Skip to content
OpenAdvisories
Unscored RHSA-2016:0457 12 CVEs

Red Hat Security Advisory: rh-php56-php security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Fixed packages 58

ReleasePackageFixed in
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-bcmath 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-cli 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-common 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-dba 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-dbg 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-debuginfo 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-devel 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-embedded 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-enchant 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-fpm 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-gd 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-gmp 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-imap 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-intl 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-ldap 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-mbstring 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-mysqlnd 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-odbc 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-opcache 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-pdo 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-pgsql 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-process 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-pspell 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-recode 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-snmp 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-soap 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-tidy 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-xml 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 rh-php56-php-xmlrpc 0:5.6.5-8.el6
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-bcmath 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-cli 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-common 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-dba 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-dbg 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-debuginfo 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-devel 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-embedded 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-enchant 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-fpm 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-gd 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-gmp 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-intl 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-ldap 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-mbstring 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-mysqlnd 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-odbc 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-opcache 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-pdo 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-pgsql 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-process 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-pspell 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-recode 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-snmp 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-soap 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-xml 0:5.6.5-8.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 rh-php56-php-xmlrpc 0:5.6.5-8.el7

Vulnerabilities 12

  • Unscored —

    The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x befor…

  • Unscored —

    Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5…

  • Unscored —

    Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow…

  • Unscored —

    Use-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP before 5.4.44, 5.5.x b…

  • Unscored —

    Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6…

  • Unscored —
    CVE-2015-6834 Public exploit EPSS 47%

    Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote…

  • Unscored —
    CVE-2015-6835 Public exploit EPSS 36%

    The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var…

  • Unscored —
    CVE-2015-6836 EPSS 10%

    The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does…

  • Unscored —

    The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x befor…

  • Unscored —

    The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x befor…

  • Unscored —
    CVE-2015-7803 EPSS 10%

    The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attacker…

  • Unscored —

    Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allo…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1245236
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1245242
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1256290
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1256322
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1260642
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1260647
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1260683
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1260711
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1271081
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1271088
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1283702
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0457.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5589
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5589
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5589
  • report
    https://access.redhat.com/security/cve/CVE-2015-5590
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5590
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5590
  • report
    https://access.redhat.com/security/cve/CVE-2015-6831
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-6831
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-6831
  • report
    https://access.redhat.com/security/cve/CVE-2015-6832
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-6832
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-6832
  • report
    https://access.redhat.com/security/cve/CVE-2015-6833
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-6833
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-6833
  • report
    https://access.redhat.com/security/cve/CVE-2015-6834
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-6834
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-6834
  • report
    https://access.redhat.com/security/cve/CVE-2015-6835
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-6835
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-6835
  • report
    https://access.redhat.com/security/cve/CVE-2015-6836
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-6836
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-6836
  • report
    https://access.redhat.com/security/cve/CVE-2015-6837
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-6837