Skip to content
OpenAdvisories
Unscored RHSA-2012:0071 5 CVEs

Red Hat Security Advisory: php security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 60

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as php 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::as php-debuginfo 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::as php-devel 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::as php-domxml 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::as php-gd 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::as php-imap 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::as php-ldap 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::as php-mbstring 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::as php-mysql 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::as php-ncurses 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::as php-odbc 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::as php-pear 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::as php-pgsql 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::as php-snmp 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::as php-xmlrpc 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::desktop php 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::desktop php-debuginfo 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::desktop php-devel 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::desktop php-domxml 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::desktop php-gd 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::desktop php-imap 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::desktop php-ldap 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::desktop php-mbstring 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::desktop php-mysql 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::desktop php-ncurses 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::desktop php-odbc 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::desktop php-pear 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::desktop php-pgsql 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::desktop php-snmp 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::desktop php-xmlrpc 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::es php 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::es php-debuginfo 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::es php-devel 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::es php-domxml 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::es php-gd 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::es php-imap 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::es php-ldap 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::es php-mbstring 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::es php-mysql 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::es php-ncurses 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::es php-odbc 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::es php-pear 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::es php-pgsql 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::es php-snmp 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::es php-xmlrpc 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::ws php 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::ws php-debuginfo 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::ws php-devel 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::ws php-domxml 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::ws php-gd 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::ws php-imap 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::ws php-ldap 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::ws php-mbstring 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::ws php-mysql 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::ws php-ncurses 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::ws php-odbc 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::ws php-pear 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::ws php-pgsql 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::ws php-snmp 0:4.3.9-3.35
Red Hat · RHEL 4 enterprise_linux:4::ws php-xmlrpc 0:4.3.9-3.35

Vulnerabilities 5

  • Unscored —
    CVE-2011-0708 Public exploit

    exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote at…

  • Unscored —
    CVE-2011-1466

    Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent att…

  • Unscored —
    CVE-2011-2202 Public exploit EPSS 20%

    The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipa…

  • Unscored —
    CVE-2011-4566

    Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platf…

  • Unscored —
    CVE-2011-4885 Public exploit EPSS 83%

    PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions pr…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=680972
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=689386
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=713194
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=750547
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=758413
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0071.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-0708
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0708
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0708
  • report
    https://access.redhat.com/security/cve/CVE-2011-1466
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1466
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1466
  • report
    https://access.redhat.com/security/cve/CVE-2011-2202
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2202
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2202
  • report
    https://access.redhat.com/security/cve/CVE-2011-4566
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-4566
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-4566
  • report
    https://access.redhat.com/security/cve/CVE-2011-4885
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-4885
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-4885