Skip to content
OpenAdvisories
Unscored RHSA-2007:0155 7 CVEs

Red Hat Security Advisory: php security update

Published Sep 15, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 92

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as php 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::as php-debuginfo 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::as php-devel 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::as php-imap 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::as php-ldap 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::as php-mysql 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::as php-odbc 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::as php-pgsql 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::desktop php 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::desktop php-debuginfo 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::desktop php-devel 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::desktop php-imap 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::desktop php-ldap 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::desktop php-mysql 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::desktop php-odbc 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::desktop php-pgsql 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::es php 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::es php-debuginfo 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::es php-devel 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::es php-imap 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::es php-ldap 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::es php-mysql 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::es php-odbc 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::es php-pgsql 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::ws php 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::ws php-debuginfo 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::ws php-devel 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::ws php-imap 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::ws php-ldap 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::ws php-mysql 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::ws php-odbc 0:4.3.2-40.ent
Red Hat · RHEL 3 enterprise_linux:3::ws php-pgsql 0:4.3.2-40.ent
Red Hat · RHEL 4 enterprise_linux:4::as php 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::as php-debuginfo 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::as php-devel 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::as php-domxml 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::as php-gd 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::as php-imap 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::as php-ldap 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::as php-mbstring 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::as php-mysql 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::as php-ncurses 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::as php-odbc 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::as php-pear 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::as php-pgsql 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::as php-snmp 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::as php-xmlrpc 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::desktop php 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::desktop php-debuginfo 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::desktop php-devel 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::desktop php-domxml 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::desktop php-gd 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::desktop php-imap 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::desktop php-ldap 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::desktop php-mbstring 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::desktop php-mysql 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::desktop php-ncurses 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::desktop php-odbc 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::desktop php-pear 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::desktop php-pgsql 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::desktop php-snmp 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::desktop php-xmlrpc 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::es php 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::es php-debuginfo 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::es php-devel 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::es php-domxml 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::es php-gd 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::es php-imap 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::es php-ldap 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::es php-mbstring 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::es php-mysql 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::es php-ncurses 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::es php-odbc 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::es php-pear 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::es php-pgsql 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::es php-snmp 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::es php-xmlrpc 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::ws php 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::ws php-debuginfo 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::ws php-devel 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::ws php-domxml 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::ws php-gd 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::ws php-imap 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::ws php-ldap 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::ws php-mbstring 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::ws php-mysql 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::ws php-ncurses 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::ws php-odbc 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::ws php-pear 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::ws php-pgsql 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::ws php-snmp 0:4.3.9-3.22.4
Red Hat · RHEL 4 enterprise_linux:4::ws php-xmlrpc 0:4.3.9-3.22.4

Vulnerabilities 7

  • Unscored —
    CVE-2007-0455 EPSS 12%

    Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote att…

    libgd2 Debian
  • Unscored —
    CVE-2007-1001 Public exploit

    Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP …

    libgd2 Debian
  • Unscored —
    CVE-2007-1285 Public exploit EPSS 19%

    The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (st…

  • Unscored —
    CVE-2007-1286 Public exploit EPSS 41%

    Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a lon…

  • Unscored —
    CVE-2007-1583 Public exploit

    The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag an…

  • Unscored —
    CVE-2007-1711 Public exploit

    Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbi…

  • Unscored —
    CVE-2007-1718 Public exploit

    CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote atta…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=230556
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=235028
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0155.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-0455
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=224607
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0455
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0455
  • report
    https://access.redhat.com/security/cve/CVE-2007-1001
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618291
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1001
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1001
  • report
    https://access.redhat.com/security/cve/CVE-2007-1285
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618296
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1285
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1285
  • report
    https://access.redhat.com/security/cve/CVE-2007-1286
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618297
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1286
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1286
  • report
    https://access.redhat.com/security/cve/CVE-2007-1583
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618303
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1583
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1583
  • report
    https://access.redhat.com/security/cve/CVE-2007-1711
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618304
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1711
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1711
  • report
    https://access.redhat.com/security/cve/CVE-2007-1718
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618306
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1718
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1718