Red Hat Security AdvisoryRHSA-2016:1609
php security update
Released 2016-08-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) php-5.3.3-48.el6_8, php-bcmath-5.3.3-48.el6_8, php-cli-5.3.3-48.el6_8 +24
- Red Hat Enterprise Linux HPC Node (v. 6) php-5.3.3-48.el6_8, php-cli-5.3.3-48.el6_8, php-common-5.3.3-48.el6_8
- Red Hat Enterprise Linux HPC Node Optional (v. 6) php-5.3.3-48.el6_8, php-bcmath-5.3.3-48.el6_8, php-dba-5.3.3-48.el6_8 +22
- Red Hat Enterprise Linux Server (v. 6) php-5.3.3-48.el6_8, php-cli-5.3.3-48.el6_8, php-common-5.3.3-48.el6_8 +9
- Red Hat Enterprise Linux Server Optional (v. 6) php-bcmath-5.3.3-48.el6_8, php-dba-5.3.3-48.el6_8, php-devel-5.3.3-48.el6_8 +12
- Red Hat Enterprise Linux Workstation (v. 6) php-5.3.3-48.el6_8, php-cli-5.3.3-48.el6_8, php-common-5.3.3-48.el6_8 +9
- Red Hat Enterprise Linux Workstation Optional (v. 6) php-bcmath-5.3.3-48.el6_8, php-dba-5.3.3-48.el6_8, php-devel-5.3.3-48.el6_8 +12
Fixes 1 record
Priority HIGH 66
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, whi…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.50427 · Published 2016-07-19 · Partial fix CWE-601
