Ubuntu 7400-1: PHP Security Advisory Updates

ubuntu

March 31, 2025

Several security issues were fixed in PHP.

Summary

Several security issues were fixed in PHP.

Software Description:

- php8.3: HTML-embedded scripting language interpreter

- php8.1: HTML-embedded scripting language interpreter

- php7.4: HTML-embedded scripting language interpreter

Details:

It was discovered that PHP incorrectly handle certain inputs.

An attacker could possibly use this issue to cause a crash or

execute arbitrary code. (CVE-2024-11235)

It was discovered that PHP incorrectly handle certain folded headers.

An attacker could possibly use this issue to cause a crash or

execute arbritrary code. (CVE-2025-1217)

It was discovered that PHP incorrectly handled certain headers.

An attacker could possibly use this issue to expose sensitive information

or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS

Ubuntu 24.10, and Ubuntu 24.04 LTS. (CVE-2025-1219)

It was discovered that PHP incorrectly handle certain headers with invalid

name and no colon. An attacker could possibly use this issue to confuse

applica...

Read the Full Advisory

Topics Covered

security advisory denial of service code execution Ubuntu input validation PHP

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
  libapache2-mod-php8.3           8.3.11-0ubuntu0.24.10.5
  php8.3                          8.3.11-0ubuntu0.24.10.5
  php8.3-cgi                      8.3.11-0ubuntu0.24.10.5
  php8.3-cli                      8.3.11-0ubuntu0.24.10.5
  php8.3-fpm                      8.3.11-0ubuntu0.24.10.5

Ubuntu 24.04 LTS
  libapache2-mod-php8.3           8.3.6-0ubuntu0.24.04.4
  php8.3                          8.3.6-0ubuntu0.24.04.4
  php8.3-cgi                      8.3.6-0ubuntu0.24.04.4
  php8.3-cli                      8.3.6-0ubuntu0.24.04.4
  php8.3-fpm                      8.3.6-0ubuntu0.24.04.4

Ubuntu 22.04 LTS
  libapache2-mod-php7.4           8.1.2-1ubuntu2.21
  libapache2-mod-php8.0           8.1.2-1ubuntu2.21
  libapache2-mod-php8.1           8.1.2-1ubuntu2.21
  php8.1                          8.1.2-1ubuntu2.21
  php8.1-cgi                      8.1.2-1ubuntu2.21
  php8.1-cli                      8.1.2-1ubuntu2.21
  php8.1-fpm                      8.1.2-1ubuntu2.21

Ubuntu 20.04 LTS
  libapache2-mod-php7.4           7.4.3-4ubuntu2.29
  php7.4                          7.4.3-4ubuntu2.29
  php7.4-cgi                      7.4.3-4ubuntu2.29
  php7.4-cli                      7.4.3-4ubuntu2.29
  php7.4-fpm                      7.4.3-4ubuntu2.29

In general, a standard system update will make all the necessary changes.