Описание
ELSA-2019-3735: php:7.2 security update (CRITICAL)
php [7.2.11-4]
- fix underflow in env_path_info in fpm_main.c CVE-2019-11043
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
Module php:7.2 is enabled
apcu-panel
5.1.12-2.module+el8.1.0+5443+bc1aeb77
libzip
1.5.1-2.module+el8.1.0+5443+bc1aeb77
libzip-devel
1.5.1-2.module+el8.1.0+5443+bc1aeb77
libzip-tools
1.5.1-2.module+el8.1.0+5443+bc1aeb77
php
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-bcmath
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-cli
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-common
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-dba
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-dbg
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-devel
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-embedded
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-enchant
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-fpm
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-gd
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-gmp
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-intl
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-json
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-ldap
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-mbstring
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-mysqlnd
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-odbc
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-opcache
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-pdo
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-pear
1.10.5-9.module+el8.1.0+5443+bc1aeb77
php-pecl-apcu
5.1.12-2.module+el8.1.0+5443+bc1aeb77
php-pecl-apcu-devel
5.1.12-2.module+el8.1.0+5443+bc1aeb77
php-pecl-zip
1.15.3-1.module+el8.1.0+5443+bc1aeb77
php-pgsql
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-process
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-recode
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-snmp
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-soap
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-xml
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-xmlrpc
7.2.11-4.module+el8.1.0+5443+bc1aeb77
Oracle Linux x86_64
Module php:7.2 is enabled
apcu-panel
5.1.12-2.module+el8.1.0+5443+bc1aeb77
libzip
1.5.1-2.module+el8.1.0+5443+bc1aeb77
libzip-devel
1.5.1-2.module+el8.1.0+5443+bc1aeb77
libzip-tools
1.5.1-2.module+el8.1.0+5443+bc1aeb77
php
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-bcmath
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-cli
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-common
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-dba
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-dbg
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-devel
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-embedded
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-enchant
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-fpm
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-gd
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-gmp
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-intl
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-json
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-ldap
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-mbstring
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-mysqlnd
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-odbc
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-opcache
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-pdo
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-pear
1.10.5-9.module+el8.1.0+5443+bc1aeb77
php-pecl-apcu
5.1.12-2.module+el8.1.0+5443+bc1aeb77
php-pecl-apcu-devel
5.1.12-2.module+el8.1.0+5443+bc1aeb77
php-pecl-zip
1.15.3-1.module+el8.1.0+5443+bc1aeb77
php-pgsql
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-process
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-recode
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-snmp
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-soap
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-xml
7.2.11-4.module+el8.1.0+5443+bc1aeb77
php-xmlrpc
7.2.11-4.module+el8.1.0+5443+bc1aeb77
Связанные CVE
Связанные уязвимости
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below ...
