Skip to content
OpenAdvisories
Unscored RHSA-2015:1218 25 CVEs

Red Hat Security Advisory: php security update

Published Sep 15, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 112

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client php 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-bcmath 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-cli 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-common 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-dba 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-debuginfo 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-devel 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-embedded 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-enchant 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-fpm 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-gd 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-imap 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-intl 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-ldap 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-mbstring 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-mysql 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-odbc 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-pdo 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-pgsql 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-process 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-pspell 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-recode 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-snmp 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-soap 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-tidy 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-xml 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-xmlrpc 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client php-zts 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-bcmath 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-cli 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-common 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-dba 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-debuginfo 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-devel 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-embedded 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-enchant 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-fpm 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-gd 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-imap 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-intl 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-ldap 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-mbstring 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-mysql 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-odbc 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-pdo 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-pgsql 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-process 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-pspell 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-recode 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-snmp 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-soap 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-tidy 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-xml 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-xmlrpc 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::computenode php-zts 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-bcmath 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-cli 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-common 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-dba 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-debuginfo 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-devel 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-embedded 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-enchant 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-fpm 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-gd 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-imap 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-intl 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-ldap 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-mbstring 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-mysql 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-odbc 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-pdo 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-pgsql 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-process 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-pspell 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-recode 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-snmp 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-soap 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-tidy 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-xml 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-xmlrpc 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server php-zts 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-bcmath 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-cli 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-common 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-dba 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-debuginfo 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-devel 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-embedded 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-enchant 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-fpm 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-gd 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-imap 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-intl 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-ldap 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-mbstring 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-mysql 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-odbc 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-pdo 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-pgsql 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-process 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-pspell 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-recode 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-snmp 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-soap 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-tidy 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-xml 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-xmlrpc 0:5.3.3-46.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation php-zts 0:5.3.3-46.el6_6

Vulnerabilities 25

  • Unscored —
    CVE-2014-9425

    Double free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the Zend Engine in PHP thr…

  • Unscored —
    CVE-2014-9705 EPSS 19%

    Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5…

    php5 Ubuntu
  • Unscored —
    CVE-2014-9709 EPSS 15%

    The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allo…

    libgd2 libgd2 Debian Ubuntu
  • Unscored —
    CVE-2015-0232 EPSS 16%

    The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 …

    php5 Ubuntu
  • Unscored —
    CVE-2015-0273 Public exploit EPSS 43%

    Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x bef…

    php5 Ubuntu
  • Unscored —
    CVE-2015-2301 EPSS 15%

    Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before…

    php5 Ubuntu
  • Unscored —
    CVE-2015-2783

    ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sen…

    php5 Ubuntu
  • Unscored —
    CVE-2015-2787 EPSS 12%

    Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.…

    php5 Ubuntu
  • Unscored —
    CVE-2015-3307

    The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 a…

  • Unscored —
    CVE-2015-3329 EPSS 38%

    Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x bef…

    php5 Ubuntu
  • Unscored —
    CVE-2015-3411

    PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which…

    php5 Ubuntu
  • Unscored —
    CVE-2015-3412

    PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4021 EPSS 20%

    The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 doe…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4022 EPSS 20%

    Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x befo…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4024 EPSS 42%

    Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4026 EPSS 19%

    The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname up…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4147 EPSS 12%

    The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4148 Public exploit EPSS 20%

    The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4598

    PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, whic…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4599 EPSS 10%

    The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 a…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4600 EPSS 10%

    The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4601

    PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbi…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4602 EPSS 10%

    The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4603 EPSS 11%

    The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4643 EPSS 15%

    Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x befo…

    php5 Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1177734
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1185472
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1188639
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1194730
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1194737
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1194747
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1204868
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1207676
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1213407
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1213446
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1213449
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1222485
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1222538
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1223412
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1223422
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1223425
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1223441
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1226916
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1232823
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1232897
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1232918
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1232923
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1218.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-9425
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-9425
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-9425
  • report
    https://access.redhat.com/security/cve/CVE-2014-9705
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-9705
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-9705
  • report
    https://access.redhat.com/security/cve/CVE-2014-9709
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-9709
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-9709
  • report
    https://access.redhat.com/security/cve/CVE-2015-0232
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0232
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0232
  • report
    https://access.redhat.com/security/cve/CVE-2015-0273
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0273
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0273