Oval Definition:oval:org.opensuse.security:def:65462
Revision Date:2020-12-01Version:1
Title:Security update for php7 (Important)
Description:

This update for php7 fixes the following issues:

Security issues fixed:

- CVE-2019-11041: Fixed heap buffer over-read in exif_scan_thumbnail() (bsc#1146360). - CVE-2019-11042: Fixed heap buffer over-read in exif_process_user_comment() (bsc#1145095).

Non-security issue fixed:

- Drop -n from php invocation from pecl (bsc#1151793).
Family:unixClass:patch
Status:Reference(s):1145095
1145774
1146360
1151793
1151850
1152649
1154093
1157490
1161883
1162160
1167007
1168683
1170765
CVE-2019-11041
CVE-2019-11042
CVE-2020-10703
CVE-2020-12430
SUSE-SU-2019:2503-1
SUSE-SU-2020:1208-1
Platform(s):SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
  • AND Package Information
  • php7-7.2.5-4.40 is installed
  • OR php7-embed-7.2.5-4.40 is installed
  • OR php7-readline-7.2.5-4.40 is installed
  • OR php7-sodium-7.2.5-4.40 is installed
  • OR php7-tidy-7.2.5-4.40 is installed
    • BACK