Oval Definition:	oval:org.opensuse.security:def:6256
Revision Date: 2021-12-06 Version: 1 Title: Recommended update for php7 (Moderate) Description: This update for php7 fixes the following issues: - CVE-2021-21703: Fixed local privilege escalation via PHP-FPM (bsc#1192050). - CVE-2021-21707: Fixed special character breaks path in xml parsing (bsc#1193041). - Added patch to prevent memory access violation in php7 when running test suite (bsc#1175508) Family: unix Class: patch Status: Reference(s): 1175508 1192050 1193041 CVE-2008-1686 CVE-2009-0037 CVE-2009-0186 CVE-2009-0688 CVE-2009-0758 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-1187 CVE-2009-1188 CVE-2009-2417 CVE-2009-3607 CVE-2009-3608 CVE-2010-2244 CVE-2010-2529 CVE-2011-1002 CVE-2011-2199 CVE-2011-2696 CVE-2011-3200 CVE-2012-0035 CVE-2012-4433 CVE-2013-0249 CVE-2013-1788 CVE-2013-1789 CVE-2013-1790 CVE-2013-1944 CVE-2013-1982 CVE-2013-2174 CVE-2013-4473 CVE-2013-4474 CVE-2013-4545 CVE-2013-4758 CVE-2013-6370 CVE-2013-6371 CVE-2014-0015 CVE-2014-0138 CVE-2014-0139 CVE-2014-1545 CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 CVE-2014-3613 CVE-2014-3620 CVE-2014-3634 CVE-2014-3683 CVE-2014-3707 CVE-2014-8150 CVE-2014-9496 CVE-2014-9638 CVE-2014-9639 CVE-2014-9640 CVE-2014-9756 CVE-2015-3143 CVE-2015-3144 CVE-2015-3145 CVE-2015-3148 CVE-2015-3153 CVE-2015-3236 CVE-2015-3237 CVE-2015-3243 CVE-2015-6749 CVE-2015-7183 CVE-2015-7805 CVE-2015-8075 CVE-2016-0755 CVE-2016-1544 CVE-2016-5384 CVE-2016-5419 CVE-2016-5420 CVE-2016-5421 CVE-2016-7141 CVE-2016-7167 CVE-2016-8615 CVE-2016-8616 CVE-2016-8617 CVE-2016-8618 CVE-2016-8619 CVE-2016-8620 CVE-2016-8621 CVE-2016-8622 CVE-2016-8623 CVE-2016-8624 CVE-2016-8625 CVE-2016-9586 CVE-2016-9594 CVE-2017-1000099 CVE-2017-1000100 CVE-2017-1000101 CVE-2017-1000254 CVE-2017-1000257 CVE-2017-1000456 CVE-2017-14245 CVE-2017-14246 CVE-2017-14517 CVE-2017-14518 CVE-2017-14520 CVE-2017-14617 CVE-2017-14634 CVE-2017-14928 CVE-2017-14975 CVE-2017-14976 CVE-2017-14977 CVE-2017-15565 CVE-2017-16942 CVE-2017-17456 CVE-2017-17457 CVE-2017-2629 CVE-2017-6892 CVE-2017-7407 CVE-2017-7468 CVE-2017-7511 CVE-2017-7515 CVE-2017-7585 CVE-2017-7586 CVE-2017-7741 CVE-2017-7742 CVE-2017-8361 CVE-2017-8362 CVE-2017-8363 CVE-2017-8365 CVE-2017-8816 CVE-2017-8817 CVE-2017-8818 CVE-2017-9406 CVE-2017-9408 CVE-2017-9502 CVE-2017-9775 CVE-2017-9776 CVE-2017-9865 CVE-2018-0500 CVE-2018-1000005 CVE-2018-1000007 CVE-2018-1000120 CVE-2018-1000121 CVE-2018-1000122 CVE-2018-1000300 CVE-2018-1000301 CVE-2018-13139 CVE-2018-14618 CVE-2021-21703 CVE-2021-21707 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 12 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information firebird-2.5.2.26539-15 is installed OR libfbclient2-2.5.2.26539-15 is installed OR libfbclient2-devel-2.5.2.26539-15 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.21-84 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information libudev-mini-devel-228-150.9 is installed OR libudev-mini1-228-150.9 is installed OR systemd-mini-228-150.9 is installed OR systemd-mini-devel-228-150.9 is installed OR udev-mini-228-150.9 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information libudev-mini-devel-228-150.53 is installed OR libudev-mini1-228-150.53 is installed OR systemd-mini-228-150.53 is installed OR systemd-mini-devel-228-150.53 is installed OR udev-mini-228-150.53 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information gnutls-2.4.1-24.39.47.1 is installed OR libgnutls26-2.4.1-24.39.47.1 is installed OR libgnutls26-32bit-2.4.1-24.39.47.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information augeas-0.9.0-3.17.2 is installed OR libaugeas0-0.9.0-3.17.2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information flac-1.3.0-6 is installed OR libFLAC8-1.3.0-6 is installed OR libFLAC8-32bit-1.3.0-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information MozillaFirefox-38.5.0esr-54 is installed OR MozillaFirefox-translations-38.5.0esr-54 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information avahi-0.6.32-30 is installed OR avahi-lang-0.6.32-30 is installed OR libavahi-client3-0.6.32-30 is installed OR libavahi-client3-32bit-0.6.32-30 is installed OR libavahi-common3-0.6.32-30 is installed OR libavahi-common3-32bit-0.6.32-30 is installed OR libavahi-core7-0.6.32-30 is installed OR libdns_sd-0.6.32-30 is installed OR libdns_sd-32bit-0.6.32-30 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information curl-7.60.0-2 is installed OR libcurl4-7.60.0-2 is installed OR libcurl4-32bit-7.60.0-2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information openvpn-2.3.8-16.17 is installed OR openvpn-auth-pam-plugin-2.3.8-16.17 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND Package Information libpacemaker3-1.1.19+20180928.0d2680780-1 is installed OR pacemaker-1.1.19+20180928.0d2680780-1 is installed OR pacemaker-cli-1.1.19+20180928.0d2680780-1 is installed OR pacemaker-cts-1.1.19+20180928.0d2680780-1 is installed OR pacemaker-remote-1.1.19+20180928.0d2680780-1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP5 is installed AND lighttpd-1.4.35-3 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information accountsservice-0.6.42-16.3 is installed OR accountsservice-lang-0.6.42-16.3 is installed OR libaccountsservice0-0.6.42-16.3 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-16.3 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-4_4_59-92_24-default-2-2 is installed OR kgraft-patch-SLE12-SP2_Update_9-2-2 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_82-6_9-default-2-2 is installed OR kgraft-patch-SLE12-SP3_Update_3-2-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND docker-1.6.2-31 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information java-1_6_0-ibm-1.6.0_sr16.2-8 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr16.2-8 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr16.2-8 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr16.2-8 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND Package Information kernel-ec2-3.12.44-52.10 is installed OR kernel-ec2-devel-3.12.44-52.10 is installed OR kernel-ec2-extra-3.12.44-52.10 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information apache2-mod_php7-7.0.7-15 is installed OR php7-7.0.7-15 is installed OR php7-bcmath-7.0.7-15 is installed OR php7-bz2-7.0.7-15 is installed OR php7-calendar-7.0.7-15 is installed OR php7-ctype-7.0.7-15 is installed OR php7-curl-7.0.7-15 is installed OR php7-dba-7.0.7-15 is installed OR php7-dom-7.0.7-15 is installed OR php7-enchant-7.0.7-15 is installed OR php7-exif-7.0.7-15 is installed OR php7-fastcgi-7.0.7-15 is installed OR php7-fileinfo-7.0.7-15 is installed OR php7-fpm-7.0.7-15 is installed OR php7-ftp-7.0.7-15 is installed OR php7-gd-7.0.7-15 is installed OR php7-gettext-7.0.7-15 is installed OR php7-gmp-7.0.7-15 is installed OR php7-iconv-7.0.7-15 is installed OR php7-imap-7.0.7-15 is installed OR php7-intl-7.0.7-15 is installed OR php7-json-7.0.7-15 is installed OR php7-ldap-7.0.7-15 is installed OR php7-mbstring-7.0.7-15 is installed OR php7-mcrypt-7.0.7-15 is installed OR php7-mysql-7.0.7-15 is installed OR php7-odbc-7.0.7-15 is installed OR php7-opcache-7.0.7-15 is installed OR php7-openssl-7.0.7-15 is installed OR php7-pcntl-7.0.7-15 is installed OR php7-pdo-7.0.7-15 is installed OR php7-pear-7.0.7-15 is installed OR php7-pear-Archive_Tar-7.0.7-15 is installed OR php7-pgsql-7.0.7-15 is installed OR php7-phar-7.0.7-15 is installed OR php7-posix-7.0.7-15 is installed OR php7-pspell-7.0.7-15 is installed OR php7-shmop-7.0.7-15 is installed OR php7-snmp-7.0.7-15 is installed OR php7-soap-7.0.7-15 is installed OR php7-sockets-7.0.7-15 is installed OR php7-sqlite-7.0.7-15 is installed OR php7-sysvmsg-7.0.7-15 is installed OR php7-sysvsem-7.0.7-15 is installed OR php7-sysvshm-7.0.7-15 is installed OR php7-tokenizer-7.0.7-15 is installed OR php7-wddx-7.0.7-15 is installed OR php7-xmlreader-7.0.7-15 is installed OR php7-xmlrpc-7.0.7-15 is installed OR php7-xmlwriter-7.0.7-15 is installed OR php7-xsl-7.0.7-15 is installed OR php7-zip-7.0.7-15 is installed OR php7-zlib-7.0.7-15 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1 is installed AND Package Information nagios-3.0.6-1.21.1 is installed OR nagios-www-3.0.6-1.21.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND apache2-mod_jk-1.2.26-1.30.110 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND libecpg6-9.1.12-0.3.1 is installed OR libpq5-9.1.12-0.3.1 is installed OR libpq5-32bit-9.1.12-0.3.1 is installed OR postgresql91-9.1.12-0.3.1 is installed OR postgresql91-contrib-9.1.12-0.3.1 is installed OR postgresql91-docs-9.1.12-0.3.1 is installed OR postgresql91-server-9.1.12-0.3.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND libecpg6-9.1.12-0.3.1 is installed OR libpq5-9.1.12-0.3.1 is installed OR libpq5-32bit-9.1.12-0.3.1 is installed OR postgresql91-9.1.12-0.3.1 is installed OR postgresql91-contrib-9.1.12-0.3.1 is installed OR postgresql91-docs-9.1.12-0.3.1 is installed OR postgresql91-server-9.1.12-0.3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information ant-1.7.1-20.9.53 is installed OR ant-trax-1.7.1-16.9.65 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND acpid-1.0.6-91.25.20 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information libopenssl1-devel-1.0.1g-0.52.1 is installed OR libopenssl1_0_0-1.0.1g-0.52.1 is installed OR libopenssl1_0_0-32bit-1.0.1g-0.52.1 is installed OR libopenssl1_0_0-x86-1.0.1g-0.52.1 is installed OR openssl1-1.0.1g-0.52.1 is installed OR openssl1-doc-1.0.1g-0.52.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information bzip2-1.0.6-27 is installed OR bzip2-doc-1.0.6-27 is installed OR libbz2-1-1.0.6-27 is installed OR libbz2-1-32bit-1.0.6-27 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information alsa-1.0.27.2-11 is installed OR alsa-docs-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information accountsservice-0.6.42-14 is installed OR accountsservice-lang-0.6.42-14 is installed OR libaccountsservice0-0.6.42-14 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information apache-commons-daemon-1.0.15-6 is installed OR apache-commons-daemon-javadoc-1.0.15-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information audiofile-0.3.6-10 is installed OR libaudiofile1-0.3.6-10 is installed OR libaudiofile1-32bit-0.3.6-10 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information vino-3.20.2-5 is installed OR vino-lang-3.20.2-5 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND gdb-8.3.1-1.12 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed AND Package Information glib2-2.48.2-12.15 is installed OR glib2-lang-2.48.2-12.15 is installed OR glib2-tools-2.48.2-12.15 is installed OR libgio-2_0-0-2.48.2-12.15 is installed OR libgio-2_0-0-32bit-2.48.2-12.15 is installed OR libglib-2_0-0-2.48.2-12.15 is installed OR libglib-2_0-0-32bit-2.48.2-12.15 is installed OR libgmodule-2_0-0-2.48.2-12.15 is installed OR libgmodule-2_0-0-32bit-2.48.2-12.15 is installed OR libgobject-2_0-0-2.48.2-12.15 is installed OR libgobject-2_0-0-32bit-2.48.2-12.15 is installed OR libgthread-2_0-0-2.48.2-12.15 is installed OR libgthread-2_0-0-32bit-2.48.2-12.15 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND cups-devel-1.3.9-8.46.48.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information ImageMagick-6.4.3.6-7.30.1 is installed OR ImageMagick-devel-6.4.3.6-7.30.1 is installed OR libMagick++-devel-6.4.3.6-7.30.1 is installed OR libMagick++1-6.4.3.6-7.30.1 is installed OR libMagickWand1-6.4.3.6-7.30.1 is installed OR libMagickWand1-32bit-6.4.3.6-7.30.1 is installed OR perl-PerlMagick-6.4.3.6-7.30.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information boost-devel-1.36.0-12.6.49 is installed OR boost-devel-32bit-1.36.0-12.6.49 is installed OR boost-doc-1.36.0-12.6.49 is installed OR libboost_date_time1_36_0-1.36.0-12.6.49 is installed OR libboost_date_time1_36_0-32bit-1.36.0-12.6.49 is installed OR libboost_filesystem1_36_0-1.36.0-12.6.49 is installed OR libboost_filesystem1_36_0-32bit-1.36.0-12.6.49 is installed OR libboost_graph1_36_0-1.36.0-12.6.49 is installed OR libboost_graph1_36_0-32bit-1.36.0-12.6.49 is installed OR libboost_iostreams1_36_0-1.36.0-12.6.49 is installed OR libboost_iostreams1_36_0-32bit-1.36.0-12.6.49 is installed OR libboost_math1_36_0-1.36.0-12.6.49 is installed OR libboost_math1_36_0-32bit-1.36.0-12.6.49 is installed OR libboost_mpi1_36_0-1.36.0-12.6.49 is installed OR libboost_program_options1_36_0-1.36.0-12.6.49 is installed OR libboost_program_options1_36_0-32bit-1.36.0-12.6.49 is installed OR libboost_python1_36_0-1.36.0-12.6.49 is installed OR libboost_python1_36_0-32bit-1.36.0-12.6.49 is installed OR libboost_regex1_36_0-1.36.0-12.6.49 is installed OR libboost_regex1_36_0-32bit-1.36.0-12.6.49 is installed OR libboost_serialization1_36_0-1.36.0-12.6.49 is installed OR libboost_serialization1_36_0-32bit-1.36.0-12.6.49 is installed OR libboost_signals1_36_0-32bit-1.36.0-12.6.49 is installed OR libboost_system1_36_0-1.36.0-12.6.49 is installed OR libboost_system1_36_0-32bit-1.36.0-12.6.49 is installed OR libboost_test1_36_0-1.36.0-12.6.49 is installed OR libboost_test1_36_0-32bit-1.36.0-12.6.49 is installed OR libboost_thread1_36_0-1.36.0-12.6.49 is installed OR libboost_thread1_36_0-32bit-1.36.0-12.6.49 is installed OR libboost_wave1_36_0-1.36.0-12.6.49 is installed OR libboost_wave1_36_0-32bit-1.36.0-12.6.49 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND checkbashisms-2.12.6-3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information ImageMagick-6.8.8.1-8 is installed OR ImageMagick-devel-6.8.8.1-8 is installed OR libMagick++-6_Q16-3-6.8.8.1-8 is installed OR libMagick++-devel-6.8.8.1-8 is installed OR perl-PerlMagick-6.8.8.1-8 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information avahi-compat-howl-devel-0.6.32-30 is installed OR avahi-compat-mDNSResponder-devel-0.6.32-30 is installed OR libavahi-devel-0.6.32-30 is installed OR libhowl0-0.6.32-30 is installed OR python-avahi-0.6.32-30 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND MozillaFirefox-devel-52.2.0esr-108 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND MozillaFirefox-devel-52.9.0esr-109.38 is installed
BACK