Skip to content
OpenAdvisories
Unscored RHSA-2015:0021 2 CVEs

Red Hat Security Advisory: php security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Fixed packages 56

ReleasePackageFixed in
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-bcmath 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-cli 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-common 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-dba 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-debuginfo 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-devel 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-embedded 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-enchant 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-fpm 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-gd 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-imap 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-intl 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-ldap 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-mbstring 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-mysql 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-odbc 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-pdo 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-pgsql 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-process 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-pspell 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-recode 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-snmp 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-soap 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-tidy 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-xml 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-xmlrpc 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::computenode php-zts 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-bcmath 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-cli 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-common 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-dba 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-debuginfo 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-devel 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-embedded 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-enchant 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-fpm 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-gd 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-imap 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-intl 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-ldap 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-mbstring 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-mysql 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-odbc 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-pdo 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-pgsql 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-process 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-pspell 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-recode 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-snmp 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-soap 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-tidy 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-xml 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-xmlrpc 0:5.3.3-27.el6_5.3
Red Hat · RHEL 6.5 EUS rhel_eus:6.5::server php-zts 0:5.3.3-27.el6_5.3

Vulnerabilities 2

  • Unscored —
    CVE-2014-3669 EPSS 29%

    Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.…

  • Unscored —
    CVE-2014-3670 EPSS 23%

    The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x b…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1154500
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1154502
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0021.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3669
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3669
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3669
  • report
    https://access.redhat.com/security/cve/CVE-2014-3670
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3670
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3670