-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4529-1 security@xxxxxxxxxx https://www.debian.org/security/ Moritz Muehlenhoff September 20, 2019 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : php7.0 CVE ID : CVE-2019-11034 CVE-2019-11035 CVE-2019-11036 CVE-2019-11038 CVE-2019-11039 CVE-2019-11040 CVE-2019-11041 CVE-2019-11042 Multiple security issues were found in PHP, a widely-used open source general purpose scripting language: Missing sanitising in the EXIF extension and the iconv_mime_decode_headers() function could result in information disclosure or denial of service. For the oldstable distribution (stretch), these problems have been fixed in version 7.0.33-0+deb9u5. We recommend that you upgrade your php7.0 packages. For the detailed security status of php7.0 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/php7.0 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAl2FEwcACgkQEMKTtsN8 TjYhOw/6A14STaxTtWWzxjW27LMhwP0ysH7oCn/GQQLQQVpUPbKIVCU/IUwYW+xL YIyafT1leaWWn4wyYvecHQ6AdP+2LjYFJiM1ImFdlSaOGHOQdRB35rItfPf9QoOJ C8FssugyV2371uWvZdpnPwb0GoiT5+rEN//nh+RdO2O5P6SxUmA/kdB0DKEwyEYw zspX/sEgIAyvmkQ48LkSZ4kXrdrwPfRnzw17oJvdnUpHhAUlCkiMdnWnuNYKBES4 VFQJH/L/zSLJGZFF/77rvAoE62W4kSwIsYkTN5k3P7Z5tMadTm4zbNNjQy2GI82K 4hi+l+iocuo2+iPmOmcCTNaltzjSPM8ULysQoYDPjjrvg1dCT9XzZG9z5gGJ2cAh izgW1wU133Us8NE6gpksSlEJtJtqOEPm9hqvHZ9H21kYPzpmiCt90t0+gD/T3Q5y RqraK7henPd39dI1bI3POdMSC4TB528pNI3C7AH2l6ntmYujAvfGALq6Ky7hvdSs DcounmAUlbhS+hhZmdN/3eiltTmffZy8d8NwkMBaATb3+j4nTqAC38L1EnnEp9hE zopvVR/RXBqMETQJHslGaCRMR5Q+F/qWRg9ozik2DmJ9epPpBeLLfOzsBxMVs/x2 WnJfX6+NauWOg6M03Ss8QoyeA/7t66MKXhWt49SDEMYn8jzt3I8= =wlCm -----END PGP SIGNATURE-----
