Oval Definition:	oval:org.opensuse.security:def:5527
Revision Date: 2020-12-02 Version: 1 Title: Security update for php7 (Important) Description: This update for php7 fixes the following issues: - CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351). - CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352). - Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786) Family: unix Class: patch Status: Reference(s): 1162202 1162675 1173786 1177351 1177352 CVE-2007-4772 CVE-2007-6600 CVE-2008-0928 CVE-2008-1945 CVE-2008-2109 CVE-2008-2382 CVE-2008-4539 CVE-2009-0035 CVE-2009-0037 CVE-2009-0186 CVE-2009-2417 CVE-2009-4034 CVE-2009-4136 CVE-2010-0624 CVE-2010-1169 CVE-2010-1170 CVE-2010-2761 CVE-2010-3433 CVE-2010-4410 CVE-2010-4411 CVE-2010-4777 CVE-2011-2696 CVE-2012-0866 CVE-2012-0867 CVE-2012-0868 CVE-2012-1152 CVE-2012-2143 CVE-2012-2655 CVE-2012-3488 CVE-2012-3489 CVE-2012-3515 CVE-2013-0249 CVE-2013-0255 CVE-2013-1899 CVE-2013-1900 CVE-2013-1901 CVE-2013-1944 CVE-2013-1984 CVE-2013-1995 CVE-2013-1998 CVE-2013-2174 CVE-2013-3571 CVE-2013-4148 CVE-2013-4149 CVE-2013-4150 CVE-2013-4151 CVE-2013-4526 CVE-2013-4527 CVE-2013-4529 CVE-2013-4530 CVE-2013-4531 CVE-2013-4533 CVE-2013-4534 CVE-2013-4535 CVE-2013-4536 CVE-2013-4537 CVE-2013-4538 CVE-2013-4539 CVE-2013-4540 CVE-2013-4541 CVE-2013-4542 CVE-2013-4544 CVE-2013-4545 CVE-2013-6393 CVE-2013-6399 CVE-2014-0015 CVE-2014-0019 CVE-2014-0060 CVE-2014-0061 CVE-2014-0062 CVE-2014-0063 CVE-2014-0064 CVE-2014-0065 CVE-2014-0066 CVE-2014-0067 CVE-2014-0138 CVE-2014-0139 CVE-2014-0142 CVE-2014-0143 CVE-2014-0144 CVE-2014-0145 CVE-2014-0146 CVE-2014-0147 CVE-2014-0150 CVE-2014-0182 CVE-2014-0222 CVE-2014-0223 CVE-2014-2525 CVE-2014-3461 CVE-2014-3613 CVE-2014-3620 CVE-2014-3640 CVE-2014-3707 CVE-2014-7840 CVE-2014-8106 CVE-2014-8150 CVE-2014-9130 CVE-2014-9496 CVE-2014-9756 CVE-2015-1779 CVE-2015-3143 CVE-2015-3144 CVE-2015-3145 CVE-2015-3148 CVE-2015-3153 CVE-2015-3165 CVE-2015-3166 CVE-2015-3167 CVE-2015-3209 CVE-2015-3456 CVE-2015-4000 CVE-2015-4037 CVE-2015-5154 CVE-2015-5185 CVE-2015-5225 CVE-2015-5278 CVE-2015-5279 CVE-2015-5288 CVE-2015-5289 CVE-2015-6815 CVE-2015-6855 CVE-2015-7236 CVE-2015-7295 CVE-2015-7805 CVE-2015-8075 CVE-2015-8853 CVE-2016-0755 CVE-2016-0766 CVE-2016-0773 CVE-2016-1238 CVE-2016-2381 CVE-2016-5419 CVE-2016-5420 CVE-2016-5421 CVE-2016-5423 CVE-2016-5424 CVE-2016-6185 CVE-2016-7141 CVE-2019-18634 CVE-2020-7069 CVE-2020-7070 SUSE-SU-2020:0408-1 SUSE-SU-2020:2997-1 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Toolchain 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Real Time Extension 11 SP1 SUSE Linux Enterprise Real Time Extension 12 SP1 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE OpenStack Cloud 5 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND python-setuptools-1.1.7-7.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information ecryptfs-utils-61-1.35.1 is installed OR ecryptfs-utils-32bit-61-1.35.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND perl-YAML-LibYAML-0.38-10 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information alsa-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information augeas-1.2.0-15 is installed OR augeas-lenses-1.2.0-15 is installed OR libaugeas0-1.2.0-15 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND binutils-2.31-9.26 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_60-52_49-default-2-2.2 is installed OR kgraft-patch-3_12_60-52_49-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_14-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information compat-openssl098-0.9.8j-97.1 is installed OR libopenssl0_9_8-0.9.8j-97.1 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information bzip2-1.0.6-30.8 is installed OR bzip2-doc-1.0.6-30.8 is installed OR libbz2-1-1.0.6-30.8 is installed OR libbz2-1-32bit-1.0.6-30.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND Package Information puppet-3.6.2-3 is installed OR puppet-server-3.6.2-3 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND sles11sp4-docker-image-1.1.1-20160304104123 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information cups154-1.5.4-9 is installed OR cups154-client-1.5.4-9 is installed OR cups154-filters-1.5.4-9 is installed OR cups154-libs-1.5.4-9 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND Package Information kernel-ec2-3.12.32-33.1 is installed OR kernel-ec2-devel-3.12.32-33.1 is installed OR kernel-ec2-extra-3.12.32-33.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Toolchain 12 is installed AND Package Information cpp5-5.3.1+r233831-9.1 is installed OR gcc5-5.3.1+r233831-9.1 is installed OR gcc5-32bit-5.3.1+r233831-9.1 is installed OR gcc5-ada-5.3.1+r233831-9.1 is installed OR gcc5-ada-32bit-5.3.1+r233831-9.1 is installed OR gcc5-c++-5.3.1+r233831-9.1 is installed OR gcc5-c++-32bit-5.3.1+r233831-9.1 is installed OR gcc5-fortran-5.3.1+r233831-9.1 is installed OR gcc5-fortran-32bit-5.3.1+r233831-9.1 is installed OR gcc5-info-5.3.1+r233831-9.1 is installed OR gcc5-locale-5.3.1+r233831-9.1 is installed OR libada5-5.3.1+r233831-9.1 is installed OR libada5-32bit-5.3.1+r233831-9.1 is installed OR libffi-devel-gcc5-5.3.1+r233831-9.1 is installed OR libffi-devel-gcc5-32bit-5.3.1+r233831-9.1 is installed OR libffi-gcc5-5.3.1+r233831-9.1 is installed OR libstdc++6-devel-gcc5-5.3.1+r233831-9.1 is installed OR libstdc++6-devel-gcc5-32bit-5.3.1+r233831-9.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information apache2-mod_php5-5.5.14-4 is installed OR php5-5.5.14-4 is installed OR php5-bcmath-5.5.14-4 is installed OR php5-bz2-5.5.14-4 is installed OR php5-calendar-5.5.14-4 is installed OR php5-ctype-5.5.14-4 is installed OR php5-curl-5.5.14-4 is installed OR php5-dba-5.5.14-4 is installed OR php5-dom-5.5.14-4 is installed OR php5-enchant-5.5.14-4 is installed OR php5-exif-5.5.14-4 is installed OR php5-fastcgi-5.5.14-4 is installed OR php5-fileinfo-5.5.14-4 is installed OR php5-fpm-5.5.14-4 is installed OR php5-ftp-5.5.14-4 is installed OR php5-gd-5.5.14-4 is installed OR php5-gettext-5.5.14-4 is installed OR php5-gmp-5.5.14-4 is installed OR php5-iconv-5.5.14-4 is installed OR php5-intl-5.5.14-4 is installed OR php5-json-5.5.14-4 is installed OR php5-ldap-5.5.14-4 is installed OR php5-mbstring-5.5.14-4 is installed OR php5-mcrypt-5.5.14-4 is installed OR php5-mysql-5.5.14-4 is installed OR php5-odbc-5.5.14-4 is installed OR php5-openssl-5.5.14-4 is installed OR php5-pcntl-5.5.14-4 is installed OR php5-pdo-5.5.14-4 is installed OR php5-pear-5.5.14-4 is installed OR php5-pgsql-5.5.14-4 is installed OR php5-pspell-5.5.14-4 is installed OR php5-shmop-5.5.14-4 is installed OR php5-snmp-5.5.14-4 is installed OR php5-soap-5.5.14-4 is installed OR php5-sockets-5.5.14-4 is installed OR php5-sqlite-5.5.14-4 is installed OR php5-suhosin-5.5.14-4 is installed OR php5-sysvmsg-5.5.14-4 is installed OR php5-sysvsem-5.5.14-4 is installed OR php5-sysvshm-5.5.14-4 is installed OR php5-tokenizer-5.5.14-4 is installed OR php5-wddx-5.5.14-4 is installed OR php5-xmlreader-5.5.14-4 is installed OR php5-xmlrpc-5.5.14-4 is installed OR php5-xmlwriter-5.5.14-4 is installed OR php5-xsl-5.5.14-4 is installed OR php5-zip-5.5.14-4 is installed OR php5-zlib-5.5.14-4 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP1 is installed AND iscsitarget-kmp-rt-1.4.19_2.6.33.5_rt23_0.4-0.7.6 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP1 is installed AND Package Information kernel-compute-3.12.61-60.18.1 is installed OR kernel-compute-base-3.12.61-60.18.1 is installed OR kernel-compute-devel-3.12.61-60.18.1 is installed OR kernel-compute_debug-3.12.61-60.18.1 is installed OR kernel-compute_debug-devel-3.12.61-60.18.1 is installed OR kernel-devel-rt-3.12.61-60.18.1 is installed OR kernel-rt-3.12.61-60.18.1 is installed OR kernel-rt-base-3.12.61-60.18.1 is installed OR kernel-rt-devel-3.12.61-60.18.1 is installed OR kernel-rt_debug-3.12.61-60.18.1 is installed OR kernel-rt_debug-devel-3.12.61-60.18.1 is installed OR kernel-source-rt-3.12.61-60.18.1 is installed OR kernel-syms-rt-3.12.61-60.18.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information libopenssl-devel-0.9.8j-0.66.1 is installed OR libopenssl0_9_8-0.9.8j-0.66.1 is installed OR libopenssl0_9_8-32bit-0.9.8j-0.66.1 is installed OR libopenssl0_9_8-hmac-0.9.8j-0.66.1 is installed OR libopenssl0_9_8-hmac-32bit-0.9.8j-0.66.1 is installed OR openssl-0.9.8j-0.66.1 is installed OR openssl-doc-0.9.8j-0.66.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND clamav-0.97.8-0.2.1 is installed OR Package Information SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND clamav-0.97.8-0.2.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND clamav-0.97.8-0.2.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND Package Information NetworkManager-0.7.1_git20090811-3.20.5 is installed OR NetworkManager-glib-0.7.1_git20090811-3.20.5 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND apache2-mod_jk-1.2.26-1.30.110 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND apache2-mod_perl-2.0.4-40.24.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information MozillaFirefox-38.4.0esr-51 is installed OR MozillaFirefox-translations-38.4.0esr-51 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information augeas-1.2.0-10 is installed OR augeas-lenses-1.2.0-10 is installed OR libaugeas0-1.2.0-10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information res-signingkeys-3.0.25-48 is installed OR smt-3.0.25-48 is installed OR smt-support-3.0.25-48 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information accountsservice-0.6.42-16.3 is installed OR accountsservice-lang-0.6.42-16.3 is installed OR libaccountsservice0-0.6.42-16.3 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-16.3 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information kgraft-patch-3_12_67-60_64_18-default-10-2 is installed OR kgraft-patch-3_12_67-60_64_18-xen-10-2 is installed OR kgraft-patch-SLE12-SP1_Update_9-10-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information apache2-mod_php7-7.2.5-4.67 is installed OR php7-7.2.5-4.67 is installed OR php7-bcmath-7.2.5-4.67 is installed OR php7-bz2-7.2.5-4.67 is installed OR php7-calendar-7.2.5-4.67 is installed OR php7-ctype-7.2.5-4.67 is installed OR php7-curl-7.2.5-4.67 is installed OR php7-dba-7.2.5-4.67 is installed OR php7-devel-7.2.5-4.67 is installed OR php7-dom-7.2.5-4.67 is installed OR php7-enchant-7.2.5-4.67 is installed OR php7-exif-7.2.5-4.67 is installed OR php7-fastcgi-7.2.5-4.67 is installed OR php7-fileinfo-7.2.5-4.67 is installed OR php7-fpm-7.2.5-4.67 is installed OR php7-ftp-7.2.5-4.67 is installed OR php7-gd-7.2.5-4.67 is installed OR php7-gettext-7.2.5-4.67 is installed OR php7-gmp-7.2.5-4.67 is installed OR php7-iconv-7.2.5-4.67 is installed OR php7-intl-7.2.5-4.67 is installed OR php7-json-7.2.5-4.67 is installed OR php7-ldap-7.2.5-4.67 is installed OR php7-mbstring-7.2.5-4.67 is installed OR php7-mysql-7.2.5-4.67 is installed OR php7-odbc-7.2.5-4.67 is installed OR php7-opcache-7.2.5-4.67 is installed OR php7-openssl-7.2.5-4.67 is installed OR php7-pcntl-7.2.5-4.67 is installed OR php7-pdo-7.2.5-4.67 is installed OR php7-pear-7.2.5-4.67 is installed OR php7-pear-Archive_Tar-7.2.5-4.67 is installed OR php7-pgsql-7.2.5-4.67 is installed OR php7-phar-7.2.5-4.67 is installed OR php7-posix-7.2.5-4.67 is installed OR php7-readline-7.2.5-4.67 is installed OR php7-shmop-7.2.5-4.67 is installed OR php7-snmp-7.2.5-4.67 is installed OR php7-soap-7.2.5-4.67 is installed OR php7-sockets-7.2.5-4.67 is installed OR php7-sodium-7.2.5-4.67 is installed OR php7-sqlite-7.2.5-4.67 is installed OR php7-sysvmsg-7.2.5-4.67 is installed OR php7-sysvsem-7.2.5-4.67 is installed OR php7-sysvshm-7.2.5-4.67 is installed OR php7-tokenizer-7.2.5-4.67 is installed OR php7-wddx-7.2.5-4.67 is installed OR php7-xmlreader-7.2.5-4.67 is installed OR php7-xmlrpc-7.2.5-4.67 is installed OR php7-xmlwriter-7.2.5-4.67 is installed OR php7-xsl-7.2.5-4.67 is installed OR php7-zip-7.2.5-4.67 is installed OR php7-zlib-7.2.5-4.67 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information gtk2-devel-2.18.9-0.23.1 is installed OR gtk2-devel-32bit-2.18.9-0.23.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information libcap-devel-2.11-2.17.1 is installed OR libcap-progs-2.11-2.17.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND MozillaFirefox-devel-31.1.0esr-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND alsa-devel-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information libzmq3-4.0.4-14 is installed OR zeromq-devel-4.0.4-14 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information ImageMagick-6.8.8.1-71.85 is installed OR ImageMagick-devel-6.8.8.1-71.85 is installed OR libMagick++-6_Q16-3-6.8.8.1-71.85 is installed OR libMagick++-devel-6.8.8.1-71.85 is installed OR perl-PerlMagick-6.8.8.1-71.85 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information ImageMagick-6.8.8.1-5 is installed OR libMagick++-6_Q16-3-6.8.8.1-5 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information ImageMagick-6.8.8.1-8 is installed OR libMagick++-6_Q16-3-6.8.8.1-8 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information NetworkManager-1.0.12-8 is installed OR NetworkManager-lang-1.0.12-8 is installed OR typelib-1_0-NM-1_0-1.0.12-8 is installed
BACK