php-fpm security issue

Issue #700 closed
Robert Obermeier created an issue

Hey,

there has been an security issue with php-fpm allowing arbitrary code execution under certain configuration setups.

It seems that poste does not fulfill all requirements to be exploitable but it suggest upgrading anyways.

fyi:

-------------------------------------------------------------------------
Debian Security Advisory DSA-4553-1security@debian.org
https://www.debian.org/security/Moritz Muehlenhoff
October 28, 2019https://www.debian.org/security/faq
-------------------------------------------------------------------------

Package : php7.3
CVE ID : CVE-2019-11043

You might wanna consider upgrading php to >= 7.3.11 as soon as possible just to be sure.

Comments (1)

  1. Log in to comment