RHSA-2015:1218: CVEs fixed (Red Hat)

RHSA-2015:1218 fixes 5 tracked CVEs. Affected systems and fixed versions.

• CVE-2015-4643 CRITICAL 9.8 UPGRADE MITIGATE Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5
• CVE-2015-4603 CRITICAL 9.8 UPGRADE MITIGATE The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24,
• CVE-2015-4602 CRITICAL 9.8 MITIGATE UPGRADE The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.
• CVE-2015-4600 CRITICAL 9.8 MITIGATE MITIGATE The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote
• CVE-2015-4599 CRITICAL 9.8 UPGRADE MITIGATE The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x befor

Applies to

• RHEL 6 · fixed in php-5.3.3-46.el6_6

← Back to latest CVEs