USN-5006-2

See a problem?

Source

https://ubuntu.com/security/notices/USN-5006-2

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5006-2.json

JSON Data

https://api.osv.dev/v1/vulns/USN-5006-2

Related

Published

2021-07-13T12:01:13.911963Z

Modified

2021-07-13T12:01:13.911963Z

Summary

php5, php7.0 vulnerabilities

Details

USN-5006-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that PHP incorrectly handled certain PHAR files. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2020-7068)

It was discovered that PHP incorrectly handled parsing URLs with passwords. A remote attacker could possibly use this issue to cause PHP to mis-parse the URL and produce wrong data. (CVE-2020-7071)

It was discovered that PHP incorrectly handled certain malformed XML data when being parsed by the SOAP extension. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2021-21702)

It was discovered that PHP incorrectly handled the pdo_firebase module. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2021-21704)

It was discovered that PHP incorrectly handled the FILTERVALIDATEURL check. A remote attacker could possibly use this issue to perform a server- side request forgery attack. (CVE-2021-21705)

References

Affected packages

Ubuntu:Pro:14.04:LTS / php5

Package

Name: php5
Purl: pkg:deb/ubuntu/php5@5.5.9+dfsg-1ubuntu4.29+esm14?arch=src?distro=trusty/esm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.5.9+dfsg-1ubuntu4.29+esm14

Affected versions

5.*

5.5.3+dfsg-1ubuntu2

5.5.3+dfsg-1ubuntu3

5.5.6+dfsg-1ubuntu1

5.5.6+dfsg-1ubuntu2

5.5.8+dfsg-2ubuntu1

5.5.9+dfsg-1ubuntu1

5.5.9+dfsg-1ubuntu2

5.5.9+dfsg-1ubuntu3

5.5.9+dfsg-1ubuntu4

5.5.9+dfsg-1ubuntu4.1

5.5.9+dfsg-1ubuntu4.2

5.5.9+dfsg-1ubuntu4.3

5.5.9+dfsg-1ubuntu4.4

5.5.9+dfsg-1ubuntu4.5

5.5.9+dfsg-1ubuntu4.6

5.5.9+dfsg-1ubuntu4.7

5.5.9+dfsg-1ubuntu4.9

5.5.9+dfsg-1ubuntu4.11

5.5.9+dfsg-1ubuntu4.12

5.5.9+dfsg-1ubuntu4.13

5.5.9+dfsg-1ubuntu4.14

5.5.9+dfsg-1ubuntu4.16

5.5.9+dfsg-1ubuntu4.17

5.5.9+dfsg-1ubuntu4.19

5.5.9+dfsg-1ubuntu4.20

5.5.9+dfsg-1ubuntu4.21

5.5.9+dfsg-1ubuntu4.22

5.5.9+dfsg-1ubuntu4.23

5.5.9+dfsg-1ubuntu4.24

5.5.9+dfsg-1ubuntu4.25

5.5.9+dfsg-1ubuntu4.26

5.5.9+dfsg-1ubuntu4.27

5.5.9+dfsg-1ubuntu4.29

5.5.9+dfsg-1ubuntu4.29+esm5

5.5.9+dfsg-1ubuntu4.29+esm6

5.5.9+dfsg-1ubuntu4.29+esm8

5.5.9+dfsg-1ubuntu4.29+esm10

5.5.9+dfsg-1ubuntu4.29+esm11

5.5.9+dfsg-1ubuntu4.29+esm12

5.5.9+dfsg-1ubuntu4.29+esm13

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "php5-gd": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "libphp5-embed": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-gmp-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-mysqlnd": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-cli": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-common-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-fpm": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-pspell": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-mysql": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-ldap": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-pgsql": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-readline": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-common": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-dev": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-readline-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "libapache2-mod-php5filter": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-sybase": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-gmp": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-tidy-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-cgi": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-curl-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-pspell-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-intl-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "libapache2-mod-php5-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-recode": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-ldap-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-enchant-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-odbc-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-pgsql-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-gd-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-snmp-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-fpm-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-tidy": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "libapache2-mod-php5filter-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-dbg": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php-pear": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "libphp5-embed-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-xmlrpc-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-sybase-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-curl": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-cli-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-xsl": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-enchant": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-dev-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-odbc": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-recode-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-mysql-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-mysqlnd-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-sqlite-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "libapache2-mod-php5": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-snmp": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-xsl-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-intl": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-sqlite": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-xmlrpc": "5.5.9+dfsg-1ubuntu4.29+esm14",
            "php5-cgi-dbgsym": "5.5.9+dfsg-1ubuntu4.29+esm14"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / php7.0

Package

Name: php7.0
Purl: pkg:deb/ubuntu/php7.0@7.0.33-0ubuntu0.16.04.16+esm1?arch=src?distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.0.33-0ubuntu0.16.04.16+esm1

Affected versions

7.*

7.0.1-5

7.0.1-6

7.0.2-1

7.0.2-3

7.0.2-4

7.0.2-5

7.0.3-2

7.0.3-3

7.0.3-9ubuntu1

7.0.4-5ubuntu1

7.0.4-5ubuntu2

7.0.4-7ubuntu1

7.0.4-7ubuntu2

7.0.4-7ubuntu2.1

7.0.8-0ubuntu0.16.04.1

7.0.8-0ubuntu0.16.04.2

7.0.8-0ubuntu0.16.04.3

7.0.13-0ubuntu0.16.04.1

7.0.15-0ubuntu0.16.04.1

7.0.15-0ubuntu0.16.04.2

7.0.15-0ubuntu0.16.04.4

7.0.18-0ubuntu0.16.04.1

7.0.22-0ubuntu0.16.04.1

7.0.25-0ubuntu0.16.04.1

7.0.28-0ubuntu0.16.04.1

7.0.30-0ubuntu0.16.04.1

7.0.32-0ubuntu0.16.04.1

7.0.33-0ubuntu0.16.04.1

7.0.33-0ubuntu0.16.04.2

7.0.33-0ubuntu0.16.04.3

7.0.33-0ubuntu0.16.04.4

7.0.33-0ubuntu0.16.04.5

7.0.33-0ubuntu0.16.04.6

7.0.33-0ubuntu0.16.04.7

7.0.33-0ubuntu0.16.04.9

7.0.33-0ubuntu0.16.04.11

7.0.33-0ubuntu0.16.04.12

7.0.33-0ubuntu0.16.04.14

7.0.33-0ubuntu0.16.04.15

7.0.33-0ubuntu0.16.04.16

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "php7.0-mcrypt-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-enchant": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-xsl": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-intl": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-mysql": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-dba": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-pgsql-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-zip": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-soap": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-readline": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-mcrypt": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-gd": "7.0.33-0ubuntu0.16.04.16+esm1",
            "libphp7.0-embed": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-interbase": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-imap": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-xmlrpc-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-ldap-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-opcache": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-bz2-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-opcache-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-json": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-fpm": "7.0.33-0ubuntu0.16.04.16+esm1",
            "libapache2-mod-php7.0-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-xml": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-tidy": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-dba-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-common-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-sqlite3": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-bcmath-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-bcmath": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-common": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-mysql-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-odbc-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-gmp-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-cgi": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-phpdbg-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-json-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-readline-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-pspell": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-mbstring-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-tidy-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-cli-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-curl-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-cgi-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-enchant-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-odbc": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-soap-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "libphp7.0-embed-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-interbase-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "libapache2-mod-php7.0": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-recode": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-fpm-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-pspell-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-imap-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-gmp": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-recode-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-sybase-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-ldap": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-snmp": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-intl-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-pgsql": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-sqlite3-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-curl": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-xmlrpc": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-dev": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-snmp-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-bz2": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-zip-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-cli": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-xml-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-mbstring": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-sybase": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-gd-dbgsym": "7.0.33-0ubuntu0.16.04.16+esm1",
            "php7.0-phpdbg": "7.0.33-0ubuntu0.16.04.16+esm1"
        }
    ]
}