SUSE-SU-2018:1936-2
SUSE-SU-2018:1936-2 · Security update for php7
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for php7 fixes the following issues: - CVE-2018-12882: exif_read_from_impl allowed attackers to trigger a use-after-free (in exif_read_from_file) because it closed a stream that it is not responsible for closing (bsc#1099098).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
php7 SUSE:Linux Enterprise Module for Web and Scripting 15
- Affected ranges
- ECOSYSTEM: < 7.2.5-4.3.1
Update to 7.2.5-4.3.1