p PatchFirst

SUSE-SU-2020:0622-1

SUSE-SU-2020:0622-1 · Security update for php7

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for php7 fixes the following issues: - CVE-2020-7062: Fixed a null pointer dereference when using file upload functionality under specific circumstances (bsc#1165280). - CVE-2020-7063: Fixed an issue where adding files change the permissions to default (bsc#1165289). - CVE-2020-7059: Fixed an out of bounds read in php_strip_tags_ex which may have led to denial of service (bsc#1162629). - CVE-2020-7060: Fixed a global buffer overflow in mbfl_filt_conv_big5_wchar which may have led to memory corruption (bsc#1162632).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • php7 SUSE:Linux Enterprise Module for Web and Scripting 15 SP1

    Affected ranges
    • ECOSYSTEM: < 7.2.5-4.52.4

    Update to 7.2.5-4.52.4

  • php7 SUSE:Linux Enterprise High Performance Computing 15-ESPOS

    Affected ranges
    • ECOSYSTEM: < 7.2.5-4.52.4

    Update to 7.2.5-4.52.4

  • php7 SUSE:Linux Enterprise High Performance Computing 15-LTSS

    Affected ranges
    • ECOSYSTEM: < 7.2.5-4.52.4

    Update to 7.2.5-4.52.4

  • php7 SUSE:Linux Enterprise Server 15-LTSS

    Affected ranges
    • ECOSYSTEM: < 7.2.5-4.52.4

    Update to 7.2.5-4.52.4

  • php7 SUSE:Linux Enterprise Server for SAP Applications 15

    Affected ranges
    • ECOSYSTEM: < 7.2.5-4.52.4

    Update to 7.2.5-4.52.4

Original sources

Check your server →