Summary
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.
Security Fix(es):
* php: underflow in env_path_info in fpm_main.c (CVE-2019-11043)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | apcu-panel | 5.1.17-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux · 8 | libzip | 1.5.2-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux · 8 | libzip | 1.5.2-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux · 8 | libzip | 1.5.2-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux · 8 | libzip-devel | 1.5.2-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux · 8 | libzip-devel | 1.5.2-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux · 8 | libzip-devel | 1.5.2-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux · 8 | libzip-tools | 1.5.2-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux · 8 | libzip-tools | 1.5.2-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux · 8 | libzip-tools | 1.5.2-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux · 8 | php-pear | 1:1.10.9-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux · 8 | php-pecl-apcu | 5.1.17-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux · 8 | php-pecl-apcu | 5.1.17-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux · 8 | php-pecl-apcu | 5.1.17-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux · 8 | php-pecl-apcu-devel | 5.1.17-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux · 8 | php-pecl-apcu-devel | 5.1.17-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux · 8 | php-pecl-apcu-devel | 5.1.17-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux · 8 | php-pecl-zip | 1.15.4-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux · 8 | php-pecl-zip | 1.15.4-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux · 8 | php-pecl-zip | 1.15.4-1.module_el8.3.0+2009+b272fdef |
Vulnerabilities 1
-
High 8.7
Underflow in PHP-FPM can lead to RCE
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibilit…
KEV Mar 25, 2022
References
-
report
https://vulners.com/cve/CVE-2019-11043