Red Hat Security Advisory

RHSA-2020:2835

php security update

Released 2020-07-07 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) php-5.4.16-46.1.el7_6, php-bcmath-5.4.16-46.1.el7_6, php-cli-5.4.16-46.1.el7_6 +22
Red Hat Enterprise Linux Server EUS (v. 7.6) php-5.4.16-46.1.el7_6, php-cli-5.4.16-46.1.el7_6, php-common-5.4.16-46.1.el7_6 +11
Red Hat Enterprise Linux Server Optional EUS (v. 7.6) php-bcmath-5.4.16-46.1.el7_6, php-dba-5.4.16-46.1.el7_6, php-devel-5.4.16-46.1.el7_6 +8
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) php-5.4.16-46.1.el7_6, php-cli-5.4.16-46.1.el7_6, php-common-5.4.16-46.1.el7_6 +11
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) php-bcmath-5.4.16-46.1.el7_6, php-dba-5.4.16-46.1.el7_6, php-devel-5.4.16-46.1.el7_6 +8

Fixes 1 record

TI-2019-08259 CVE-2019-11043 · GHSA-6qjm-m8fp-j2mm

Underflow in PHP-FPM can lead to RCE

CRITICAL 100KEV

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI pro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99783 Published 2019-10-28 Fixed in 7.1.33, 7.2.24 +1 CWE-120