USN-5479-3

See a problem?

Source

https://ubuntu.com/security/notices/USN-5479-3

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5479-3.json

JSON Data

https://api.osv.dev/v1/vulns/USN-5479-3

Related

Published

2022-07-07T21:53:43.438203Z

Modified

2022-07-07T21:53:43.438203Z

Summary

php7.2 regression

Details

USN-5479-1 fixed vulnerabilities in PHP. Unfortunately that update for CVE-2022-31625 was incomplete for Ubuntu 18.04 LTS. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Charles Fol discovered that PHP incorrectly handled initializing certain arrays when handling the pgqueryparams function. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-31625)

Charles Fol discovered that PHP incorrectly handled passwords in mysqlnd. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-31626)

References

Affected packages

Ubuntu:18.04:LTS / php7.2

Package

Name: php7.2
Purl: pkg:deb/ubuntu/php7.2@7.2.24-0ubuntu0.18.04.13?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.2.24-0ubuntu0.18.04.13

Affected versions

7.*

7.2.1-1ubuntu2

7.2.2-1ubuntu1

7.2.2-1ubuntu2

7.2.3-1ubuntu1

7.2.5-0ubuntu0.18.04.1

7.2.7-0ubuntu0.18.04.1

7.2.7-0ubuntu0.18.04.2

7.2.10-0ubuntu0.18.04.1

7.2.15-0ubuntu0.18.04.1

7.2.15-0ubuntu0.18.04.2

7.2.17-0ubuntu0.18.04.1

7.2.19-0ubuntu0.18.04.1

7.2.19-0ubuntu0.18.04.2

7.2.24-0ubuntu0.18.04.1

7.2.24-0ubuntu0.18.04.2

7.2.24-0ubuntu0.18.04.3

7.2.24-0ubuntu0.18.04.4

7.2.24-0ubuntu0.18.04.6

7.2.24-0ubuntu0.18.04.7

7.2.24-0ubuntu0.18.04.8

7.2.24-0ubuntu0.18.04.9

7.2.24-0ubuntu0.18.04.10

7.2.24-0ubuntu0.18.04.11

7.2.24-0ubuntu0.18.04.12

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "php7.2-opcache-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "libapache2-mod-php7.2": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-opcache": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-sybase": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-bz2": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-odbc": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-recode": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-phpdbg": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-phpdbg-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "libapache2-mod-php7.2-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-mysql-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-sqlite3-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-sqlite3": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-tidy": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-json": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-curl-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-dba-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-sybase-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-common-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-zip": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-interbase-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-common": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-xml-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-xml": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-fpm-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-mysql": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-tidy-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-imap": "7.2.24-0ubuntu0.18.04.13",
            "libphp7.2-embed": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-ldap-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-gd": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-cgi-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-soap": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-bz2-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-recode-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-ldap": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-gd-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-mbstring": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-mbstring-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-intl-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-intl": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-cli-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-pspell": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-gmp": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-dev": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-bcmath": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-snmp": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-pspell-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-soap-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-pgsql": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-interbase": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-snmp-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-cgi": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-odbc-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-gmp-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-xmlrpc": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-curl": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-imap-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-readline-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-fpm": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-cli": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-xsl": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-enchant-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-zip-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-dba": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-pgsql-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-json-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-bcmath-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-readline": "7.2.24-0ubuntu0.18.04.13",
            "libphp7.2-embed-dbgsym": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-enchant": "7.2.24-0ubuntu0.18.04.13",
            "php7.2-xmlrpc-dbgsym": "7.2.24-0ubuntu0.18.04.13"
        }
    ]
}