Red Hat Security Advisory

RHSA-2019:3300

rh-php71-php security update

Released 2019-11-01 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-php71-php-7.1.30-2.el7, rh-php71-php-bcmath-7.1.30-2.el7, rh-php71-php-cli-7.1.30-2.el7 +26
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-php71-php-7.1.30-2.el7, rh-php71-php-bcmath-7.1.30-2.el7, rh-php71-php-cli-7.1.30-2.el7 +26
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-php71-php-7.1.30-2.el7, rh-php71-php-bcmath-7.1.30-2.el7, rh-php71-php-cli-7.1.30-2.el7 +26
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-php71-php-7.1.30-2.el7, rh-php71-php-bcmath-7.1.30-2.el7, rh-php71-php-cli-7.1.30-2.el7 +26
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-php71-php-7.1.30-2.el7, rh-php71-php-bcmath-7.1.30-2.el7, rh-php71-php-cli-7.1.30-2.el7 +26

Fixes 1 record

TI-2019-08259 CVE-2019-11043 · GHSA-6qjm-m8fp-j2mm

Underflow in PHP-FPM can lead to RCE

CRITICAL 100KEV

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI pro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99783 Published 2019-10-28 Fixed in 7.1.33, 7.2.24 +1 CWE-120