# CVE-2019-11035: apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  The following packages have be...

CVE-2019-11035 is fixed in 72 products on 1 platform, first by libapache2-mod-php7.2 7.2.17-0ubuntu0.18.04.1, released April 16, 2019. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2019-11035
- Priority: High
- CVSS: 9.1 (Moderate)
- EPSS: 0.0441
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Apr 16, 2019

## Description

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  The following packages have been upgraded to a later upstream version: php (7.2.24). (BZ#1726981)  Security Fix(es):  * php: Invalid memory access in function xmlrpc_decode() (CVE-2019-9020)  * php: File rename across filesystems may allow unwanted access during processing (CVE-2019-9637)  * php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9638)  * php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9639)  * php: Invalid read in exif_process_SOFn() (CVE-2019-9640)  * php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)  * php: Buffer over-read in exif_read_data() (CVE-2019-11040)  * php: Buffer over-read in PHAR reading functions (CVE-2018-20783)  * php: Heap-based buffer over-read in PHAR reading functions (CVE-2019-9021)  * php: memcpy with negative length via crafted DNS response (CVE-2019-9022)  * php: Heap-based buffer over-read in mbstring regular expression functions (CVE-2019-9023)  * php: Out-of-bounds read in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c (CVE-2019-9024)  * php: Heap buffer overflow in function exif_process_IFD_TAG() (CVE-2019-11034)  * php: Heap buffer overflow in function exif_iif_add_value() (CVE-2019-11035)  * php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure (CVE-2019-11036)  * php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)  * php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Additional Changes:  For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | apcu-panel RHEL 8 | 0:5.1.12-2.module+el8.1.0+3202+af5476b9 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | apcu-panel ol 8 | 0:5.1.12-2.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | libapache2-mod-php7.2 Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [libapache2-mod-php7.2 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libapache2-mod-php7.2-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | libphp7.2-embed Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [libphp7.2-embed 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libphp7.2-embed-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | libzip RHEL 8 | 0:1.5.1-2.module+el8.1.0+3202+af5476b9 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | libzip ol 8 | 0:1.5.1-2.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | libzip-devel RHEL 8 | 0:1.5.1-2.module+el8.1.0+3202+af5476b9 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | libzip-devel ol 8 | 0:1.5.1-2.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | libzip-tools RHEL 8 | 0:1.5.1-2.module+el8.1.0+3202+af5476b9 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | libzip-tools ol 8 | 0:1.5.1-2.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-bcmath RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-bcmath ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-cli RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-cli ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-common RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-common ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-dba RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-dba ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-dbg RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-dbg ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-devel RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-devel ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-embedded RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-embedded ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-enchant RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-enchant ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-fpm RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-fpm ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-gd RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-gd ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-gmp RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-gmp ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-intl RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-intl ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-json RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-json ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-ldap RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-ldap ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-mbstring RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-mbstring ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-mysqlnd RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-mysqlnd ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-odbc RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-odbc ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-opcache RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-opcache ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-pdo RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-pdo ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-pear RHEL 8 | 1:1.10.5-9.module+el8.1.0+3202+af5476b9 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-pear ol 8 | 1:1.10.5-9.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-pecl-apcu RHEL 8 | 0:5.1.12-2.module+el8.1.0+3202+af5476b9 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-pecl-apcu ol 8 | 0:5.1.12-2.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-pecl-apcu-devel RHEL 8 | 0:5.1.12-2.module+el8.1.0+3202+af5476b9 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-pecl-apcu-devel ol 8 | 0:5.1.12-2.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-pecl-zip RHEL 8 | 0:1.15.3-1.module+el8.1.0+3186+20164e6f | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-pecl-zip ol 8 | 0:1.15.3-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-pgsql RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-pgsql ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-process RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-process ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-recode RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-recode ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-snmp RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-snmp ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-soap RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-soap ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-xml RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-xml ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php-xmlrpc RHEL 8 | 0:7.2.24-1.module+el8.2.0+4601+7c76a223 | [RHSA-2020:1624](https://patchblox.com/security/data/fix/linux/rhsa-2020-1624.md) | Apr 28, 2020 |
| Linux | php-xmlrpc ol 8 | 0:7.2.24-1.module+el8.2.0+5510+6771133c | [ELSA-2020-1624](https://patchblox.com/security/data/fix/linux/elsa-2020-1624.md) | May 5, 2020 |
| Linux | php7.2 Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-bcmath Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-bcmath 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-bcmath-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-bz2 Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-bz2 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-bz2-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-cgi Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-cgi 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-cgi-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-cli Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-cli 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-cli-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-common Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-common 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-common-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-curl Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-curl 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-curl-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-dba Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-dba 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-dba-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-enchant Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-enchant 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-enchant-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-fpm Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-fpm 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-fpm-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-gd Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-gd 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-gd-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-gmp Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-gmp 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-gmp-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-imap Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-imap 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-imap-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-interbase Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-interbase 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-interbase-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-intl Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-intl 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-intl-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-json Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-json 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-json-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-ldap Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-ldap 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-ldap-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-mbstring Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-mbstring 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-mbstring-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-mysql Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-mysql 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-mysql-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-odbc Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-odbc 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-odbc-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-opcache Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-opcache 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-opcache-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-pgsql Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-pgsql 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-pgsql-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-phpdbg Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-phpdbg 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-phpdbg-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-pspell Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-pspell 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-pspell-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-readline Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-readline 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-readline-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-recode Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-recode 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-recode-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-snmp Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-snmp 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-snmp-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-soap Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-soap 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-soap-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-sqlite3 Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-sqlite3 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-sqlite3-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-sybase Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-sybase 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-sybase-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-tidy Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-tidy 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-tidy-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-xml Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-xml 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-xml-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-xmlrpc Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-xmlrpc 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-xmlrpc-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-xsl Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-xsl 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-xsl-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |
| Linux | php7.2-zip Ubuntu 18.04.6 LTS (bionic) | 7.2.17-0ubuntu0.18.04.1 | [php7.2-zip 7.2.17-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-zip-7.2.17-0ubuntu0.18.04.1.md) | Apr 16, 2019 |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.