RHSA-2015:1053Medium

Red Hat Security Advisory: php55 security and bug fix update

Published
June 4, 2015
Last Modified
November 7, 2026

🔗 CVE IDs covered (19)

CVE-2014-8142 →CVE-2014-9427 →CVE-2014-9652 →CVE-2014-9705 →CVE-2014-9709 →CVE-2015-0231 →CVE-2015-0232 →CVE-2015-0273 →CVE-2015-1351 →CVE-2015-1352 →CVE-2015-2301 →CVE-2015-2305 →CVE-2015-2348 →CVE-2015-2787 →CVE-2015-4147 →CVE-2015-4148 →CVE-2015-4599 →CVE-2015-4600 →CVE-2015-4601 →

📋 Description

CVE-2014-8142 — php: use after free vulnerability in unserialize() CVE-2014-9427 — php: out of bounds read when parsing a crafted .php file CVE-2014-9652 — file: out of bounds read in mconvert() CVE-2014-9705 — php: heap buffer overflow in enchant_broker_request_dict() CVE-2014-9709 — gd: buffer read overflow in gd_gif_in.c CVE-2015-0231 — php: use after free vulnerability in unserialize() (incomplete fix of CVE-2014-8142) CVE-2015-0232 — php: Free called on unitialized pointer in exif.c CVE-2015-0273 — php: use after free vulnerability in unserialize() with DateTimeZone CVE-2015-1351 — php: use after free in opcache extension CVE-2015-1352 — php: NULL pointer dereference in pgsql extension CVE-2015-2301 — php: use after free in phar_object.c CVE-2015-2305 — regex: heap overflow in regcomp() on 32-bit architectures CVE-2015-2348 — php: move_uploaded_file() NUL byte injection in file name CVE-2015-2787 — php: use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re CVE-2015-4147 — php: SoapClient's __call() type confusion through unserialize() CVE-2015-4148 — php: SoapClient's do_soap_call() type confusion after unserialize() CVE-2015-4599 — php: type confusion issue in unserialize() with various SOAP methods CVE-2015-4600 — php: type confusion issue in unserialize() with various SOAP methods CVE-2015-4601 — php: type confusion issue in unserialize() with various SOAP methods

🎯 Affected products200

  • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
  • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • php55-0:2.0-1.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
  • php55-0:2.0-1.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5)
  • php55-0:2.0-1.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
  • php55-0:2.0-1.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
  • php55-0:2.0-1.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
  • php55-0:2.0-1.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5)
  • php55-0:2.0-1.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
  • php55-0:2.0-1.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
  • php55-0:2.0-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • php55-0:2.0-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • php55-0:2.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • php55-0:2.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • php55-php-0:5.5.21-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
  • php55-php-0:5.5.21-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5)
  • php55-php-0:5.5.21-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
  • php55-php-0:5.5.21-2.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
  • php55-php-0:5.5.21-2.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
  • php55-php-0:5.5.21-2.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5)
  • php55-php-0:5.5.21-2.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
  • php55-php-0:5.5.21-2.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
  • php55-php-0:5.5.21-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • php55-php-0:5.5.21-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • php55-php-0:5.5.21-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • php55-php-0:5.5.21-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • +170 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (20)