Red Hat Security Advisory

RHSA-2013:1825

php53 security update

Released 2013-12-11 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux EUS (v. 5.6 server) php53-5.3.3-1.el5_6.4, php53-5.3.3-1.el5_6.4.i386, php53-5.3.3-1.el5_6.4.ia64 +47
Red Hat Enterprise Linux EUS (v. 5.9 server) php53-5.3.3-13.el5_9.2, php53-5.3.3-13.el5_9.2.i386, php53-5.3.3-13.el5_9.2.ia64 +47

Fixes 1 record

TI-2013-05374 CVE-2013-6420 · GHSA-m6pq-hhvx-694c

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x…

MEDIUM 59

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.35635 Published 2013-12-17 Partial fix CWE-119