nginx/php-fpm 긴급 보안 패치가 나왔습니다

https://www.tenable.com/blog/cve-2019-11043-vulnerability-in-php-fpm-could-lead-to-remote-code-execution-on-nginx

취약점이 작동하기 위한 조건은

1. The nginx location directive forwards requests to PHP-FPM
2. The fastcgi_split_path_info directive is present and includes a regular expression beginning with a ‘^’ symbol and ending with a ‘$’ symbol
3. The fastcgi_param directive is used to assign the PATH_INFO variable
4. There are no checks in place to determine whether or not a file exists (e.g., using try_files or an if statement)

cve-2019-11043

패치된 버전은

PHP 7.3.11  PHP 7.2.24

이고 이전 버전들에 백포트는 아직 안 된 걸로 보여요(아니면 제가 모르던가)