Oval Definition:	oval:org.opensuse.security:def:4960
Revision Date: 2020-12-02 Version: 1 Title: Security update for php7 (Moderate) Description: This update for php7 fixes the following issues: The following security vulnerabilities were fixed: - CVE-2018-14851: Fixed an out-of-bound read in exif_process_IFD_in_MAKERNOTE, which could be exploited by an attacker via crafted JPG files, and could result in an application crash. (bsc#1103659) - CVE-2017-9120: Fixed an buffer overflow in mysqli_real_escape_string, which could be exploited via along string and could result in an application crash or have other unspecified impacts. (bsc#1103661) Family: unix Class: patch Status: Reference(s): 1012382 1044231 1050242 1050549 1051510 1051858 1052904 1053043 1055117 1055121 1055186 1056686 1056787 1058115 1060463 1061210 1061840 1063638 1064802 1065600 1065729 1066129 1068546 1070872 1071995 1075020 1082387 1082555 1083647 1085535 1085536 1086657 1088804 1093389 1097583 1097584 1097585 1097586 1097587 1097588 1099658 1103186 1103259 1103659 1103661 1103990 1103992 1104353 1104427 1104745 1105173 1106011 1106284 1108193 1108838 1108937 1109837 1110348 1110946 1111331 1111666 1111696 1111974 1112063 1112112 1112113 1112114 1112128 1112178 1112374 1113722 1113956 1114279 1114427 1114542 1114638 1114685 1115688 1116451 1117114 1117158 1117195 1117300 1117561 1118139 1119680 1119843 1120091 1120318 1120423 1120566 1120843 1120902 1121874 1122767 1122776 1123131 1123454 1123455 1123663 1124062 1124503 1124658 1124839 1124869 1126206 1126356 1126704 1127175 1127371 1127374 1127611 1127616 1127760 1127857 1128052 1128415 1128544 1128845 1128904 1128971 1128979 1129138 1129273 1129497 1129693 1129770 1129845 1130195 1130425 1130527 1130567 1130579 1130699 1130937 1130972 1131326 1131427 1131438 1131451 1131467 1131488 1131530 1131565 1131574 1131587 1131659 1131673 1131847 1131848 1131851 1131900 1131934 1131935 1132044 1132219 1132226 1132227 1132365 1132368 1132369 1132370 1132372 1132373 1132384 1132397 1132402 1132403 1132404 1132405 1132407 1132411 1132412 1132413 1132414 1132426 1132527 1132531 1132555 1132558 1132561 1132562 1132563 1132564 1132570 1132571 1132572 1132589 1132618 1132673 1132681 1132726 1132828 1132894 1132943 1132982 1133005 1133016 1133021 1133094 1133095 1133115 1133149 1133176 1133188 1133190 1133320 1133486 1133529 1133547 1133584 1133593 1133612 1133616 1133667 1133668 1133672 1133674 1133675 1133698 1133702 1133731 1133769 1133772 1133774 1133778 1133779 1133780 1133825 1133850 1133851 1133852 1133897 1134090 1134160 1134162 1134199 1134200 1134201 1134202 1134203 1134204 1134205 1134223 1134354 1134393 1134397 1134459 1134460 1134461 1134597 1134600 1134607 1134618 1134651 1134671 1134760 1134806 1134810 1134813 1134848 1134936 1134945 1134946 1134947 1134948 1134949 1134950 1134951 1134952 1134953 1134972 1134974 1134975 1134980 1134981 1134983 1134987 1134989 1134990 1134994 1134995 1134998 1134999 1135006 1135007 1135008 1135018 1135021 1135024 1135026 1135027 1135028 1135029 1135031 1135033 1135034 1135035 1135036 1135037 1135038 1135039 1135041 1135042 1135044 1135045 1135046 1135047 1135049 1135051 1135052 1135053 1135055 1135056 1135058 1135100 1135120 1135189 1135228 1135278 1135281 1135309 1135312 1135314 1135315 1135316 1135320 1135323 1135330 1135492 1135542 1135556 1135603 1135642 1135661 1135758 1136157 1136188 1136206 1136215 1136345 1136347 1136348 1136353 1136424 1136428 1136430 1136432 1136434 1136435 1136438 1136439 1136456 1136460 1136461 1136469 1136477 1136478 1136498 1136573 1136586 1136881 1136935 1136990 1137151 1137152 1137153 1137162 1137201 1137224 1137232 1137233 1137236 1137372 1137429 1137444 1137586 1137739 1137752 1138291 1138293 1141895 1144333 1144522 1146539 1149792 1152684 1156510 1157424 1158187 1158328 1159285 1159352 1159812 1160659 1161561 1161951 1162928 1162929 1162931 1164078 1164507 1165111 1165404 1165488 1165527 1165741 1165813 1165873 1165929 1165950 1165980 1165984 1165985 1166003 1166101 1166102 1166103 1166104 1166632 1166658 1166730 1166731 1166732 1166733 1166734 1166735 1171862 882383 CVE-2009-3736 CVE-2009-5029 CVE-2011-2513 CVE-2011-2514 CVE-2011-3377 CVE-2012-0035 CVE-2012-2369 CVE-2012-3422 CVE-2012-3423 CVE-2012-4412 CVE-2012-4540 CVE-2013-0242 CVE-2013-1914 CVE-2013-1926 CVE-2013-1927 CVE-2013-2207 CVE-2013-4237 CVE-2013-4314 CVE-2013-4332 CVE-2013-4349 CVE-2013-4458 CVE-2014-0475 CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 CVE-2014-4043 CVE-2014-5119 CVE-2014-6040 CVE-2014-7202 CVE-2014-7203 CVE-2017-5753 CVE-2017-9120 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-14851 CVE-2018-16858 CVE-2018-16880 CVE-2018-7191 CVE-2019-10124 CVE-2019-11085 CVE-2019-11091 CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 CVE-2019-11486 CVE-2019-11487 CVE-2019-11745 CVE-2019-11811 CVE-2019-11815 CVE-2019-11833 CVE-2019-11884 CVE-2019-12382 CVE-2019-12818 CVE-2019-12819 CVE-2019-13722 CVE-2019-16775 CVE-2019-16776 CVE-2019-16777 CVE-2019-17005 CVE-2019-17008 CVE-2019-17009 CVE-2019-17010 CVE-2019-17011 CVE-2019-17012 CVE-2019-19768 CVE-2019-3846 CVE-2019-3882 CVE-2019-5489 CVE-2019-8564 CVE-2019-9003 CVE-2019-9500 CVE-2019-9503 CVE-2019-9853 CVE-2020-12823 CVE-2020-8647 CVE-2020-8648 CVE-2020-8649 CVE-2020-9383 SUSE-SU-2018:2337-1 SUSE-SU-2019:2003-1 SUSE-SU-2019:3339-1 SUSE-SU-2020:0104-1 SUSE-SU-2020:0836-1 SUSE-SU-2020:1930-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for Rasperry Pi 12 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-31.2.0esr-0.16.1 is installed OR MozillaFirefox-branding-SLED-31.0-0.10.1 is installed OR MozillaFirefox-translations-31.2.0esr-0.16.1 is installed OR libfreebl3-3.17.2-0.8.1 is installed OR libfreebl3-32bit-3.17.2-0.8.1 is installed OR libsoftokn3-3.17.2-0.8.1 is installed OR libsoftokn3-32bit-3.17.2-0.8.1 is installed OR mozilla-nspr-4.10.7-0.3.3 is installed OR mozilla-nspr-32bit-4.10.7-0.3.3 is installed OR mozilla-nss-3.17.2-0.8.1 is installed OR mozilla-nss-32bit-3.17.2-0.8.1 is installed OR mozilla-nss-tools-3.17.2-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information emacs-24.3-14 is installed OR emacs-info-24.3-14 is installed OR emacs-x11-24.3-14 is installed OR etags-24.3-14 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information bind-libs-9.9.6P1-30 is installed OR bind-libs-32bit-9.9.6P1-30 is installed OR bind-utils-9.9.6P1-30 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information curl-7.37.0-28 is installed OR libcurl4-7.37.0-28 is installed OR libcurl4-32bit-7.37.0-28 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information gegl-0_2-0.2.0-14 is installed OR gegl-0_2-lang-0.2.0-14 is installed OR libgegl-0_2-0-0.2.0-14 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information NetworkManager-1.0.12-13.6 is installed OR NetworkManager-lang-1.0.12-13.6 is installed OR libnm-glib-vpn1-1.0.12-13.6 is installed OR libnm-glib4-1.0.12-13.6 is installed OR libnm-util2-1.0.12-13.6 is installed OR libnm0-1.0.12-13.6 is installed OR typelib-1_0-NM-1_0-1.0.12-13.6 is installed OR typelib-1_0-NMClient-1_0-1.0.12-13.6 is installed OR typelib-1_0-NetworkManager-1_0-1.0.12-13.6 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND Package Information ctdb-4.2.4-18.30.1 is installed OR samba-4.2.4-18.30.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND Package Information ctdb-4.2.4-26.2 is installed OR samba-4.2.4-26.2 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND Package Information cluster-md-kmp-default-4.4.21-84.1 is installed OR cluster-network-kmp-default-4.4.21-84.1 is installed OR dlm-kmp-default-4.4.21-84.1 is installed OR gfs2-kmp-default-4.4.21-84.1 is installed OR kernel-default-4.4.21-84.1 is installed OR ocfs2-kmp-default-4.4.21-84.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND fence-agents-4.0.25+git.1485179354.eb43835-2 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND Package Information corosync-2.3.6-9.13 is installed OR libcorosync4-2.3.6-9.13 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information PackageKit-1.1.3-24.9 is installed OR PackageKit-backend-zypp-1.1.3-24.9 is installed OR PackageKit-lang-1.1.3-24.9 is installed OR libpackagekit-glib2-18-1.1.3-24.9 is installed OR typelib-1_0-PackageKitGlib-1_0-1.1.3-24.9 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-3_12_32-33-default-3-2.1 is installed OR kgraft-patch-3_12_32-33-xen-3-2.1 is installed OR kgraft-patch-SLE12_Update_1-3-2.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information compat-openssl098-0.9.8j-78.1 is installed OR libopenssl0_9_8-0.9.8j-78.1 is installed OR libopenssl0_9_8-32bit-0.9.8j-78.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND python-PyYAML-3.10-15.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information apache2-mod_php5-5.5.14-7.1 is installed OR php5-5.5.14-7.1 is installed OR php5-bcmath-5.5.14-7.1 is installed OR php5-bz2-5.5.14-7.1 is installed OR php5-calendar-5.5.14-7.1 is installed OR php5-ctype-5.5.14-7.1 is installed OR php5-curl-5.5.14-7.1 is installed OR php5-dba-5.5.14-7.1 is installed OR php5-dom-5.5.14-7.1 is installed OR php5-enchant-5.5.14-7.1 is installed OR php5-exif-5.5.14-7.1 is installed OR php5-fastcgi-5.5.14-7.1 is installed OR php5-fileinfo-5.5.14-7.1 is installed OR php5-fpm-5.5.14-7.1 is installed OR php5-ftp-5.5.14-7.1 is installed OR php5-gd-5.5.14-7.1 is installed OR php5-gettext-5.5.14-7.1 is installed OR php5-gmp-5.5.14-7.1 is installed OR php5-iconv-5.5.14-7.1 is installed OR php5-intl-5.5.14-7.1 is installed OR php5-json-5.5.14-7.1 is installed OR php5-ldap-5.5.14-7.1 is installed OR php5-mbstring-5.5.14-7.1 is installed OR php5-mcrypt-5.5.14-7.1 is installed OR php5-mysql-5.5.14-7.1 is installed OR php5-odbc-5.5.14-7.1 is installed OR php5-openssl-5.5.14-7.1 is installed OR php5-pcntl-5.5.14-7.1 is installed OR php5-pdo-5.5.14-7.1 is installed OR php5-pear-5.5.14-7.1 is installed OR php5-pgsql-5.5.14-7.1 is installed OR php5-pspell-5.5.14-7.1 is installed OR php5-shmop-5.5.14-7.1 is installed OR php5-snmp-5.5.14-7.1 is installed OR php5-soap-5.5.14-7.1 is installed OR php5-sockets-5.5.14-7.1 is installed OR php5-sqlite-5.5.14-7.1 is installed OR php5-suhosin-5.5.14-7.1 is installed OR php5-sysvmsg-5.5.14-7.1 is installed OR php5-sysvsem-5.5.14-7.1 is installed OR php5-sysvshm-5.5.14-7.1 is installed OR php5-tokenizer-5.5.14-7.1 is installed OR php5-wddx-5.5.14-7.1 is installed OR php5-xmlreader-5.5.14-7.1 is installed OR php5-xmlrpc-5.5.14-7.1 is installed OR php5-xmlwriter-5.5.14-7.1 is installed OR php5-xsl-5.5.14-7.1 is installed OR php5-zip-5.5.14-7.1 is installed OR php5-zlib-5.5.14-7.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information apache2-mod_php7-7.2.5-4.6 is installed OR php7-7.2.5-4.6 is installed OR php7-bcmath-7.2.5-4.6 is installed OR php7-bz2-7.2.5-4.6 is installed OR php7-calendar-7.2.5-4.6 is installed OR php7-ctype-7.2.5-4.6 is installed OR php7-curl-7.2.5-4.6 is installed OR php7-dba-7.2.5-4.6 is installed OR php7-devel-7.2.5-4.6 is installed OR php7-dom-7.2.5-4.6 is installed OR php7-enchant-7.2.5-4.6 is installed OR php7-exif-7.2.5-4.6 is installed OR php7-fastcgi-7.2.5-4.6 is installed OR php7-fileinfo-7.2.5-4.6 is installed OR php7-fpm-7.2.5-4.6 is installed OR php7-ftp-7.2.5-4.6 is installed OR php7-gd-7.2.5-4.6 is installed OR php7-gettext-7.2.5-4.6 is installed OR php7-gmp-7.2.5-4.6 is installed OR php7-iconv-7.2.5-4.6 is installed OR php7-intl-7.2.5-4.6 is installed OR php7-json-7.2.5-4.6 is installed OR php7-ldap-7.2.5-4.6 is installed OR php7-mbstring-7.2.5-4.6 is installed OR php7-mysql-7.2.5-4.6 is installed OR php7-odbc-7.2.5-4.6 is installed OR php7-opcache-7.2.5-4.6 is installed OR php7-openssl-7.2.5-4.6 is installed OR php7-pcntl-7.2.5-4.6 is installed OR php7-pdo-7.2.5-4.6 is installed OR php7-pear-7.2.5-4.6 is installed OR php7-pear-Archive_Tar-7.2.5-4.6 is installed OR php7-pgsql-7.2.5-4.6 is installed OR php7-phar-7.2.5-4.6 is installed OR php7-posix-7.2.5-4.6 is installed OR php7-shmop-7.2.5-4.6 is installed OR php7-snmp-7.2.5-4.6 is installed OR php7-soap-7.2.5-4.6 is installed OR php7-sockets-7.2.5-4.6 is installed OR php7-sqlite-7.2.5-4.6 is installed OR php7-sysvmsg-7.2.5-4.6 is installed OR php7-sysvsem-7.2.5-4.6 is installed OR php7-sysvshm-7.2.5-4.6 is installed OR php7-tokenizer-7.2.5-4.6 is installed OR php7-wddx-7.2.5-4.6 is installed OR php7-xmlreader-7.2.5-4.6 is installed OR php7-xmlrpc-7.2.5-4.6 is installed OR php7-xmlwriter-7.2.5-4.6 is installed OR php7-xsl-7.2.5-4.6 is installed OR php7-zip-7.2.5-4.6 is installed OR php7-zlib-7.2.5-4.6 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information PolicyKit-0.9-14.41.1 is installed OR PolicyKit-32bit-0.9-14.41.1 is installed OR PolicyKit-doc-0.9-14.39.2 is installed OR PolicyKit-x86-0.9-14.41.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information ntp-4.2.8p7-44.1 is installed OR ntp-doc-4.2.8p7-44.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information ant-1.7.1-20.11.1 is installed OR ant-trax-1.7.1-16.11.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND mailx-12.5-22.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information strongswan-5.1.3-22.1 is installed OR strongswan-doc-5.1.3-22.1 is installed OR strongswan-hmac-5.1.3-22.1 is installed OR strongswan-ipsec-5.1.3-22.1 is installed OR strongswan-libs0-5.1.3-22.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information dbus-1-1.8.16-19 is installed OR dbus-1-x11-1.8.16-19 is installed OR libdbus-1-3-1.8.16-19 is installed OR libdbus-1-3-32bit-1.8.16-19 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information accountsservice-0.6.42-14 is installed OR accountsservice-lang-0.6.42-14 is installed OR libaccountsservice0-0.6.42-14 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information apache-commons-beanutils-1.9.2-1 is installed OR apache-commons-beanutils-javadoc-1.9.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_51-52_31-default-5-2.2 is installed OR kgraft-patch-3_12_51-52_31-xen-5-2.2 is installed OR kgraft-patch-SLE12_Update_9-5-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information gstreamer-plugins-bad-1.2.4-3.4 is installed OR libgstegl-1_0-0-1.2.4-3.4 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information curl-7.19.7-1.46.1 is installed OR libcurl-devel-7.19.7-1.46.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information icecream-1.0.1-5 is installed OR lzo-devel-2.08-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information DirectFB-devel-1.7.1-6 is installed OR lib++dfb-devel-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND cyrus-sasl-devel-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information libxerces-c-3_1-3.1.1-4.1 is installed OR libxerces-c-3_1-32bit-3.1.1-4.1 is installed OR xerces-c-3.1.1-4.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information MozillaThunderbird-68.3.0-3.61 is installed OR MozillaThunderbird-translations-common-68.3.0-3.61 is installed OR MozillaThunderbird-translations-other-68.3.0-3.61 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.4 is installed OR kernel-default-extra-4.12.14-197.4 is installed
BACK