critical
CVE-2019-11039
php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers()
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Red Hat6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Red Hat (medium), AlmaLinux (medium), Amazon (medium), Oracle (medium), Rocky Linux (medium), Ubuntu (medium).
Description
Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| alma 8 | php:7.2::apcu-panel, php:7.2::libzip, php:7.2::libzip-devel and 69 more | 5.1.12-2.module_el8.3.0+2010+7c76a223 and 11 more |
| alpine 3.10 | php7 | 7.2.19-r0 |
| alpine 3.11 | php7 | 7.2.19-r0 |
| alpine 3.12 | php7 | 7.2.19-r0 |
| alpine 3.13 | php7 | 7.2.19-r0 |
| alpine 3.14 | php7 | 7.2.19-r0 |
| alpine 3.15 | php7 | 7.2.19-r0 |
| alpine 3.7 | php7 | 7.1.30-r0 |
| alpine 3.8 | php7 | 7.2.21-r0 |
| alpine 3.9 | php7 | 7.2.19-r0 |
| amazon linux 1 | php71, php71-bcmath, php71-cli and 94 more | 7.1.30-1.40.amzn1 and 2 more |
| debian 10 | php7.3 | 7.3.9-1~deb10u1 |
Show all 349 entries from 24 sources
| Source | Package | Fixed in |
|---|---|---|
| alma 8 | php:7.2::apcu-panel | 5.1.12-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::libzip | 1.5.1-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::libzip-devel | 1.5.1-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::libzip-tools | 1.5.1-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-bcmath | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-cli | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-common | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-dba | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-dbg | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-devel | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-embedded | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-enchant | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-fpm | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-gd | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-gmp | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-intl | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-json | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-ldap | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-mbstring | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-mysqlnd | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-odbc | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-opcache | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pdo | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pear | 1:1.10.5-9.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pecl-apcu | 5.1.12-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pecl-apcu-devel | 5.1.12-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pecl-zip | 1.15.3-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pgsql | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-process | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-recode | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-snmp | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-soap | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-xml | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-xmlrpc | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.3::apcu-panel | 5.1.17-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::libzip | 1.5.2-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::libzip-devel | 1.5.2-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::libzip-tools | 1.5.2-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-bcmath | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-cli | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-common | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-dba | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-dbg | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-devel | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-embedded | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-enchant | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-fpm | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-gd | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-gmp | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-intl | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-json | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-ldap | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-mbstring | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-mysqlnd | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-odbc | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-opcache | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pdo | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pear | 1:1.10.9-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pecl-apcu | 5.1.17-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pecl-apcu-devel | 5.1.17-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pecl-rrd | 2.0.1-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pecl-xdebug | 2.8.0-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pecl-zip | 1.15.4-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pgsql | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-process | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-recode | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-snmp | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-soap | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-xml | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-xmlrpc | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alpine 3.10 | php7 | 7.2.19-r0 |
| alpine 3.11 | php7 | 7.2.19-r0 |
| alpine 3.12 | php7 | 7.2.19-r0 |
| alpine 3.13 | php7 | 7.2.19-r0 |
| alpine 3.14 | php7 | 7.2.19-r0 |
| alpine 3.15 | php7 | 7.2.19-r0 |
| alpine 3.7 | php7 | 7.1.30-r0 |
| alpine 3.8 | php7 | 7.2.21-r0 |
| alpine 3.9 | php7 | 7.2.19-r0 |
| amazon linux 1 | php71 | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-bcmath | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-cli | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-common | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-dba | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-dbg | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-debuginfo | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-devel | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-embedded | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-enchant | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-fpm | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-gd | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-gmp | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-imap | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-intl | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-json | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-ldap | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-mbstring | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-mcrypt | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-mysqlnd | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-odbc | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-opcache | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-pdo | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-pdo-dblib | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-pgsql | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-process | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-pspell | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-recode | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-snmp | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-soap | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-tidy | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-xml | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php71-xmlrpc | 7.1.30-1.40.amzn1 |
| amazon linux 1 | php72 | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-bcmath | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-cli | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-common | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-dba | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-dbg | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-debuginfo | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-devel | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-embedded | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-enchant | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-fpm | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-gd | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-gmp | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-imap | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-intl | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-json | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-ldap | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-mbstring | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-mysqlnd | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-odbc | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-opcache | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-pdo | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-pdo-dblib | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-pgsql | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-process | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-pspell | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-recode | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-snmp | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-soap | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-tidy | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-xml | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php72-xmlrpc | 7.2.19-1.14.amzn1 |
| amazon linux 1 | php73 | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-bcmath | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-cli | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-common | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-dba | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-dbg | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-debuginfo | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-devel | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-embedded | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-enchant | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-fpm | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-gd | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-gmp | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-imap | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-intl | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-json | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-ldap | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-mbstring | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-mysqlnd | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-odbc | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-opcache | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-pdo | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-pdo-dblib | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-pgsql | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-process | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-pspell | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-recode | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-snmp | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-soap | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-tidy | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-xml | 7.3.6-1.17.amzn1 |
| amazon linux 1 | php73-xmlrpc | 7.3.6-1.17.amzn1 |
| debian 10 | php7.3 | 7.3.9-1~deb10u1 |
| debian 8 | php5 | 5.6.40+dfsg-0+deb8u4 |
| debian 9 | php7.0 | 7.0.33-0+deb9u5 |
| Oracle Linux 8 | apcu-panel | 5.1.17-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | libzip | 1.5.2-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | libzip-devel | 1.5.2-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | libzip-tools | 1.5.2-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | php | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-bcmath | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-cli | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-common | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-dba | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-dbg | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-devel | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-embedded | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-enchant | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-fpm | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-gd | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-gmp | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-intl | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-json | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-ldap | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-mbstring | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-mysqlnd | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-odbc | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-opcache | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-pdo | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-pear | 1:1.10.9-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | php-pecl-apcu | 5.1.17-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | php-pecl-apcu-devel | 5.1.17-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | php-pecl-rrd | 2.0.1-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | php-pecl-xdebug | 2.8.0-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | php-pecl-zip | 1.15.4-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | php-pgsql | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-process | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-recode | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-snmp | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-soap | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-xml | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-xmlrpc | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Red Hat | php | no fix listed |
| Red Hat | php-bcmath | no fix listed |
| Red Hat | php-cli | no fix listed |
| Red Hat | php-common | no fix listed |
| Red Hat | php-dba | no fix listed |
| Red Hat | php-devel | no fix listed |
| Red Hat | php-embedded | no fix listed |
| Red Hat | php-enchant | no fix listed |
| Red Hat | php-fpm | no fix listed |
| Red Hat | php-gd | no fix listed |
| Red Hat | php-intl | no fix listed |
| Red Hat | php-ldap | no fix listed |
| Red Hat | php-mbstring | no fix listed |
| Red Hat | php-mysql | no fix listed |
| Red Hat | php-mysqlnd | no fix listed |
| Red Hat | php-odbc | no fix listed |
| Red Hat | php-pdo | no fix listed |
| Red Hat | php-pgsql | no fix listed |
| Red Hat | php-process | no fix listed |
| Red Hat | php-pspell | no fix listed |
| Red Hat | php-recode | no fix listed |
| Red Hat | php-snmp | no fix listed |
| Red Hat | php-soap | no fix listed |
| Red Hat | php-xml | no fix listed |
| Red Hat | php-xmlrpc | no fix listed |
| rocky 8 | php | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-bcmath | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-cli | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-common | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-dba | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-dbg | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-devel | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-embedded | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-enchant | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-fpm | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-gd | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-gmp | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-intl | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-json | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-ldap | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-mbstring | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-mysqlnd | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-odbc | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-opcache | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-pdo | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-pgsql | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-process | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-recode | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-snmp | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-soap | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-xml | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-xmlrpc | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.2::apcu-panel | 5.1.12-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::libzip | 1.5.1-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::libzip-devel | 1.5.1-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::libzip-tools | 1.5.1-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-bcmath | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-cli | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-common | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-dba | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-dbg | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-devel | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-embedded | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-enchant | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-fpm | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-gd | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-gmp | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-intl | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-json | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-ldap | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-mbstring | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-mysqlnd | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-odbc | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-opcache | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pdo | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pear | 1:1.10.5-9.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pecl-apcu | 5.1.12-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pecl-apcu-devel | 5.1.12-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pecl-zip | 1.15.3-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pgsql | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-process | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-recode | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-snmp | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-soap | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-xml | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-xmlrpc | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.3::apcu-panel | 5.1.17-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::libzip | 1.5.2-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::libzip-devel | 1.5.2-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::libzip-tools | 1.5.2-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-bcmath | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-cli | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-common | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-dba | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-dbg | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-devel | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-embedded | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-enchant | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-fpm | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-gd | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-gmp | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-intl | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-json | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-ldap | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-mbstring | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-mysqlnd | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-odbc | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-opcache | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pdo | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pear | 1:1.10.9-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pecl-apcu | 5.1.17-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pecl-apcu-devel | 5.1.17-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pecl-rrd | 2.0.1-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pecl-xdebug | 2.8.0-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pecl-zip | 1.15.4-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pgsql | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-process | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-recode | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-snmp | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-soap | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-xml | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-xmlrpc | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.29+esm3 |
| ubuntu 16.04 | php7.0 | 7.0.33-0ubuntu0.16.04.5 |
| ubuntu 16.04-ESM | php7.0 | 7.0.33-0ubuntu0.16.04.5 |
| ubuntu 18.04 | php7.2 | 7.2.19-0ubuntu0.18.04.1 |
| ubuntu 18.04-ESM | php7.2 | 7.2.19-0ubuntu0.18.04.1 |
| ubuntu 18.10 | php7.2 | 7.2.19-0ubuntu0.18.10.1 |
| ubuntu 19.04 | php7.2 | 7.2.19-0ubuntu0.19.04.1 |
References
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00029.html
- https://access.redhat.com/errata/RHSA-2019:2519
- https://access.redhat.com/errata/RHSA-2019:3299
- https://access.redhat.com/security/cve/CVE-2019-11039
- https://bugs.php.net/bug.php?id=78069
- https://bugzilla.redhat.com/show_bug.cgi?id=1724152
- https://bugzilla.redhat.com/show_bug.cgi?id=1724154
- https://bugzilla.redhat.com/show_bug.cgi?id=1728965
All 61 references
- https://bugzilla.redhat.com/show_bug.cgi?id=1728970
- https://bugzilla.redhat.com/show_bug.cgi?id=1735494
- https://bugzilla.redhat.com/show_bug.cgi?id=1739459
- https://bugzilla.redhat.com/show_bug.cgi?id=1739465
- https://bugzilla.redhat.com/show_bug.cgi?id=1768997
- https://bugzilla.redhat.com/show_bug.cgi?id=1777537
- https://bugzilla.redhat.com/show_bug.cgi?id=1786570
- https://bugzilla.redhat.com/show_bug.cgi?id=1786572
- https://bugzilla.redhat.com/show_bug.cgi?id=1788258
- https://bugzilla.redhat.com/show_bug.cgi?id=1797776
- https://bugzilla.redhat.com/show_bug.cgi?id=1797779
- https://bugzilla.redhat.com/show_bug.cgi?id=1802061
- https://bugzilla.redhat.com/show_bug.cgi?id=1802068
- https://bugzilla.redhat.com/show_bug.cgi?id=1808532
- https://bugzilla.redhat.com/show_bug.cgi?id=1808536
- https://bugzilla.redhat.com/show_bug.cgi?id=1820601
- https://bugzilla.redhat.com/show_bug.cgi?id=1820604
- https://bugzilla.redhat.com/show_bug.cgi?id=1820627
- https://bugzilla.redhat.com/show_bug.cgi?id=1837842
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11039
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11040
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11041
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11042
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11045
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11047
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11048
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11050
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13224
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13225
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16163
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19203
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19204
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19246
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20454
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7059
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7060
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7062
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7063
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7064
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7065
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7066
- https://errata.almalinux.org/8/ALSA-2020-3662.html
- https://errata.rockylinux.org/RLSA-2020:3662
- https://linux.oracle.com/cve/CVE-2019-11039.html
- https://linux.oracle.com/errata/ELSA-2020-3662.html
- https://nvd.nist.gov/vuln/detail/CVE-2019-11039
- https://seclists.org/bugtraq/2019/Sep/35
- https://seclists.org/bugtraq/2019/Sep/38
- https://ubuntu.com/security/notices/USN-4009-1
- https://ubuntu.com/security/notices/USN-4009-2
- https://www.cve.org/CVERecord?id=CVE-2019-11039
- https://www.debian.org/security/2019/dsa-4527
- https://www.debian.org/security/2019/dsa-4529