CVE-2019-11036
php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según AlmaLinux (media), Oracle (media), Rocky Linux (media), Red Hat (baja), Amazon (baja), Ubuntu (baja).
Descripción
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 8 | php:7.2::apcu-panel, php:7.2::libzip, php:7.2::libzip-devel y 32 más | 5.1.12-2.module_el8.3.0+2010+7c76a223 y 4 más |
| alpine 3.10 | php7 | 7.2.18-r0 |
| alpine 3.11 | php7 | 7.2.18-r0 |
| alpine 3.12 | php7 | 7.2.18-r0 |
| alpine 3.13 | php7 | 7.2.18-r0 |
| alpine 3.14 | php7 | 7.2.18-r0 |
| alpine 3.15 | php7 | 7.2.18-r0 |
| alpine 3.7 | php7 | 7.1.29-r0 |
| alpine 3.8 | php7 | 7.2.18-r0 |
| alpine 3.9 | php7 | 7.2.18-r0 |
| amazon linux 1 | php71, php71-bcmath, php71-cli y 94 más | 7.1.29-1.39.amzn1 y 2 más |
| debian 10 | php7.3 | 7.3.9-1~deb10u1 |
Mostrar las 276 entradas de 24 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 8 | php:7.2::apcu-panel | 5.1.12-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::libzip | 1.5.1-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::libzip-devel | 1.5.1-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::libzip-tools | 1.5.1-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-bcmath | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-cli | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-common | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-dba | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-dbg | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-devel | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-embedded | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-enchant | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-fpm | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-gd | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-gmp | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-intl | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-json | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-ldap | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-mbstring | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-mysqlnd | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-odbc | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-opcache | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pdo | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pear | 1:1.10.5-9.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pecl-apcu | 5.1.12-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pecl-apcu-devel | 5.1.12-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pecl-zip | 1.15.3-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pgsql | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-process | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-recode | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-snmp | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-soap | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-xml | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-xmlrpc | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alpine 3.10 | php7 | 7.2.18-r0 |
| alpine 3.11 | php7 | 7.2.18-r0 |
| alpine 3.12 | php7 | 7.2.18-r0 |
| alpine 3.13 | php7 | 7.2.18-r0 |
| alpine 3.14 | php7 | 7.2.18-r0 |
| alpine 3.15 | php7 | 7.2.18-r0 |
| alpine 3.7 | php7 | 7.1.29-r0 |
| alpine 3.8 | php7 | 7.2.18-r0 |
| alpine 3.9 | php7 | 7.2.18-r0 |
| amazon linux 1 | php71 | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-bcmath | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-cli | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-common | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-dba | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-dbg | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-debuginfo | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-devel | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-embedded | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-enchant | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-fpm | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-gd | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-gmp | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-imap | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-intl | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-json | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-ldap | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-mbstring | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-mcrypt | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-mysqlnd | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-odbc | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-opcache | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-pdo | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-pdo-dblib | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-pgsql | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-process | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-pspell | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-recode | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-snmp | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-soap | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-tidy | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-xml | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-xmlrpc | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php72 | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-bcmath | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-cli | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-common | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-dba | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-dbg | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-debuginfo | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-devel | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-embedded | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-enchant | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-fpm | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-gd | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-gmp | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-imap | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-intl | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-json | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-ldap | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-mbstring | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-mysqlnd | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-odbc | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-opcache | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-pdo | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-pdo-dblib | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-pgsql | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-process | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-pspell | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-recode | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-snmp | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-soap | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-tidy | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-xml | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-xmlrpc | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php73 | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-bcmath | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-cli | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-common | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-dba | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-dbg | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-debuginfo | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-devel | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-embedded | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-enchant | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-fpm | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-gd | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-gmp | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-imap | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-intl | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-json | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-ldap | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-mbstring | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-mysqlnd | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-odbc | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-opcache | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-pdo | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-pdo-dblib | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-pgsql | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-process | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-pspell | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-recode | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-snmp | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-soap | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-tidy | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-xml | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-xmlrpc | 7.3.5-1.15.amzn1 |
| debian 10 | php7.3 | 7.3.9-1~deb10u1 |
| debian 8 | php5 | 5.6.40+dfsg-0+deb8u3 |
| debian 9 | php7.0 | 7.0.33-0+deb9u5 |
| Oracle Linux 8 | apcu-panel | 5.1.12-2.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | libzip | 1.5.1-2.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | libzip-devel | 1.5.1-2.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | libzip-tools | 1.5.1-2.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-bcmath | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-cli | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-common | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-dba | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-dbg | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-devel | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-embedded | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-enchant | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-fpm | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-gd | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-gmp | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-intl | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-json | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-ldap | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-mbstring | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-mysqlnd | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-odbc | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-opcache | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-pdo | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-pear | 1:1.10.5-9.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-pecl-apcu | 5.1.12-2.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-pecl-apcu-devel | 5.1.12-2.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-pecl-zip | 1.15.3-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-pgsql | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-process | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-recode | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-snmp | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-soap | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-xml | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-xmlrpc | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Red Hat | php | sin corrección indicada |
| Red Hat | php-bcmath | sin corrección indicada |
| Red Hat | php-cli | sin corrección indicada |
| Red Hat | php-common | sin corrección indicada |
| Red Hat | php-dba | sin corrección indicada |
| Red Hat | php-devel | sin corrección indicada |
| Red Hat | php-embedded | sin corrección indicada |
| Red Hat | php-enchant | sin corrección indicada |
| Red Hat | php-fpm | sin corrección indicada |
| Red Hat | php-gd | sin corrección indicada |
| Red Hat | php-imap | sin corrección indicada |
| Red Hat | php-intl | sin corrección indicada |
| Red Hat | php-ldap | sin corrección indicada |
| Red Hat | php-mbstring | sin corrección indicada |
| Red Hat | php-mysql | sin corrección indicada |
| Red Hat | php-mysqlnd | sin corrección indicada |
| Red Hat | php-odbc | sin corrección indicada |
| Red Hat | php-pdo | sin corrección indicada |
| Red Hat | php-pgsql | sin corrección indicada |
| Red Hat | php-process | sin corrección indicada |
| Red Hat | php-pspell | sin corrección indicada |
| Red Hat | php-recode | sin corrección indicada |
| Red Hat | php-snmp | sin corrección indicada |
| Red Hat | php-soap | sin corrección indicada |
| Red Hat | php-tidy | sin corrección indicada |
| Red Hat | php-xml | sin corrección indicada |
| Red Hat | php-xmlrpc | sin corrección indicada |
| Red Hat | php-zts | sin corrección indicada |
| rocky 8 | php | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-bcmath | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-cli | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-common | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-dba | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-dbg | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-devel | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-embedded | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-enchant | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-fpm | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-gd | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-gmp | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-intl | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-json | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-ldap | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-mbstring | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-mysqlnd | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-odbc | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-opcache | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-pdo | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-pgsql | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-process | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-recode | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-snmp | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-soap | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-xml | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-xmlrpc | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::apcu-panel | 5.1.12-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::libzip | 1.5.1-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::libzip-devel | 1.5.1-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::libzip-tools | 1.5.1-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-bcmath | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-cli | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-common | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-dba | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-dbg | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-devel | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-embedded | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-enchant | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-fpm | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-gd | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-gmp | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-intl | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-json | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-ldap | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-mbstring | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-mysqlnd | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-odbc | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-opcache | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pdo | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pear | 1:1.10.5-9.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pecl-apcu | 5.1.12-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pecl-apcu-devel | 5.1.12-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pecl-zip | 1.15.3-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pgsql | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-process | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-recode | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-snmp | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-soap | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-xml | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-xmlrpc | 7.2.24-1.module+el8.4.0+413+c9202dda |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.29+esm2 |
| ubuntu 16.04 | php7.0 | 7.0.33-0ubuntu0.16.04.5 |
| ubuntu 16.04-ESM | php7.0 | 7.0.33-0ubuntu0.16.04.5 |
| ubuntu 18.04 | php7.2 | 7.2.19-0ubuntu0.18.04.1 |
| ubuntu 18.04-ESM | php7.2 | 7.2.19-0ubuntu0.18.04.1 |
| ubuntu 18.10 | php7.2 | 7.2.19-0ubuntu0.18.10.1 |
| ubuntu 19.04 | php7.2 | 7.2.19-0ubuntu0.19.04.1 |
Referencias
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html
- http://www.securityfocus.com/bid/108177
- https://access.redhat.com/errata/RHSA-2019:2519
- https://access.redhat.com/errata/RHSA-2019:3299
- https://access.redhat.com/security/cve/CVE-2019-11036
Las 62 referencias
- https://bugs.php.net/bug.php?id=77950
- https://bugzilla.redhat.com/show_bug.cgi?id=1680545
- https://bugzilla.redhat.com/show_bug.cgi?id=1685123
- https://bugzilla.redhat.com/show_bug.cgi?id=1685132
- https://bugzilla.redhat.com/show_bug.cgi?id=1685398
- https://bugzilla.redhat.com/show_bug.cgi?id=1685404
- https://bugzilla.redhat.com/show_bug.cgi?id=1685412
- https://bugzilla.redhat.com/show_bug.cgi?id=1688897
- https://bugzilla.redhat.com/show_bug.cgi?id=1688922
- https://bugzilla.redhat.com/show_bug.cgi?id=1688934
- https://bugzilla.redhat.com/show_bug.cgi?id=1688939
- https://bugzilla.redhat.com/show_bug.cgi?id=1702246
- https://bugzilla.redhat.com/show_bug.cgi?id=1702256
- https://bugzilla.redhat.com/show_bug.cgi?id=1707299
- https://bugzilla.redhat.com/show_bug.cgi?id=1724152
- https://bugzilla.redhat.com/show_bug.cgi?id=1724154
- https://bugzilla.redhat.com/show_bug.cgi?id=1739459
- https://bugzilla.redhat.com/show_bug.cgi?id=1739465
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20783
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11034
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11035
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11036
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11039
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11040
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11041
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11042
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9020
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9021
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9022
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9023
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9024
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9637
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9638
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9639
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9640
- https://errata.almalinux.org/8/ALSA-2020-1624.html
- https://errata.rockylinux.org/RLSA-2020:1624
- https://linux.oracle.com/cve/CVE-2019-11036.html
- https://linux.oracle.com/errata/ELSA-2020-1624.html
- https://lists.debian.org/debian-lts-announce/2019/05/msg00035.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NFXYNCXZCPYT7ZN4ZLI5EPQQW44FRRO/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3BY2XUUAN277LS7HKAOGL4DVGAELOJV3/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WN2HLPGEZEF4MFM5YC5FILZB5QEQFP3A/
- https://nvd.nist.gov/vuln/detail/CVE-2019-11036
- https://seclists.org/bugtraq/2019/Sep/35
- https://seclists.org/bugtraq/2019/Sep/38
- https://security.netapp.com/advisory/ntap-20190517-0003/
- https://ubuntu.com/security/notices/USN-3566-2
- https://ubuntu.com/security/notices/USN-4009-1
- https://usn.ubuntu.com/3566-2/
- https://usn.ubuntu.com/4009-1/
- https://www.cve.org/CVERecord?id=CVE-2019-11036
- https://www.debian.org/security/2019/dsa-4527
- https://www.debian.org/security/2019/dsa-4529