SUSE-SU-2020:2896-1
SUSE-SU-2020:2896-1 · Security update for php74
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for php74 fixes the following issues: - CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351). - CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352). - Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786)
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
Fuentes originales
- https://www.suse.com/support/update/announcement/2020/suse-su-20202896-1/
- https://bugzilla.suse.com/1173786
- https://bugzilla.suse.com/1177351
- https://bugzilla.suse.com/1177352
- https://www.suse.com/security/cve/CVE-2020-7069
- https://www.suse.com/security/cve/CVE-2020-7070
- https://osv.dev/vulnerability/SUSE-SU-2020:2896-1