SUSE-SU-2020:0101-1
SUSE-SU-2020:0101-1 · Security update for php7
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for php7 fixes the following issues: - CVE-2019-11045: Fixed an issue with improper input validation in the filename handling of the DirectoryIterator class (bsc#1159923). - CVE-2019-11046: Fixed an information leak in bc_shift_addsub() (bsc#1159924). - CVE-2019-11047, CVE-2019-11050: Fixed multiple information leaks in exif_read_data() (bsc#1159922, bsc#1159927).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
php7 SUSE:Linux Enterprise Module for Package Hub 15
- Affected ranges
- ECOSYSTEM: < 7.2.5-4.49.1
Update to 7.2.5-4.49.1
php7 SUSE:Linux Enterprise Module for Web and Scripting 15
- Affected ranges
- ECOSYSTEM: < 7.2.5-4.49.1
Update to 7.2.5-4.49.1
php7 SUSE:Linux Enterprise Module for Web and Scripting 15 SP1
- Affected ranges
- ECOSYSTEM: < 7.2.5-4.49.1
Update to 7.2.5-4.49.1
Original sources
- https://www.suse.com/support/update/announcement/2020/suse-su-20200101-1/
- https://bugzilla.suse.com/1159922
- https://bugzilla.suse.com/1159923
- https://bugzilla.suse.com/1159924
- https://bugzilla.suse.com/1159927
- https://www.suse.com/security/cve/CVE-2019-11045
- https://www.suse.com/security/cve/CVE-2019-11046
- https://www.suse.com/security/cve/CVE-2019-11047
- https://www.suse.com/security/cve/CVE-2019-11050
- https://osv.dev/vulnerability/SUSE-SU-2020:0101-1