RHSA-2015:0021High
Red Hat Security Advisory: php security update
🔗 CVE IDs covered (2)
📋 Description
CVE-2014-3669 — php: integer overflow in unserialize() CVE-2014-3670 — php: heap corruption issue in exif_thumbnail()
🎯 Affected products153
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.5)
- Red Hat Enterprise Linux HPC Node EUS (v. 6.5)
- Red Hat Enterprise Linux Server EUS (v. 6.5)
- Red Hat Enterprise Linux Server Optional EUS (v. 6.5)
- php-0:5.3.3-27.el6_5.3.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
- php-0:5.3.3-27.el6_5.3.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
- php-0:5.3.3-27.el6_5.3.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
- php-0:5.3.3-27.el6_5.3.src as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.5)
- php-0:5.3.3-27.el6_5.3.src as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.5)
- php-0:5.3.3-27.el6_5.3.src as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
- php-0:5.3.3-27.el6_5.3.src as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.5)
- php-0:5.3.3-27.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.5)
- php-0:5.3.3-27.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
- php-bcmath-0:5.3.3-27.el6_5.3.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.5)
- php-bcmath-0:5.3.3-27.el6_5.3.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.5)
- php-bcmath-0:5.3.3-27.el6_5.3.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.5)
- php-bcmath-0:5.3.3-27.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.5)
- php-bcmath-0:5.3.3-27.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.5)
- php-cli-0:5.3.3-27.el6_5.3.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
- php-cli-0:5.3.3-27.el6_5.3.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
- php-cli-0:5.3.3-27.el6_5.3.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
- php-cli-0:5.3.3-27.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.5)
- php-cli-0:5.3.3-27.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
- php-common-0:5.3.3-27.el6_5.3.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
- php-common-0:5.3.3-27.el6_5.3.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
- php-common-0:5.3.3-27.el6_5.3.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
- php-common-0:5.3.3-27.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.5)
- php-common-0:5.3.3-27.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.5)
- php-dba-0:5.3.3-27.el6_5.3.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.5)
- php-dba-0:5.3.3-27.el6_5.3.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.5)
- +123 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2015:0021
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1154500
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1154502
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0021.json