(RHSA-2014:1825) Critical: php security update

2014-11-0600:00:00

access.redhat.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.078 Low

EPSS

Percentile

93.2%

JSON

PHP is an HTML-embedded scripting language commonly used with the Apache
HTTP Server.

A stack-based buffer overflow flaw was found in the way the xmlrpc
extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC
request or response could possibly cause a PHP application to crash or
execute arbitrary code with the privileges of the user running that PHP
application. (CVE-2014-8626)

All php users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing the
updated packages, the httpd daemon must be restarted for the update to
take effect.

OSVersionArchitecturePackageVersionFilename
RedHat4ia64php-pgsql< 4.3.9-3.38.el4php-pgsql-4.3.9-3.38.el4.ia64.rpm
RedHat4x86_64php-domxml< 4.3.9-3.38.el4php-domxml-4.3.9-3.38.el4.x86_64.rpm
RedHat4i386php-mysql< 4.3.9-3.38.el4php-mysql-4.3.9-3.38.el4.i386.rpm
RedHat4i386php< 4.3.9-3.38.el4php-4.3.9-3.38.el4.i386.rpm
RedHat4x86_64php-ldap< 4.3.9-3.38.el4php-ldap-4.3.9-3.38.el4.x86_64.rpm
RedHat4x86_64php-gd< 4.3.9-3.38.el4php-gd-4.3.9-3.38.el4.x86_64.rpm
RedHat4x86_64php-pgsql< 4.3.9-3.38.el4php-pgsql-4.3.9-3.38.el4.x86_64.rpm
RedHat4i386php-ldap< 4.3.9-3.38.el4php-ldap-4.3.9-3.38.el4.i386.rpm
RedHat4x86_64php-snmp< 4.3.9-3.38.el4php-snmp-4.3.9-3.38.el4.x86_64.rpm
RedHat4x86_64php-pear< 4.3.9-3.38.el4php-pear-4.3.9-3.38.el4.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	4	ia64	php-pgsql	< 4.3.9-3.38.el4	php-pgsql-4.3.9-3.38.el4.ia64.rpm
RedHat	4	x86_64	php-domxml	< 4.3.9-3.38.el4	php-domxml-4.3.9-3.38.el4.x86_64.rpm
RedHat	4	i386	php-mysql	< 4.3.9-3.38.el4	php-mysql-4.3.9-3.38.el4.i386.rpm
RedHat	4	i386	php	< 4.3.9-3.38.el4	php-4.3.9-3.38.el4.i386.rpm
RedHat	4	x86_64	php-ldap	< 4.3.9-3.38.el4	php-ldap-4.3.9-3.38.el4.x86_64.rpm
RedHat	4	x86_64	php-gd	< 4.3.9-3.38.el4	php-gd-4.3.9-3.38.el4.x86_64.rpm
RedHat	4	x86_64	php-pgsql	< 4.3.9-3.38.el4	php-pgsql-4.3.9-3.38.el4.x86_64.rpm
RedHat	4	i386	php-ldap	< 4.3.9-3.38.el4	php-ldap-4.3.9-3.38.el4.i386.rpm
RedHat	4	x86_64	php-snmp	< 4.3.9-3.38.el4	php-snmp-4.3.9-3.38.el4.x86_64.rpm
RedHat	4	x86_64	php-pear	< 4.3.9-3.38.el4	php-pear-4.3.9-3.38.el4.x86_64.rpm