Skip to content
OpenAdvisories
Unscored RHSA-2009:0350 8 CVEs

Red Hat Security Advisory: php security update

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-bcmath 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-cli 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-common 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-dba 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-debuginfo 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-devel 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-gd 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-imap 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-ldap 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-mbstring 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-mysql 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-ncurses 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-odbc 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-pdo 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-pgsql 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-snmp 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-soap 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-xml 0:5.2.6-4.el5s2
Red Hat · Rhel Application Stack 2 rhel_application_stack:2 php-xmlrpc 0:5.2.6-4.el5s2

Vulnerabilities 8

  • Unscored —
    CVE-2008-3658

    Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allo…

  • Unscored —
    CVE-2008-3660

    PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial…

  • Unscored —
    CVE-2008-5498 Public exploit

    Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the c…

  • Unscored —
    CVE-2008-5557

    Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 th…

  • Unscored —
    CVE-2008-5658

    Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-depende…

  • Unscored —
    CVE-2008-5814

    Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows rem…

  • Unscored —
    CVE-2009-0754 Public exploit

    PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites host…

  • Unscored —
    CVE-2009-1271

    The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial o…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=459529
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=459572
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474824
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=478425
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=478848
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=479272
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=480167
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=494530
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0350.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-3658
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3658
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3658
  • report
    https://access.redhat.com/security/cve/CVE-2008-3660
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3660
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3660
  • report
    https://access.redhat.com/security/cve/CVE-2008-5498
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5498
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5498
  • report
    https://access.redhat.com/security/cve/CVE-2008-5557
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5557
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5557
  • report
    https://access.redhat.com/security/cve/CVE-2008-5658
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5658
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5658
  • report
    https://access.redhat.com/security/cve/CVE-2008-5814
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5814
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5814
  • report
    https://access.redhat.com/security/cve/CVE-2009-0754
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0754
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0754
  • report
    https://access.redhat.com/security/cve/CVE-2009-1271
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1271
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1271