Oval Definition:oval:com.redhat.rhsa:def:20141767
Revision Date:2014-10-30Version:639
Title:RHSA-2014:1767: php security update (Important)
Description:PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

  • A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_thumbnail() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application. (CVE-2014-3670)

  • An integer overflow flaw was found in the way custom objects were unserialized. Specially crafted input processed by the unserialize() function could cause a PHP application to crash. (CVE-2014-3669)

  • An out-of-bounds read flaw was found in the way the File Information (fileinfo) extension parsed Executable and Linkable Format (ELF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted ELF file. (CVE-2014-3710)

  • An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash. (CVE-2014-3668)

    The CVE-2014-3710 issue was discovered by Francisco Alonso of Red Hat Product Security.

    All php users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2014-3668
    CVE-2014-3669
    CVE-2014-3670
    CVE-2014-3710
    RHSA-2014:1767
    RHSA-2014:1767-00
    RHSA-2014:1767-02
    Platform(s):Red Hat Enterprise Linux 6
    Red Hat Enterprise Linux 7
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND
  • php is earlier than 0:5.4.16-23.el7_0.3
  • AND php is signed with Red Hat redhatrelease2 key
  • php-bcmath is earlier than 0:5.4.16-23.el7_0.3
  • AND php-bcmath is signed with Red Hat redhatrelease2 key
  • php-cli is earlier than 0:5.4.16-23.el7_0.3
  • AND php-cli is signed with Red Hat redhatrelease2 key
  • php-common is earlier than 0:5.4.16-23.el7_0.3
  • AND php-common is signed with Red Hat redhatrelease2 key
  • php-dba is earlier than 0:5.4.16-23.el7_0.3
  • AND php-dba is signed with Red Hat redhatrelease2 key
  • php-devel is earlier than 0:5.4.16-23.el7_0.3
  • AND php-devel is signed with Red Hat redhatrelease2 key
  • php-embedded is earlier than 0:5.4.16-23.el7_0.3
  • AND php-embedded is signed with Red Hat redhatrelease2 key
  • php-enchant is earlier than 0:5.4.16-23.el7_0.3
  • AND php-enchant is signed with Red Hat redhatrelease2 key
  • php-fpm is earlier than 0:5.4.16-23.el7_0.3
  • AND php-fpm is signed with Red Hat redhatrelease2 key
  • php-gd is earlier than 0:5.4.16-23.el7_0.3
  • AND php-gd is signed with Red Hat redhatrelease2 key
  • php-intl is earlier than 0:5.4.16-23.el7_0.3
  • AND php-intl is signed with Red Hat redhatrelease2 key
  • php-ldap is earlier than 0:5.4.16-23.el7_0.3
  • AND php-ldap is signed with Red Hat redhatrelease2 key
  • php-mbstring is earlier than 0:5.4.16-23.el7_0.3
  • AND php-mbstring is signed with Red Hat redhatrelease2 key
  • php-mysql is earlier than 0:5.4.16-23.el7_0.3
  • AND php-mysql is signed with Red Hat redhatrelease2 key
  • php-mysqlnd is earlier than 0:5.4.16-23.el7_0.3
  • AND php-mysqlnd is signed with Red Hat redhatrelease2 key
  • php-odbc is earlier than 0:5.4.16-23.el7_0.3
  • AND php-odbc is signed with Red Hat redhatrelease2 key
  • php-pdo is earlier than 0:5.4.16-23.el7_0.3
  • AND php-pdo is signed with Red Hat redhatrelease2 key
  • php-pgsql is earlier than 0:5.4.16-23.el7_0.3
  • AND php-pgsql is signed with Red Hat redhatrelease2 key
  • php-process is earlier than 0:5.4.16-23.el7_0.3
  • AND php-process is signed with Red Hat redhatrelease2 key
  • php-pspell is earlier than 0:5.4.16-23.el7_0.3
  • AND php-pspell is signed with Red Hat redhatrelease2 key
  • php-recode is earlier than 0:5.4.16-23.el7_0.3
  • AND php-recode is signed with Red Hat redhatrelease2 key
  • php-snmp is earlier than 0:5.4.16-23.el7_0.3
  • AND php-snmp is signed with Red Hat redhatrelease2 key
  • php-soap is earlier than 0:5.4.16-23.el7_0.3
  • AND php-soap is signed with Red Hat redhatrelease2 key
  • php-xml is earlier than 0:5.4.16-23.el7_0.3
  • AND php-xml is signed with Red Hat redhatrelease2 key
  • php-xmlrpc is earlier than 0:5.4.16-23.el7_0.3
  • AND php-xmlrpc is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND
  • php is earlier than 0:5.3.3-40.el6_6
  • AND php is signed with Red Hat redhatrelease2 key
  • php-bcmath is earlier than 0:5.3.3-40.el6_6
  • AND php-bcmath is signed with Red Hat redhatrelease2 key
  • php-cli is earlier than 0:5.3.3-40.el6_6
  • AND php-cli is signed with Red Hat redhatrelease2 key
  • php-common is earlier than 0:5.3.3-40.el6_6
  • AND php-common is signed with Red Hat redhatrelease2 key
  • php-dba is earlier than 0:5.3.3-40.el6_6
  • AND php-dba is signed with Red Hat redhatrelease2 key
  • php-devel is earlier than 0:5.3.3-40.el6_6
  • AND php-devel is signed with Red Hat redhatrelease2 key
  • php-embedded is earlier than 0:5.3.3-40.el6_6
  • AND php-embedded is signed with Red Hat redhatrelease2 key
  • php-enchant is earlier than 0:5.3.3-40.el6_6
  • AND php-enchant is signed with Red Hat redhatrelease2 key
  • php-fpm is earlier than 0:5.3.3-40.el6_6
  • AND php-fpm is signed with Red Hat redhatrelease2 key
  • php-gd is earlier than 0:5.3.3-40.el6_6
  • AND php-gd is signed with Red Hat redhatrelease2 key
  • php-imap is earlier than 0:5.3.3-40.el6_6
  • AND php-imap is signed with Red Hat redhatrelease2 key
  • php-intl is earlier than 0:5.3.3-40.el6_6
  • AND php-intl is signed with Red Hat redhatrelease2 key
  • php-ldap is earlier than 0:5.3.3-40.el6_6
  • AND php-ldap is signed with Red Hat redhatrelease2 key
  • php-mbstring is earlier than 0:5.3.3-40.el6_6
  • AND php-mbstring is signed with Red Hat redhatrelease2 key
  • php-mysql is earlier than 0:5.3.3-40.el6_6
  • AND php-mysql is signed with Red Hat redhatrelease2 key
  • php-odbc is earlier than 0:5.3.3-40.el6_6
  • AND php-odbc is signed with Red Hat redhatrelease2 key
  • php-pdo is earlier than 0:5.3.3-40.el6_6
  • AND php-pdo is signed with Red Hat redhatrelease2 key
  • php-pgsql is earlier than 0:5.3.3-40.el6_6
  • AND php-pgsql is signed with Red Hat redhatrelease2 key
  • php-process is earlier than 0:5.3.3-40.el6_6
  • AND php-process is signed with Red Hat redhatrelease2 key
  • php-pspell is earlier than 0:5.3.3-40.el6_6
  • AND php-pspell is signed with Red Hat redhatrelease2 key
  • php-recode is earlier than 0:5.3.3-40.el6_6
  • AND php-recode is signed with Red Hat redhatrelease2 key
  • php-snmp is earlier than 0:5.3.3-40.el6_6
  • AND php-snmp is signed with Red Hat redhatrelease2 key
  • php-soap is earlier than 0:5.3.3-40.el6_6
  • AND php-soap is signed with Red Hat redhatrelease2 key
  • php-tidy is earlier than 0:5.3.3-40.el6_6
  • AND php-tidy is signed with Red Hat redhatrelease2 key
  • php-xml is earlier than 0:5.3.3-40.el6_6
  • AND php-xml is signed with Red Hat redhatrelease2 key
  • php-xmlrpc is earlier than 0:5.3.3-40.el6_6
  • AND php-xmlrpc is signed with Red Hat redhatrelease2 key
  • php-zts is earlier than 0:5.3.3-40.el6_6
  • AND php-zts is signed with Red Hat redhatrelease2 key
  • BACK