Oval Definition:	oval:org.opensuse.security:def:53447
Revision Date: 2020-12-01 Version: 1 Title: Security update for php7 (Important) Description: This update for php7 fixes the following issues: - CVE-2020-7062: Fixed a null pointer dereference when using file upload functionality under specific circumstances (bsc#1165280). - CVE-2020-7063: Fixed an issue where adding files change the permissions to default (bsc#1165289). - CVE-2020-7059: Fixed an out of bounds read in php_strip_tags_ex which may have led to denial of service (bsc#1162629). - CVE-2020-7060: Fixed a global buffer overflow in mbfl_filt_conv_big5_wchar which may have led to memory corruption (bsc#1162632). Family: unix Class: patch Status: Reference(s): 1005480 1005893 1006221 1007959 1007962 1008842 1010032 1011913 1012382 1012910 1013994 1014136 1015609 1016366 1016368 1016369 1016370 1017461 1017641 1018263 1018419 1019163 1019614 1019618 1020048 1021762 1022340 1022785 1023866 1024015 1025683 1026024 1026405 1026462 1026505 1026509 1026692 1026722 1027054 1027066 1027153 1027179 1027189 1027190 1027195 1027273 1027616 1028017 1028027 1028041 1028075 1028158 1028217 1028325 1028415 1028819 1028895 1029220 1029514 1029634 1029986 1030118 1030213 1031003 1031052 1031200 1031206 1031208 1031440 1031481 1031579 1031660 1031662 1031717 1031831 1032006 1032673 1032681 1033091 1034870 1034872 1034876 1036976 1036977 1036978 1036980 1036981 1036982 1036983 1036984 1036985 1036986 1036987 1036988 1036989 1036990 1036991 1037527 1038000 1040025 1040303 1040304 1040306 1040332 1160968 1162629 1162632 1165280 1165289 897662 912214 942801 948790 948791 951844 953516 953519 953521 968697 969755 970083 974209 977572 977860 978056 980892 981634 982783 987899 988281 991173 991464 998106 CVE-2011-1521 CVE-2011-3389 CVE-2011-3848 CVE-2011-3872 CVE-2011-4944 CVE-2012-0845 CVE-2012-1150 CVE-2012-3864 CVE-2012-3865 CVE-2012-3866 CVE-2012-3867 CVE-2013-1752 CVE-2013-1753 CVE-2013-1991 CVE-2013-2000 CVE-2013-3567 CVE-2013-4238 CVE-2013-4761 CVE-2013-4956 CVE-2013-6369 CVE-2014-1912 CVE-2014-3248 CVE-2014-3253 CVE-2014-4650 CVE-2014-7185 CVE-2014-7204 CVE-2014-9556 CVE-2014-9756 CVE-2015-4491 CVE-2015-7673 CVE-2015-7674 CVE-2015-7805 CVE-2015-8075 CVE-2016-0772 CVE-2016-1000110 CVE-2016-10009 CVE-2016-10010 CVE-2016-10011 CVE-2016-10012 CVE-2016-1019 CVE-2016-10200 CVE-2016-2117 CVE-2016-5636 CVE-2016-5699 CVE-2016-6489 CVE-2016-8858 CVE-2016-9191 CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9807 CVE-2016-9808 CVE-2016-9810 CVE-2017-2596 CVE-2017-2671 CVE-2017-6074 CVE-2017-6214 CVE-2017-6345 CVE-2017-6346 CVE-2017-6347 CVE-2017-6353 CVE-2017-6502 CVE-2017-7187 CVE-2017-7261 CVE-2017-7294 CVE-2017-7308 CVE-2017-7374 CVE-2017-7606 CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8343 CVE-2017-8344 CVE-2017-8345 CVE-2017-8346 CVE-2017-8347 CVE-2017-8348 CVE-2017-8349 CVE-2017-8350 CVE-2017-8351 CVE-2017-8352 CVE-2017-8353 CVE-2017-8354 CVE-2017-8355 CVE-2017-8356 CVE-2017-8357 CVE-2017-8765 CVE-2017-8830 CVE-2017-9098 CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144 CVE-2020-2583 CVE-2020-2590 CVE-2020-2593 CVE-2020-2601 CVE-2020-2604 CVE-2020-2654 CVE-2020-2655 CVE-2020-7059 CVE-2020-7060 CVE-2020-7062 CVE-2020-7063 SUSE-SU-2015:0506-1 SUSE-SU-2015:2000-2 SUSE-SU-2015:2195-1 SUSE-SU-2016:0990-1 SUSE-SU-2017:0264-1 SUSE-SU-2017:1183-1 SUSE-SU-2017:1481-1 SUSE-SU-2017:1489-1 SUSE-SU-2020:0213-1 SUSE-SU-2020:0622-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Web Scripting 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND enscript-1.6.6-lp150.1 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information MozillaThunderbird-60.7.2-lp151.2.7 is installed OR MozillaThunderbird-buildsymbols-60.7.2-lp151.2.7 is installed OR MozillaThunderbird-translations-common-60.7.2-lp151.2.7 is installed OR MozillaThunderbird-translations-other-60.7.2-lp151.2.7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information libreoffice-3.5.4.13-0.3 is installed OR libreoffice-base-3.5.4.13-0.3 is installed OR libreoffice-base-drivers-postgresql-3.5.4.13-0.3 is installed OR libreoffice-base-extensions-3.5.4.13-0.3 is installed OR libreoffice-calc-3.5.4.13-0.3 is installed OR libreoffice-calc-extensions-3.5.4.13-0.3 is installed OR libreoffice-draw-3.5.4.13-0.3 is installed OR libreoffice-draw-extensions-3.5.4.13-0.3 is installed OR libreoffice-filters-optional-3.5.4.13-0.3 is installed OR libreoffice-gnome-3.5.4.13-0.3 is installed OR libreoffice-help-cs-3.5.4.13-0.3 is installed OR libreoffice-help-da-3.5.4.13-0.3 is installed OR libreoffice-help-de-3.5.4.13-0.3 is installed OR libreoffice-help-en-GB-3.5.4.13-0.3 is installed OR libreoffice-help-en-US-3.5.4.13-0.3 is installed OR libreoffice-help-es-3.5.4.13-0.3 is installed OR libreoffice-help-fr-3.5.4.13-0.3 is installed OR libreoffice-help-gu-IN-3.5.4.13-0.3 is installed OR libreoffice-help-hi-IN-3.5.4.13-0.3 is installed OR libreoffice-help-hu-3.5.4.13-0.3 is installed OR libreoffice-help-it-3.5.4.13-0.3 is installed OR libreoffice-help-ja-3.5.4.13-0.3 is installed OR libreoffice-help-ko-3.5.4.13-0.3 is installed OR libreoffice-help-nl-3.5.4.13-0.3 is installed OR libreoffice-help-pl-3.5.4.13-0.3 is installed OR libreoffice-help-pt-3.5.4.13-0.3 is installed OR libreoffice-help-pt-BR-3.5.4.13-0.3 is installed OR libreoffice-help-ru-3.5.4.13-0.3 is installed OR libreoffice-help-sv-3.5.4.13-0.3 is installed OR libreoffice-help-zh-CN-3.5.4.13-0.3 is installed OR libreoffice-help-zh-TW-3.5.4.13-0.3 is installed OR libreoffice-icon-themes-3.5.4.13-0.3 is installed OR libreoffice-impress-3.5.4.13-0.3 is installed OR libreoffice-impress-extensions-3.5.4.13-0.3 is installed OR libreoffice-kde-3.5.4.13-0.3 is installed OR libreoffice-kde4-3.5.4.13-0.3 is installed OR libreoffice-l10n-af-3.5.4.13-0.3 is installed OR libreoffice-l10n-ar-3.5.4.13-0.3 is installed OR libreoffice-l10n-ca-3.5.4.13-0.3 is installed OR libreoffice-l10n-cs-3.5.4.13-0.3 is installed OR libreoffice-l10n-da-3.5.4.13-0.3 is installed OR libreoffice-l10n-de-3.5.4.13-0.3 is installed OR libreoffice-l10n-en-GB-3.5.4.13-0.3 is installed OR libreoffice-l10n-es-3.5.4.13-0.3 is installed OR libreoffice-l10n-fi-3.5.4.13-0.3 is installed OR libreoffice-l10n-fr-3.5.4.13-0.3 is installed OR libreoffice-l10n-gu-IN-3.5.4.13-0.3 is installed OR libreoffice-l10n-hi-IN-3.5.4.13-0.3 is installed OR libreoffice-l10n-hu-3.5.4.13-0.3 is installed OR libreoffice-l10n-it-3.5.4.13-0.3 is installed OR libreoffice-l10n-ja-3.5.4.13-0.3 is installed OR libreoffice-l10n-ko-3.5.4.13-0.3 is installed OR libreoffice-l10n-nb-3.5.4.13-0.3 is installed OR libreoffice-l10n-nl-3.5.4.13-0.3 is installed OR libreoffice-l10n-nn-3.5.4.13-0.3 is installed OR libreoffice-l10n-pl-3.5.4.13-0.3 is installed OR libreoffice-l10n-pt-3.5.4.13-0.3 is installed OR libreoffice-l10n-pt-BR-3.5.4.13-0.3 is installed OR libreoffice-l10n-ru-3.5.4.13-0.3 is installed OR libreoffice-l10n-sk-3.5.4.13-0.3 is installed OR libreoffice-l10n-sv-3.5.4.13-0.3 is installed OR libreoffice-l10n-xh-3.5.4.13-0.3 is installed OR libreoffice-l10n-zh-CN-3.5.4.13-0.3 is installed OR libreoffice-l10n-zh-TW-3.5.4.13-0.3 is installed OR libreoffice-l10n-zu-3.5.4.13-0.3 is installed OR libreoffice-mailmerge-3.5.4.13-0.3 is installed OR libreoffice-math-3.5.4.13-0.3 is installed OR libreoffice-mono-3.5.4.13-0.3 is installed OR libreoffice-officebean-3.5.4.13-0.3 is installed OR libreoffice-pyuno-3.5.4.13-0.3 is installed OR libreoffice-writer-3.5.4.13-0.3 is installed OR libreoffice-writer-extensions-3.5.4.13-0.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-31.6.0esr-0.8 is installed OR MozillaFirefox-translations-31.6.0esr-0.8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information kernel-default-3.0.101-65 is installed OR kernel-default-base-3.0.101-65 is installed OR kernel-default-devel-3.0.101-65 is installed OR kernel-default-extra-3.0.101-65 is installed OR kernel-pae-3.0.101-65 is installed OR kernel-pae-base-3.0.101-65 is installed OR kernel-pae-devel-3.0.101-65 is installed OR kernel-pae-extra-3.0.101-65 is installed OR kernel-source-3.0.101-65 is installed OR kernel-syms-3.0.101-65 is installed OR kernel-trace-3.0.101-65 is installed OR kernel-trace-devel-3.0.101-65 is installed OR kernel-xen-3.0.101-65 is installed OR kernel-xen-base-3.0.101-65 is installed OR kernel-xen-devel-3.0.101-65 is installed OR kernel-xen-extra-3.0.101-65 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information libmspack-0.4-10 is installed OR libmspack0-0.4-10 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information libsndfile-1.0.25-25 is installed OR libsndfile1-1.0.25-25 is installed OR libsndfile1-32bit-1.0.25-25 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information openssh-7.2p2-66 is installed OR openssh-askpass-gnome-7.2p2-66 is installed OR openssh-helpers-7.2p2-66 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information gstreamer-0_10-plugins-good-0.10.31-16 is installed OR gstreamer-0_10-plugins-good-lang-0.10.31-16 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND ctags-5.8-7 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND Package Information apache2-mod_php7-7.2.5-4.52 is installed OR php7-7.2.5-4.52 is installed OR php7-bcmath-7.2.5-4.52 is installed OR php7-bz2-7.2.5-4.52 is installed OR php7-calendar-7.2.5-4.52 is installed OR php7-ctype-7.2.5-4.52 is installed OR php7-curl-7.2.5-4.52 is installed OR php7-dba-7.2.5-4.52 is installed OR php7-devel-7.2.5-4.52 is installed OR php7-dom-7.2.5-4.52 is installed OR php7-enchant-7.2.5-4.52 is installed OR php7-exif-7.2.5-4.52 is installed OR php7-fastcgi-7.2.5-4.52 is installed OR php7-fileinfo-7.2.5-4.52 is installed OR php7-fpm-7.2.5-4.52 is installed OR php7-ftp-7.2.5-4.52 is installed OR php7-gd-7.2.5-4.52 is installed OR php7-gettext-7.2.5-4.52 is installed OR php7-gmp-7.2.5-4.52 is installed OR php7-iconv-7.2.5-4.52 is installed OR php7-intl-7.2.5-4.52 is installed OR php7-json-7.2.5-4.52 is installed OR php7-ldap-7.2.5-4.52 is installed OR php7-mbstring-7.2.5-4.52 is installed OR php7-mysql-7.2.5-4.52 is installed OR php7-odbc-7.2.5-4.52 is installed OR php7-opcache-7.2.5-4.52 is installed OR php7-openssl-7.2.5-4.52 is installed OR php7-pcntl-7.2.5-4.52 is installed OR php7-pdo-7.2.5-4.52 is installed OR php7-pear-7.2.5-4.52 is installed OR php7-pear-Archive_Tar-7.2.5-4.52 is installed OR php7-pgsql-7.2.5-4.52 is installed OR php7-phar-7.2.5-4.52 is installed OR php7-posix-7.2.5-4.52 is installed OR php7-shmop-7.2.5-4.52 is installed OR php7-snmp-7.2.5-4.52 is installed OR php7-soap-7.2.5-4.52 is installed OR php7-sockets-7.2.5-4.52 is installed OR php7-sodium-7.2.5-4.52 is installed OR php7-sqlite-7.2.5-4.52 is installed OR php7-sysvmsg-7.2.5-4.52 is installed OR php7-sysvsem-7.2.5-4.52 is installed OR php7-sysvshm-7.2.5-4.52 is installed OR php7-tokenizer-7.2.5-4.52 is installed OR php7-wddx-7.2.5-4.52 is installed OR php7-xmlreader-7.2.5-4.52 is installed OR php7-xmlrpc-7.2.5-4.52 is installed OR php7-xmlwriter-7.2.5-4.52 is installed OR php7-xsl-7.2.5-4.52 is installed OR php7-zip-7.2.5-4.52 is installed OR php7-zlib-7.2.5-4.52 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information ecryptfs-utils-103-5 is installed OR ecryptfs-utils-32bit-103-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_40-default-3-2 is installed OR kgraft-patch-3_12_74-60_64_40-xen-3-2 is installed OR kgraft-patch-SLE12-SP1_Update_15-3-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information apache-commons-beanutils-1.9.2-1 is installed OR apache-commons-beanutils-javadoc-1.9.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information libdcerpc-atsvc0-4.2.4-28.29 is installed OR samba-4.2.4-28.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information res-signingkeys-3.0.37-52.23 is installed OR smt-3.0.37-52.23 is installed OR smt-support-3.0.37-52.23 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information evince-3.20.2-6.27 is installed OR evince-browser-plugin-3.20.2-6.27 is installed OR evince-lang-3.20.2-6.27 is installed OR evince-plugin-djvudocument-3.20.2-6.27 is installed OR evince-plugin-dvidocument-3.20.2-6.27 is installed OR evince-plugin-pdfdocument-3.20.2-6.27 is installed OR evince-plugin-psdocument-3.20.2-6.27 is installed OR evince-plugin-tiffdocument-3.20.2-6.27 is installed OR evince-plugin-xpsdocument-3.20.2-6.27 is installed OR libevdocument3-4-3.20.2-6.27 is installed OR libevview3-3-3.20.2-6.27 is installed OR nautilus-evince-3.20.2-6.27 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information giflib-progs-5.0.5-12 is installed OR libgif6-5.0.5-12 is installed OR libgif6-32bit-5.0.5-12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information libpython2_7-1_0-2.7.13-28.31 is installed OR libpython2_7-1_0-32bit-2.7.13-28.31 is installed OR python-2.7.13-28.31 is installed OR python-32bit-2.7.13-28.31 is installed OR python-base-2.7.13-28.31 is installed OR python-base-32bit-2.7.13-28.31 is installed OR python-curses-2.7.13-28.31 is installed OR python-demo-2.7.13-28.31 is installed OR python-devel-2.7.13-28.31 is installed OR python-doc-2.7.13-28.31 is installed OR python-doc-pdf-2.7.13-28.31 is installed OR python-gdbm-2.7.13-28.31 is installed OR python-idle-2.7.13-28.31 is installed OR python-tk-2.7.13-28.31 is installed OR python-xml-2.7.13-28.31 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND squid-3.5.21-26.17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information libopenssl-devel-1.0.2j-60.55 is installed OR libopenssl1_0_0-1.0.2j-60.55 is installed OR libopenssl1_0_0-32bit-1.0.2j-60.55 is installed OR libopenssl1_0_0-hmac-1.0.2j-60.55 is installed OR libopenssl1_0_0-hmac-32bit-1.0.2j-60.55 is installed OR openssl-1.0.2j-60.55 is installed OR openssl-doc-1.0.2j-60.55 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libprocps3-3.3.9-11.14 is installed OR procps-3.3.9-11.14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information file-5.22-10.6 is installed OR file-magic-5.22-10.6 is installed OR libmagic1-5.22-10.6 is installed OR libmagic1-32bit-5.22-10.6 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information java-11-openjdk-11.0.6.0-3.39 is installed OR java-11-openjdk-demo-11.0.6.0-3.39 is installed OR java-11-openjdk-devel-11.0.6.0-3.39 is installed OR java-11-openjdk-headless-11.0.6.0-3.39 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information openstack-ironic-4.2.3~a0~dev14-1 is installed OR openstack-ironic-api-4.2.3~a0~dev14-1 is installed OR openstack-ironic-conductor-4.2.3~a0~dev14-1 is installed OR python-ironic-4.2.3~a0~dev14-1 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information storm-1.0.5-5 is installed OR storm-nimbus-1.0.5-5 is installed OR storm-supervisor-1.0.5-5 is installed Definition Synopsis SUSE OpenStack Cloud 9 is installed AND python-requests-2.20.1-4.3 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information libecpg6-10.9-1.12 is installed OR libpq5-10.9-1.12 is installed OR libpq5-32bit-10.9-1.12 is installed OR postgresql10-10.9-1.12 is installed OR postgresql10-contrib-10.9-1.12 is installed OR postgresql10-docs-10.9-1.12 is installed OR postgresql10-libs-10.9-1.12 is installed OR postgresql10-plperl-10.9-1.12 is installed OR postgresql10-plpython-10.9-1.12 is installed OR postgresql10-pltcl-10.9-1.12 is installed OR postgresql10-server-10.9-1.12 is installed
BACK