RHSA-2015:1219Medium

Red Hat Security Advisory: php54-php security update

Published
July 9, 2015
Last Modified
November 5, 2026

🔗 CVE IDs covered (8)

CVE-2015-4643 →CVE-2015-4644 →CVE-2015-4021 →CVE-2015-4022 →CVE-2015-4024 →CVE-2015-4025 →CVE-2015-4026 →CVE-2015-4598 →

📋 Description

CVE-2015-4021 — php: memory corruption in phar_parse_tarfile caused by empty entry file name CVE-2015-4022 — php: integer overflow leading to heap overflow when reading FTP file listing CVE-2015-4024 — php: multipart/form-data request parsing CPU usage DoS CVE-2015-4025 — php: regressions in 5.4+ CVE-2015-4026 — php: pcntl_exec() accepts paths with NUL character CVE-2015-4598 — php: missing null byte checks for paths in DOM and GD extensions CVE-2015-4643 — php: integer overflow in ftp_genlist() resulting in heap overflow (improved fix for CVE-2015-4022) CVE-2015-4644 — php: NULL pointer dereference in php_pgsql_meta_data()

🎯 Affected products190

  • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
  • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • php54-php-0:5.4.40-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
  • php54-php-0:5.4.40-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5)
  • php54-php-0:5.4.40-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
  • php54-php-0:5.4.40-3.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
  • php54-php-0:5.4.40-3.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
  • php54-php-0:5.4.40-3.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5)
  • php54-php-0:5.4.40-3.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
  • php54-php-0:5.4.40-3.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
  • php54-php-0:5.4.40-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • php54-php-0:5.4.40-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
  • php54-php-0:5.4.40-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • php54-php-0:5.4.40-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • php54-php-0:5.4.40-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
  • php54-php-0:5.4.40-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • php54-php-bcmath-0:5.4.40-3.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
  • php54-php-bcmath-0:5.4.40-3.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5)
  • php54-php-bcmath-0:5.4.40-3.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
  • php54-php-bcmath-0:5.4.40-3.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
  • php54-php-bcmath-0:5.4.40-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • php54-php-bcmath-0:5.4.40-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
  • php54-php-bcmath-0:5.4.40-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • php54-php-cli-0:5.4.40-3.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
  • php54-php-cli-0:5.4.40-3.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5)
  • +160 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (9)