Red Hat Security AdvisoryRHSA-2013:1826
php security update
Released 2013-12-12 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (v. 3 ELS) php-4.3.2-57.ent, php-4.3.2-57.ent.i386, php-devel-4.3.2-57.ent.i386 +5
- Red Hat Enterprise Linux AS (v. 4 ELS) php-4.3.9-3.37.el4.1, php-4.3.9-3.37.el4.1.i386, php-4.3.9-3.37.el4.1.ia64 +39
- Red Hat Enterprise Linux ES (v. 3 ELS) php-4.3.2-57.ent, php-4.3.2-57.ent.i386, php-devel-4.3.2-57.ent.i386 +5
- Red Hat Enterprise Linux ES (v. 4 ELS) php-4.3.9-3.37.el4.1, php-4.3.9-3.37.el4.1.i386, php-devel-4.3.9-3.37.el4.1 +25
Fixes 1 record
Priority MEDIUM 59
The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.35635 · Published 2013-12-17 · Partial fix CWE-119
