Errata overview
Errata ID 455
Date 2019-03-13
Source package php7.0
Fixed in version 7.0.33-0+deb9u3
Description
This update addresses the following issues:
* Due to the way rename() across filesystems is implemented, it is possible
  that file being renamed is briefly available with wrong permissions while
  the rename is ongoing, thus enabling unauthorized users to access the data.
  (CVE-2019-9637)
* Uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling
  the maker_note->offset relationship to value_len. (CVE-2019-9638)
* Uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling
  the data_len variable. (CVE-2019-9639)
* Invalid Read in exif_process_SOFn. (CVE-2019-9640)
* Uninitialized read in exif_process_IFD_in_TIFF. (CVE-2019-9641)
Additional notes
CVE ID CVE-2019-9637
CVE-2019-9638
CVE-2019-9639
CVE-2019-9640
CVE-2019-9641
UCS Bug number #48950