ALT-BU-2019-3713-1
Branch p8 update bulletin.
Closed vulnerabilities
BDU:2020-01416
Уязвимость функции exif_iif_add_value интерпретатора языка программирования PHP, связанная с чтением данных за допустимыми границами, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01419
Уязвимость функции exif_read_data интерпретатора языка программирования PHP, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01676
Уязвимость функции gdImageCreateFromXbm графической библиотеке GD интерпретатора языка программирования PHP, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю получить несанкционированный доступ к информации
Modified: 2024-11-21
CVE-2019-11038
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.
- openSUSE-SU-2020:0332
- openSUSE-SU-2020:0332
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.php.net/bug.php?id=77973
- https://bugs.php.net/bug.php?id=77973
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://github.com/libgd/libgd/issues/501
- https://github.com/libgd/libgd/issues/501
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- FEDORA-2020-e795f92d79
- FEDORA-2020-e795f92d79
- FEDORA-2019-be4f895015
- FEDORA-2019-be4f895015
- FEDORA-2019-8c4b25b5ec
- FEDORA-2019-8c4b25b5ec
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- USN-4316-1
- USN-4316-1
- USN-4316-2
- USN-4316-2
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11039
Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=78069
- https://bugs.php.net/bug.php?id=78069
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11040
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=77988
- https://bugs.php.net/bug.php?id=77988
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Closed vulnerabilities
BDU:2020-01416
Уязвимость функции exif_iif_add_value интерпретатора языка программирования PHP, связанная с чтением данных за допустимыми границами, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01419
Уязвимость функции exif_read_data интерпретатора языка программирования PHP, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01676
Уязвимость функции gdImageCreateFromXbm графической библиотеке GD интерпретатора языка программирования PHP, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю получить несанкционированный доступ к информации
Modified: 2024-11-21
CVE-2019-11038
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.
- openSUSE-SU-2020:0332
- openSUSE-SU-2020:0332
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.php.net/bug.php?id=77973
- https://bugs.php.net/bug.php?id=77973
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://github.com/libgd/libgd/issues/501
- https://github.com/libgd/libgd/issues/501
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- FEDORA-2020-e795f92d79
- FEDORA-2020-e795f92d79
- FEDORA-2019-be4f895015
- FEDORA-2019-be4f895015
- FEDORA-2019-8c4b25b5ec
- FEDORA-2019-8c4b25b5ec
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- USN-4316-1
- USN-4316-1
- USN-4316-2
- USN-4316-2
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11039
Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=78069
- https://bugs.php.net/bug.php?id=78069
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11040
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=77988
- https://bugs.php.net/bug.php?id=77988
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Package php7-openssl updated to version 7.2.19-alt1.1 for branch p8 in task 231277.
Closed vulnerabilities
BDU:2020-01416
Уязвимость функции exif_iif_add_value интерпретатора языка программирования PHP, связанная с чтением данных за допустимыми границами, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01419
Уязвимость функции exif_read_data интерпретатора языка программирования PHP, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01676
Уязвимость функции gdImageCreateFromXbm графической библиотеке GD интерпретатора языка программирования PHP, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю получить несанкционированный доступ к информации
Modified: 2024-11-21
CVE-2019-11038
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.
- openSUSE-SU-2020:0332
- openSUSE-SU-2020:0332
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.php.net/bug.php?id=77973
- https://bugs.php.net/bug.php?id=77973
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://github.com/libgd/libgd/issues/501
- https://github.com/libgd/libgd/issues/501
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- FEDORA-2020-e795f92d79
- FEDORA-2020-e795f92d79
- FEDORA-2019-be4f895015
- FEDORA-2019-be4f895015
- FEDORA-2019-8c4b25b5ec
- FEDORA-2019-8c4b25b5ec
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- USN-4316-1
- USN-4316-1
- USN-4316-2
- USN-4316-2
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11039
Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=78069
- https://bugs.php.net/bug.php?id=78069
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11040
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=77988
- https://bugs.php.net/bug.php?id=77988
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Package php7-pdo_mysql updated to version 7.2.19-alt1 for branch p8 in task 231277.
Closed vulnerabilities
BDU:2020-01416
Уязвимость функции exif_iif_add_value интерпретатора языка программирования PHP, связанная с чтением данных за допустимыми границами, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01419
Уязвимость функции exif_read_data интерпретатора языка программирования PHP, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01676
Уязвимость функции gdImageCreateFromXbm графической библиотеке GD интерпретатора языка программирования PHP, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю получить несанкционированный доступ к информации
Modified: 2024-11-21
CVE-2019-11038
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.
- openSUSE-SU-2020:0332
- openSUSE-SU-2020:0332
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.php.net/bug.php?id=77973
- https://bugs.php.net/bug.php?id=77973
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://github.com/libgd/libgd/issues/501
- https://github.com/libgd/libgd/issues/501
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- FEDORA-2020-e795f92d79
- FEDORA-2020-e795f92d79
- FEDORA-2019-be4f895015
- FEDORA-2019-be4f895015
- FEDORA-2019-8c4b25b5ec
- FEDORA-2019-8c4b25b5ec
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- USN-4316-1
- USN-4316-1
- USN-4316-2
- USN-4316-2
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11039
Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=78069
- https://bugs.php.net/bug.php?id=78069
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11040
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=77988
- https://bugs.php.net/bug.php?id=77988
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Package php7-pgsql updated to version 7.2.19-alt1.2 for branch p8 in task 231277.
Closed vulnerabilities
BDU:2020-01416
Уязвимость функции exif_iif_add_value интерпретатора языка программирования PHP, связанная с чтением данных за допустимыми границами, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01419
Уязвимость функции exif_read_data интерпретатора языка программирования PHP, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01676
Уязвимость функции gdImageCreateFromXbm графической библиотеке GD интерпретатора языка программирования PHP, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю получить несанкционированный доступ к информации
Modified: 2024-11-21
CVE-2019-11038
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.
- openSUSE-SU-2020:0332
- openSUSE-SU-2020:0332
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.php.net/bug.php?id=77973
- https://bugs.php.net/bug.php?id=77973
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://github.com/libgd/libgd/issues/501
- https://github.com/libgd/libgd/issues/501
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- FEDORA-2020-e795f92d79
- FEDORA-2020-e795f92d79
- FEDORA-2019-be4f895015
- FEDORA-2019-be4f895015
- FEDORA-2019-8c4b25b5ec
- FEDORA-2019-8c4b25b5ec
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- USN-4316-1
- USN-4316-1
- USN-4316-2
- USN-4316-2
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11039
Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=78069
- https://bugs.php.net/bug.php?id=78069
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11040
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=77988
- https://bugs.php.net/bug.php?id=77988
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Closed vulnerabilities
BDU:2020-01416
Уязвимость функции exif_iif_add_value интерпретатора языка программирования PHP, связанная с чтением данных за допустимыми границами, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01419
Уязвимость функции exif_read_data интерпретатора языка программирования PHP, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01676
Уязвимость функции gdImageCreateFromXbm графической библиотеке GD интерпретатора языка программирования PHP, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю получить несанкционированный доступ к информации
Modified: 2024-11-21
CVE-2019-11038
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.
- openSUSE-SU-2020:0332
- openSUSE-SU-2020:0332
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.php.net/bug.php?id=77973
- https://bugs.php.net/bug.php?id=77973
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://github.com/libgd/libgd/issues/501
- https://github.com/libgd/libgd/issues/501
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- FEDORA-2020-e795f92d79
- FEDORA-2020-e795f92d79
- FEDORA-2019-be4f895015
- FEDORA-2019-be4f895015
- FEDORA-2019-8c4b25b5ec
- FEDORA-2019-8c4b25b5ec
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- USN-4316-1
- USN-4316-1
- USN-4316-2
- USN-4316-2
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11039
Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=78069
- https://bugs.php.net/bug.php?id=78069
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11040
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=77988
- https://bugs.php.net/bug.php?id=77988
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Closed vulnerabilities
BDU:2020-01416
Уязвимость функции exif_iif_add_value интерпретатора языка программирования PHP, связанная с чтением данных за допустимыми границами, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01419
Уязвимость функции exif_read_data интерпретатора языка программирования PHP, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01676
Уязвимость функции gdImageCreateFromXbm графической библиотеке GD интерпретатора языка программирования PHP, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю получить несанкционированный доступ к информации
Modified: 2024-11-21
CVE-2019-11038
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.
- openSUSE-SU-2020:0332
- openSUSE-SU-2020:0332
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.php.net/bug.php?id=77973
- https://bugs.php.net/bug.php?id=77973
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://github.com/libgd/libgd/issues/501
- https://github.com/libgd/libgd/issues/501
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- FEDORA-2020-e795f92d79
- FEDORA-2020-e795f92d79
- FEDORA-2019-be4f895015
- FEDORA-2019-be4f895015
- FEDORA-2019-8c4b25b5ec
- FEDORA-2019-8c4b25b5ec
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- USN-4316-1
- USN-4316-1
- USN-4316-2
- USN-4316-2
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11039
Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=78069
- https://bugs.php.net/bug.php?id=78069
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11040
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=77988
- https://bugs.php.net/bug.php?id=77988
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Closed vulnerabilities
BDU:2020-01416
Уязвимость функции exif_iif_add_value интерпретатора языка программирования PHP, связанная с чтением данных за допустимыми границами, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01419
Уязвимость функции exif_read_data интерпретатора языка программирования PHP, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01676
Уязвимость функции gdImageCreateFromXbm графической библиотеке GD интерпретатора языка программирования PHP, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю получить несанкционированный доступ к информации
Modified: 2024-11-21
CVE-2019-11038
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.
- openSUSE-SU-2020:0332
- openSUSE-SU-2020:0332
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.php.net/bug.php?id=77973
- https://bugs.php.net/bug.php?id=77973
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://github.com/libgd/libgd/issues/501
- https://github.com/libgd/libgd/issues/501
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- FEDORA-2020-e795f92d79
- FEDORA-2020-e795f92d79
- FEDORA-2019-be4f895015
- FEDORA-2019-be4f895015
- FEDORA-2019-8c4b25b5ec
- FEDORA-2019-8c4b25b5ec
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- USN-4316-1
- USN-4316-1
- USN-4316-2
- USN-4316-2
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11039
Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=78069
- https://bugs.php.net/bug.php?id=78069
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11040
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=77988
- https://bugs.php.net/bug.php?id=77988
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Package php7-opcache updated to version 7.2.19-alt1.1 for branch p8 in task 231277.
Closed vulnerabilities
BDU:2020-01416
Уязвимость функции exif_iif_add_value интерпретатора языка программирования PHP, связанная с чтением данных за допустимыми границами, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01419
Уязвимость функции exif_read_data интерпретатора языка программирования PHP, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01676
Уязвимость функции gdImageCreateFromXbm графической библиотеке GD интерпретатора языка программирования PHP, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю получить несанкционированный доступ к информации
Modified: 2024-11-21
CVE-2019-11038
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.
- openSUSE-SU-2020:0332
- openSUSE-SU-2020:0332
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.php.net/bug.php?id=77973
- https://bugs.php.net/bug.php?id=77973
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://github.com/libgd/libgd/issues/501
- https://github.com/libgd/libgd/issues/501
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- FEDORA-2020-e795f92d79
- FEDORA-2020-e795f92d79
- FEDORA-2019-be4f895015
- FEDORA-2019-be4f895015
- FEDORA-2019-8c4b25b5ec
- FEDORA-2019-8c4b25b5ec
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- USN-4316-1
- USN-4316-1
- USN-4316-2
- USN-4316-2
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11039
Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=78069
- https://bugs.php.net/bug.php?id=78069
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11040
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=77988
- https://bugs.php.net/bug.php?id=77988
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Package php7-xmlrpc updated to version 7.2.19-alt1 for branch p8 in task 231277.
Closed vulnerabilities
BDU:2020-01416
Уязвимость функции exif_iif_add_value интерпретатора языка программирования PHP, связанная с чтением данных за допустимыми границами, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01419
Уязвимость функции exif_read_data интерпретатора языка программирования PHP, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01676
Уязвимость функции gdImageCreateFromXbm графической библиотеке GD интерпретатора языка программирования PHP, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю получить несанкционированный доступ к информации
Modified: 2024-11-21
CVE-2019-11038
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.
- openSUSE-SU-2020:0332
- openSUSE-SU-2020:0332
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.php.net/bug.php?id=77973
- https://bugs.php.net/bug.php?id=77973
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://github.com/libgd/libgd/issues/501
- https://github.com/libgd/libgd/issues/501
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- FEDORA-2020-e795f92d79
- FEDORA-2020-e795f92d79
- FEDORA-2019-be4f895015
- FEDORA-2019-be4f895015
- FEDORA-2019-8c4b25b5ec
- FEDORA-2019-8c4b25b5ec
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- USN-4316-1
- USN-4316-1
- USN-4316-2
- USN-4316-2
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11039
Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=78069
- https://bugs.php.net/bug.php?id=78069
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11040
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=77988
- https://bugs.php.net/bug.php?id=77988
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Closed vulnerabilities
BDU:2020-01416
Уязвимость функции exif_iif_add_value интерпретатора языка программирования PHP, связанная с чтением данных за допустимыми границами, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01419
Уязвимость функции exif_read_data интерпретатора языка программирования PHP, позволяющая нарушителю получить несанкционированный доступ к информации или вызвать отказ в обслуживании
BDU:2020-01676
Уязвимость функции gdImageCreateFromXbm графической библиотеке GD интерпретатора языка программирования PHP, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю получить несанкционированный доступ к информации
Modified: 2024-11-21
CVE-2019-11038
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.
- openSUSE-SU-2020:0332
- openSUSE-SU-2020:0332
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821
- https://bugs.php.net/bug.php?id=77973
- https://bugs.php.net/bug.php?id=77973
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724149
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.redhat.com/show_bug.cgi?id=1724432
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140118
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://bugzilla.suse.com/show_bug.cgi?id=1140120
- https://github.com/libgd/libgd/issues/501
- https://github.com/libgd/libgd/issues/501
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- [debian-lts-announce] 20190611 [SECURITY] [DLA 1817-1] libgd2 security update
- FEDORA-2020-e795f92d79
- FEDORA-2020-e795f92d79
- FEDORA-2019-be4f895015
- FEDORA-2019-be4f895015
- FEDORA-2019-8c4b25b5ec
- FEDORA-2019-8c4b25b5ec
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- USN-4316-1
- USN-4316-1
- USN-4316-2
- USN-4316-2
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11039
Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=78069
- https://bugs.php.net/bug.php?id=78069
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529
Modified: 2024-11-21
CVE-2019-11040
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
- openSUSE-SU-2019:1778
- openSUSE-SU-2019:1778
- RHSA-2019:2519
- RHSA-2019:2519
- RHSA-2019:3299
- RHSA-2019:3299
- https://bugs.php.net/bug.php?id=77988
- https://bugs.php.net/bug.php?id=77988
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190920 [SECURITY] [DSA 4527-1] php7.3 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- 20190923 [SECURITY] [DSA 4529-1] php7.0 security update
- DSA-4527
- DSA-4527
- DSA-4529
- DSA-4529