Skip to content
OpenAdvisories
High RHSA-2020:5275 14 CVEs

Red Hat Security Advisory: rh-php73-php security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Aug 18, 2026

Ecosystem: Red Hat

Fixed packages 30

ReleasePackageFixed in
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-bcmath 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-cli 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-common 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-dba 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-dbg 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-debuginfo 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-devel 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-embedded 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-enchant 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-fpm 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-gd 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-gmp 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-intl 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-json 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-ldap 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-mbstring 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-mysqlnd 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-odbc 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-opcache 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-pdo 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-pgsql 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-process 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-pspell 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-recode 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-snmp 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-soap 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-xml 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-xmlrpc 0:7.3.20-1.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-php73-php-zip 0:7.3.20-1.el7

Vulnerabilities 14

  • High 7.5
    CVE-2020-7062

    Null Pointer Dereference in PHP Session Upload Progress

    In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload proce…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • High 7.4
    CVE-2020-7065

    mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full

    In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially c…

    PHP Group PHP php7 php7.4 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2020-7059

    OOB read in php_strip_tags_ex

    When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to informa…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2020-7060

    global buffer-overflow in mbfl_filt_conv_big5_wchar

    When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buff…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2020-7064

    Use-of-uninitialized-value in exif

    In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to inform…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 5.5
    CVE-2020-7063

    Files added to tar with Phar::buildFromIterator have all-access permissions

    In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesys…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2019-11048

    Temporary files are not cleaned after OOM when parsing HTTP request data

    In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop p…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2020-7066

    get_headers() silently truncates after a null byte

    In PHP versions 7.2.x below 7.2.29, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using get_headers() with user-supplied URL, if the URL contains zero (\0) character, the URL will be silently truncated at it. This may cause some software to make incorrect a…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 4.8
    CVE-2019-11047

    Heap-buffer-overflow READ in exif

    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer.…

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Medium 4.8
    CVE-2019-11050

    Use-after-free in exif parsing under memory sanitizer

    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer.…

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Low 3.7
    CVE-2019-11045

    DirectoryIterator class silently truncates after a null byte

    In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths…

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Unscored —
    CVE-2019-19203 Public exploit

    An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UCh…

    libonig libonig Debian Ubuntu
  • Unscored —
    CVE-2019-19204 Public exploit

    An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as…

    libonig libonig Debian Ubuntu
  • Unscored —
    CVE-2019-19246

    Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_m…

    libonig libonig Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.6_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1777537
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1786570
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1786572
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1788258
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1797776
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1797779
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1802061
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1802068
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1808532
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1808536
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1820601
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1820604
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1820627
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1837842
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5275.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-11045
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11045
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11045
  • report
    https://access.redhat.com/security/cve/CVE-2019-11047
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11047
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11047
  • report
    https://access.redhat.com/security/cve/CVE-2019-11048
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11048
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11048
  • report
    https://access.redhat.com/security/cve/CVE-2019-11050
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11050
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11050
  • report
    https://access.redhat.com/security/cve/CVE-2019-19203
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-19203
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-19203
  • report
    https://access.redhat.com/security/cve/CVE-2019-19204
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-19204
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-19204
  • report
    https://access.redhat.com/security/cve/CVE-2019-19246
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-19246
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-19246
  • report
    https://access.redhat.com/security/cve/CVE-2020-7059