Skip to content
OpenAdvisories
High DLA-2160-1 2 CVEs

php5 - security update

Published Mar 26, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 php5 5.6.40+dfsg-0+deb8u10

Vulnerabilities 2

  • High 7.5
    CVE-2020-7062

    Null Pointer Dereference in PHP Session Upload Progress

    In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload proce…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 5.5
    CVE-2020-7063

    Files added to tar with Phar::buildFromIterator have all-access permissions

    In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesys…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine