Skip to content
OpenAdvisories
Unscored RHSA-2015:1187 18 CVEs

Red Hat Security Advisory: rh-php56-php security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 58

ReleasePackageFixed in
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-bcmath 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-cli 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-common 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-dba 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-dbg 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-debuginfo 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-devel 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-embedded 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-enchant 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-fpm 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-gd 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-gmp 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-imap 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-intl 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-ldap 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-mbstring 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-mysqlnd 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-odbc 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-opcache 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-pdo 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-pgsql 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-process 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-pspell 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-recode 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-snmp 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-soap 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-tidy 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-xml 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-xmlrpc 0:5.6.5-7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-bcmath 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-cli 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-common 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-dba 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-dbg 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-debuginfo 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-devel 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-embedded 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-enchant 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-fpm 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-gd 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-gmp 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-intl 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-ldap 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-mbstring 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-mysqlnd 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-odbc 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-opcache 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-pdo 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-pgsql 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-process 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-pspell 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-recode 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-snmp 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-soap 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-xml 0:5.6.5-7.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-xmlrpc 0:5.6.5-7.el7

Vulnerabilities 18

  • Unscored —
    CVE-2015-2783

    ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sen…

    php5 Ubuntu
  • Unscored —
    CVE-2015-3307

    The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 a…

  • Unscored —
    CVE-2015-3329 EPSS 38%

    Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x bef…

    php5 Ubuntu
  • Unscored —
    CVE-2015-3330 EPSS 13%

    The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x bef…

    php5 Ubuntu
  • Unscored —
    CVE-2015-3411

    PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which…

    php5 Ubuntu
  • Unscored —
    CVE-2015-3412

    PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4021 EPSS 20%

    The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 doe…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4022 EPSS 20%

    Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x befo…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4024 EPSS 42%

    Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4025 EPSS 17%

    PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character …

    php5 Ubuntu
  • Unscored —
    CVE-2015-4026 EPSS 19%

    The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname up…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4598

    PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, whic…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4602 EPSS 10%

    The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4603 EPSS 11%

    The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4604

    The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.…

  • Unscored —
    CVE-2015-4605

    The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5…

  • Unscored —
    CVE-2015-4643 EPSS 15%

    Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x befo…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4644

    The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before …

    php5 Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1213394
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1213407
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1213442
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1213446
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1213449
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1222485
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1223408
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1223412
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1223422
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1223425
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1223441
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1232823
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1232897
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1232918
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1232923
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1187.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-2783
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-2783
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-2783
  • report
    https://access.redhat.com/security/cve/CVE-2015-3307
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3307
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3307
  • report
    https://access.redhat.com/security/cve/CVE-2015-3329
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3329
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3329
  • report
    https://access.redhat.com/security/cve/CVE-2015-3330
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3330
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3330
  • report
    https://access.redhat.com/security/cve/CVE-2015-3411
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3411
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3411
  • report
    https://access.redhat.com/security/cve/CVE-2015-3412
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3412
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3412
  • report
    https://access.redhat.com/security/cve/CVE-2015-4021
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4021
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4021
  • report
    https://access.redhat.com/security/cve/CVE-2015-4022