The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade phpUpgrade php-pgsqlUpgrade php-commonUpgrade php-intlUpgrade apcu-panelUpgrade php-pecl-apcuUpgrade php-pdoUpgrade php-ldapUpgrade php-dbgUpgrade php-odbcUpgrade php-bcmathUpgrade php-pecl-rrdUpgrade php-pearUpgrade php-pecl-zipUpgrade php-jsonUpgrade libzipUpgrade php-snmpUpgrade php-mysqlndUpgrade php-pecl-xdebugUpgrade php-gdUpgrade php-enchantUpgrade php-gmpUpgrade php-opcacheUpgrade php-xmlrpcUpgrade php-processUpgrade php-develUpgrade php-cliUpgrade libzip-develUpgrade php-fpmUpgrade php-pecl-apcu-develUpgrade libzip-toolsUpgrade php-xmlUpgrade php-dbaUpgrade php-mbstringUpgrade php-embeddedUpgrade php-recodeUpgrade php-soap | May 4, 2022 | Feb 27, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 27, 2020 |
| Amazon_linux | — | Upgrade php72Upgrade php73 | Mar 14, 2020 | Feb 27, 2020 |
| Centos_linux | — | Upgrade php-ldap-debuginfoUpgrade php-opcache-debuginfoUpgrade phpUpgrade php-intlUpgrade php-mbstring-debuginfoUpgrade php-soap-debuginfoUpgrade apcu-panelUpgrade php-snmpUpgrade php-intl-debuginfoUpgrade php-recodeUpgrade libzip-toolsUpgrade php-xmlUpgrade php-mysqlndUpgrade php-pecl-rrd-debugsourceUpgrade php-recode-debuginfoUpgrade php-opcacheUpgrade php-commonUpgrade php-dba-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-json-debuginfoUpgrade php-debuginfoUpgrade php-common-debuginfoUpgrade php-mbstringUpgrade php-pgsql-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dbgUpgrade php-odbcUpgrade libzip-debuginfoUpgrade php-snmp-debuginfoUpgrade php-cliUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-develUpgrade php-pecl-zip-debugsourceUpgrade php-enchant-debuginfoUpgrade php-processUpgrade libzipUpgrade php-pecl-apcu-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-odbc-debuginfoUpgrade php-fpm-debuginfoUpgrade php-debugsourceUpgrade php-gd-debuginfoUpgrade php-pearUpgrade php-xmlrpcUpgrade php-enchantUpgrade php-soapUpgrade php-process-debuginfoUpgrade php-embedded-debuginfoUpgrade php-embeddedUpgrade libzip-debugsourceUpgrade php-cli-debuginfoUpgrade php-pecl-zipUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade php-pdo-debuginfoUpgrade php-pdoUpgrade php-pecl-rrdUpgrade php-dbaUpgrade php-dbg-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-fpmUpgrade php-develUpgrade php-ldapUpgrade php-mysqlnd-debuginfoUpgrade php-pgsqlUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-gdUpgrade php-xml-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-bcmath | Sep 9, 2020 | Feb 27, 2020 |
| Debian | — | Upgrade php7.4 | Mar 30, 2020 | Feb 27, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Mar 27, 2020 | Feb 27, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-ldapUpgrade php-soapUpgrade phpUpgrade php-odbcUpgrade php-pgsqlUpgrade php-commonUpgrade php-mysqlUpgrade php-processUpgrade php-xmlrpcUpgrade php-cliUpgrade php-xmlUpgrade php-recodeUpgrade php-pdoUpgrade php-gd | Nov 3, 2020 | Feb 27, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-odbcUpgrade phpUpgrade php-ldapUpgrade php-pgsqlUpgrade php-soapUpgrade php-gdUpgrade php-commonUpgrade php-cliUpgrade php-mysqlUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-processUpgrade php-xmlUpgrade php-pdo | Sep 28, 2020 | Feb 27, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-fpmUpgrade php-odbcUpgrade php-pdoUpgrade php-gdUpgrade php-soapUpgrade php-xmlrpcUpgrade php-processUpgrade php-ldapUpgrade php-cliUpgrade php-commonUpgrade php-xmlUpgrade php-recodeUpgrade php | Jul 31, 2020 | Feb 27, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.3-11.4.21.0.1.69.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.15-11.4.20.0.1.4.0 on Solaris 11.4 | Jan 19, 2021 | Feb 27, 2020 |
| Oracle_linux | — | Upgrade php-mbstringUpgrade libzip-toolsUpgrade php-recodeUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-mysqlndUpgrade php-processUpgrade php-dbaUpgrade php-gdUpgrade php-opcacheUpgrade php-enchantUpgrade php-xmlrpcUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-odbcUpgrade php-bcmathUpgrade php-gmpUpgrade php-jsonUpgrade php-embeddedUpgrade libzipUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-pecl-xdebugUpgrade apcu-panelUpgrade php-pearUpgrade php-ldapUpgrade php-intlUpgrade php-cliUpgrade phpUpgrade php-fpmUpgrade php-dbgUpgrade php-snmpUpgrade php-commonUpgrade libzip-develUpgrade php-develUpgrade php-pecl-apcuUpgrade php-xml | Sep 10, 2020 | Feb 4, 2020 |
| Php | — | Upgrade to PHP version 7.3.15Upgrade to PHP version 7.4.3Upgrade to PHP version 7.2.28 | Mar 27, 2020 | Feb 27, 2020 |
| Redhat_linux | — | Upgrade php-snmp-debuginfoUpgrade php-cli-debuginfoUpgrade php-ldapUpgrade php-pecl-xdebugUpgrade php-process-debuginfoUpgrade php-pdo-debuginfoUpgrade php-gd-debuginfoUpgrade php-bcmathUpgrade php-fpm-debuginfoUpgrade php-dba-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-zipUpgrade php-xml-debuginfoUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-pgsqlUpgrade php-fpmUpgrade php-mbstring-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade libzip-debugsourceUpgrade libzipUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-dbaUpgrade php-enchantUpgrade php-gmpUpgrade php-pdoUpgrade libzip-tools-debuginfoUpgrade php-odbc-debuginfoUpgrade php-jsonUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug-debugsourceUpgrade php-odbcUpgrade php-pecl-apcu-debugsourceUpgrade php-processUpgrade php-pecl-rrd-debuginfoUpgrade php-mbstringUpgrade php-json-debuginfoUpgrade php-develUpgrade php-snmpUpgrade php-debugsourceUpgrade php-common-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-recode-debuginfoUpgrade php-intlUpgrade php-xmlrpcUpgrade libzip-toolsUpgrade php-embeddedUpgrade php-pearUpgrade php-recodeUpgrade php-cliUpgrade php-dbgUpgrade phpUpgrade php-opcacheUpgrade php-pecl-zip-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-develUpgrade php-pecl-apcuUpgrade php-intl-debuginfoUpgrade php-enchant-debuginfoUpgrade php-commonUpgrade php-pecl-rrd-debugsourceUpgrade php-ldap-debuginfoUpgrade php-embedded-debuginfoUpgrade php-mysqlndNo solution existsUpgrade apcu-panelUpgrade php-gmp-debuginfoUpgrade php-opcache-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-xmlUpgrade php-debuginfoUpgrade php-dbg-debuginfo | Sep 9, 2020 | Feb 27, 2020 |
| Rocky_linux | — | Upgrade php-xmlrpcUpgrade php-commonUpgrade php-intl-debuginfoUpgrade php-soap-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-dbgUpgrade php-ldap-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-odbcUpgrade php-json-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-mbstringUpgrade php-pdo-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-toolsUpgrade php-pecl-zip-debuginfoUpgrade php-debuginfoUpgrade php-pgsqlUpgrade php-pecl-xdebugUpgrade php-dba-debuginfoUpgrade libzip-debuginfoUpgrade php-process-debuginfoUpgrade php-odbc-debuginfoUpgrade php-opcache-debuginfoUpgrade php-cli-debuginfoUpgrade php-embedded-debuginfoUpgrade php-recode-debuginfoUpgrade php-intlUpgrade php-pecl-xdebug-debuginfoUpgrade php-dbaUpgrade php-cliUpgrade php-fpm-debuginfoUpgrade php-gmpUpgrade php-gdUpgrade php-snmpUpgrade php-fpmUpgrade php-enchantUpgrade phpUpgrade php-pecl-zipUpgrade php-ldapUpgrade php-bcmath-debuginfoUpgrade libzip-develUpgrade php-embeddedUpgrade libzip-debugsourceUpgrade php-pecl-apcu-develUpgrade php-pecl-apcuUpgrade php-jsonUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-rrdUpgrade php-bcmathUpgrade php-soapUpgrade libzipUpgrade php-xmlUpgrade php-pgsql-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pdoUpgrade php-recodeUpgrade php-gmp-debuginfoUpgrade php-develUpgrade php-opcacheUpgrade php-pecl-rrd-debugsourceUpgrade php-gd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-debugsourceUpgrade php-mysqlndUpgrade php-enchant-debuginfoUpgrade php-process | Mar 12, 2024 | Feb 27, 2020 |
| Suse | — | Upgrade php72-tidyUpgrade php7-curlUpgrade php7-fastcgiUpgrade php72-imapUpgrade php72-iconvUpgrade php72-pspellUpgrade php72-zipUpgrade php5-mbstringUpgrade php5-sysvshmUpgrade php5-exifUpgrade php72-gmpUpgrade php5-gettextUpgrade php7-pdoUpgrade php5-posixUpgrade php5-ctypeUpgrade php72-ldapUpgrade php7-tokenizerUpgrade php5-xslUpgrade php5-xmlrpcUpgrade php72-sqliteUpgrade php7-xmlwriterUpgrade php7-bcmathUpgrade php5-xmlwriterUpgrade php7-mbstringUpgrade php7-fpmUpgrade php5-zipUpgrade php7-iconvUpgrade php7-pharUpgrade php7-shmopUpgrade php7-develUpgrade php7-opensslUpgrade php72-fpmUpgrade php72-xmlrpcUpgrade php5-sysvmsgUpgrade php5-intlUpgrade php7-ldapUpgrade apache2-mod_php5Upgrade php7-wddxUpgrade php7-odbcUpgrade php7-ctypeUpgrade php72-gettextUpgrade php5-pearUpgrade php72-jsonUpgrade php7-sysvsemUpgrade php5-iconvUpgrade php7-snmpUpgrade php72-pear-archive_tarUpgrade php7-enchantUpgrade php7-posixUpgrade php7-soapUpgrade php5-fastcgiUpgrade php5-socketsUpgrade php72-tokenizerUpgrade php72-opensslUpgrade php7-socketsUpgrade php72-curlUpgrade php72-ctypeUpgrade php5-zlibUpgrade php72-xmlwriterUpgrade php7-readlineUpgrade php5-opensslUpgrade php7-sysvmsgUpgrade php5-gdUpgrade php7-pgsqlUpgrade php5-domUpgrade php5-wddxUpgrade php72-socketsUpgrade php72-xmlreaderUpgrade php72-readlineUpgrade php5-ftpUpgrade php72-ftpUpgrade php7-zlibUpgrade php5-fileinfoUpgrade php72-odbcUpgrade php72-snmpUpgrade php72-domUpgrade apache2-mod_php72Upgrade php72-calendarUpgrade apache2-mod_php7Upgrade php72-zlibUpgrade php7-ftpUpgrade php5-imapUpgrade php72-soapUpgrade php72-mysqlUpgrade php72-fastcgiUpgrade php7-jsonUpgrade php72-posixUpgrade php5-pharUpgrade php5-shmopUpgrade php72-xslUpgrade php7-sodiumUpgrade php5-gmpUpgrade php7-xslUpgrade php7-exifUpgrade php72Upgrade php72-bcmathUpgrade php72-pdoUpgrade php72-intlUpgrade php7-xmlrpcUpgrade php7-firebirdUpgrade php7-fileinfoUpgrade php5-pgsqlUpgrade php7-dbaUpgrade php5-fpmUpgrade php72-pearUpgrade php72-gdUpgrade php72-dbaUpgrade php72-bz2Upgrade php5-mcryptUpgrade php72-fileinfoUpgrade php5-soapUpgrade php7-testUpgrade php7-embedUpgrade php5-curlUpgrade php72-sysvshmUpgrade php7Upgrade php7-zipUpgrade php5-jsonUpgrade php5-xmlreaderUpgrade php5-bcmathUpgrade php7-opcacheUpgrade php7-domUpgrade php7-mysqlUpgrade php72-develUpgrade php5-odbcUpgrade php7-gdUpgrade php72-pcntlUpgrade php7-xmlreaderUpgrade php7-sqliteUpgrade php5-pspellUpgrade php7-gmpUpgrade php5-pdoUpgrade php7-gettextUpgrade php7-intlUpgrade php72-exifUpgrade php72-shmopUpgrade php5-suhosinUpgrade php5-dbaUpgrade php72-sysvmsgUpgrade php72-wddxUpgrade php72-sodiumUpgrade php72-opcacheUpgrade php7-pearUpgrade php5-develUpgrade php7-sysvshmUpgrade php7-pear-archive_tarUpgrade php5-bz2Upgrade php5-ldapUpgrade php72-pgsqlUpgrade php5Upgrade php7-tidyUpgrade php5-opcacheUpgrade php5-pcntlUpgrade php5-calendarUpgrade php5-tokenizerUpgrade php72-enchantUpgrade php5-mysqlUpgrade php72-sysvsemUpgrade php5-snmpUpgrade php5-sysvsemUpgrade php7-bz2Upgrade php5-enchantUpgrade php7-calendarUpgrade php72-mbstringUpgrade php72-pharUpgrade php7-pcntlUpgrade php5-sqlite | Mar 10, 2020 | Feb 27, 2020 |
| Ubuntu | — | Upgrade php7.0-fpmUpgrade php5-fpmUpgrade php7.2Upgrade php7.0-cliUpgrade php5-cgiUpgrade php5-cli (Ubuntu Pro)Upgrade php5-cgi (Ubuntu Pro)Upgrade php7.3-cgiUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.2-fpmUpgrade php7.2-cliUpgrade php7.3-mbstringUpgrade php7.2-cgiUpgrade libapache2-mod-php5Upgrade libapache2-mod-php7.0Upgrade libapache2-mod-php7.2Upgrade php7.3-fpmUpgrade php7.0-cgiUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.3-cliUpgrade libapache2-mod-php7.3Upgrade php5-cli | Apr 16, 2020 | Feb 27, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub