p PatchFirst

SUSE-SU-2021:3943-1

SUSE-SU-2021:3943-1 · Recommended update for php7

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for php7 fixes the following issues: - CVE-2021-21703: Fixed local privilege escalation via PHP-FPM (bsc#1192050). - CVE-2021-21707: Fixed special character breaks path in xml parsing (bsc#1193041). - Added patch to prevent memory access violation in php7 when running test suite (bsc#1175508)

Fix available

Published
Updated

Stack: system

Affected products and versions

  • php7 SUSE:Linux Enterprise Module for Package Hub 15 SP2

    Affected ranges
    • ECOSYSTEM: < 7.4.6-3.29.1

    Update to 7.4.6-3.29.1

  • php7 SUSE:Linux Enterprise Module for Package Hub 15 SP3

    Affected ranges
    • ECOSYSTEM: < 7.4.6-3.29.1

    Update to 7.4.6-3.29.1

  • php7 SUSE:Linux Enterprise Module for Web and Scripting 15 SP2

    Affected ranges
    • ECOSYSTEM: < 7.4.6-3.29.1

    Update to 7.4.6-3.29.1

  • php7 SUSE:Linux Enterprise Module for Web and Scripting 15 SP3

    Affected ranges
    • ECOSYSTEM: < 7.4.6-3.29.1

    Update to 7.4.6-3.29.1

Original sources

Check your server →