Уведомление безопасности DSA-4628-1

Высокая (6.4)

(AV:N/AC:L/Au:N/C:P/I:N/A:P)

Debian

libapache2-mod-php7.0 (any) libphp7.0-embed (any) php7.0 (any) php7.0-bcmath (any) php7.0-bz2 (any) php7.0-cgi (any) php7.0-cli (any) php7.0-common (any) php7.0-curl (any) php7.0-dba (any) php7.0-dev (any) php7.0-enchant (any) php7.0-fpm (any) php7.0-gd (any) php7.0-gmp (any) php7.0-imap (any) php7.0-interbase (any) php7.0-intl (any) php7.0-json (any) php7.0-ldap (any) php7.0-mbstring (any) php7.0-mcrypt (any) php7.0-mysql (any) php7.0-odbc (any) php7.0-opcache (any) php7.0-pgsql (any) php7.0-phpdbg (any) php7.0-pspell (any) php7.0-readline (any) php7.0-recode (any) php7.0-snmp (any) php7.0-soap (any) php7.0-sqlite3 (any) php7.0-sybase (any) php7.0-tidy (any) php7.0-xml (any) php7.0-xmlrpc (any) php7.0-xsl (any) php7.0-zip (any)

Уведомление безопасности об уязвимостях php7.0-cgi, php7.0-mcrypt, php7.0-xsl, php7.0-fpm, php7.0-phpdbg, php7.0-curl, php7.0-ldap, php7.0-mbstring, php7.0-gmp, libphp7.0-embed, php7.0-gd, php7.0-common, php7.0-enchant, php7.0-soap, php7.0-odbc, php7.0-cli, php7.0-json, php7.0-pgsql, libapache2-mod-php7.0, php7.0-zip, php7.0-mysql, php7.0-dba, php7.0-sqlite3, php7.0-sybase, php7.0-pspell, php7.0-xml, php7.0-bz2, php7.0-recode, php7.0-dev, php7.0, php7.0-tidy, php7.0-interbase, php7.0-opcache, php7.0-readline, php7.0-intl, php7.0-imap, php7.0-xmlrpc, php7.0-bcmath, php7.0-snmp

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 9:
noarch:
libapache2-mod-php7.0 - 7.0.33-0+deb9u7
libphp7.0-embed - 7.0.33-0+deb9u7
php7.0 - 7.0.33-0+deb9u7
php7.0-bcmath - 7.0.33-0+deb9u7
php7.0-bz2 - 7.0.33-0+deb9u7
php7.0-cgi - 7.0.33-0+deb9u7
php7.0-cli - 7.0.33-0+deb9u7
php7.0-common - 7.0.33-0+deb9u7
php7.0-curl - 7.0.33-0+deb9u7
php7.0-dba - 7.0.33-0+deb9u7
php7.0-dev - 7.0.33-0+deb9u7
php7.0-enchant - 7.0.33-0+deb9u7
php7.0-fpm - 7.0.33-0+deb9u7
php7.0-gd - 7.0.33-0+deb9u7
php7.0-gmp - 7.0.33-0+deb9u7
php7.0-imap - 7.0.33-0+deb9u7
php7.0-interbase - 7.0.33-0+deb9u7
php7.0-intl - 7.0.33-0+deb9u7
php7.0-json - 7.0.33-0+deb9u7
php7.0-ldap - 7.0.33-0+deb9u7
php7.0-mbstring - 7.0.33-0+deb9u7
php7.0-mcrypt - 7.0.33-0+deb9u7
php7.0-mysql - 7.0.33-0+deb9u7
php7.0-odbc - 7.0.33-0+deb9u7
php7.0-opcache - 7.0.33-0+deb9u7
php7.0-pgsql - 7.0.33-0+deb9u7
php7.0-phpdbg - 7.0.33-0+deb9u7
php7.0-pspell - 7.0.33-0+deb9u7
php7.0-readline - 7.0.33-0+deb9u7
php7.0-recode - 7.0.33-0+deb9u7
php7.0-snmp - 7.0.33-0+deb9u7
php7.0-soap - 7.0.33-0+deb9u7
php7.0-sqlite3 - 7.0.33-0+deb9u7
php7.0-sybase - 7.0.33-0+deb9u7
php7.0-tidy - 7.0.33-0+deb9u7
php7.0-xml - 7.0.33-0+deb9u7
php7.0-xmlrpc - 7.0.33-0+deb9u7
php7.0-xsl - 7.0.33-0+deb9u7
php7.0-zip - 7.0.33-0+deb9u7

Источник: CVE
Наименование: CVE-2019-11045
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11045

Источник: CVE
Наименование: CVE-2019-11046
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11046

Источник: CVE
Наименование: CVE-2019-11047
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11047

Источник: CVE
Наименование: CVE-2019-11050
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11050

Источник: CVE
Наименование: CVE-2020-7059
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7059

Источник: CVE
Наименование: CVE-2020-7060
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7060

http://www.debian.org/security/dsa-4628/