Linux · Ubuntu · Package update · February 21, 2019

php7.2-json 7.2.15-0ubuntu0.18.04.1: php7.2-json 7.2.15-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

php7.2-json 7.2.15-0ubuntu0.18.04.1, released February 21, 2019, fixes 8 CVEs in php7.2-json. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
8
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.9611
99th percentile

Priority of the 8 CVEs

Patch now 0 Urgent 0 High 6 Routine 2

Fixed package versions

ProductReleaseFixed in
php7.2-jsonUbuntu 18.04.6 LTS (bionic)7.2.15-0ubuntu0.18.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2019-9020 apcu-panel: ELSA-2020-1624: php:7.2 security, bug fix, and enhancement update (MODERATE)9.8 0.1006 None reported
High CVE-2019-9021 apcu-panel: ELSA-2020-1624: php:7.2 security, bug fix, and enhancement update (MODERATE)9.8 0.1006 None reported
High CVE-2019-9023 apcu-panel: ELSA-2020-1624: php:7.2 security, bug fix, and enhancement update (MODERATE)9.8 0.0932 None reported
High CVE-2019-9024 apcu-panel: ELSA-2020-1624: php:7.2 security, bug fix, and enhancement update (MODERATE)7.5 0.0712 None reported
High CVE-2018-20783 php7.2-pspell: In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR rea...7.5 0.0566 None reported
High CVE-2019-9022 apcu-panel: ELSA-2020-1624: php:7.2 security, bug fix, and enhancement update (MODERATE)7.5 0.0419 None reported
Routine CVE-2018-19518 libapache2-mod-php7.2: University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rs...n/a 0.9611 None reported
Routine CVE-2018-19935 libapache2-mod-php7.2: ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointe...n/a 0.0628 None reported
Showing 1 to 8 of 8 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.