Skip to content
OpenAdvisories
Unscored RHSA-2012:0033 7 CVEs

Red Hat Security Advisory: php security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 40

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-bcmath 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-cli 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-common 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-dba 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-debuginfo 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-devel 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-gd 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-imap 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-ldap 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-mbstring 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-mysql 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-ncurses 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-odbc 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-pdo 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-pgsql 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-snmp 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-soap 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-xml 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php-xmlrpc 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-bcmath 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-cli 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-common 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-dba 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-debuginfo 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-devel 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-gd 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-imap 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-ldap 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-mbstring 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-mysql 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-ncurses 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-odbc 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-pdo 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-pgsql 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-snmp 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-soap 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-xml 0:5.1.6-27.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server php-xmlrpc 0:5.1.6-27.el5_7.4

Vulnerabilities 7

  • Unscored —
    CVE-2011-0708 Public exploit

    exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote at…

  • Unscored —
    CVE-2011-1148

    Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers…

  • Unscored —
    CVE-2011-1466

    Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent att…

  • Unscored —
    CVE-2011-1469

    Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a de…

  • Unscored —
    CVE-2011-2202 Public exploit EPSS 20%

    The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipa…

  • Unscored —
    CVE-2011-4566

    Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platf…

  • Unscored —
    CVE-2011-4885 Public exploit EPSS 83%

    PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions pr…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=680972
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=688958
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=689386
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=690905
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=713194
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=750547
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=758413
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0033.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-0708
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0708
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0708
  • report
    https://access.redhat.com/security/cve/CVE-2011-1148
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1148
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1148
  • report
    https://access.redhat.com/security/cve/CVE-2011-1466
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1466
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1466
  • report
    https://access.redhat.com/security/cve/CVE-2011-1469
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1469
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1469
  • report
    https://access.redhat.com/security/cve/CVE-2011-2202
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2202
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2202
  • report
    https://access.redhat.com/security/cve/CVE-2011-4566
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-4566
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-4566
  • report
    https://access.redhat.com/security/cve/CVE-2011-4885
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-4885
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-4885