In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "libapache2-mod-php7.4" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "libapache2-mod-php7.4-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "libphp7.4-embed" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "libphp7.4-embed-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-bcmath" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-bcmath-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-bz2" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-bz2-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-cgi" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-cgi-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-cli" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-cli-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-common" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-common-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-curl" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-curl-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-dba" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-dba-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-dev" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-enchant" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-enchant-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-fpm" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-fpm-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-gd" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-gd-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-gmp" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-gmp-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-imap" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-imap-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-interbase" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-interbase-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-intl" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-intl-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-json" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-json-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-ldap" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-ldap-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-mbstring" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-mbstring-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-mysql" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-mysql-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-odbc" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-odbc-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-opcache" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-opcache-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-pgsql" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-pgsql-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-phpdbg" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-phpdbg-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-pspell" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-pspell-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-readline" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-readline-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-snmp" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-snmp-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-soap" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-soap-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-sqlite3" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-sqlite3-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-sybase" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-sybase-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-tidy" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-tidy-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-xml" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-xml-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-xmlrpc" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-xmlrpc-dbgsym" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-xsl" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-zip" }, { "binary_version": "7.4.3-4ubuntu2.15", "binary_name": "php7.4-zip-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "libapache2-mod-php7.4" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "libapache2-mod-php8.0" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "libapache2-mod-php8.1" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "libapache2-mod-php8.1-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "libphp8.1-embed" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "libphp8.1-embed-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-bcmath" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-bcmath-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-bz2" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-bz2-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-cgi" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-cgi-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-cli" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-cli-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-common" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-common-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-curl" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-curl-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-dba" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-dba-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-dev" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-enchant" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-enchant-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-fpm" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-fpm-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-gd" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-gd-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-gmp" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-gmp-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-imap" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-imap-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-interbase" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-interbase-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-intl" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-intl-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-ldap" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-ldap-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-mbstring" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-mbstring-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-mysql" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-mysql-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-odbc" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-odbc-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-opcache" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-opcache-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-pgsql" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-pgsql-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-phpdbg" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-phpdbg-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-pspell" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-pspell-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-readline" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-readline-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-snmp" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-snmp-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-soap" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-soap-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-sqlite3" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-sqlite3-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-sybase" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-sybase-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-tidy" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-tidy-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-xml" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-xml-dbgsym" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-xsl" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-zip" }, { "binary_version": "8.1.2-1ubuntu2.8", "binary_name": "php8.1-zip-dbgsym" } ] }