Уведомление безопасности DSA-4626-1

Высокая (7.5)

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Debian

libapache2-mod-php7.3 (any) libphp7.3-embed (any) php7.3 (any) php7.3-bcmath (any) php7.3-bz2 (any) php7.3-cgi (any) php7.3-cli (any) php7.3-common (any) php7.3-curl (any) php7.3-dba (any) php7.3-dev (any) php7.3-enchant (any) php7.3-fpm (any) php7.3-gd (any) php7.3-gmp (any) php7.3-imap (any) php7.3-interbase (any) php7.3-intl (any) php7.3-json (any) php7.3-ldap (any) php7.3-mbstring (any) php7.3-mysql (any) php7.3-odbc (any) php7.3-opcache (any) php7.3-pgsql (any) php7.3-phpdbg (any) php7.3-pspell (any) php7.3-readline (any) php7.3-recode (any) php7.3-snmp (any) php7.3-soap (any) php7.3-sqlite3 (any) php7.3-sybase (any) php7.3-tidy (any) php7.3-xml (any) php7.3-xmlrpc (any) php7.3-xsl (any) php7.3-zip (any)

Уведомление безопасности об уязвимостях php7.3-fpm, php7.3-sqlite3, php7.3-enchant, php7.3-xsl, php7.3-soap, php7.3, php7.3-dba, php7.3-json, php7.3-mbstring, php7.3-opcache, php7.3-cli, php7.3-snmp, php7.3-xmlrpc, libapache2-mod-php7.3, php7.3-phpdbg, php7.3-tidy, php7.3-zip, php7.3-gmp, php7.3-interbase, php7.3-xml, php7.3-bcmath, php7.3-dev, php7.3-ldap, php7.3-intl, php7.3-curl, php7.3-mysql, php7.3-pspell, php7.3-odbc, php7.3-recode, php7.3-gd, php7.3-bz2, php7.3-readline, php7.3-pgsql, php7.3-common, libphp7.3-embed, php7.3-cgi, php7.3-imap, php7.3-sybase

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 10:
noarch:
libapache2-mod-php7.3 - 7.3.14-1~deb10u1
libphp7.3-embed - 7.3.14-1~deb10u1
php7.3 - 7.3.14-1~deb10u1
php7.3-bcmath - 7.3.14-1~deb10u1
php7.3-bz2 - 7.3.14-1~deb10u1
php7.3-cgi - 7.3.14-1~deb10u1
php7.3-cli - 7.3.14-1~deb10u1
php7.3-common - 7.3.14-1~deb10u1
php7.3-curl - 7.3.14-1~deb10u1
php7.3-dba - 7.3.14-1~deb10u1
php7.3-dev - 7.3.14-1~deb10u1
php7.3-enchant - 7.3.14-1~deb10u1
php7.3-fpm - 7.3.14-1~deb10u1
php7.3-gd - 7.3.14-1~deb10u1
php7.3-gmp - 7.3.14-1~deb10u1
php7.3-imap - 7.3.14-1~deb10u1
php7.3-interbase - 7.3.14-1~deb10u1
php7.3-intl - 7.3.14-1~deb10u1
php7.3-json - 7.3.14-1~deb10u1
php7.3-ldap - 7.3.14-1~deb10u1
php7.3-mbstring - 7.3.14-1~deb10u1
php7.3-mysql - 7.3.14-1~deb10u1
php7.3-odbc - 7.3.14-1~deb10u1
php7.3-opcache - 7.3.14-1~deb10u1
php7.3-pgsql - 7.3.14-1~deb10u1
php7.3-phpdbg - 7.3.14-1~deb10u1
php7.3-pspell - 7.3.14-1~deb10u1
php7.3-readline - 7.3.14-1~deb10u1
php7.3-recode - 7.3.14-1~deb10u1
php7.3-snmp - 7.3.14-1~deb10u1
php7.3-soap - 7.3.14-1~deb10u1
php7.3-sqlite3 - 7.3.14-1~deb10u1
php7.3-sybase - 7.3.14-1~deb10u1
php7.3-tidy - 7.3.14-1~deb10u1
php7.3-xml - 7.3.14-1~deb10u1
php7.3-xmlrpc - 7.3.14-1~deb10u1
php7.3-xsl - 7.3.14-1~deb10u1
php7.3-zip - 7.3.14-1~deb10u1

Источник: CVE
Наименование: CVE-2019-11045
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11045

Источник: CVE
Наименование: CVE-2019-11046
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11046

Источник: CVE
Наименование: CVE-2019-11047
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11047

Источник: CVE
Наименование: CVE-2019-11049
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11049

Источник: CVE
Наименование: CVE-2019-11050
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11050

Источник: CVE
Наименование: CVE-2020-7059
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7059

Источник: CVE
Наименование: CVE-2020-7060
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7060

http://www.debian.org/security/dsa-4626/