Stay Secure with the Latest Linux Advisories

security advisorycriticalsoftware update

Ubuntu 18.10: USN-3922-1 Critical: PHP Information Exposure

Several security issues were fixed in PHP.. =========================================================================Ubuntu Security Notice USN-3922-1 March 26, 2019 php7.0, php7.2 vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in PHP. Software Description: - php7.2: HTML-embedded scripting language interpreter - php7.0: HTML-embedded scripting language interpreter Details: It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. (CVE-2019-9637, CVE-2019-9638, CVE-2019-9639, CVE-2019-9640, CVE-2019- 9641) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10: libapache2-mod-php7.2 7.2.15-0ubuntu0.18.10.2 php7.2-cgi 7.2.15-0ubuntu0.18.10.2 php7.2-cli 7.2.15-0ubuntu0.18.10.2 php7.2-fpm 7.2.15-0ubuntu0.18.10.2 Ubuntu 18.04 LTS: libapache2-mod-php7.2 7.2.15-0ubuntu0.18.04.2 php7.2-cgi 7.2.15-0ubuntu0.18.04.2 php7.2-cli 7.2.15-0ubuntu0.18.04.2 php7.2-fpm 7.2.15-0ubuntu0.18.04.2 Ubuntu 16.04 LTS: libapache2-mod-php7.0 7.0.33-0ubuntu0.16.04.3 php7.0-cgi 7.0.33-0ubuntu0.16.04.3 php7.0-cli 7.0.33-0ubuntu0.16.04.3 php7.0-fpm 7.0.33-0ubuntu0.16.04.3 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3922-1 CVE-2019-9637, CVE-2019-9638, CVE-2019-9639, CVE-2019-9640, CVE-2019-9641 Package Information: https://launchpad.net/ubuntu/+source/php7.2/7.2.15-0ubuntu0.18.10.2 https://launchpad.net/ubuntu/+source/php7.2/7.2.15-0ubuntu0.18.04.2 https://launchpad.net/ubuntu/+source/php7.0/7.0.33-0ubuntu0.16.04.3 . Tackling PHP security issues in Ubuntu versions through essential updates. Discover the process to upgrade PHP for improved protection.. PHP vulnerabilities, Ubuntu security notice, software vulnerabilities, information exposure. . Severity: Critical. LinuxSecurity.com Team

Mar 26, 2019 •Critical Ubuntu