Oval Definition:	oval:org.opensuse.security:def:52065
Revision Date: 2020-12-01 Version: 1 Title: Security update for php7 (Moderate) Description: This update for php7 fixes the following issues: - CVE-2019-11045: Fixed an issue with improper input validation in the filename handling of the DirectoryIterator class (bsc#1159923). - CVE-2019-11046: Fixed an information leak in bc_shift_addsub() (bsc#1159924). - CVE-2019-11047, CVE-2019-11050: Fixed multiple information leaks in exif_read_data() (bsc#1159922, bsc#1159927). Family: unix Class: patch Status: Reference(s): 1118987 1127532 1158328 1159922 1159923 1159924 1159927 1162197 1162200 1166916 1172356 1172442 1172443 1172515 1172643 1174543 1176315 862963 CVE-2007-6600 CVE-2008-3825 CVE-2009-1384 CVE-2009-1886 CVE-2009-1888 CVE-2009-2285 CVE-2009-2347 CVE-2009-2813 CVE-2009-2906 CVE-2009-2948 CVE-2009-4012 CVE-2009-4034 CVE-2009-4136 CVE-2010-0547 CVE-2010-0728 CVE-2010-0787 CVE-2010-0926 CVE-2010-1169 CVE-2010-1170 CVE-2010-1635 CVE-2010-1642 CVE-2010-2063 CVE-2010-2065 CVE-2010-2067 CVE-2010-2233 CVE-2010-3069 CVE-2010-3433 CVE-2010-4665 CVE-2011-0192 CVE-2011-0719 CVE-2011-1167 CVE-2011-1521 CVE-2011-2522 CVE-2011-2694 CVE-2011-3389 CVE-2011-4944 CVE-2012-0817 CVE-2012-0845 CVE-2012-0866 CVE-2012-0867 CVE-2012-0868 CVE-2012-0870 CVE-2012-1150 CVE-2012-1173 CVE-2012-1182 CVE-2012-2111 CVE-2012-2113 CVE-2012-2143 CVE-2012-2655 CVE-2012-3401 CVE-2012-3488 CVE-2012-3489 CVE-2012-4564 CVE-2012-6150 CVE-2013-0172 CVE-2013-0213 CVE-2013-0214 CVE-2013-0255 CVE-2013-0454 CVE-2013-1752 CVE-2013-1753 CVE-2013-1863 CVE-2013-1899 CVE-2013-1900 CVE-2013-1901 CVE-2013-1960 CVE-2013-1961 CVE-2013-4124 CVE-2013-4231 CVE-2013-4232 CVE-2013-4238 CVE-2013-4243 CVE-2013-4244 CVE-2013-4408 CVE-2013-4475 CVE-2013-4476 CVE-2013-4496 CVE-2013-6442 CVE-2014-0060 CVE-2014-0061 CVE-2014-0062 CVE-2014-0063 CVE-2014-0064 CVE-2014-0065 CVE-2014-0066 CVE-2014-0067 CVE-2014-0178 CVE-2014-0239 CVE-2014-0244 CVE-2014-1912 CVE-2014-1932 CVE-2014-2497 CVE-2014-3493 CVE-2014-3560 CVE-2014-4650 CVE-2014-7185 CVE-2014-8127 CVE-2014-8128 CVE-2014-8129 CVE-2014-8130 CVE-2014-8143 CVE-2014-9655 CVE-2014-9709 CVE-2015-0240 CVE-2015-1547 CVE-2015-3165 CVE-2015-3166 CVE-2015-3167 CVE-2015-3223 CVE-2015-5252 CVE-2015-5288 CVE-2015-5289 CVE-2015-5296 CVE-2015-5299 CVE-2015-5330 CVE-2015-5370 CVE-2015-7554 CVE-2015-7560 CVE-2015-8467 CVE-2015-8543 CVE-2015-8665 CVE-2015-8683 CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 CVE-2016-0771 CVE-2016-0772 CVE-2016-1000110 CVE-2016-10166 CVE-2016-10167 CVE-2016-10168 CVE-2016-10266 CVE-2016-10267 CVE-2016-10268 CVE-2016-10269 CVE-2016-10270 CVE-2016-10271 CVE-2016-10272 CVE-2016-2110 CVE-2016-2111 CVE-2016-2112 CVE-2016-2113 CVE-2016-2115 CVE-2016-2118 CVE-2016-2119 CVE-2016-3186 CVE-2016-3622 CVE-2016-3623 CVE-2016-3658 CVE-2016-3945 CVE-2016-3990 CVE-2016-3991 CVE-2016-5116 CVE-2016-5314 CVE-2016-5316 CVE-2016-5317 CVE-2016-5320 CVE-2016-5321 CVE-2016-5323 CVE-2016-5636 CVE-2016-5652 CVE-2016-5699 CVE-2016-5875 CVE-2016-6128 CVE-2016-6132 CVE-2016-6161 CVE-2016-6207 CVE-2016-6214 CVE-2016-6905 CVE-2016-6906 CVE-2016-6911 CVE-2016-6912 CVE-2016-7568 CVE-2016-8670 CVE-2016-9273 CVE-2016-9297 CVE-2016-9317 CVE-2016-9448 CVE-2016-9453 CVE-2016-9933 CVE-2017-5225 CVE-2018-11805 CVE-2019-11045 CVE-2019-11046 CVE-2019-11047 CVE-2019-11050 CVE-2019-11745 CVE-2019-13722 CVE-2019-17005 CVE-2019-17008 CVE-2019-17009 CVE-2019-17010 CVE-2019-17011 CVE-2019-17012 CVE-2019-5737 CVE-2020-10759 CVE-2020-11080 CVE-2020-17507 CVE-2020-1930 CVE-2020-1931 CVE-2020-7598 CVE-2020-8174 SUSE-SU-2019:0635-1 SUSE-SU-2019:3339-1 SUSE-SU-2020:0101-1 SUSE-SU-2020:0813-1 SUSE-SU-2020:1576-1 SUSE-SU-2020:2748-1 Platform(s): openSUSE Leap 15.0 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information libcdio16-0.94-lp150.4 is installed OR libiso9660-10-0.94-lp150.4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information gstreamer-0_10-plugins-bad-0.10.22-7.11 is installed OR gstreamer-0_10-plugins-bad-lang-0.10.22-7.11 is installed OR libgstbasecamerabinsrc-0_10-0-0.10.22-7.11 is installed OR libgstbasecamerabinsrc-0_10-0-32bit-0.10.22-7.11 is installed OR libgstbasevideo-0_10-0-0.10.22-7.11 is installed OR libgstbasevideo-0_10-0-32bit-0.10.22-7.11 is installed OR libgstphotography-0_10-0-0.10.22-7.11 is installed OR libgstphotography-0_10-0-32bit-0.10.22-7.11 is installed OR libgstsignalprocessor-0_10-0-0.10.22-7.11 is installed OR libgstsignalprocessor-0_10-0-32bit-0.10.22-7.11 is installed OR libgstvdp-0_10-0-0.10.22-7.11 is installed OR libgstvdp-0_10-0-32bit-0.10.22-7.11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information libpng12-0-1.2.31-5.38 is installed OR libpng12-0-32bit-1.2.31-5.38 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information pam_krb5-2.4.4-4 is installed OR pam_krb5-32bit-2.4.4-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information libecpg6-9.4.5-4 is installed OR libpq5-9.4.5-4 is installed OR libpq5-32bit-9.4.5-4 is installed OR postgresql94-9.4.5-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libdcerpc-binding0-4.4.2-29 is installed OR libdcerpc-binding0-32bit-4.4.2-29 is installed OR libdcerpc0-4.4.2-29 is installed OR libdcerpc0-32bit-4.4.2-29 is installed OR libndr-krb5pac0-4.4.2-29 is installed OR libndr-krb5pac0-32bit-4.4.2-29 is installed OR libndr-nbt0-4.4.2-29 is installed OR libndr-nbt0-32bit-4.4.2-29 is installed OR libndr-standard0-4.4.2-29 is installed OR libndr-standard0-32bit-4.4.2-29 is installed OR libndr0-4.4.2-29 is installed OR libndr0-32bit-4.4.2-29 is installed OR libnetapi0-4.4.2-29 is installed OR libnetapi0-32bit-4.4.2-29 is installed OR libsamba-credentials0-4.4.2-29 is installed OR libsamba-credentials0-32bit-4.4.2-29 is installed OR libsamba-errors0-4.4.2-29 is installed OR libsamba-errors0-32bit-4.4.2-29 is installed OR libsamba-hostconfig0-4.4.2-29 is installed OR libsamba-hostconfig0-32bit-4.4.2-29 is installed OR libsamba-passdb0-4.4.2-29 is installed OR libsamba-passdb0-32bit-4.4.2-29 is installed OR libsamba-util0-4.4.2-29 is installed OR libsamba-util0-32bit-4.4.2-29 is installed OR libsamdb0-4.4.2-29 is installed OR libsamdb0-32bit-4.4.2-29 is installed OR libsmbclient0-4.4.2-29 is installed OR libsmbclient0-32bit-4.4.2-29 is installed OR libsmbconf0-4.4.2-29 is installed OR libsmbconf0-32bit-4.4.2-29 is installed OR libsmbldap0-4.4.2-29 is installed OR libsmbldap0-32bit-4.4.2-29 is installed OR libtevent-util0-4.4.2-29 is installed OR libtevent-util0-32bit-4.4.2-29 is installed OR libwbclient0-4.4.2-29 is installed OR libwbclient0-32bit-4.4.2-29 is installed OR samba-4.4.2-29 is installed OR samba-client-4.4.2-29 is installed OR samba-client-32bit-4.4.2-29 is installed OR samba-doc-4.4.2-29 is installed OR samba-libs-4.4.2-29 is installed OR samba-libs-32bit-4.4.2-29 is installed OR samba-winbind-4.4.2-29 is installed OR samba-winbind-32bit-4.4.2-29 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information gd-2.1.0-23 is installed OR gd-32bit-2.1.0-23 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information dhcp-4.3.3-10.14 is installed OR dhcp-client-4.3.3-10.14 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information php7-7.2.5-4.49 is installed OR php7-embed-7.2.5-4.49 is installed OR php7-readline-7.2.5-4.49 is installed OR php7-sodium-7.2.5-4.49 is installed OR php7-tidy-7.2.5-4.49 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information nodejs8-8.15.1-3.14 is installed OR nodejs8-devel-8.15.1-3.14 is installed OR nodejs8-docs-8.15.1-3.14 is installed OR npm8-8.15.1-3.14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND wget-1.14-7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_82-default-4-2 is installed OR kgraft-patch-3_12_74-60_64_82-xen-4-2 is installed OR kgraft-patch-SLE12-SP1_Update_25-4-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information gnome-settings-daemon-3.20.1-40 is installed OR gnome-settings-daemon-lang-3.20.1-40 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information java-1_7_0-openjdk-1.7.0.181-43.15 is installed OR java-1_7_0-openjdk-demo-1.7.0.181-43.15 is installed OR java-1_7_0-openjdk-devel-1.7.0.181-43.15 is installed OR java-1_7_0-openjdk-headless-1.7.0.181-43.15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_90-92_45-default-7-2 is installed OR kgraft-patch-SLE12-SP2_Update_14-7-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND busybox-1.21.1-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information postgresql96-9.6.15-3.29 is installed OR postgresql96-contrib-9.6.15-3.29 is installed OR postgresql96-docs-9.6.15-3.29 is installed OR postgresql96-libs-9.6.15-3.29 is installed OR postgresql96-plperl-9.6.15-3.29 is installed OR postgresql96-plpython-9.6.15-3.29 is installed OR postgresql96-pltcl-9.6.15-3.29 is installed OR postgresql96-server-9.6.15-3.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information libshibsp-lite6-2.5.5-6.6 is installed OR libshibsp6-2.5.5-6.6 is installed OR shibboleth-sp-2.5.5-6.6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND squid-3.5.21-26.17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information openssh-7.2p2-74.23 is installed OR openssh-askpass-gnome-7.2p2-74.23 is installed OR openssh-fips-7.2p2-74.23 is installed OR openssh-helpers-7.2p2-74.23 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information kernel-default-4.12.14-94.41 is installed OR kernel-default-base-4.12.14-94.41 is installed OR kernel-default-devel-4.12.14-94.41 is installed OR kernel-default-man-4.12.14-94.41 is installed OR kernel-devel-4.12.14-94.41 is installed OR kernel-macros-4.12.14-94.41 is installed OR kernel-source-4.12.14-94.41 is installed OR kernel-syms-4.12.14-94.41 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information nodejs8-8.17.0-3.32 is installed OR nodejs8-devel-8.17.0-3.32 is installed OR nodejs8-docs-8.17.0-3.32 is installed OR npm8-8.17.0-3.32 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information libQt5Concurrent-devel-5.9.4-8.24 is installed OR libQt5Concurrent5-5.9.4-8.24 is installed OR libQt5Core-devel-5.9.4-8.24 is installed OR libQt5Core-private-headers-devel-5.9.4-8.24 is installed OR libQt5Core5-5.9.4-8.24 is installed OR libQt5DBus-devel-5.9.4-8.24 is installed OR libQt5DBus-private-headers-devel-5.9.4-8.24 is installed OR libQt5DBus5-5.9.4-8.24 is installed OR libQt5Gui-devel-5.9.4-8.24 is installed OR libQt5Gui-private-headers-devel-5.9.4-8.24 is installed OR libQt5Gui5-5.9.4-8.24 is installed OR libQt5KmsSupport-devel-static-5.9.4-8.24 is installed OR libQt5KmsSupport-private-headers-devel-5.9.4-8.24 is installed OR libQt5Network-devel-5.9.4-8.24 is installed OR libQt5Network-private-headers-devel-5.9.4-8.24 is installed OR libQt5Network5-5.9.4-8.24 is installed OR libQt5OpenGL-devel-5.9.4-8.24 is installed OR libQt5OpenGL-private-headers-devel-5.9.4-8.24 is installed OR libQt5OpenGL5-5.9.4-8.24 is installed OR libQt5PlatformHeaders-devel-5.9.4-8.24 is installed OR libQt5PlatformSupport-devel-static-5.9.4-8.24 is installed OR libQt5PlatformSupport-private-headers-devel-5.9.4-8.24 is installed OR libQt5PrintSupport-devel-5.9.4-8.24 is installed OR libQt5PrintSupport-private-headers-devel-5.9.4-8.24 is installed OR libQt5PrintSupport5-5.9.4-8.24 is installed OR libQt5Sql-devel-5.9.4-8.24 is installed OR libQt5Sql-private-headers-devel-5.9.4-8.24 is installed OR libQt5Sql5-5.9.4-8.24 is installed OR libQt5Sql5-sqlite-5.9.4-8.24 is installed OR libQt5Test-devel-5.9.4-8.24 is installed OR libQt5Test-private-headers-devel-5.9.4-8.24 is installed OR libQt5Test5-5.9.4-8.24 is installed OR libQt5Widgets-devel-5.9.4-8.24 is installed OR libQt5Widgets-private-headers-devel-5.9.4-8.24 is installed OR libQt5Widgets5-5.9.4-8.24 is installed OR libQt5Xml-devel-5.9.4-8.24 is installed OR libQt5Xml5-5.9.4-8.24 is installed OR libqt5-qtbase-5.9.4-8.24 is installed OR libqt5-qtbase-common-devel-5.9.4-8.24 is installed OR libqt5-qtbase-devel-5.9.4-8.24 is installed OR libqt5-qtbase-private-headers-devel-5.9.4-8.24 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information MozillaThunderbird-68.3.0-3.61 is installed OR MozillaThunderbird-translations-common-68.3.0-3.61 is installed OR MozillaThunderbird-translations-other-68.3.0-3.61 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information xen-4.5.5_18-22.31 is installed OR xen-doc-html-4.5.5_18-22.31 is installed OR xen-kmp-default-4.5.5_18_k3.12.74_60.64.60-22.31 is installed OR xen-libs-4.5.5_18-22.31 is installed OR xen-libs-32bit-4.5.5_18-22.31 is installed OR xen-tools-4.5.5_18-22.31 is installed OR xen-tools-domU-4.5.5_18-22.31 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information bzip2-1.0.6-30.8 is installed OR bzip2-doc-1.0.6-30.8 is installed OR libbz2-1-1.0.6-30.8 is installed OR libbz2-1-32bit-1.0.6-30.8 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND slf4j-1.7.12-3.3 is installed Definition Synopsis SUSE OpenStack Cloud 9 is installed AND python-Django1-1.11.20-3.6 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information libopenssl-devel-1.0.2j-60.60 is installed OR libopenssl1_0_0-1.0.2j-60.60 is installed OR libopenssl1_0_0-32bit-1.0.2j-60.60 is installed OR libopenssl1_0_0-hmac-1.0.2j-60.60 is installed OR libopenssl1_0_0-hmac-32bit-1.0.2j-60.60 is installed OR openssl-1.0.2j-60.60 is installed OR openssl-doc-1.0.2j-60.60 is installed
BACK