First published: Mon Oct 23 2023(Updated: )
USN-6199-1 fixed a vulnerability in PHP. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that PHP incorrectly handled certain Digest authentication for SOAP. An attacker could possibly use this issue to expose sensitive information.
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/libapache2-mod-php7.2 | <7.2.24-0ubuntu0.18.04.17+esm1 | 7.2.24-0ubuntu0.18.04.17+esm1 |
Ubuntu Linux | =18.04 | |
All of | ||
ubuntu/php7.2 | <7.2.24-0ubuntu0.18.04.17+esm1 | 7.2.24-0ubuntu0.18.04.17+esm1 |
Ubuntu Linux | =18.04 | |
All of | ||
ubuntu/php7.2-cgi | <7.2.24-0ubuntu0.18.04.17+esm1 | 7.2.24-0ubuntu0.18.04.17+esm1 |
Ubuntu Linux | =18.04 | |
All of | ||
ubuntu/php7.2-cli | <7.2.24-0ubuntu0.18.04.17+esm1 | 7.2.24-0ubuntu0.18.04.17+esm1 |
Ubuntu Linux | =18.04 | |
All of | ||
ubuntu/php7.2-soap | <7.2.24-0ubuntu0.18.04.17+esm1 | 7.2.24-0ubuntu0.18.04.17+esm1 |
Ubuntu Linux | =18.04 | |
All of | ||
ubuntu/libapache2-mod-php7.0 | <7.0.33-0ubuntu0.16.04.16+esm7 | 7.0.33-0ubuntu0.16.04.16+esm7 |
Ubuntu Linux | =16.04 | |
All of | ||
ubuntu/php7.0 | <7.0.33-0ubuntu0.16.04.16+esm7 | 7.0.33-0ubuntu0.16.04.16+esm7 |
Ubuntu Linux | =16.04 | |
All of | ||
ubuntu/php7.0-cgi | <7.0.33-0ubuntu0.16.04.16+esm7 | 7.0.33-0ubuntu0.16.04.16+esm7 |
Ubuntu Linux | =16.04 | |
All of | ||
ubuntu/php7.0-cli | <7.0.33-0ubuntu0.16.04.16+esm7 | 7.0.33-0ubuntu0.16.04.16+esm7 |
Ubuntu Linux | =16.04 | |
All of | ||
ubuntu/php7.0-soap | <7.0.33-0ubuntu0.16.04.16+esm7 | 7.0.33-0ubuntu0.16.04.16+esm7 |
Ubuntu Linux | =16.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this PHP vulnerability is USN-6199-2.
The severity of the USN-6199-2 vulnerability is not specified in the provided information.
Ubuntu 16.04 LTS and Ubuntu 18.04 LTS are affected by the USN-6199-2 vulnerability.
The remedy for the USN-6199-2 vulnerability is to update to the specified versions of the affected software packages: libapache2-mod-php7.2, php7.2, php7.2-cgi, php7.2-cli, php7.2-soap, libapache2-mod-php7.0, php7.0, php7.0-cgi, php7.0-cli, php7.0-soap.
More information about the USN-6199-2 vulnerability can be found on the Ubuntu website security advisories: USN-6199-1 and USN-6199-2.