php7.0 - security update

Fixed packages 1

Vulnerabilities 5

• Medium 5.3
  CVE-2020-7071

  FILTER_VALIDATE_URL accepts URLs with invalid userinfo

  In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filter_var($url, FILTER_VALIDATE_URL), PHP will accept an URL with invalid password as valid URL. This may lead to functions that rely on URL being valid…

  PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  Feb 15, 2021
• Medium 5.3
  CVE-2021-21702

  Null Dereference in SoapClient

  In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus c…

  PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  Feb 15, 2021
• Medium 5.0
  CVE-2021-21704

  Multiple vulnerabilities in Firebird client extension

  In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(), execute(), fetch() and others by ret…

  PHP Group PHP php5 php7.0 Debian Ubuntu
  Oct 4, 2021
• Medium 4.3
  CVE-2021-21705

  Incorrect URL validation in FILTER_VALIDATE_URL

  In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password field can be accepted as valid. This can lead to t…

  PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  Oct 4, 2021
• Unscored —
  CVE-2019-18218

  cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows …

  file file file Debian Ubuntu Alpine
  Oct 21, 2019