Vulmon
Amazon Linux 1 Security Advisory: ALAS-2024-1918
Advisory Release Date: 2024-02-01 19:33 Pacific
Advisory Updated Date: 2024-02-01 19:33 Pacific
Severity:
Important
Issue Overview:
cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write). (CVE-2019-18218)
Affected Packages:
php73
Issue Correction:
Run yum update php73 to update your system.
New Packages:
i686:
php73-gd-7.3.13-1.22.amzn1.i686
php73-xmlrpc-7.3.13-1.22.amzn1.i686
php73-fpm-7.3.13-1.22.amzn1.i686
php73-xml-7.3.13-1.22.amzn1.i686
php73-7.3.13-1.22.amzn1.i686
php73-dbg-7.3.13-1.22.amzn1.i686
php73-embedded-7.3.13-1.22.amzn1.i686
php73-bcmath-7.3.13-1.22.amzn1.i686
php73-enchant-7.3.13-1.22.amzn1.i686
php73-gmp-7.3.13-1.22.amzn1.i686
php73-ldap-7.3.13-1.22.amzn1.i686
php73-common-7.3.13-1.22.amzn1.i686
php73-recode-7.3.13-1.22.amzn1.i686
php73-pspell-7.3.13-1.22.amzn1.i686
php73-imap-7.3.13-1.22.amzn1.i686
php73-snmp-7.3.13-1.22.amzn1.i686
php73-opcache-7.3.13-1.22.amzn1.i686
php73-pdo-dblib-7.3.13-1.22.amzn1.i686
php73-soap-7.3.13-1.22.amzn1.i686
php73-cli-7.3.13-1.22.amzn1.i686
php73-process-7.3.13-1.22.amzn1.i686
php73-pdo-7.3.13-1.22.amzn1.i686
php73-devel-7.3.13-1.22.amzn1.i686
php73-mbstring-7.3.13-1.22.amzn1.i686
php73-json-7.3.13-1.22.amzn1.i686
php73-tidy-7.3.13-1.22.amzn1.i686
php73-mysqlnd-7.3.13-1.22.amzn1.i686
php73-odbc-7.3.13-1.22.amzn1.i686
php73-intl-7.3.13-1.22.amzn1.i686
php73-debuginfo-7.3.13-1.22.amzn1.i686
php73-dba-7.3.13-1.22.amzn1.i686
php73-pgsql-7.3.13-1.22.amzn1.i686
src:
php73-7.3.13-1.22.amzn1.src
x86_64:
php73-pdo-7.3.13-1.22.amzn1.x86_64
php73-soap-7.3.13-1.22.amzn1.x86_64
php73-mbstring-7.3.13-1.22.amzn1.x86_64
php73-imap-7.3.13-1.22.amzn1.x86_64
php73-recode-7.3.13-1.22.amzn1.x86_64
php73-bcmath-7.3.13-1.22.amzn1.x86_64
php73-fpm-7.3.13-1.22.amzn1.x86_64
php73-gd-7.3.13-1.22.amzn1.x86_64
php73-dbg-7.3.13-1.22.amzn1.x86_64
php73-7.3.13-1.22.amzn1.x86_64
php73-pgsql-7.3.13-1.22.amzn1.x86_64
php73-xmlrpc-7.3.13-1.22.amzn1.x86_64
php73-gmp-7.3.13-1.22.amzn1.x86_64
php73-cli-7.3.13-1.22.amzn1.x86_64
php73-ldap-7.3.13-1.22.amzn1.x86_64
php73-debuginfo-7.3.13-1.22.amzn1.x86_64
php73-common-7.3.13-1.22.amzn1.x86_64
php73-tidy-7.3.13-1.22.amzn1.x86_64
php73-json-7.3.13-1.22.amzn1.x86_64
php73-process-7.3.13-1.22.amzn1.x86_64
php73-pspell-7.3.13-1.22.amzn1.x86_64
php73-xml-7.3.13-1.22.amzn1.x86_64
php73-snmp-7.3.13-1.22.amzn1.x86_64
php73-opcache-7.3.13-1.22.amzn1.x86_64
php73-pdo-dblib-7.3.13-1.22.amzn1.x86_64
php73-odbc-7.3.13-1.22.amzn1.x86_64
php73-intl-7.3.13-1.22.amzn1.x86_64
php73-mysqlnd-7.3.13-1.22.amzn1.x86_64
php73-embedded-7.3.13-1.22.amzn1.x86_64
php73-dba-7.3.13-1.22.amzn1.x86_64
php73-devel-7.3.13-1.22.amzn1.x86_64
php73-enchant-7.3.13-1.22.amzn1.x86_64