RHSA-2019:3724: Critical: rh-php70-php security update
Published Nov 6, 2019
·Updated
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.<br>Security Fix(es):<br><li> php: underflow in envpathinfo in fpmmain.c (CVE-2019-11043)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
64 affected componentsFixes available
redhat/rh-php70-php<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-bcmath<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-cli<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-common<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-dba<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-dbg<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-debuginfo<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-devel<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-embedded<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-enchant<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-fpm<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-gd<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-gmp<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-intl<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-json<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-ldap<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-mbstring<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-mysqlnd<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-odbc<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-opcache<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-pdo<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-pgsql<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-process<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-pspell<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-recode<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-snmp<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-soap<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-xml<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-xmlrpc<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php-zip<7.0.27-2.el7
7.0.27-2.el7
redhat/rh-php70-php<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-bcmath<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-cli<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-common<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-dba<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-dbg<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-debuginfo<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-devel<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-embedded<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-enchant<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-fpm<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-gd<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-gmp<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-imap<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-intl<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-json<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-ldap<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-mbstring<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-mysqlnd<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-odbc<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-opcache<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-pdo<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-pgsql<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-process<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-pspell<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-recode<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-snmp<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-soap<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-tidy<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-xml<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-xmlrpc<7.0.27-2.el6
7.0.27-2.el6
redhat/rh-php70-php-zip<7.0.27-2.el6
7.0.27-2.el6
Remediation
Event History
May 6, 2025
Advisory Published
via Red Hat·03:34 AM
Frequently Asked Questions
1
What is the severity of RHSA-2019:3724?
RHSA-2019:3724 has been classified as a critical severity vulnerability.
2
How do I fix RHSA-2019:3724?
To fix RHSA-2019:3724, update your PHP packages to version 7.0.27-2.el7 or newer.
3
What vulnerabilities does RHSA-2019:3724 address?
RHSA-2019:3724 addresses an underflow vulnerability in the env_path_info function in fpm_main.c (CVE-2019-11043).
4
Which versions of PHP are affected by RHSA-2019:3724?
Versions of rh-php70-php prior to 7.0.27-2.el7 are affected by RHSA-2019:3724.
5
Is a system restart required after applying the fix for RHSA-2019:3724?
A system restart is recommended after applying the updates for RHSA-2019:3724 to ensure all changes take effect.