title: Red Hat Security Advisory: php security update
description: php: Format string flaw in phar extension via phar_stream_flush() (MOPS-2010-024) php: zend_strndup() NULL pointer dereference may cause DoS php: XSLT file writing vulnerability php: tidy_diagnose() NULL pointer dereference may cause DoS php: strtotime timezone memory leak php: $_FILES array indexes corruption crypt(): DES encrypted password weakness php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h php: Integer overflow leading to heap-buffer overflow in the Phar extension
cpes: cpe:/o:redhat:enterprise_linux:6::client cpe:/o:redhat:enterprise_linux:6::computenode cpe:/o:redhat:enterprise_linux:6::server cpe:/o:redhat:enterprise_linux:6::workstation