Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Ubuntu 18.10: USN-3922-1 Critical: PHP Information Exposure

ubuntu
Calendar Grey March 26, 2019
Dist Ubuntu Esm H88
Tackling PHP security issues in Ubuntu versions through essential updates. Discover the process to upgrade PHP for improved protection.
Several security issues were fixed in PHP.

Summary

Several security issues were fixed in PHP.

Software Description:

- php7.2: HTML-embedded scripting language interpreter

- php7.0: HTML-embedded scripting language interpreter

Details:

It was discovered that PHP incorrectly handled certain inputs. An

attacker could possibly use this issue to expose sensitive information.

(CVE-2019-9637, CVE-2019-9638, CVE-2019-9639, CVE-2019-9640, CVE-2019-

9641)

Topics%20covered

Topics Covered

security advisory critical software update php information exposure ubuntu php vulnerabilities

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  libapache2-mod-php7.2           7.2.15-0ubuntu0.18.10.2
  php7.2-cgi                      7.2.15-0ubuntu0.18.10.2
  php7.2-cli                      7.2.15-0ubuntu0.18.10.2
  php7.2-fpm                      7.2.15-0ubuntu0.18.10.2

Ubuntu 18.04 LTS:
  libapache2-mod-php7.2           7.2.15-0ubuntu0.18.04.2
  php7.2-cgi                      7.2.15-0ubuntu0.18.04.2
  php7.2-cli                      7.2.15-0ubuntu0.18.04.2
  php7.2-fpm                      7.2.15-0ubuntu0.18.04.2

Ubuntu 16.04 LTS:
  libapache2-mod-php7.0           7.0.33-0ubuntu0.16.04.3
  php7.0-cgi                      7.0.33-0ubuntu0.16.04.3
  php7.0-cli                      7.0.33-0ubuntu0.16.04.3
  php7.0-fpm                      7.0.33-0ubuntu0.16.04.3

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3922-1

  CVE-2019-9637, CVE-2019-9638, CVE-2019-9639, CVE-2019-9640,

  CVE-2019-9641

Severity
critical
Lowest
Low
Medium
High
Critical

March 26, 2019

Topics%20covered

Topics Covered

security advisory critical software update php information exposure ubuntu php vulnerabilities

Package Information

  https://launchpad.net/ubuntu/+source/php7.2/7.2.15-0ubuntu0.18.10.2
  https://launchpad.net/ubuntu/+source/php7.2/7.2.15-0ubuntu0.18.04.2
  https://launchpad.net/ubuntu/+source/php7.0/7.0.33-0ubuntu0.16.04.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here