==========================================================================
Ubuntu Security Notice USN-3953-2
May 01, 2019
php5 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 14.04 ESM
– Ubuntu 12.04 ESM
Summary:
Several security issues were fixed in PHP.
Software Description:
– php5: HTML-embedded scripting language interpreter
Details:
USN-3953-1 fixed several vulnerabilities in PHP. This update provides
the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that PHP incorrectly handled certain exif tags in
JPEG images. A remote attacker could use this issue to cause PHP to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 14.04 ESM:
libapache2-mod-php5 5.5.9+dfsg-1ubuntu4.29+esm1
php5-cgi 5.5.9+dfsg-1ubuntu4.29+esm1
php5-cli 5.5.9+dfsg-1ubuntu4.29+esm1
php5-fpm 5.5.9+dfsg-1ubuntu4.29+esm1
Ubuntu 12.04 ESM:
libapache2-mod-php5 5.3.10-1ubuntu3.35
php5-cgi 5.3.10-1ubuntu3.35
php5-cli 5.3.10-1ubuntu3.35
php5-fpm 5.3.10-1ubuntu3.35
In general, a standard system update will make all the necessary
changes.
References:
https://usn.ubuntu.com/usn/usn-3953-2
https://usn.ubuntu.com/usn/usn-3953-1
CVE-2019-11034, CVE-2019-11035—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2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=vJXL
—–END PGP SIGNATURE—–
—
