Red Hat Security AdvisoryRHSA-2020:1112
php security update
Released 2020-03-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) php-5.4.16-48.el7, php-bcmath-5.4.16-48.el7, php-cli-5.4.16-48.el7 +22
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) php-5.4.16-48.el7, php-bcmath-5.4.16-48.el7, php-cli-5.4.16-48.el7 +22
- Red Hat Enterprise Linux Server (v. 7) php-5.4.16-48.el7, php-cli-5.4.16-48.el7, php-common-5.4.16-48.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) php-bcmath-5.4.16-48.el7, php-dba-5.4.16-48.el7, php-devel-5.4.16-48.el7 +8
- Red Hat Enterprise Linux Workstation (v. 7) php-5.4.16-48.el7, php-cli-5.4.16-48.el7, php-common-5.4.16-48.el7 +11
- Red Hat Enterprise Linux Workstation Optional (v. 7) php-bcmath-5.4.16-48.el7, php-dba-5.4.16-48.el7, php-devel-5.4.16-48.el7 +8
Fixes 4 records
Priority HIGH 84
In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standa…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.87348 · Published 2018-03-01 · Partial fix CWE-119
Priority HIGH 67
An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.79949 · Published 2018-01-16 · Partial fix CWE-79
Priority MEDIUM 43
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0712 · Published 2019-02-22 · Partial fix CWE-125
Priority LOW 33
An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.03435 · Published 2018-04-29 · Partial fix CWE-79
