Ubuntu 3766-1: PHP vulnerabilities
Summary
Update Instructions
The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: libapache2-mod-php7.2 7.2.10-0ubuntu0.18.04.1 php7.2-cgi 7.2.10-0ubuntu0.18.04.1 php7.2-cli 7.2.10-0ubuntu0.18.04.1 php7.2-fpm 7.2.10-0ubuntu0.18.04.1 Ubuntu 16.04 LTS: libapache2-mod-php7.0 7.0.32-0ubuntu0.16.04.1 php7.0-cgi 7.0.32-0ubuntu0.16.04.1 php7.0-cli 7.0.32-0ubuntu0.16.04.1 php7.0-fpm 7.0.32-0ubuntu0.16.04.1 Ubuntu 14.04 LTS: libapache2-mod-php5 5.5.9+dfsg-1ubuntu4.26 php5-cgi 5.5.9+dfsg-1ubuntu4.26 php5-cli 5.5.9+dfsg-1ubuntu4.26 php5-fpm 5.5.9+dfsg-1ubuntu4.26 In Ubuntu 16.04 LTS and Ubuntu 18.04 LTS, this update uses a new upstream release, which includes additional bug fixes. In general, a standard system update will make all the necessary changes.
References
https://ubuntu.com/security/notices/USN-3766-1
CVE-2015-9253, CVE-2018-14851, CVE-2018-14883
Package Information
https://launchpad.net/ubuntu/+source/php7.2/7.2.10-0ubuntu0.18.04.1 https://launchpad.net/ubuntu/+source/php7.0/7.0.32-0ubuntu0.16.04.1 https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.26