Summary
[5.4.16-48]
- fix underflow in env_path_info in fpm_main.c CVE-2019-11043
[5.4.16-47]
- fix stack-buffer-overflow while parsing HTTP response CVE-2018-7584
- fix out-of-bounds read in base64_decode_xmlrpc CVE-2019-9024
- fix reflected XSS in phar 404 page CVE-2018-5712
- fix reflected XSS in phar 403 and 404 error pages CVE-2018-10547
Fixed packages 25
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | php | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-bcmath | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-cli | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-common | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-dba | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-devel | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-embedded | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-enchant | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-fpm | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-gd | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-intl | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-ldap | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-mbstring | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-mysql | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-mysqlnd | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-odbc | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-pdo | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-pgsql | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-process | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-pspell | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-recode | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-snmp | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-soap | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-xml | 0:5.4.16-48.el7 |
| Oracle Linux · 7 | php-xmlrpc | 0:5.4.16-48.el7 |
Vulnerabilities 4
-
Unscored —
An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7…
-
Unscored —CVE-2018-5712 EPSS 80%
An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There i…
-
Unscored —
In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffe…
-
Unscored —
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_de…