USN-3953-2: PHP vulnerabilities

Published May 1, 2019

Updated

USN-3953-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that PHP incorrectly handled certain exif tags in JPEG images. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code.

Affected Software

1 affected component

The PHP Group PHP

Event History

Feb 20, 2026

Advisory Published

via Ubuntu·10:15 PM

Data Sourced

via Ubuntu·10:15 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What vulnerabilities does USN-3953-2 address?

USN-3953-2 addresses the vulnerabilities CVE-2019-11034 and CVE-2019-11035.

Which versions of Ubuntu are affected by USN-3953-2?

Ubuntu 12.04 (precise) and Ubuntu 14.04 (trusty) are affected by USN-3953-2.

What is the affected software for USN-3953-2?

The affected software for USN-3953-2 includes libapache2-mod-php5, php5-fpm, php5-cgi, and php5-cli.

How do I fix the vulnerabilities addressed by USN-3953-2?

To fix the vulnerabilities, update the affected software packages to version 5.5.9+dfsg-1ubuntu4.29+esm1 for Ubuntu 14.04 and version 5.3.10-1ubuntu3.35 for Ubuntu 12.04.

Where can I find more information about USN-3953-2?

You can find more information about USN-3953-2 in the Ubuntu security notices: [link](https://ubuntu.com/security/notices/USN-3953-1).