what you don't know can hurt you

Debian Security Advisory 4529-1

Debian Security Advisory 4529-1
Posted Sep 23, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4529-1 - Multiple security issues were found in PHP, a widely-used open source extension and the iconv_mime_decode_headers() function could result in information disclosure or denial of service.

tags | advisory, denial of service, php, info disclosure
systems | linux, debian
advisories | CVE-2019-11034, CVE-2019-11035, CVE-2019-11036, CVE-2019-11038, CVE-2019-11039, CVE-2019-11040, CVE-2019-11041, CVE-2019-11042
MD5 | f583acc45bad01ccf4ef3aeecb05cc02

Debian Security Advisory 4529-1

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4529-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
September 20, 2019 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : php7.0
CVE ID : CVE-2019-11034 CVE-2019-11035 CVE-2019-11036 CVE-2019-11038
CVE-2019-11039 CVE-2019-11040 CVE-2019-11041 CVE-2019-11042

Multiple security issues were found in PHP, a widely-used open source
general purpose scripting language: Missing sanitising in the EXIF
extension and the iconv_mime_decode_headers() function could result in
information disclosure or denial of service.

For the oldstable distribution (stretch), these problems have been fixed
in version 7.0.33-0+deb9u5.

We recommend that you upgrade your php7.0 packages.

For the detailed security status of php7.0 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/php7.0

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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wlCm
-----END PGP SIGNATURE-----
Login or Register to add favorites

File Archive:

January 2021

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jan 1st
    4 Files
  • 2
    Jan 2nd
    3 Files
  • 3
    Jan 3rd
    3 Files
  • 4
    Jan 4th
    33 Files
  • 5
    Jan 5th
    31 Files
  • 6
    Jan 6th
    21 Files
  • 7
    Jan 7th
    15 Files
  • 8
    Jan 8th
    19 Files
  • 9
    Jan 9th
    1 Files
  • 10
    Jan 10th
    1 Files
  • 11
    Jan 11th
    33 Files
  • 12
    Jan 12th
    19 Files
  • 13
    Jan 13th
    27 Files
  • 14
    Jan 14th
    8 Files
  • 15
    Jan 15th
    16 Files
  • 16
    Jan 16th
    1 Files
  • 17
    Jan 17th
    2 Files
  • 18
    Jan 18th
    20 Files
  • 19
    Jan 19th
    32 Files
  • 20
    Jan 20th
    15 Files
  • 21
    Jan 21st
    10 Files
  • 22
    Jan 22nd
    0 Files
  • 23
    Jan 23rd
    0 Files
  • 24
    Jan 24th
    0 Files
  • 25
    Jan 25th
    0 Files
  • 26
    Jan 26th
    0 Files
  • 27
    Jan 27th
    0 Files
  • 28
    Jan 28th
    0 Files
  • 29
    Jan 29th
    0 Files
  • 30
    Jan 30th
    0 Files
  • 31
    Jan 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2020 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close