Skip to content
OpenAdvisories
Unscored RHSA-2015:1219 8 CVEs

Red Hat Security Advisory: php54-php security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 50

ReleasePackageFixed in
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-bcmath 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-cli 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-common 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-dba 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-debuginfo 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-devel 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-enchant 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-fpm 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-gd 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-imap 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-intl 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-ldap 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-mbstring 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-mysqlnd 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-odbc 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-pdo 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-pgsql 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-process 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-pspell 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-recode 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-snmp 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-soap 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-tidy 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-xml 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 php54-php-xmlrpc 0:5.4.40-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-bcmath 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-cli 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-common 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-dba 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-debuginfo 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-devel 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-enchant 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-fpm 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-gd 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-intl 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-ldap 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-mbstring 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-mysqlnd 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-odbc 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-pdo 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-pgsql 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-process 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-pspell 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-recode 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-snmp 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-soap 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-xml 0:5.4.40-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 php54-php-xmlrpc 0:5.4.40-3.el7

Vulnerabilities 8

  • Unscored —
    CVE-2015-4021 EPSS 20%

    The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 doe…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4022 EPSS 20%

    Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x befo…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4024 EPSS 42%

    Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4025 EPSS 17%

    PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character …

    php5 Ubuntu
  • Unscored —
    CVE-2015-4026 EPSS 19%

    The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname up…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4598

    PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, whic…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4643 EPSS 15%

    Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x befo…

    php5 Ubuntu
  • Unscored —
    CVE-2015-4644

    The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before …

    php5 Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1222485
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1223408
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1223412
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1223422
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1223425
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1232897
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1219.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-4021
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4021
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4021
  • report
    https://access.redhat.com/security/cve/CVE-2015-4022
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4022
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4022
  • report
    https://access.redhat.com/security/cve/CVE-2015-4024
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4024
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4024
  • report
    https://access.redhat.com/security/cve/CVE-2015-4025
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4025
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4025
  • report
    https://access.redhat.com/security/cve/CVE-2015-4026
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4026
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4026
  • report
    https://access.redhat.com/security/cve/CVE-2015-4598
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4598
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4598
  • report
    https://access.redhat.com/security/cve/CVE-2015-4643
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1234938
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4643
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4643
  • report
    https://access.redhat.com/security/cve/CVE-2015-4644
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1234940
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4644
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4644