Skip to content
OpenAdvisories
Unscored RHSA-2011:1423 9 CVEs

Red Hat Security Advisory: php53 and php security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 71

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-bcmath 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-cli 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-common 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-dba 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-debuginfo 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-devel 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-gd 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-imap 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-intl 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-ldap 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-mbstring 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-mysql 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-odbc 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-pdo 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-pgsql 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-process 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-pspell 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-snmp 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-soap 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-xml 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-xmlrpc 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-bcmath 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-cli 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-common 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-dba 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-debuginfo 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-devel 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-gd 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-imap 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-intl 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-ldap 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-mbstring 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-mysql 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-odbc 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-pdo 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-pgsql 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-process 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-pspell 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-snmp 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-soap 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-xml 0:5.3.3-1.el5_7.3
Red Hat · RHEL 5 enterprise_linux:5::server php53-xmlrpc 0:5.3.3-1.el5_7.3
Red Hat · RHEL 6 enterprise_linux:6::server php 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-bcmath 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-cli 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-common 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-dba 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-debuginfo 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-devel 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-embedded 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-enchant 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-gd 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-imap 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-intl 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-ldap 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-mbstring 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-mysql 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-odbc 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-pdo 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-pgsql 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-process 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-pspell 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-recode 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-snmp 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-soap 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-tidy 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-xml 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-xmlrpc 0:5.3.3-3.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server php-zts 0:5.3.3-3.el6_1.3

Vulnerabilities 9

  • Unscored —
    CVE-2011-0708 Public exploit

    exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote at…

  • Unscored —
    CVE-2011-1148

    Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers…

  • Unscored —
    CVE-2011-1466

    Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent att…

  • Unscored —
    CVE-2011-1468 Public exploit EPSS 13%

    Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of se…

  • Unscored —
    CVE-2011-1469

    Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a de…

  • Unscored —
    CVE-2011-1471 Public exploit EPSS 13%

    Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to…

  • Unscored —
    CVE-2011-1938 Public exploit EPSS 23%

    Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might al…

  • Unscored —
    CVE-2011-2202 Public exploit EPSS 20%

    The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipa…

  • Unscored —
    CVE-2011-2483

    crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other product…

    libxcrypt Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://www.php.net/security/crypt_blowfish.php
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=680972
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=688958
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=689386
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=690899
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=690905
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=690915
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=709067
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=713194
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=715025
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1423.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-0708
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0708
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0708
  • report
    https://access.redhat.com/security/cve/CVE-2011-1148
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1148
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1148
  • report
    https://access.redhat.com/security/cve/CVE-2011-1466
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1466
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1466
  • report
    https://access.redhat.com/security/cve/CVE-2011-1468
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1468
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1468
  • report
    https://access.redhat.com/security/cve/CVE-2011-1469
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1469
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1469
  • report
    https://access.redhat.com/security/cve/CVE-2011-1471
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1471
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1471
  • report
    https://access.redhat.com/security/cve/CVE-2011-1938
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1938
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1938
  • report
    https://access.redhat.com/security/cve/CVE-2011-2202
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2202
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2202
  • report
    https://access.redhat.com/security/cve/CVE-2011-2483
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2483
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2483