. 6.2) php-5.3.3-3.el6_2.11, php-bcmath-5.3.3-3.el6_2.11, php-dba-5.3.3-3.el6_2.11 +12
Red Hat Enterprise Linux Server Optional EUS (v. 6.3) php-5.3.3-14.el6_3.3, php-bcmath-5.3.3-14.el6_3.3, php-dba-5.3.3-14.el6_3.3 +12
Red Hat Enterprise Linux Server Optional EUS (v. 6.4) php-5.3.3-23.el6_4.1, php-bcmath-5.3.3-23.el6_4.1, php-dba-5.3.3-23.el6_4.1 +13

Fixes 1 record

TI-2013-05374 CVE-2013-6420 · GHSA-m6pq-hhvx-694c

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x…

MEDIUM 59

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.35635 Published 2013-12-17 Partial fix CWE-119