In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzipUpgrade php-mbstringUpgrade php-pearUpgrade php-pecl-zipUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-cliUpgrade php-enchantUpgrade php-gdUpgrade php-fpmUpgrade php-mysqlndUpgrade php-develUpgrade php-jsonUpgrade php-embeddedUpgrade php-processUpgrade php-snmpUpgrade php-xmlrpcUpgrade php-gmpUpgrade php-recodeUpgrade php-pecl-xdebugUpgrade php-opcacheUpgrade libzip-develUpgrade php-xmlUpgrade php-soapUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-commonUpgrade php-odbcUpgrade php-pdoUpgrade php-pgsqlUpgrade php-dbgUpgrade php-intlUpgrade apcu-panelUpgrade php | May 4, 2022 | Feb 27, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Feb 27, 2020 |
| Amazon_linux | — | Upgrade php73Upgrade php72 | Mar 14, 2020 | Feb 27, 2020 |
| Centos_linux | — | Upgrade php-pecl-apcu-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-develUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade php-cli-debuginfoUpgrade php-pdo-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pdoUpgrade php-pecl-apcuUpgrade php-pecl-xdebugUpgrade php-pgsqlUpgrade php-gmpUpgrade php-pecl-rrdUpgrade php-fpm-debuginfoUpgrade php-dbaUpgrade php-pecl-zipUpgrade php-gdUpgrade php-fpmUpgrade php-pecl-apcu-debuginfoUpgrade php-bcmathUpgrade php-embeddedUpgrade php-pecl-xdebug-debuginfoUpgrade php-enchant-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade libzipUpgrade php-enchantUpgrade php-processUpgrade php-soapUpgrade php-xmlrpcUpgrade php-embedded-debuginfoUpgrade php-process-debuginfoUpgrade php-debugsourceUpgrade php-xml-debuginfoUpgrade php-ldapUpgrade php-mysqlnd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pearUpgrade php-odbc-debuginfoUpgrade libzip-debugsourceUpgrade php-gd-debuginfoUpgrade phpUpgrade php-opcache-debuginfoUpgrade php-soap-debuginfoUpgrade php-xmlUpgrade php-recodeUpgrade php-pecl-zip-debuginfoUpgrade php-common-debuginfoUpgrade php-opcacheUpgrade libzip-toolsUpgrade php-json-debuginfoUpgrade php-debuginfoUpgrade php-commonUpgrade php-bcmath-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-dba-debuginfoUpgrade php-recode-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-ldap-debuginfoUpgrade apcu-panelUpgrade php-dbgUpgrade php-mysqlndUpgrade php-pecl-rrd-debugsourceUpgrade php-odbcUpgrade php-cliUpgrade libzip-debuginfoUpgrade php-mbstringUpgrade php-mbstring-debuginfoUpgrade php-intl-debuginfoUpgrade php-intlUpgrade libzip-develUpgrade php-snmp | Sep 9, 2020 | Feb 27, 2020 |
| Debian | — | Upgrade php7.4 | Mar 30, 2020 | Feb 27, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Mar 27, 2020 | Feb 27, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-soapUpgrade php-odbcUpgrade phpUpgrade php-commonUpgrade php-ldapUpgrade php-pgsqlUpgrade php-cliUpgrade php-mysqlUpgrade php-xmlUpgrade php-pdoUpgrade php-recodeUpgrade php-processUpgrade php-gdUpgrade php-xmlrpc | Nov 3, 2020 | Feb 27, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-gdUpgrade php-ldapUpgrade php-pgsqlUpgrade php-odbcUpgrade php-soapUpgrade php-commonUpgrade phpUpgrade php-xmlUpgrade php-cliUpgrade php-processUpgrade php-recodeUpgrade php-mysqlUpgrade php-pdoUpgrade php-xmlrpc | Sep 28, 2020 | Feb 27, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-ldapUpgrade php-gdUpgrade php-fpmUpgrade php-soapUpgrade php-processUpgrade php-odbcUpgrade php-pdoUpgrade php-xmlrpcUpgrade phpUpgrade php-recodeUpgrade php-cliUpgrade php-xmlUpgrade php-common | Jul 31, 2020 | Feb 27, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.3-11.4.21.0.1.69.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.15-11.4.20.0.1.4.0 on Solaris 11.4 | Jan 19, 2021 | Feb 27, 2020 |
| Oracle_linux | — | Upgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-processUpgrade php-recodeUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-dbaUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-mysqlndUpgrade php-enchantUpgrade php-xmlrpcUpgrade php-opcacheUpgrade php-odbcUpgrade php-xmlUpgrade php-develUpgrade php-dbgUpgrade php-intlUpgrade phpUpgrade php-bcmathUpgrade php-snmpUpgrade php-pecl-apcuUpgrade php-commonUpgrade libzip-develUpgrade php-pearUpgrade libzipUpgrade apcu-panelUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-pecl-xdebugUpgrade php-embeddedUpgrade php-pgsqlUpgrade php-jsonUpgrade php-cliUpgrade php-ldapUpgrade php-gmpUpgrade php-fpm | Sep 10, 2020 | Feb 4, 2020 |
| Php | — | Upgrade to PHP version 7.3.15Upgrade to PHP version 7.4.3Upgrade to PHP version 7.2.28 | Mar 27, 2020 | Feb 27, 2020 |
| Redhat_linux | — | Upgrade php-odbc-debuginfoUpgrade php-gdUpgrade php-fpmUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrdUpgrade php-processUpgrade php-pdoUpgrade php-snmp-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-ldapUpgrade libzip-tools-debuginfoUpgrade libzipUpgrade php-pecl-apcu-debuginfoUpgrade php-pdo-debuginfoUpgrade php-enchantUpgrade php-develUpgrade php-dbaUpgrade php-cli-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-odbcUpgrade php-fpm-debuginfoUpgrade php-bcmathUpgrade php-gmpUpgrade libzip-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-mbstringUpgrade php-pgsqlUpgrade php-pecl-zipUpgrade libzip-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-gd-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-xdebugUpgrade php-dba-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-jsonUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlNo solution existsUpgrade php-opcache-debuginfoUpgrade php-pearUpgrade php-ldap-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mysqlndUpgrade php-recodeUpgrade php-snmpUpgrade php-enchant-debuginfoUpgrade apcu-panelUpgrade php-pecl-apcuUpgrade php-dbg-debuginfoUpgrade php-gmp-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade phpUpgrade php-commonUpgrade php-cliUpgrade php-opcacheUpgrade php-xmlrpcUpgrade php-debugsourceUpgrade php-intlUpgrade php-recode-debuginfoUpgrade php-debuginfoUpgrade php-intl-debuginfoUpgrade php-embedded-debuginfoUpgrade php-common-debuginfoUpgrade libzip-develUpgrade libzip-toolsUpgrade php-embeddedUpgrade php-dbgUpgrade php-soap-debuginfoUpgrade php-pecl-rrd-debugsource | Sep 9, 2020 | Feb 27, 2020 |
| Rocky_linux | — | Upgrade php-processUpgrade php-gmp-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-debugsourceUpgrade php-intlUpgrade php-pdoUpgrade php-recodeUpgrade php-xmlrpc-debuginfoUpgrade php-gdUpgrade php-mysqlndUpgrade php-gmpUpgrade php-gd-debuginfoUpgrade phpUpgrade php-recode-debuginfoUpgrade php-jsonUpgrade php-snmpUpgrade php-bcmath-debuginfoUpgrade libzip-develUpgrade php-xmlUpgrade php-pecl-apcu-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-ldapUpgrade php-pgsql-debuginfoUpgrade libzipUpgrade libzip-debugsourceUpgrade php-opcacheUpgrade php-pecl-apcuUpgrade php-embeddedUpgrade php-soapUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrdUpgrade php-develUpgrade php-fpm-debuginfoUpgrade php-dbaUpgrade php-cliUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-pecl-rrd-debugsourceUpgrade php-bcmathUpgrade php-mysqlnd-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-xdebugUpgrade php-pgsqlUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-xml-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-commonUpgrade php-xmlrpcUpgrade php-intl-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-toolsUpgrade php-soap-debuginfoUpgrade php-odbcUpgrade php-odbc-debuginfoUpgrade libzip-debuginfoUpgrade php-snmp-debuginfoUpgrade php-dbgUpgrade php-ldap-debuginfoUpgrade php-json-debuginfoUpgrade php-dbg-debuginfoUpgrade php-mbstringUpgrade php-pdo-debuginfoUpgrade php-opcache-debuginfoUpgrade php-process-debuginfoUpgrade php-debuginfoUpgrade php-mbstring-debuginfo | Mar 12, 2024 | Feb 27, 2020 |
| Suse | — | Upgrade php5-mysqlUpgrade php5-bcmathUpgrade php72Upgrade php5Upgrade php5-bz2Upgrade php7-exifUpgrade php7-opcacheUpgrade php5-calendarUpgrade php7-testUpgrade php5-mcryptUpgrade php7-sqliteUpgrade php5-xmlreaderUpgrade php7-embedUpgrade php7-xslUpgrade php5-sqliteUpgrade php72-posixUpgrade php72-enchantUpgrade php7-gettextUpgrade php72-sysvmsgUpgrade php72-bcmathUpgrade php5-soapUpgrade php7-pear-archive_tarUpgrade php72-mbstringUpgrade php72-sysvshmUpgrade php7-tidyUpgrade php7-gdUpgrade php72-shmopUpgrade php7-zipUpgrade php72-pgsqlUpgrade php72-gdUpgrade php7-dbaUpgrade php72-sodiumUpgrade php7-intlUpgrade php72-dbaUpgrade php72-exifUpgrade php72-opcacheUpgrade php72-pearUpgrade php7Upgrade php7-xmlrpcUpgrade php72-wddxUpgrade php5-dbaUpgrade php5-odbcUpgrade php7-fileinfoUpgrade php5-fpmUpgrade php7-sodiumUpgrade php5-tokenizerUpgrade php72-xslUpgrade php7-mysqlUpgrade php7-bz2Upgrade php72-fileinfoUpgrade php5-pdoUpgrade php72-sysvsemUpgrade php5-pcntlUpgrade php72-intlUpgrade php5-opcacheUpgrade php72-pdoUpgrade php7-xmlreaderUpgrade php5-pspellUpgrade php72-pcntlUpgrade php7-domUpgrade php5-shmopUpgrade php72-develUpgrade php5-sysvsemUpgrade php5-jsonUpgrade php5-pgsqlUpgrade php5-snmpUpgrade php7-pearUpgrade php5-suhosinUpgrade php5-pharUpgrade php7-firebirdUpgrade php7-sysvshmUpgrade php72-bz2Upgrade php7-calendarUpgrade php5-curlUpgrade php5-ldapUpgrade php7-gmpUpgrade php5-develUpgrade php5-gmpUpgrade php7-pcntlUpgrade php72-pharUpgrade php5-enchantUpgrade php7-socketsUpgrade php72-pspellUpgrade php7-pharUpgrade php7-pdoUpgrade php72-imapUpgrade php5-exifUpgrade php72-curlUpgrade php72-odbcUpgrade php7-mbstringUpgrade php72-mysqlUpgrade apache2-mod_php7Upgrade php7-soapUpgrade php5-gettextUpgrade php7-curlUpgrade php5-mbstringUpgrade php5-ctypeUpgrade php5-wddxUpgrade php72-ftpUpgrade php7-fpmUpgrade php72-xmlwriterUpgrade php5-socketsUpgrade php7-shmopUpgrade php72-iconvUpgrade php5-domUpgrade apache2-mod_php72Upgrade php72-fastcgiUpgrade php72-zlibUpgrade php7-fastcgiUpgrade php72-readlineUpgrade php7-odbcUpgrade php72-gettextUpgrade php7-zlibUpgrade php5-pearUpgrade php5-ftpUpgrade apache2-mod_php5Upgrade php5-iconvUpgrade php72-tokenizerUpgrade php5-xmlrpcUpgrade php7-ctypeUpgrade php72-jsonUpgrade php5-fileinfoUpgrade php72-sqliteUpgrade php7-iconvUpgrade php72-socketsUpgrade php5-xslUpgrade php7-wddxUpgrade php5-zipUpgrade php72-calendarUpgrade php72-soapUpgrade php72-opensslUpgrade php72-ctypeUpgrade php5-fastcgiUpgrade php5-imapUpgrade php7-enchantUpgrade php7-snmpUpgrade php72-snmpUpgrade php7-readlineUpgrade php72-pear-archive_tarUpgrade php7-sysvsemUpgrade php7-posixUpgrade php72-tidyUpgrade php5-zlibUpgrade php5-xmlwriterUpgrade php72-xmlrpcUpgrade php7-opensslUpgrade php5-sysvmsgUpgrade php7-ldapUpgrade php5-intlUpgrade php72-domUpgrade php72-zipUpgrade php5-gdUpgrade php7-xmlwriterUpgrade php5-sysvshmUpgrade php72-gmpUpgrade php7-tokenizerUpgrade php72-ldapUpgrade php5-posixUpgrade php5-opensslUpgrade php72-xmlreaderUpgrade php7-sysvmsgUpgrade php7-pgsqlUpgrade php7-bcmathUpgrade php7-jsonUpgrade php7-ftpUpgrade php7-develUpgrade php72-fpm | Mar 10, 2020 | Feb 27, 2020 |
| Ubuntu | — | Upgrade libapache2-mod-php7.0Upgrade libapache2-mod-php7.3Upgrade php7.2-cgiUpgrade php7.0-cgiUpgrade php5-cliUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.3-fpmUpgrade php7.3-cliUpgrade libapache2-mod-php5Upgrade libapache2-mod-php7.2Upgrade php7.3-cgiUpgrade php7.0-fpmUpgrade php5-cli (Ubuntu Pro)Upgrade php7.2-cliUpgrade php7.2-fpmUpgrade php5-cgiUpgrade php7.0-cliUpgrade php5-cgi (Ubuntu Pro)Upgrade php5-fpmUpgrade php7.2Upgrade php7.3-mbstringUpgrade libapache2-mod-php5 (Ubuntu Pro) | Apr 16, 2020 | Feb 27, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub