openSUSE-SU-2021:3943-1
openSUSE-SU-2021:3943-1 · Recommended update for php7
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for php7 fixes the following issues: - CVE-2021-21703: Fixed local privilege escalation via PHP-FPM (bsc#1192050). - CVE-2021-21707: Fixed special character breaks path in xml parsing (bsc#1193041). - Added patch to prevent memory access violation in php7 when running test suite (bsc#1175508)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- https://lists.opensuse.org/archives/list/[email protected]/thread/D5SCXUGIHHCMMDJ4KQPRDMJZB4DQFEII/
- https://bugzilla.suse.com/1175508
- https://bugzilla.suse.com/1192050
- https://bugzilla.suse.com/1193041
- https://www.suse.com/security/cve/CVE-2021-21703
- https://www.suse.com/security/cve/CVE-2021-21707
- https://osv.dev/vulnerability/openSUSE-SU-2021:3943-1