RHSA-2019:3735: Critical: php:7.2 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.Security Fix(es): php: underflow in envpathinfo in fpmmain.c (CVE-2019-11043) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/libzipto a version that resolves this vulnerability.Fixed in 1.5.1-2.module+el8.1.0+3202+af5476b9 - Upgrade
Upgrade
redhat/phpto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-pearto a version that resolves this vulnerability.Fixed in 1.10.5-9.module+el8.1.0+3202+af5476b9 - Upgrade
Upgrade
redhat/php-pecl-apcuto a version that resolves this vulnerability.Fixed in 5.1.12-2.module+el8.1.0+3202+af5476b9 - Upgrade
Upgrade
redhat/php-pecl-zipto a version that resolves this vulnerability.Fixed in 1.15.3-1.module+el8.1.0+3186+20164e6f - Upgrade
Upgrade
redhat/apcu-panelto a version that resolves this vulnerability.Fixed in 5.1.12-2.module+el8.1.0+3202+af5476b9 - Upgrade
Upgrade
redhat/libzip-debuginfoto a version that resolves this vulnerability.Fixed in 1.5.1-2.module+el8.1.0+3202+af5476b9 - Upgrade
Upgrade
redhat/libzip-debugsourceto a version that resolves this vulnerability.Fixed in 1.5.1-2.module+el8.1.0+3202+af5476b9 - Upgrade
Upgrade
redhat/libzip-develto a version that resolves this vulnerability.Fixed in 1.5.1-2.module+el8.1.0+3202+af5476b9 - Upgrade
Upgrade
redhat/libzip-toolsto a version that resolves this vulnerability.Fixed in 1.5.1-2.module+el8.1.0+3202+af5476b9 - Upgrade
Upgrade
redhat/libzip-tools-debuginfoto a version that resolves this vulnerability.Fixed in 1.5.1-2.module+el8.1.0+3202+af5476b9 - Upgrade
Upgrade
redhat/php-bcmathto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-bcmath-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-clito a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-cli-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-commonto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-common-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-dbato a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-dba-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-dbgto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-dbg-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-debugsourceto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-develto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-embeddedto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-embedded-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-enchantto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-enchant-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-fpmto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-fpm-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-gdto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-gd-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-gmpto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-gmp-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-intlto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-intl-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-jsonto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-json-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-ldapto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-ldap-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-mbstringto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-mbstring-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-mysqlndto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-mysqlnd-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-odbcto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-odbc-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-opcacheto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-opcache-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-pdoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-pdo-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-pecl-apcu-debuginfoto a version that resolves this vulnerability.Fixed in 5.1.12-2.module+el8.1.0+3202+af5476b9 - Upgrade
Upgrade
redhat/php-pecl-apcu-debugsourceto a version that resolves this vulnerability.Fixed in 5.1.12-2.module+el8.1.0+3202+af5476b9 - Upgrade
Upgrade
redhat/php-pecl-apcu-develto a version that resolves this vulnerability.Fixed in 5.1.12-2.module+el8.1.0+3202+af5476b9 - Upgrade
Upgrade
redhat/php-pecl-zip-debuginfoto a version that resolves this vulnerability.Fixed in 1.15.3-1.module+el8.1.0+3186+20164e6f - Upgrade
Upgrade
redhat/php-pecl-zip-debugsourceto a version that resolves this vulnerability.Fixed in 1.15.3-1.module+el8.1.0+3186+20164e6f - Upgrade
Upgrade
redhat/php-pgsqlto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-pgsql-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-processto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-process-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-recodeto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-recode-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-snmpto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-snmp-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-soapto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-soap-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-xmlto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-xml-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-xmlrpcto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/php-xmlrpc-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18 - Upgrade
Upgrade
redhat/libzipto a version that resolves this vulnerability.Fixed in 1.5.1-2.module+el8.1.0+3202+af5476b9.aa - Upgrade
Upgrade
redhat/libzip-debuginfoto a version that resolves this vulnerability.Fixed in 1.5.1-2.module+el8.1.0+3202+af5476b9.aa - Upgrade
Upgrade
redhat/libzip-debugsourceto a version that resolves this vulnerability.Fixed in 1.5.1-2.module+el8.1.0+3202+af5476b9.aa - Upgrade
Upgrade
redhat/libzip-develto a version that resolves this vulnerability.Fixed in 1.5.1-2.module+el8.1.0+3202+af5476b9.aa - Upgrade
Upgrade
redhat/libzip-toolsto a version that resolves this vulnerability.Fixed in 1.5.1-2.module+el8.1.0+3202+af5476b9.aa - Upgrade
Upgrade
redhat/libzip-tools-debuginfoto a version that resolves this vulnerability.Fixed in 1.5.1-2.module+el8.1.0+3202+af5476b9.aa - Upgrade
Upgrade
redhat/phpto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-bcmathto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-bcmath-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-clito a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-cli-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-commonto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-common-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-dbato a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-dba-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-dbgto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-dbg-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-debugsourceto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-develto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-embeddedto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-embedded-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-enchantto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-enchant-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-fpmto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-fpm-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-gdto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-gd-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-gmpto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-gmp-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-intlto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-intl-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-jsonto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-json-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-ldapto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-ldap-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-mbstringto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-mbstring-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-mysqlndto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-mysqlnd-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-odbcto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-odbc-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-opcacheto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-opcache-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-pdoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-pdo-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-pecl-apcuto a version that resolves this vulnerability.Fixed in 5.1.12-2.module+el8.1.0+3202+af5476b9.aa - Upgrade
Upgrade
redhat/php-pecl-apcu-debuginfoto a version that resolves this vulnerability.Fixed in 5.1.12-2.module+el8.1.0+3202+af5476b9.aa - Upgrade
Upgrade
redhat/php-pecl-apcu-debugsourceto a version that resolves this vulnerability.Fixed in 5.1.12-2.module+el8.1.0+3202+af5476b9.aa - Upgrade
Upgrade
redhat/php-pecl-apcu-develto a version that resolves this vulnerability.Fixed in 5.1.12-2.module+el8.1.0+3202+af5476b9.aa - Upgrade
Upgrade
redhat/php-pecl-zipto a version that resolves this vulnerability.Fixed in 1.15.3-1.module+el8.1.0+3186+20164e6f.aa - Upgrade
Upgrade
redhat/php-pecl-zip-debuginfoto a version that resolves this vulnerability.Fixed in 1.15.3-1.module+el8.1.0+3186+20164e6f.aa - Upgrade
Upgrade
redhat/php-pecl-zip-debugsourceto a version that resolves this vulnerability.Fixed in 1.15.3-1.module+el8.1.0+3186+20164e6f.aa - Upgrade
Upgrade
redhat/php-pgsqlto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-pgsql-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-processto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-process-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-recodeto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-recode-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-snmpto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-snmp-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-soapto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-soap-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-xmlto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-xml-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-xmlrpcto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Upgrade
Upgrade
redhat/php-xmlrpc-debuginfoto a version that resolves this vulnerability.Fixed in 7.2.11-4.module+el8.1.0+4555+f5cb8e18.aa - Compensating control
Restart the httpd daemon after installing the updated PHP packages so the PHP security update takes effect.
Event History
Frequently Asked Questions
What is the severity of RHSA-2019:3735?
The severity of RHSA-2019:3735 is classified as critical due to the potential for exploitation of the underflow vulnerability.
How do I fix RHSA-2019:3735?
To fix RHSA-2019:3735, update to the remedied versions of the packages listed in the advisory.
Which packages are affected by RHSA-2019:3735?
The affected packages include php, libzip, and several related PHP modules like php-bcmath and php-gd.
What vulnerability is addressed in RHSA-2019:3735?
RHSA-2019:3735 addresses a critical underflow vulnerability in env_path_info in fpm_main.c (CVE-2019-11043).
When was RHSA-2019:3735 released?
RHSA-2019:3735 was released on November 25, 2019.