Oval Definition:oval:com.redhat.rhsa:def:20141326
Revision Date:2014-09-30Version:636
Title:RHSA-2014:1326: php53 and php security update (Moderate)
Description:PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. PHP's fileinfo module provides functions used to identify a particular file according to the type of data contained by the file.

  • It was found that the fix for CVE-2012-1571 was incomplete; the File Information (fileinfo) extension did not correctly parse certain Composite Document Format (CDF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file. (CVE-2014-3587)

  • A NULL pointer dereference flaw was found in the gdImageCreateFromXpm() function of PHP's gd extension. A remote attacker could use this flaw to crash a PHP application using gd via a specially crafted X PixMap (XPM) file. (CVE-2014-2497)

  • Multiple buffer over-read flaws were found in the php_parserr() function of PHP. A malicious DNS server or a man-in-the-middle attacker could possibly use this flaw to execute arbitrary code as the PHP interpreter if a PHP application used the dns_get_record() function to perform a DNS query. (CVE-2014-3597)

  • Two use-after-free flaws were found in the way PHP handled certain Standard PHP Library (SPL) Iterators and ArrayIterators. A malicious script author could possibly use either of these flaws to disclose certain portions of server memory. (CVE-2014-4670, CVE-2014-4698)

    The CVE-2014-3597 issue was discovered by David Kutálek of the Red Hat BaseOS QE.

    All php53 and php users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2014-2497
    CVE-2014-2497
    CVE-2014-3587
    CVE-2014-3587
    CVE-2014-3597
    CVE-2014-3597
    CVE-2014-4670
    CVE-2014-4670
    CVE-2014-4698
    CVE-2014-4698
    RHSA-2014:1326
    RHSA-2014:1326-00
    RHSA-2014:1326-01
    Platform(s):Red Hat Enterprise Linux 5
    Red Hat Enterprise Linux 6
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND
  • php is earlier than 0:5.3.3-27.el6_5.2
  • AND php is signed with Red Hat redhatrelease2 key
  • php-bcmath is earlier than 0:5.3.3-27.el6_5.2
  • AND php-bcmath is signed with Red Hat redhatrelease2 key
  • php-cli is earlier than 0:5.3.3-27.el6_5.2
  • AND php-cli is signed with Red Hat redhatrelease2 key
  • php-common is earlier than 0:5.3.3-27.el6_5.2
  • AND php-common is signed with Red Hat redhatrelease2 key
  • php-dba is earlier than 0:5.3.3-27.el6_5.2
  • AND php-dba is signed with Red Hat redhatrelease2 key
  • php-devel is earlier than 0:5.3.3-27.el6_5.2
  • AND php-devel is signed with Red Hat redhatrelease2 key
  • php-embedded is earlier than 0:5.3.3-27.el6_5.2
  • AND php-embedded is signed with Red Hat redhatrelease2 key
  • php-enchant is earlier than 0:5.3.3-27.el6_5.2
  • AND php-enchant is signed with Red Hat redhatrelease2 key
  • php-fpm is earlier than 0:5.3.3-27.el6_5.2
  • AND php-fpm is signed with Red Hat redhatrelease2 key
  • php-gd is earlier than 0:5.3.3-27.el6_5.2
  • AND php-gd is signed with Red Hat redhatrelease2 key
  • php-imap is earlier than 0:5.3.3-27.el6_5.2
  • AND php-imap is signed with Red Hat redhatrelease2 key
  • php-intl is earlier than 0:5.3.3-27.el6_5.2
  • AND php-intl is signed with Red Hat redhatrelease2 key
  • php-ldap is earlier than 0:5.3.3-27.el6_5.2
  • AND php-ldap is signed with Red Hat redhatrelease2 key
  • php-mbstring is earlier than 0:5.3.3-27.el6_5.2
  • AND php-mbstring is signed with Red Hat redhatrelease2 key
  • php-mysql is earlier than 0:5.3.3-27.el6_5.2
  • AND php-mysql is signed with Red Hat redhatrelease2 key
  • php-odbc is earlier than 0:5.3.3-27.el6_5.2
  • AND php-odbc is signed with Red Hat redhatrelease2 key
  • php-pdo is earlier than 0:5.3.3-27.el6_5.2
  • AND php-pdo is signed with Red Hat redhatrelease2 key
  • php-pgsql is earlier than 0:5.3.3-27.el6_5.2
  • AND php-pgsql is signed with Red Hat redhatrelease2 key
  • php-process is earlier than 0:5.3.3-27.el6_5.2
  • AND php-process is signed with Red Hat redhatrelease2 key
  • php-pspell is earlier than 0:5.3.3-27.el6_5.2
  • AND php-pspell is signed with Red Hat redhatrelease2 key
  • php-recode is earlier than 0:5.3.3-27.el6_5.2
  • AND php-recode is signed with Red Hat redhatrelease2 key
  • php-snmp is earlier than 0:5.3.3-27.el6_5.2
  • AND php-snmp is signed with Red Hat redhatrelease2 key
  • php-soap is earlier than 0:5.3.3-27.el6_5.2
  • AND php-soap is signed with Red Hat redhatrelease2 key
  • php-tidy is earlier than 0:5.3.3-27.el6_5.2
  • AND php-tidy is signed with Red Hat redhatrelease2 key
  • php-xml is earlier than 0:5.3.3-27.el6_5.2
  • AND php-xml is signed with Red Hat redhatrelease2 key
  • php-xmlrpc is earlier than 0:5.3.3-27.el6_5.2
  • AND php-xmlrpc is signed with Red Hat redhatrelease2 key
  • php-zts is earlier than 0:5.3.3-27.el6_5.2
  • AND php-zts is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • php53 is earlier than 0:5.3.3-24.el5
  • AND php53 is signed with Red Hat redhatrelease2 key
  • php53-bcmath is earlier than 0:5.3.3-24.el5
  • AND php53-bcmath is signed with Red Hat redhatrelease2 key
  • php53-cli is earlier than 0:5.3.3-24.el5
  • AND php53-cli is signed with Red Hat redhatrelease2 key
  • php53-common is earlier than 0:5.3.3-24.el5
  • AND php53-common is signed with Red Hat redhatrelease2 key
  • php53-dba is earlier than 0:5.3.3-24.el5
  • AND php53-dba is signed with Red Hat redhatrelease2 key
  • php53-devel is earlier than 0:5.3.3-24.el5
  • AND php53-devel is signed with Red Hat redhatrelease2 key
  • php53-gd is earlier than 0:5.3.3-24.el5
  • AND php53-gd is signed with Red Hat redhatrelease2 key
  • php53-imap is earlier than 0:5.3.3-24.el5
  • AND php53-imap is signed with Red Hat redhatrelease2 key
  • php53-intl is earlier than 0:5.3.3-24.el5
  • AND php53-intl is signed with Red Hat redhatrelease2 key
  • php53-ldap is earlier than 0:5.3.3-24.el5
  • AND php53-ldap is signed with Red Hat redhatrelease2 key
  • php53-mbstring is earlier than 0:5.3.3-24.el5
  • AND php53-mbstring is signed with Red Hat redhatrelease2 key
  • php53-mysql is earlier than 0:5.3.3-24.el5
  • AND php53-mysql is signed with Red Hat redhatrelease2 key
  • php53-odbc is earlier than 0:5.3.3-24.el5
  • AND php53-odbc is signed with Red Hat redhatrelease2 key
  • php53-pdo is earlier than 0:5.3.3-24.el5
  • AND php53-pdo is signed with Red Hat redhatrelease2 key
  • php53-pgsql is earlier than 0:5.3.3-24.el5
  • AND php53-pgsql is signed with Red Hat redhatrelease2 key
  • php53-process is earlier than 0:5.3.3-24.el5
  • AND php53-process is signed with Red Hat redhatrelease2 key
  • php53-pspell is earlier than 0:5.3.3-24.el5
  • AND php53-pspell is signed with Red Hat redhatrelease2 key
  • php53-snmp is earlier than 0:5.3.3-24.el5
  • AND php53-snmp is signed with Red Hat redhatrelease2 key
  • php53-soap is earlier than 0:5.3.3-24.el5
  • AND php53-soap is signed with Red Hat redhatrelease2 key
  • php53-xml is earlier than 0:5.3.3-24.el5
  • AND php53-xml is signed with Red Hat redhatrelease2 key
  • php53-xmlrpc is earlier than 0:5.3.3-24.el5
  • AND php53-xmlrpc is signed with Red Hat redhatrelease2 key
  • Definition Synopsis
  • Release Information
  • Red Hat Enterprise Linux 6 Client is installed
  • OR Red Hat Enterprise Linux 6 Server is installed
  • OR Red Hat Enterprise Linux 6 Workstation is installed
  • OR Red Hat Enterprise Linux 6 ComputeNode is installed
  • AND
  • php is earlier than 0:5.3.3-27.el6_5.2
  • AND php is signed with Red Hat redhatrelease2 key
  • php-bcmath is earlier than 0:5.3.3-27.el6_5.2
  • AND php-bcmath is signed with Red Hat redhatrelease2 key
  • php-cli is earlier than 0:5.3.3-27.el6_5.2
  • AND php-cli is signed with Red Hat redhatrelease2 key
  • php-common is earlier than 0:5.3.3-27.el6_5.2
  • AND php-common is signed with Red Hat redhatrelease2 key
  • php-dba is earlier than 0:5.3.3-27.el6_5.2
  • AND php-dba is signed with Red Hat redhatrelease2 key
  • php-devel is earlier than 0:5.3.3-27.el6_5.2
  • AND php-devel is signed with Red Hat redhatrelease2 key
  • php-embedded is earlier than 0:5.3.3-27.el6_5.2
  • AND php-embedded is signed with Red Hat redhatrelease2 key
  • php-enchant is earlier than 0:5.3.3-27.el6_5.2
  • AND php-enchant is signed with Red Hat redhatrelease2 key
  • php-fpm is earlier than 0:5.3.3-27.el6_5.2
  • AND php-fpm is signed with Red Hat redhatrelease2 key
  • php-gd is earlier than 0:5.3.3-27.el6_5.2
  • AND php-gd is signed with Red Hat redhatrelease2 key
  • php-imap is earlier than 0:5.3.3-27.el6_5.2
  • AND php-imap is signed with Red Hat redhatrelease2 key
  • php-intl is earlier than 0:5.3.3-27.el6_5.2
  • AND php-intl is signed with Red Hat redhatrelease2 key
  • php-ldap is earlier than 0:5.3.3-27.el6_5.2
  • AND php-ldap is signed with Red Hat redhatrelease2 key
  • php-mbstring is earlier than 0:5.3.3-27.el6_5.2
  • AND php-mbstring is signed with Red Hat redhatrelease2 key
  • php-mysql is earlier than 0:5.3.3-27.el6_5.2
  • AND php-mysql is signed with Red Hat redhatrelease2 key
  • php-odbc is earlier than 0:5.3.3-27.el6_5.2
  • AND php-odbc is signed with Red Hat redhatrelease2 key
  • php-pdo is earlier than 0:5.3.3-27.el6_5.2
  • AND php-pdo is signed with Red Hat redhatrelease2 key
  • php-pgsql is earlier than 0:5.3.3-27.el6_5.2
  • AND php-pgsql is signed with Red Hat redhatrelease2 key
  • php-process is earlier than 0:5.3.3-27.el6_5.2
  • AND php-process is signed with Red Hat redhatrelease2 key
  • php-pspell is earlier than 0:5.3.3-27.el6_5.2
  • AND php-pspell is signed with Red Hat redhatrelease2 key
  • php-recode is earlier than 0:5.3.3-27.el6_5.2
  • AND php-recode is signed with Red Hat redhatrelease2 key
  • php-snmp is earlier than 0:5.3.3-27.el6_5.2
  • AND php-snmp is signed with Red Hat redhatrelease2 key
  • php-soap is earlier than 0:5.3.3-27.el6_5.2
  • AND php-soap is signed with Red Hat redhatrelease2 key
  • php-tidy is earlier than 0:5.3.3-27.el6_5.2
  • AND php-tidy is signed with Red Hat redhatrelease2 key
  • php-xml is earlier than 0:5.3.3-27.el6_5.2
  • AND php-xml is signed with Red Hat redhatrelease2 key
  • php-xmlrpc is earlier than 0:5.3.3-27.el6_5.2
  • AND php-xmlrpc is signed with Red Hat redhatrelease2 key
  • php-zts is earlier than 0:5.3.3-27.el6_5.2
  • AND php-zts is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • php53 is earlier than 0:5.3.3-24.el5
  • AND php53 is signed with Red Hat redhatrelease key
  • php53-bcmath is earlier than 0:5.3.3-24.el5
  • AND php53-bcmath is signed with Red Hat redhatrelease key
  • php53-cli is earlier than 0:5.3.3-24.el5
  • AND php53-cli is signed with Red Hat redhatrelease key
  • php53-common is earlier than 0:5.3.3-24.el5
  • AND php53-common is signed with Red Hat redhatrelease key
  • php53-dba is earlier than 0:5.3.3-24.el5
  • AND php53-dba is signed with Red Hat redhatrelease key
  • php53-devel is earlier than 0:5.3.3-24.el5
  • AND php53-devel is signed with Red Hat redhatrelease key
  • php53-gd is earlier than 0:5.3.3-24.el5
  • AND php53-gd is signed with Red Hat redhatrelease key
  • php53-imap is earlier than 0:5.3.3-24.el5
  • AND php53-imap is signed with Red Hat redhatrelease key
  • php53-intl is earlier than 0:5.3.3-24.el5
  • AND php53-intl is signed with Red Hat redhatrelease key
  • php53-ldap is earlier than 0:5.3.3-24.el5
  • AND php53-ldap is signed with Red Hat redhatrelease key
  • php53-mbstring is earlier than 0:5.3.3-24.el5
  • AND php53-mbstring is signed with Red Hat redhatrelease key
  • php53-mysql is earlier than 0:5.3.3-24.el5
  • AND php53-mysql is signed with Red Hat redhatrelease key
  • php53-odbc is earlier than 0:5.3.3-24.el5
  • AND php53-odbc is signed with Red Hat redhatrelease key
  • php53-pdo is earlier than 0:5.3.3-24.el5
  • AND php53-pdo is signed with Red Hat redhatrelease key
  • php53-pgsql is earlier than 0:5.3.3-24.el5
  • AND php53-pgsql is signed with Red Hat redhatrelease key
  • php53-process is earlier than 0:5.3.3-24.el5
  • AND php53-process is signed with Red Hat redhatrelease key
  • php53-pspell is earlier than 0:5.3.3-24.el5
  • AND php53-pspell is signed with Red Hat redhatrelease key
  • php53-snmp is earlier than 0:5.3.3-24.el5
  • AND php53-snmp is signed with Red Hat redhatrelease key
  • php53-soap is earlier than 0:5.3.3-24.el5
  • AND php53-soap is signed with Red Hat redhatrelease key
  • php53-xml is earlier than 0:5.3.3-24.el5
  • AND php53-xml is signed with Red Hat redhatrelease key
  • php53-xmlrpc is earlier than 0:5.3.3-24.el5
  • AND php53-xmlrpc is signed with Red Hat redhatrelease key
  • BACK