Skip to content
OpenAdvisories
Unscored RHSA-2018:1296 37 CVEs

Red Hat Security Advisory: rh-php70-php security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 62

ReleasePackageFixed in
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-bcmath 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-cli 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-common 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-dba 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-dbg 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-debuginfo 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-devel 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-embedded 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-enchant 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-fpm 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-gd 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-gmp 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-imap 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-intl 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-json 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-ldap 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-mbstring 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-mysqlnd 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-odbc 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-opcache 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-pdo 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-pgsql 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-process 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-pspell 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-recode 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-snmp 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-soap 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-tidy 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-xml 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-xmlrpc 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-php70-php-zip 0:7.0.27-1.el6
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-bcmath 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-cli 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-common 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-dba 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-dbg 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-debuginfo 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-devel 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-embedded 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-enchant 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-fpm 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-gd 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-gmp 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-intl 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-json 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-ldap 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-mbstring 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-mysqlnd 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-odbc 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-opcache 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-pdo 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-pgsql 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-process 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-pspell 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-recode 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-snmp 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-soap 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-xml 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-xmlrpc 0:7.0.27-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php70-php-zip 0:7.0.27-1.el7

Vulnerabilities 37

  • Unscored —
    CVE-2016-10158

    The exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-10159

    Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 al…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-10160

    Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 al…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-10161 EPSS 13%

    The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x bef…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-10162

    The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote at…

    php7.0 Ubuntu
  • Unscored —
    CVE-2016-10167

    The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote atta…

    libgd2 libgd2 gd Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-10168

    Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspeci…

    libgd2 libgd2 gd Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-7412

    ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the …

    php5 php7.0 php Ubuntu Alpine
  • Unscored —
    CVE-2016-7413

    Use-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before …

    php5 php7.0 php Ubuntu Alpine
  • Unscored —
    CVE-2016-7414

    The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressed…

    php5 php7.0 php Ubuntu Alpine
  • Unscored —
    CVE-2016-7416

    ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale …

    php5 php7.0 php Ubuntu Alpine
  • Unscored —
    CVE-2016-7417

    ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validatin…

    php5 php7.0 php Ubuntu Alpine
  • Unscored —
    CVE-2016-7418 EPSS 11%

    The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attacker…

    php5 php7.0 php Ubuntu Alpine
  • Unscored —
    CVE-2016-7479 EPSS 42%

    In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized obje…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-9933

    Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) befo…

    libgd2 libgd2 Debian Ubuntu
  • Unscored —
    CVE-2016-9934

    ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL p…

    php5 Ubuntu
  • Unscored —
    CVE-2016-9935

    The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attacker…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-9936

    The unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote attackers to cause a denial…

    php7.0 Ubuntu
  • Unscored —
    CVE-2017-11143

    In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able…

    php5 Ubuntu
  • Unscored —
    CVE-2017-11144

    In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check t…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2017-11145

    In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian pars…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2017-11147

    In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious arc…

    php5 Ubuntu
  • Unscored —
    CVE-2017-11362

    In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale leng…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2017-11628

    In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zend_ini_do_op() …

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2017-12932

    ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free …

    php7.0 Ubuntu
  • Unscored —
    CVE-2017-12933

    The finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.…

    php5 Ubuntu
  • Unscored —
    CVE-2017-12934

    ext/standard/var_unserializer.re in PHP 7.0.x before 7.0.21 and 7.1.x before 7.1.7 is prone to a heap use after free wh…

  • Unscored —
    CVE-2017-16642 Public exploit EPSS 26%

    In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian han…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2017-5340 EPSS 17%

    Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocati…

    php7.0 Ubuntu
  • Unscored —
    CVE-2017-7890

    The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP…

    php7 libgd2 libgd2 gd Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-9224

    An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through …

    php5 php7.0 php7 php5 Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-9226

    An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through …

    php5 php7.0 php7 php5 Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-9227

    An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through …

    php5 php7.0 php7 php5 Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-9228

    An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through …

    php5 php7.0 php7 php5 Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-9229

    An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through …

    php5 php7.0 php7 php5 Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-5711 Public exploit EPSS 13%

    gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1…

    php7 libgd2 libgd2 gd Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-5712 EPSS 80%

    An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There i…

    php5 php7.0 php7 php5 Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.1_release_notes/chap-rhscl#sect-RHSCL-Changes-php
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1377311
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1377314
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1377336
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1377340
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1377344
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1377352
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404723
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404726
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404731
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404735
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1412631
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1412686
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1418984
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1418986
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1419010
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1419012
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1419015
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1419018
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1419020
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1466730
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1466736
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1466739
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1466740
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1466746
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1471824
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1471827
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1471834
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1471842
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1473822
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1475373
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1475522
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1484837
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1484838
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1484839
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1512057
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1535246
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1535251