Red Hat Security AdvisoryRHSA-2014:0311
php security update
Released 2014-03-18 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) php-5.1.6-44.el5_10, php-5.1.6-44.el5_10.i386, php-5.1.6-44.el5_10.ia64 +47
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) php-5.1.6-44.el5_10, php-5.1.6-44.el5_10.i386, php-bcmath-5.1.6-44.el5_10 +35
Fixes 2 records
Priority MEDIUM 53
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.29381 · Published 2009-07-01 · Partial fix CWE-119
Priority LOW 31
PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05363 · Published 2011-01-18 · Partial fix CWE-20
