The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzip-toolsUpgrade php-recodeUpgrade php-gdUpgrade php-cliUpgrade php-pecl-apcuUpgrade phpUpgrade libzip-develUpgrade php-mysqlndUpgrade php-xmlUpgrade php-ldapUpgrade php-opcacheUpgrade apcu-panelUpgrade libzipUpgrade php-embeddedUpgrade php-pearUpgrade php-processUpgrade php-xmlrpcUpgrade php-snmpUpgrade php-enchantUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-dbaUpgrade php-soapUpgrade php-mbstringUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-odbcUpgrade php-intlUpgrade php-develUpgrade php-dbgUpgrade php-pdoUpgrade php-pgsqlUpgrade php-gmpUpgrade php-common | May 4, 2022 | Mar 9, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Mar 8, 2019 |
| Centos_linux | — | Upgrade php-dbaUpgrade php-pdoUpgrade php-pecl-apcu-debuginfoUpgrade libzipUpgrade libzip-debugsourceUpgrade php-debugsourceUpgrade php-dbg-debuginfoUpgrade php-pgsqlUpgrade php-jsonUpgrade php-soapUpgrade php-fpmUpgrade php-bcmathUpgrade php-snmp-debuginfoUpgrade php-processUpgrade php-xmlrpc-debuginfoUpgrade php-develUpgrade php-gmpUpgrade php-pdo-debuginfoUpgrade php-odbc-debuginfoUpgrade php-cli-debuginfoUpgrade php-xmlrpcUpgrade php-gmp-debuginfoUpgrade php-xml-debuginfoUpgrade phpUpgrade php-ldapUpgrade php-pecl-zipUpgrade php-pecl-zip-debugsourceUpgrade php-process-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-gd-debuginfoUpgrade php-embeddedUpgrade php-enchantUpgrade php-embedded-debuginfoUpgrade php-fpm-debuginfoUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade libzip-toolsUpgrade php-snmpUpgrade php-opcacheUpgrade php-pecl-apcu-debugsourceUpgrade php-common-debuginfoUpgrade php-recode-debuginfoUpgrade php-mysqlndUpgrade libzip-develUpgrade php-intlUpgrade php-dba-debuginfoUpgrade php-ldap-debuginfoUpgrade php-soap-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dbgUpgrade php-intl-debuginfoUpgrade php-odbcUpgrade php-enchant-debuginfoUpgrade php-debuginfoUpgrade php-cliUpgrade php-pecl-apcuUpgrade php-opcache-debuginfoUpgrade apcu-panelUpgrade php-bcmath-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-xmlUpgrade php-json-debuginfoUpgrade php-commonUpgrade php-mbstringUpgrade php-mysqlnd-debuginfoUpgrade libzip-debuginfoUpgrade php-recodeUpgrade php-pear | Apr 29, 2020 | Mar 9, 2019 |
| Debian | — | Upgrade php7.3 | Mar 12, 2019 | Mar 8, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Mar 9, 2019 |
| Oracle_linux | — | Upgrade apcu-panelUpgrade php-opcacheUpgrade phpUpgrade php-mysqlndUpgrade libzip-develUpgrade php-intlUpgrade php-processUpgrade php-commonUpgrade php-dbaUpgrade php-recodeUpgrade php-snmpUpgrade php-odbcUpgrade libzip-toolsUpgrade php-cliUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-develUpgrade php-gmpUpgrade php-embeddedUpgrade php-pecl-zipUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-fpmUpgrade php-soapUpgrade php-mbstringUpgrade php-jsonUpgrade php-bcmathUpgrade php-enchantUpgrade libzipUpgrade php-pecl-apcuUpgrade php-pdoUpgrade php-xmlUpgrade php-pearUpgrade php-gdUpgrade php-dbg | Jul 22, 2024 | Feb 23, 2019 |
| Php | — | Upgrade to PHP version 7.3.3Upgrade to PHP version 7.2.16Upgrade to PHP version 7.1.27 | Mar 12, 2019 | Mar 8, 2019 |
| Redhat_linux | — | Upgrade php-gmp-debuginfoUpgrade php-pdoUpgrade php-opcacheUpgrade php-debugsourceUpgrade php-dbg-debuginfoUpgrade libzip-develUpgrade php-enchantUpgrade php-xmlUpgrade php-embeddedUpgrade php-cliUpgrade php-snmp-debuginfoUpgrade php-soap-debuginfoUpgrade php-pearUpgrade php-snmpUpgrade php-mbstringUpgrade php-embedded-debuginfoUpgrade php-fpmUpgrade php-ldap-debuginfoUpgrade php-recodeUpgrade php-xmlrpc-debuginfoUpgrade phpUpgrade php-pgsql-debuginfoUpgrade php-recode-debuginfoUpgrade php-bcmathUpgrade php-pecl-apcu-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-gd-debuginfoUpgrade php-mysqlndUpgrade php-pecl-zipUpgrade libzipUpgrade php-processUpgrade php-gdUpgrade php-intl-debuginfoUpgrade php-xmlrpcUpgrade php-develUpgrade php-intlUpgrade php-bcmath-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-develUpgrade php-cli-debuginfoUpgrade php-xml-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dba-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-common-debuginfoUpgrade apcu-panelUpgrade php-debuginfoUpgrade php-pecl-apcuUpgrade libzip-toolsUpgrade php-mysqlnd-debuginfoUpgrade php-soapUpgrade php-process-debuginfoUpgrade php-json-debuginfoUpgrade php-jsonUpgrade php-dbaUpgrade php-pecl-apcu-debugsourceUpgrade php-pgsqlUpgrade php-pecl-zip-debugsourceUpgrade php-opcache-debuginfoUpgrade php-odbcUpgrade php-enchant-debuginfoUpgrade php-dbgUpgrade php-pdo-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-ldapUpgrade php-commonUpgrade libzip-debugsourceUpgrade php-gmp | Apr 29, 2020 | Mar 9, 2019 |
| Rocky_linux | — | Upgrade libzip-tools-debuginfoUpgrade php-pgsqlUpgrade php-intl-debuginfoUpgrade php-dbg-debuginfoUpgrade php-processUpgrade php-gmpUpgrade php-bcmathUpgrade php-xmlrpc-debuginfoUpgrade php-jsonUpgrade php-pdo-debuginfoUpgrade php-dba-debuginfoUpgrade php-cli-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpcUpgrade php-common-debuginfoUpgrade php-opcache-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-zipUpgrade php-xml-debuginfoUpgrade php-develUpgrade libzip-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-pdoUpgrade php-odbcUpgrade php-fpmUpgrade php-enchant-debuginfoUpgrade php-commonUpgrade php-mbstringUpgrade php-debuginfoUpgrade php-cliUpgrade php-enchantUpgrade php-recodeUpgrade php-pecl-zip-debuginfoUpgrade php-json-debuginfoUpgrade php-ldap-debuginfoUpgrade php-embedded-debuginfoUpgrade libzip-debugsourceUpgrade php-debugsourceUpgrade php-snmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-gd-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-toolsUpgrade libzipUpgrade php-snmpUpgrade php-gmp-debuginfoUpgrade php-intlUpgrade php-ldapUpgrade php-opcacheUpgrade php-bcmath-debuginfoUpgrade php-embeddedUpgrade php-gdUpgrade php-dbaUpgrade php-dbgUpgrade php-recode-debuginfoUpgrade php-process-debuginfoUpgrade libzip-develUpgrade php-pecl-apcu-debugsourceUpgrade php-mysqlndUpgrade phpUpgrade php-xmlUpgrade php-soap-debuginfoUpgrade php-mbstring-debuginfo | Mar 12, 2024 | Mar 9, 2019 |
| Suse | — | Upgrade php7-shmopUpgrade php72-dbaUpgrade php72-bcmathUpgrade php7-xmlrpcUpgrade php5-pdoUpgrade php72-fpmUpgrade php72-exifUpgrade php5-sqliteUpgrade php7-imapUpgrade php7-ldapUpgrade php53-pcntlUpgrade php5-jsonUpgrade php5-mcryptUpgrade php53-socketsUpgrade php5-calendarUpgrade php53-shmopUpgrade php72-zlibUpgrade php72-ctypeUpgrade php5-bz2Upgrade php53-fileinfoUpgrade php72-mbstringUpgrade php7-pearUpgrade php5-curlUpgrade php72-ftpUpgrade php72-pgsqlUpgrade php5-soapUpgrade php7-xslUpgrade php53-iconvUpgrade php53-sqliteUpgrade php5-mbstringUpgrade php5-dbaUpgrade php7-dbaUpgrade php53-calendarUpgrade php5-fastcgiUpgrade php53-posixUpgrade php72-pcntlUpgrade php53Upgrade php53-xmlwriterUpgrade php72Upgrade php5-gmpUpgrade php5-pharUpgrade php7-tidyUpgrade php5-ldapUpgrade php72-sqliteUpgrade php53-xslUpgrade php7-domUpgrade php7-gettextUpgrade php53-imapUpgrade php7-gmpUpgrade php7-readlineUpgrade php7-sodiumUpgrade php53-xmlreaderUpgrade php5Upgrade php5-sysvsemUpgrade php53-pdoUpgrade php7-exifUpgrade php5-xmlreaderUpgrade php5-snmpUpgrade php53-snmpUpgrade php53-zlibUpgrade php7-pear-archive_tarUpgrade php5-bcmathUpgrade php5-pearUpgrade php7-zipUpgrade php5-sysvmsgUpgrade php7-sqliteUpgrade php7-embedUpgrade php53-readlineUpgrade php7-opcacheUpgrade php7-opensslUpgrade php53-odbcUpgrade php72-mysqlUpgrade php5-exifUpgrade php53-sysvshmUpgrade php5-mysqlUpgrade php7-bz2Upgrade php5-ftpUpgrade php7-sysvshmUpgrade php72-enchantUpgrade php7-posixUpgrade php7-socketsUpgrade php5-iconvUpgrade php72-xmlrpcUpgrade php72-gdUpgrade php53-pearUpgrade php53-ctypeUpgrade php53-mbstringUpgrade php72-intlUpgrade php7-pspellUpgrade php5-enchantUpgrade php53-dbaUpgrade php7-mcryptUpgrade php7-gdUpgrade php7-soapUpgrade php72-wddxUpgrade php7Upgrade php72-sysvsemUpgrade php53-pspellUpgrade php5-shmopUpgrade php5-odbcUpgrade php7-jsonUpgrade php7-xmlreaderUpgrade php72-posixUpgrade php53-zipUpgrade php7-firebirdUpgrade php72-fileinfoUpgrade php72-tidyUpgrade php72-sysvshmUpgrade php72-gettextUpgrade php53-gdUpgrade php5-imapUpgrade php5-gdUpgrade php5-zlibUpgrade php53-domUpgrade php72-pspellUpgrade php53-bz2Upgrade php72-opensslUpgrade php72-readlineUpgrade php53-fastcgiUpgrade php5-xmlwriterUpgrade apache2-mod_php72Upgrade php72-gmpUpgrade php7-sysvmsgUpgrade php72-socketsUpgrade php7-fpmUpgrade php53-sysvmsgUpgrade php5-fpmUpgrade php5-opensslUpgrade php5-wddxUpgrade php7-curlUpgrade php5-ctypeUpgrade php5-zipUpgrade php72-curlUpgrade php5-posixUpgrade php5-pcntlUpgrade php53-xmlrpcUpgrade php53-ldapUpgrade php5-fileinfoUpgrade php72-soapUpgrade php7-develUpgrade php5-suhosinUpgrade php7-testresultsUpgrade php53-opensslUpgrade php7-xmlwriterUpgrade php72-develUpgrade php53-tokenizerUpgrade php5-tokenizerUpgrade php7-ctypeUpgrade apache2-mod_php5Upgrade php72-pharUpgrade php53-bcmathUpgrade php72-snmpUpgrade php5-intlUpgrade apache2-mod_php53Upgrade php5-domUpgrade php72-pear-archive_tarUpgrade php72-jsonUpgrade php7-sysvsemUpgrade php7-pharUpgrade php7-fileinfoUpgrade php53-sysvsemUpgrade php53-ftpUpgrade php72-opcacheUpgrade php72-bz2Upgrade php72-xslUpgrade php72-fastcgiUpgrade php53-mysqlUpgrade php72-xmlreaderUpgrade php72-pearUpgrade php7-pgsqlUpgrade php7-mbstringUpgrade php53-gettextUpgrade apache2-mod_php7Upgrade php72-tokenizerUpgrade php7-pcntlUpgrade php5-socketsUpgrade php5-pspellUpgrade php5-opcacheUpgrade php53-exifUpgrade php53-intlUpgrade php7-tokenizerUpgrade php72-zipUpgrade php72-odbcUpgrade php53-mcryptUpgrade php5-sysvshmUpgrade php72-ldapUpgrade php72-domUpgrade php72-imapUpgrade php7-enchantUpgrade php53-suhosinUpgrade php7-calendarUpgrade php72-shmopUpgrade php72-xmlwriterUpgrade php72-sysvmsgUpgrade php72-pdoUpgrade php7-snmpUpgrade php7-pdoUpgrade php7-ftpUpgrade php53-soapUpgrade php53-gmpUpgrade php53-curlUpgrade php53-develUpgrade php5-pgsqlUpgrade php53-tidyUpgrade php7-zlibUpgrade php7-odbcUpgrade php53-pgsqlUpgrade php7-iconvUpgrade php7-mysqlUpgrade php5-develUpgrade php7-bcmathUpgrade php72-iconvUpgrade php7-wddxUpgrade php53-wddxUpgrade php5-xmlrpcUpgrade php5-gettextUpgrade php7-intlUpgrade php5-xslUpgrade php53-jsonUpgrade php72-calendarUpgrade php7-fastcgi | Apr 6, 2019 | Mar 8, 2019 |
| Ubuntu | — | Upgrade php5-xmlrpcUpgrade php7.2-cliUpgrade php7.0-fpmUpgrade php5-fpmUpgrade php7.0-cliUpgrade php5-cgiUpgrade php7.2-fpmUpgrade libapache2-mod-php7.2Upgrade php5-cliUpgrade php7.2-cgiUpgrade libapache2-mod-php7.0Upgrade libapache2-mod-php5Upgrade php7.0-cgi | Apr 3, 2019 | Mar 8, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub