Skip to content
OpenAdvisories
High 1 exploited CVE RHSA-2020:2835 1 CVE

Red Hat Security Advisory: php security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 52

ReleasePackageFixed in
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-bcmath 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-cli 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-common 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-dba 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-debuginfo 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-devel 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-embedded 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-enchant 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-fpm 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-gd 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-intl 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-ldap 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-mbstring 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-mysql 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-mysqlnd 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-odbc 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-pdo 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-pgsql 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-process 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-pspell 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-recode 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-snmp 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-soap 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-xml 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode php-xmlrpc 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-bcmath 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-cli 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-common 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-dba 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-debuginfo 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-devel 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-embedded 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-enchant 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-fpm 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-gd 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-intl 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-ldap 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-mbstring 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-mysql 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-mysqlnd 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-odbc 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-pdo 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-pgsql 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-process 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-pspell 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-recode 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-snmp 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-soap 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-xml 0:5.4.16-46.1.el7_6
Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server php-xmlrpc 0:5.4.16-46.1.el7_6

Vulnerabilities 1

  • High 8.7
    CVE-2019-11043 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Underflow in PHP-FPM can lead to RCE

    In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibilit…

    PHP Group PHP php5 php7.0 Ubuntu Alpine
    KEV Mar 25, 2022

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1766378
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2835.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-11043
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11043
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11043
  • article
    https://www.nginx.com/blog/php-fpm-cve-2019-11043-vulnerability-nginx/
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog