USN-4375-1: PHP vulnerability

Reference Links

• https://ubuntu.com/security/CVE-2019-11048
• https://launchpad.net/ubuntu/+source/php7.4/7.4.3-4ubuntu2.2
• https://launchpad.net/ubuntu/+source/php7.3/7.3.11-0ubuntu0.19.10.6
• https://launchpad.net/ubuntu/+source/php7.2/7.2.24-0ubuntu0.18.04.6
• https://launchpad.net/ubuntu/+source/php7.0/7.0.33-0ubuntu0.16.04.15
• https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm12
• https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.47
• https://ubuntu.com/security/notices/USN-4375-1 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2019-11048

Frequently Asked Questions

• What is the severity of USN-4375-1?

  The severity of USN-4375-1 is classified as a potential denial of service vulnerability.

• How do I fix USN-4375-1?

  To fix USN-4375-1, update the affected PHP packages to the specified remedied versions provided by Ubuntu.

• What versions of PHP are affected by USN-4375-1?

  USN-4375-1 affects various PHP versions including 5.x, 7.0, 7.2, 7.3, and 7.4, especially on Ubuntu 20.04, 19.10, 18.04, and 16.04.

• What should I do if I cannot update PHP for USN-4375-1?

  If you cannot update PHP, consider disabling services that utilize the affected PHP versions until a fix can be applied.

• Is USN-4375-1 a known issue in future PHP versions?

  USN-4375-1 has been addressed in the latest PHP releases, so ensure your system uses the most recent version to mitigate risk.