Skip to content
OpenAdvisories
High RHSA-2020:3662 22 CVEs

Red Hat Security Advisory: php:7.3 security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Aug 18, 2026

Ecosystem: Red Hat

Fixed packages 75

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream apcu-panel 0:5.1.17-1.module+el8.1.0+3189+a1bff096
Red Hat · RHEL 8 enterprise_linux:8::appstream libzip 0:1.5.2-1.module+el8.1.0+3189+a1bff096
Red Hat · RHEL 8 enterprise_linux:8::appstream libzip-debuginfo 0:1.5.2-1.module+el8.1.0+3189+a1bff096
Red Hat · RHEL 8 enterprise_linux:8::appstream libzip-debugsource 0:1.5.2-1.module+el8.1.0+3189+a1bff096
Red Hat · RHEL 8 enterprise_linux:8::appstream libzip-devel 0:1.5.2-1.module+el8.1.0+3189+a1bff096
Red Hat · RHEL 8 enterprise_linux:8::appstream libzip-tools 0:1.5.2-1.module+el8.1.0+3189+a1bff096
Red Hat · RHEL 8 enterprise_linux:8::appstream libzip-tools-debuginfo 0:1.5.2-1.module+el8.1.0+3189+a1bff096
Red Hat · RHEL 8 enterprise_linux:8::appstream php 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-bcmath 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-bcmath-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-cli 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-cli-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-common 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-common-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-dba 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-dba-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-dbg 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-dbg-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-debugsource 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-devel 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-embedded 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-embedded-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-enchant 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-enchant-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-fpm 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-fpm-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-gd 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-gd-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-gmp 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-gmp-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-intl 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-intl-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-json 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-json-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-ldap 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-ldap-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-mbstring 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-mbstring-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-mysqlnd 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-mysqlnd-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-odbc 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-odbc-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-opcache 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-opcache-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pdo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pdo-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pear 1:1.10.9-1.module+el8.1.0+3189+a1bff096
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pecl-apcu 0:5.1.17-1.module+el8.1.0+3189+a1bff096
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pecl-apcu-debuginfo 0:5.1.17-1.module+el8.1.0+3189+a1bff096
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pecl-apcu-debugsource 0:5.1.17-1.module+el8.1.0+3189+a1bff096
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pecl-apcu-devel 0:5.1.17-1.module+el8.1.0+3189+a1bff096
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pecl-rrd 0:2.0.1-1.module+el8.2.0+4968+1d5097db
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pecl-rrd-debuginfo 0:2.0.1-1.module+el8.2.0+4968+1d5097db
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pecl-rrd-debugsource 0:2.0.1-1.module+el8.2.0+4968+1d5097db
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pecl-xdebug 0:2.8.0-1.module+el8.2.0+4968+1d5097db
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pecl-xdebug-debuginfo 0:2.8.0-1.module+el8.2.0+4968+1d5097db
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pecl-xdebug-debugsource 0:2.8.0-1.module+el8.2.0+4968+1d5097db
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pecl-zip 0:1.15.4-1.module+el8.1.0+3189+a1bff096
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pecl-zip-debuginfo 0:1.15.4-1.module+el8.1.0+3189+a1bff096
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pecl-zip-debugsource 0:1.15.4-1.module+el8.1.0+3189+a1bff096
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pgsql 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-pgsql-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-process 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-process-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-recode 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-recode-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-snmp 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-snmp-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-soap 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-soap-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-xml 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-xml-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-xmlrpc 0:7.3.20-1.module+el8.2.0+7373+b272fdef
Red Hat · RHEL 8 enterprise_linux:8::appstream php-xmlrpc-debuginfo 0:7.3.20-1.module+el8.2.0+7373+b272fdef

Vulnerabilities 22

  • High 7.5
    CVE-2020-7062

    Null Pointer Dereference in PHP Session Upload Progress

    In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload proce…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • High 7.4
    CVE-2020-7065

    mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full

    In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially c…

    PHP Group PHP php7 php7.4 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2020-7059

    OOB read in php_strip_tags_ex

    When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to informa…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2020-7060

    global buffer-overflow in mbfl_filt_conv_big5_wchar

    When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buff…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2020-7064

    Use-of-uninitialized-value in exif

    In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to inform…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 5.5
    CVE-2020-7063

    Files added to tar with Phar::buildFromIterator have all-access permissions

    In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesys…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2019-11048

    Temporary files are not cleaned after OOM when parsing HTTP request data

    In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop p…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2020-7066

    get_headers() silently truncates after a null byte

    In PHP versions 7.2.x below 7.2.29, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using get_headers() with user-supplied URL, if the URL contains zero (\0) character, the URL will be silently truncated at it. This may cause some software to make incorrect a…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 5.1
    CVE-2019-20454

    An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match special…

    pcre2 pcre2 Debian Ubuntu
  • Medium 4.8
    CVE-2019-11040

    Heap buffer overflow in EXIF extension

    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the alloc…

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Medium 4.8
    CVE-2019-11041

    heap-buffer-overflow on exif_scan_thumbnail in EXIF extension

    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the alloc…

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Medium 4.8
    CVE-2019-11042

    heap-buffer-overflow on exif_process_user_comment in EXIF extension

    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the alloc…

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Medium 4.8
    CVE-2019-11047

    Heap-buffer-overflow READ in exif

    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer.…

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Medium 4.8
    CVE-2019-11050

    Use-after-free in exif parsing under memory sanitizer

    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer.…

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Medium 4.2
    CVE-2019-11039

    Out-of-bounds read in iconv.c

    Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Low 3.7
    CVE-2019-11045

    DirectoryIterator class silently truncates after a null byte

    In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths…

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Unscored —
    CVE-2019-13224

    A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information …

    php5 php7 libonig libonig Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-13225

    A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial o…

    libonig Debian
  • Unscored —
    CVE-2019-16163

    Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.

    libonig libonig Debian Ubuntu
  • Unscored —
    CVE-2019-19203 Public exploit

    An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UCh…

    libonig libonig Debian Ubuntu
  • Unscored —
    CVE-2019-19204 Public exploit

    An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as…

    libonig libonig Debian Ubuntu
  • Unscored —
    CVE-2019-19246

    Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_m…

    libonig libonig Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1724152
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1724154
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1728965
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1728970
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1735494
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1739459
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1739465
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1768997
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1777537
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1786570
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1786572
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1788258
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1797776
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1797779
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1802061
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1802068
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1808532
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1808536
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1820601
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1820604
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1820627
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1837842
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3662.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-11039
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11039
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11039
  • report
    https://access.redhat.com/security/cve/CVE-2019-11040
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11040
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11040
  • report
    https://access.redhat.com/security/cve/CVE-2019-11041
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11041
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11041
  • report
    https://access.redhat.com/security/cve/CVE-2019-11042
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11042
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11042
  • report
    https://access.redhat.com/security/cve/CVE-2019-11045
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11045
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11045