Skip to content
OpenAdvisories
Medium RHSA-2014:1766 21 CVEs

Red Hat Security Advisory: php55-php security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 54

ReleasePackageFixed in
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-bcmath 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-cli 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-common 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-dba 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-debuginfo 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-devel 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-enchant 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-fpm 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-gd 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-gmp 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-imap 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-intl 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-ldap 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-mbstring 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-mysqlnd 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-odbc 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-opcache 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-pdo 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-pgsql 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-process 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-pspell 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-recode 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-snmp 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-soap 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-tidy 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-xml 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 php55-php-xmlrpc 0:5.5.6-13.el6
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-bcmath 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-cli 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-common 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-dba 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-debuginfo 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-devel 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-enchant 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-fpm 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-gd 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-gmp 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-intl 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-ldap 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-mbstring 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-mysqlnd 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-odbc 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-opcache 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-pdo 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-pgsql 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-process 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-pspell 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-recode 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-snmp 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-soap 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-xml 0:5.5.6-13.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7 php55-php-xmlrpc 0:5.5.6-13.el7

Vulnerabilities 21

  • Medium 6.5
    CVE-2014-0207 EPSS 17%

    The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30…

    php5 file file Debian Ubuntu
  • Medium 6.5
    CVE-2014-3478 EPSS 15%

    Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP b…

    php5 file file Debian Ubuntu
  • Medium 6.5
    CVE-2014-3480 EPSS 11%

    The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-0237 EPSS 20%

    The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 al…

    php5 file Debian Ubuntu
  • Unscored —
    CVE-2014-0238 EPSS 21%

    The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 all…

    php5 file Debian Ubuntu
  • Unscored —
    CVE-2014-2497 EPSS 20%

    The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to ca…

    libgd2 libgd2 Debian Ubuntu
  • Unscored —
    CVE-2014-3479 EPSS 15%

    The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-3487 EPSS 15%

    The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-3515 EPSS 30%

    The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures wil…

    php5 Ubuntu
  • Unscored —
    CVE-2014-3538 EPSS 12%

    file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attacker…

    file file Debian Ubuntu
  • Unscored —
    CVE-2014-3587 EPSS 20%

    Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo componen…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-3597 EPSS 15%

    Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.1…

    php5 Ubuntu
  • Unscored —
    CVE-2014-3668 EPSS 27%

    Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC ex…

    php5 Ubuntu
  • Unscored —
    CVE-2014-3669 EPSS 29%

    Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.…

    php5 Ubuntu
  • Unscored —
    CVE-2014-3670 EPSS 23%

    The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x b…

    php5 Ubuntu
  • Unscored —
    CVE-2014-3710 EPSS 14%

    The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure…

    php5 file file Debian Ubuntu
  • Unscored —
    CVE-2014-4049 EPSS 11%

    Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remot…

    php5 Ubuntu
  • Unscored —
    CVE-2014-4670

    Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependen…

    php5 Ubuntu
  • Unscored —
    CVE-2014-4698

    Use-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14 allows context-dependent…

    php5 Ubuntu
  • Unscored —
    CVE-2014-4721

    The phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14 does not ensure use of t…

    php5 Ubuntu
  • Unscored —
    CVE-2014-5120 EPSS 17%

    gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1076676
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1091842
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1098155
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1098193
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1098222
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1104858
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1104863
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1104869
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1107544
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1108447
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1112154
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1116662
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1120259
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1120266
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1128587
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1132589
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1132793
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1154500
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1154502
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1154503
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1155071
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1766.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0207
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0207
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0207
  • report
    https://access.redhat.com/security/cve/CVE-2014-0237
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0237
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0237
  • report
    https://access.redhat.com/security/cve/CVE-2014-0238
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0238
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0238
  • report
    https://access.redhat.com/security/cve/CVE-2014-2497
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-2497
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-2497
  • report
    https://access.redhat.com/security/cve/CVE-2014-3478
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3478
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3478
  • report
    https://access.redhat.com/security/cve/CVE-2014-3479