The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleaning up temporary files created by upload request. This potentially could lead to accumulation of uncleaned temporary files exhausting the disk space on the target server.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-enchantUpgrade php-pgsqlUpgrade phpUpgrade php-processUpgrade php-intlUpgrade apcu-panelUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-mbstringUpgrade php-dbaUpgrade libzip-toolsUpgrade php-recodeUpgrade php-gmpUpgrade php-xmlUpgrade php-dbgUpgrade php-ldapUpgrade php-snmpUpgrade php-commonUpgrade libzipUpgrade php-pecl-apcuUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-develUpgrade php-bcmathUpgrade libzip-develUpgrade php-cliUpgrade php-fpmUpgrade php-embeddedUpgrade php-odbcUpgrade php-pearUpgrade php-mysqlndUpgrade php-pecl-xdebugUpgrade php-xmlrpcUpgrade php-json | May 4, 2022 | May 20, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | May 20, 2020 |
| Amazon_linux | — | Upgrade php72Upgrade php73 | Jul 18, 2020 | May 20, 2020 |
| Centos_linux | — | Upgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pgsqlUpgrade php-dbg-debuginfoUpgrade libzip-debuginfoUpgrade php-json-debuginfoUpgrade php-gmpUpgrade php-pearUpgrade php-gdUpgrade php-pecl-xdebug-debugsourceUpgrade php-pdo-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-xmlrpcUpgrade php-gd-debuginfoUpgrade php-fpmUpgrade php-soapUpgrade php-xml-debuginfoUpgrade php-odbcUpgrade php-xmlrpc-debuginfoUpgrade php-bcmathUpgrade php-process-debuginfoUpgrade php-commonUpgrade php-embeddedUpgrade php-pecl-apcu-debugsourceUpgrade php-ldapUpgrade php-ldap-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-debugsourceUpgrade php-recode-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-toolsUpgrade php-pecl-rrd-debugsourceUpgrade apcu-panelUpgrade php-embedded-debuginfoUpgrade php-debuginfoUpgrade php-gmp-debuginfoUpgrade php-recodeUpgrade php-pecl-zip-debuginfoUpgrade php-xmlUpgrade php-opcache-debuginfoUpgrade php-dbaUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlndUpgrade php-pecl-rrdUpgrade php-dbgUpgrade php-soap-debuginfoUpgrade php-snmpUpgrade php-intlUpgrade php-cliUpgrade php-processUpgrade phpUpgrade php-snmp-debuginfoUpgrade libzip-develUpgrade php-debugsourceUpgrade php-common-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-opcacheUpgrade php-dba-debuginfoUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-pecl-zipUpgrade libzipUpgrade php-odbc-debuginfoUpgrade php-pecl-apcuUpgrade php-enchant-debuginfo | Sep 9, 2020 | May 20, 2020 |
| Debian | — | Upgrade php7.4 | Jun 30, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-recodeUpgrade php-gdUpgrade php-processUpgrade php-soapUpgrade php-mysqlUpgrade php-cliUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-pgsqlUpgrade php-commonUpgrade php-odbcUpgrade php-ldapUpgrade php-pdoUpgrade php | Nov 3, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-ldapUpgrade php-gdUpgrade php-recodeUpgrade php-pdoUpgrade php-cliUpgrade phpUpgrade php-processUpgrade php-soapUpgrade php-mysqlUpgrade php-xmlUpgrade php-commonUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-odbc | Sep 28, 2020 | May 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-ldapUpgrade php-odbcUpgrade php-commonUpgrade php-cliUpgrade php-xmlUpgrade php-fpmUpgrade phpUpgrade php-recodeUpgrade php-pdoUpgrade php-processUpgrade php-xmlrpcUpgrade php-soapUpgrade php-gd | Jul 31, 2020 | May 20, 2020 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.20-11.4.25.0.1.75.1 on Solaris 11.4Upgrade web/php-74 to version 7.4.8-11.4.25.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | May 20, 2020 |
| Oracle_linux | — | Upgrade php-gdUpgrade php-dbaUpgrade php-cliUpgrade php-pearUpgrade php-xmlUpgrade php-jsonUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-develUpgrade php-snmpUpgrade php-pecl-xdebugUpgrade php-processUpgrade php-gmpUpgrade php-fpmUpgrade php-recodeUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-embeddedUpgrade php-opcacheUpgrade php-commonUpgrade php-dbgUpgrade libzip-toolsUpgrade php-pecl-zipUpgrade apcu-panelUpgrade php-pgsqlUpgrade libzipUpgrade php-mysqlndUpgrade phpUpgrade php-intlUpgrade php-enchantUpgrade libzip-develUpgrade php-pdoUpgrade php-ldapUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade php-odbcUpgrade php-pecl-apcu | Sep 10, 2020 | May 14, 2020 |
| Php | — | Upgrade to PHP version 7.2.31Upgrade to PHP version 7.3.18Upgrade to PHP version 7.4.6 | May 26, 2020 | May 20, 2020 |
| Redhat_linux | — | Upgrade php-odbc-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-develUpgrade php-gmpUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-apcu-develUpgrade php-pecl-rrdUpgrade php-enchant-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-dba-debuginfoUpgrade php-jsonUpgrade php-mbstringUpgrade php-bcmathUpgrade php-xml-debuginfoUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-pecl-xdebug-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-zip-debugsourceUpgrade php-pdoUpgrade php-intl-debuginfoUpgrade php-pecl-zipUpgrade php-commonUpgrade php-xmlUpgrade php-processUpgrade php-pearUpgrade php-gdUpgrade php-pecl-rrd-debugsourceUpgrade php-process-debuginfoUpgrade php-embeddedUpgrade php-bcmath-debuginfoUpgrade libzip-debuginfoUpgrade php-pgsqlUpgrade php-odbcUpgrade php-ldap-debuginfoUpgrade php-dbaUpgrade php-pecl-xdebug-debugsourceUpgrade php-pdo-debuginfoUpgrade php-debugsourceUpgrade php-snmpNo solution existsUpgrade php-recodeUpgrade php-fpm-debuginfoUpgrade php-enchantUpgrade php-pgsql-debuginfoUpgrade php-debuginfoUpgrade php-opcacheUpgrade php-cliUpgrade php-embedded-debuginfoUpgrade php-cli-debuginfoUpgrade php-json-debuginfoUpgrade php-soapUpgrade php-gd-debuginfoUpgrade php-intlUpgrade libzip-develUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-pecl-zip-debuginfoUpgrade php-soap-debuginfoUpgrade libzipUpgrade libzip-debugsourceUpgrade phpUpgrade php-common-debuginfoUpgrade php-dbgUpgrade php-mbstring-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-ldapUpgrade apcu-panel | Sep 9, 2020 | May 20, 2020 |
| Rocky_linux | — | Upgrade libzip-tools-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-mbstringUpgrade php-recodeUpgrade php-pecl-rrd-debuginfoUpgrade phpUpgrade libzip-debugsourceUpgrade libzipUpgrade php-opcacheUpgrade php-xmlrpc-debuginfoUpgrade php-bcmathUpgrade php-odbc-debuginfoUpgrade php-enchantUpgrade libzip-toolsUpgrade php-embeddedUpgrade php-intl-debuginfoUpgrade php-pdoUpgrade php-bcmath-debuginfoUpgrade php-mysqlndUpgrade php-debugsourceUpgrade php-snmp-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-rrd-debugsourceUpgrade php-soapUpgrade php-opcache-debuginfoUpgrade php-jsonUpgrade php-dbg-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-xmlrpcUpgrade php-process-debuginfoUpgrade php-cli-debuginfoUpgrade php-dbaUpgrade php-pdo-debuginfoUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-pecl-zip-debugsourceUpgrade php-gmp-debuginfoUpgrade php-gdUpgrade php-snmpUpgrade php-debuginfoUpgrade php-pecl-apcuUpgrade php-fpm-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-xdebugUpgrade php-odbcUpgrade php-commonUpgrade php-recode-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-develUpgrade php-ldapUpgrade php-pgsqlUpgrade php-pecl-zip-debuginfoUpgrade php-common-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-json-debuginfoUpgrade php-dba-debuginfoUpgrade libzip-develUpgrade php-xmlUpgrade php-pecl-apcu-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-intlUpgrade php-dbgUpgrade php-cliUpgrade php-xml-debuginfoUpgrade php-fpm | Mar 12, 2024 | May 20, 2020 |
| Suse | — | Upgrade php72-pgsqlUpgrade php72-shmopUpgrade php72-fastcgiUpgrade php72-pharUpgrade php5-sysvshmUpgrade php72-intlUpgrade php5-mysqlUpgrade php7-xmlwriterUpgrade php7-enchantUpgrade php72-opensslUpgrade php7-snmpUpgrade php5-sqliteUpgrade php72-wddxUpgrade php7-xmlreaderUpgrade php7-sodiumUpgrade php7-intlUpgrade php5-bcmathUpgrade php5-pdoUpgrade php72-fileinfoUpgrade php7-gmpUpgrade php7-ctypeUpgrade php5-zipUpgrade php7-ftpUpgrade php7-pgsqlUpgrade php5-imapUpgrade php72-sysvshmUpgrade php72-zlibUpgrade php5Upgrade php72-zipUpgrade php7-domUpgrade php72-odbcUpgrade php5-sysvsemUpgrade php72-pearUpgrade php5-opensslUpgrade php72-sysvmsgUpgrade php7Upgrade php7-xslUpgrade php7-embedUpgrade php5-posixUpgrade php5-gmpUpgrade php5-shmopUpgrade php7-xmlrpcUpgrade php72-domUpgrade php5-jsonUpgrade php5-pcntlUpgrade apache2-mod_php7Upgrade php5-bz2Upgrade php5-pspellUpgrade php72-posixUpgrade php5-mcryptUpgrade php7-curlUpgrade php5-intlUpgrade php5-suhosinUpgrade php7-exifUpgrade php7-firebirdUpgrade php5-gettextUpgrade php72-imapUpgrade php72-socketsUpgrade php72-mysqlUpgrade php7-sysvshmUpgrade php5-fastcgiUpgrade php5-pharUpgrade php7-tidyUpgrade php72-pdoUpgrade php7-jsonUpgrade php7-gdUpgrade php72-readlineUpgrade php5-fileinfoUpgrade php7-fastcgiUpgrade php5-xslUpgrade php7-mbstringUpgrade php72-curlUpgrade php7-sysvmsgUpgrade php5-develUpgrade php5-xmlreaderUpgrade php5-sysvmsgUpgrade php72-ldapUpgrade php7-pcntlUpgrade php72-bz2Upgrade php72Upgrade php5-calendarUpgrade php7-imapUpgrade php5-soapUpgrade php5-gdUpgrade php5-ldapUpgrade php5-xmlrpcUpgrade php7-mcryptUpgrade php72-tokenizerUpgrade php5-pearUpgrade php7-fpmUpgrade php7-opensslUpgrade php72-xmlwriterUpgrade php7-fileinfoUpgrade php72-fpmUpgrade php72-xslUpgrade php7-opcacheUpgrade php72-develUpgrade php7-ldapUpgrade php7-testUpgrade php72-sysvsemUpgrade php7-zipUpgrade php72-gdUpgrade php7-shmopUpgrade php72-mbstringUpgrade php5-enchantUpgrade php5-exifUpgrade php5-ftpUpgrade php7-readlineUpgrade php7-pharUpgrade php72-pcntlUpgrade php5-domUpgrade php72-xmlreaderUpgrade php72-pspellUpgrade php7-bz2Upgrade php72-snmpUpgrade apache2-mod_php72Upgrade php72-iconvUpgrade php5-snmpUpgrade php5-iconvUpgrade php5-wddxUpgrade php72-ftpUpgrade php5-odbcUpgrade php72-pear-archive_tarUpgrade php7-pear-archive_tarUpgrade php7-develUpgrade php5-pgsqlUpgrade php7-gettextUpgrade php7-tokenizerUpgrade php72-gettextUpgrade php7-posixUpgrade php7-calendarUpgrade php72-enchantUpgrade php7-dbaUpgrade php7-mysqlUpgrade php7-sqliteUpgrade php72-exifUpgrade php5-opcacheUpgrade php72-tidyUpgrade php7-pearUpgrade php5-ctypeUpgrade php72-calendarUpgrade php5-xmlwriterUpgrade php5-mbstringUpgrade php5-fpmUpgrade php5-zlibUpgrade php72-dbaUpgrade php5-socketsUpgrade php5-tokenizerUpgrade php7-soapUpgrade php72-sodiumUpgrade php72-gmpUpgrade php72-bcmathUpgrade php5-curlUpgrade apache2-mod_php5Upgrade php5-dbaUpgrade php72-ctypeUpgrade php7-wddxUpgrade php7-odbcUpgrade php72-opcacheUpgrade php7-zlibUpgrade php72-soapUpgrade php72-xmlrpcUpgrade php72-sqliteUpgrade php7-socketsUpgrade php7-iconvUpgrade php7-pspellUpgrade php7-bcmathUpgrade php72-jsonUpgrade php7-pdoUpgrade php7-sysvsem | Jun 6, 2020 | May 20, 2020 |
| Ubuntu | — | Upgrade php5-cgi (Ubuntu Pro)Upgrade libapache2-mod-php7.4Upgrade php5-cliUpgrade php7.4-cgiUpgrade libapache2-mod-php7.0Upgrade php7.3-cliUpgrade php5-fpmUpgrade php7.2-fpmUpgrade php7.0-cliUpgrade php7.0-fpmUpgrade php7.2-cgiUpgrade php7.0-cgiUpgrade php7.4-mbstringUpgrade php5-fpm (Ubuntu Pro)Upgrade libapache2-mod-php7.2Upgrade php7.4-cliUpgrade php7.3-mbstringUpgrade php7.2-mbstringUpgrade php5-cgiUpgrade php7.3-fpmUpgrade php5-cli (Ubuntu Pro)Upgrade libapache2-mod-php7.3Upgrade php7.3-cgiUpgrade php7.4-fpmUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade libapache2-mod-php5Upgrade php7.0-mbstringUpgrade php7.2-cli | May 28, 2020 | May 20, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub