USN-7049-2: PHP vulnerabilities

Releases

• Ubuntu 18.04 ESM
• Ubuntu 16.04 ESM

Packages

• php7.0 - HTML-embedded scripting language interpreter
• php7.2 - HTML-embedded scripting language interpreter

Details

USN-7049-1 fixed vulnerabilities in PHP. This update provides the
corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

It was discovered that PHP incorrectly handled parsing multipart form
data. A remote attacker could possibly use this issue to inject payloads
and cause PHP to ignore legitimate data. (CVE-2024-8925)

It was discovered that PHP incorrectly handled the cgi.force_redirect
configuration option due to environment variable collisions. In certain
configurations, an attacker could possibly use this issue bypass
force_redirect restrictions. (CVE-2024-8927)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 18.04

• libapache2-mod-php7.2 - 7.2.24-0ubuntu0.18.04.17+esm6
  Available with Ubuntu Pro
• php7.2-cgi - 7.2.24-0ubuntu0.18.04.17+esm6
  Available with Ubuntu Pro
• php7.2-cli - 7.2.24-0ubuntu0.18.04.17+esm6
  Available with Ubuntu Pro
• php7.2-fpm - 7.2.24-0ubuntu0.18.04.17+esm6
  Available with Ubuntu Pro

Ubuntu 16.04

• libapache2-mod-php7.0 - 7.0.33-0ubuntu0.16.04.16+esm12
  Available with Ubuntu Pro
• php7.0-cgi - 7.0.33-0ubuntu0.16.04.16+esm12
  Available with Ubuntu Pro
• php7.0-cli - 7.0.33-0ubuntu0.16.04.16+esm12
  Available with Ubuntu Pro
• php7.0-fpm - 7.0.33-0ubuntu0.16.04.16+esm12
  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

• CVE-2024-8925
• CVE-2024-8927

Related notices

• USN-7049-1: php8.3-sybase, php8.1-cgi, php7.4-json, php8.1-mysql, php8.3-zip, php8.1-ldap, php8.1-gd, php8.3-gd, php7.4-curl, php7.4-bcmath, php7.4-cli, php7.4-sqlite3, php8.1, php7.4-soap, php7.4-odbc, php7.4, php8.3-cli, php8.1-dev, php7.4-opcache, php8.1-xsl, php7.4-xmlrpc, php8.3-cgi, php8.3-soap, php7.4-readline, php7.4-sybase, php7.4-enchant, php8.3-ldap, php8.3-pspell, php7.4-ldap, php8.1-opcache, php7.4-pspell, php8.3-curl, php8.1-intl, php7.4-tidy, php8.1-sybase, libapache2-mod-php7.4, php8.1-imap, php8.3-intl, php8.3-mbstring, php7.4-mbstring, php7.4-snmp, php8.3-readline, php8.3-dev, libphp7.4-embed, php7.4-dba, php7.4-phpdbg, php8.3-bcmath, php7.4-intl, php7.4-xml, libapache2-mod-php8.3, libapache2-mod-php8.0, php7.4-xsl, php8.1-pgsql, php8.3-bz2, php8.3-pgsql, php8.3-xsl, php8.3-mysql, php7.4-fpm, php7.4-dev, php7.4-zip, php8.1-common, php8.1-bz2, php8.1-interbase, libapache2-mod-php8.1, php7.4-gd, php7.4-common, php8.1-mbstring, php8.1-enchant, php7.4-mysql, php8.3-dba, php8.3-gmp, php7.4-cgi, php8.1-curl, php8.3-tidy, php8.1-soap, php7.4-bz2, php8.3-opcache, php8.3-imap, php8.1-xml, php7.4-interbase, php8.1-sqlite3, php8.1-bcmath, php8.3-fpm, php8.1-snmp, php7.4-imap, php8.1-odbc, php7.4-gmp, php8.1-zip, php8.3, php8.3-odbc, php8.1-fpm, php8.3-common, php8.3-interbase, php8.1-dba, php8.1-cli, libphp8.3-embed, php7.4-pgsql, php8.1-gmp, php8.1-phpdbg, php8.3-xml, php8.1-readline, php8.1-pspell, libphp8.1-embed, php8.3-enchant, php8.3-sqlite3, php8.3-phpdbg, php8.3-snmp, php8.1-tidy