Release date:
2026-08-24 08:06:57 UTC
Description:
- CVE-2019-11034: reject a MAKERNOTE IFD whose directory start lies beyond the
value buffer to prevent an out-of-bounds read in php_ifd_get32s
- CVE-2019-11035: thread the value buffer length into exif_iif_add_value and
exif_iif_add_tag and bound every element read against it
- CVE-2019-11036: ignore an IFD entry that is not above the offset base to
prevent an out-of-bounds read in exif_process_IFD_TAG
Updated packages:
-
php-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:a69259c51a661ab7e16bc4163e8b83ae64c30d7640c3300a82693452e0bb864b
-
php-bcmath-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:dd83b61c77f61b2fbaa5817a27c32cdd7c977cf930d942ef8681aa5bcb390c75
-
php-cli-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:2e4d47dcd8b8e171cd1bf3df92f634b5c611ea8f0274cc9c06e5d441314df7c9
-
php-common-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:34b43195fc29df39e83c21a9696dfde83b14f75b50ab14882828efb5d193118e
-
php-dba-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:d5e3f80df2d4cec436887a4e22907da52baa7bcb5cb30d7ba4b82dca0f0d077a
-
php-devel-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:298317760e5553cb0d23e684692fdd6e81f9f25cf0e64a71fc36c88247047df7
-
php-embedded-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:b9bf8b57401d556d4137ae34e07df2752c346635070141ba235a02e8d476071e
-
php-enchant-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:4642940c95d84d818641dfd264f264da9e56dde68e01c4ced7f180a5785caf80
-
php-fpm-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:b9169d394092c92b32df29afcaf61abcd289b3f6dbff690e18e9f246612a5886
-
php-gd-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:1447c2c0d11499a83b20be0eb8e53e438a416d7528301e3a49a7c7ddc6780e47
-
php-intl-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:1eaeccc6a61051bca43df316e2339368b293b5428cd7ae570e041e53d9a2bdcd
-
php-ldap-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:b365dd80e6960ff24710c5ec1da6f611c79403c0de477849178abe946d7cbba7
-
php-mbstring-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:f742b1ce3d36031454800bc5a63bb8bd714674ec19f210bd3415874a346cca7e
-
php-mysqlnd-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:c3cdffff4e63025cb70c720cfa131b9c1d3999760ef90a7857fcd67d977401ea
-
php-odbc-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:64bcf52e487cc076780b5414dbc50338fc10320c28dd8f577052f33519a7d0bd
-
php-pdo-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:07ef453e08ba5c6e085ee40d6ecf53c8db0964926103f70520681d30352a8aa4
-
php-pgsql-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:656062e5006af2a841e580a40be86f172f50097a1ff72b46dbeda82189a0da27
-
php-process-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:310bdf5cf1fa68e92631ba32bcc5ed3ad48321bb2a7a7ede5c962e8d45a391a0
-
php-pspell-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:0103c1cb264990bd749b9e3c94c62d2ed339fbb60e4aa6886c81ffc09e4cdb30
-
php-recode-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:cf41061f7758c4b70498b5dee59d10bdfe0f207e925d96f017403810586f1103
-
php-snmp-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:a02dbe1d17cd60824d164940950fad86b9f7ca968deab9ffbbd6c315dfd42968
-
php-soap-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:982265ec9197a4452d8179a3f9b0e64c139395ae0b05e7d62e6e3059de9fb744
-
php-xml-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:e0b8075731d21dbb1b4054fa93b487b2cb4c286a8e0e09baedce712bd598e23d
-
php-xmlrpc-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
sha:dd257784236ffed6910bebc1de34b83ab13296e458721c724d7e2812295344ae
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.