Skip to content
OpenAdvisories
Medium ALSA-2020:1624 17 CVEs

Moderate: php:7.2 security, bug fix, and enhancement update

Published Apr 28, 2020 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (7.2.24). (BZ#1726981)

Security Fix(es):

* php: Invalid memory access in function xmlrpc_decode() (CVE-2019-9020)

* php: File rename across filesystems may allow unwanted access during processing (CVE-2019-9637)

* php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9638)

* php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9639)

* php: Invalid read in exif_process_SOFn() (CVE-2019-9640)

* php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)

* php: Buffer over-read in exif_read_data() (CVE-2019-11040)

* php: Buffer over-read in PHAR reading functions (CVE-2018-20783)

* php: Heap-based buffer over-read in PHAR reading functions (CVE-2019-9021)

* php: memcpy with negative length via crafted DNS response (CVE-2019-9022)

* php: Heap-based buffer over-read in mbstring regular expression functions (CVE-2019-9023)

* php: Out-of-bounds read in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c (CVE-2019-9024)

* php: Heap buffer overflow in function exif_process_IFD_TAG() (CVE-2019-11034)

* php: Heap buffer overflow in function exif_iif_add_value() (CVE-2019-11035)

* php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure (CVE-2019-11036)

* php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)

* php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 101

ReleasePackageFixed in
AlmaLinux · 8 apcu-panel 5.1.12-2.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 libzip 1.5.1-2.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 libzip 1.5.1-2.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 libzip 1.5.1-2.module_el8.5.0+53+9945c2af
AlmaLinux · 8 libzip-devel 1.5.1-2.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 libzip-devel 1.5.1-2.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 libzip-devel 1.5.1-2.module_el8.5.0+53+9945c2af
AlmaLinux · 8 libzip-tools 1.5.1-2.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 libzip-tools 1.5.1-2.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 libzip-tools 1.5.1-2.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-bcmath 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-bcmath 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-bcmath 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-cli 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-cli 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-cli 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-common 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-common 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-common 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-dba 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-dba 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-dba 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-dbg 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-dbg 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-dbg 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-devel 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-devel 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-devel 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-embedded 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-embedded 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-embedded 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-enchant 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-enchant 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-enchant 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-fpm 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-fpm 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-fpm 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-gd 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-gd 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-gd 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-gmp 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-gmp 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-gmp 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-intl 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-intl 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-intl 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-json 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-json 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-json 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-ldap 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-ldap 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-ldap 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-mbstring 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-mbstring 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-mbstring 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-mysqlnd 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-mysqlnd 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-mysqlnd 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-odbc 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-odbc 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-odbc 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-opcache 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-opcache 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-opcache 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-pdo 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-pdo 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-pdo 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-pear 1:1.10.5-9.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-pecl-apcu 5.1.12-2.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-pecl-apcu 5.1.12-2.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-pecl-apcu 5.1.12-2.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-pecl-apcu-devel 5.1.12-2.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-pecl-apcu-devel 5.1.12-2.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-pecl-apcu-devel 5.1.12-2.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-pecl-zip 1.15.3-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-pecl-zip 1.15.3-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-pecl-zip 1.15.3-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-pgsql 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-pgsql 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-pgsql 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-process 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-process 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-process 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-recode 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-recode 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-recode 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-snmp 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-snmp 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-snmp 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-soap 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-soap 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-soap 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-xml 7.2.24-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-xml 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-xml 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-xmlrpc 7.2.24-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-xmlrpc 7.2.24-1.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-xmlrpc 7.2.24-1.module_el8.4.0+2228+7c76a223

Vulnerabilities 17

  • Medium 4.8
    CVE-2019-11034

    Heap over-read in PHP EXIF extension

    When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Medium 4.8
    CVE-2019-11035

    Heap over-read in PHP EXIF extension

    When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Medium 4.8
    CVE-2019-11036

    Heap over-read in PHP EXIF extension

    When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Medium 4.8
    CVE-2019-11040

    Heap buffer overflow in EXIF extension

    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the alloc…

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Medium 4.8
    CVE-2019-11041

    heap-buffer-overflow on exif_scan_thumbnail in EXIF extension

    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the alloc…

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Medium 4.8
    CVE-2019-11042

    heap-buffer-overflow on exif_process_user_comment in EXIF extension

    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the alloc…

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Medium 4.2
    CVE-2019-11039

    Out-of-bounds read in iconv.c

    Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.

    PHP Group PHP php5 php7.0 Ubuntu Alpine
  • Unscored —
    CVE-2018-20783

    In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR readi…

    php5 php7.0 php7.2 php7 Ubuntu Alpine
  • Unscored —
    CVE-2019-9020 EPSS 10%

    An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid i…

    php5 php7.0 php7.2 php7 Ubuntu Alpine
  • Unscored —
    CVE-2019-9021 EPSS 10%

    An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-ba…

    php5 php7.0 php7.2 php7 Ubuntu Alpine
  • Unscored —
    CVE-2019-9022

    An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses…

    php5 php7.0 php7.2 php7 Ubuntu Alpine
  • Unscored —
    CVE-2019-9023

    An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number …

    php5 php7.0 php7.2 php7 Ubuntu Alpine
  • Unscored —
    CVE-2019-9024

    An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_de…

    php5 php7.0 php7.2 php7 Ubuntu Alpine
  • Unscored —
    CVE-2019-9637

    An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() acro…

    php5 php7.0 php7.2 php7 Ubuntu Alpine
  • Unscored —
    CVE-2019-9638

    An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There …

    php5 php7.0 php7.2 php7 Ubuntu Alpine
  • Unscored —
    CVE-2019-9639

    An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There …

    php5 php7.0 php7.2 php7 Ubuntu Alpine
  • Unscored —
    CVE-2019-9640

    An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There …

    php5 php7.0 php7.2 php7 Ubuntu Alpine

References

  • report
    https://vulners.com/cve/CVE-2018-20783
  • report
    https://vulners.com/cve/CVE-2019-11034
  • report
    https://vulners.com/cve/CVE-2019-11035
  • report
    https://vulners.com/cve/CVE-2019-11036
  • report
    https://vulners.com/cve/CVE-2019-11039
  • report
    https://vulners.com/cve/CVE-2019-11040
  • report
    https://vulners.com/cve/CVE-2019-11041
  • report
    https://vulners.com/cve/CVE-2019-11042
  • report
    https://vulners.com/cve/CVE-2019-9020
  • report
    https://vulners.com/cve/CVE-2019-9021
  • report
    https://vulners.com/cve/CVE-2019-9022
  • report
    https://vulners.com/cve/CVE-2019-9023
  • report
    https://vulners.com/cve/CVE-2019-9024
  • report
    https://vulners.com/cve/CVE-2019-9637
  • report
    https://vulners.com/cve/CVE-2019-9638
  • report
    https://vulners.com/cve/CVE-2019-9639
  • report
    https://vulners.com/cve/CVE-2019-9640