This update for php7 fixes the following issues:
- Version update to 7.2.34 [jsc#SLE-23639]
- CVE-2022-37454: Fixed SHA-3 buffer overflow (bsc#1204577).
- Fix integer overflow in PHP_SHA3##bits (bsc#1204577#c26).
This update for php7 fixes the following issues:
- CVE-2022-31625: Fixed uninitialized pointers free in Postgres extension. (bsc#1200645)
- CVE-2022-31626: Fixed buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver. (bsc#1200628).
This update for php7 fixes the following issues:
- CVE-2021-21703: Fixed local privilege escalation via PHP-FPM (bsc#1192050).
- CVE-2021-21707: Fixed special character breaks path in xml parsing (bsc#1193041).
- CVE-2017-8923: Fixed denial of service (application crash) when using .= with a long string (zend_string_extend func in Zend/zend_string.h) (bsc#1038980).
- CVE-2015-9253: Fixed endless loop when the master process restarts a child process using program execution functions (bsc#1081790).