Summary
USN-3922-1 fixed vulnerabilities in PHP. This update provides the corresponding
update for Ubuntu 14.04 LTS.
It was discovered that PHP incorrectly handled certain files. An attacker
could possibly use this issue to access sensitive information.
(CVE-2019-9022)
It was discovered that PHP incorrectly handled certain files. An attacker
could possibly use this issue to execute arbitrary code.
(CVE-2019-9675)
Original advisory details:
It was discovered that PHP incorrectly handled certain inputs. An attacker
could possibly use this issue to expose sensitive information. (CVE-2019-9637,
CVE-2019-9638, CVE-2019-9639, CVE-2019-9640, CVE-2019-9641)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | php5 | 5.5.9+dfsg-1ubuntu4.29 |
Vulnerabilities 7
-
Unscored —
An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses…
-
Unscored —
An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() acro…
-
Unscored —
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There …
-
Unscored —
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There …
-
Unscored —
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There …
-
Unscored —
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There …
-
Unscored —
An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c ha…
References
-
report
https://ubuntu.com/security/CVE-2019-9022
-
report
https://ubuntu.com/security/CVE-2019-9637
-
report
https://ubuntu.com/security/CVE-2019-9638
-
report
https://ubuntu.com/security/CVE-2019-9639
-
report
https://ubuntu.com/security/CVE-2019-9640
-
report
https://ubuntu.com/security/CVE-2019-9641
-
report
https://ubuntu.com/security/CVE-2019-9675