SUSE-SU-2022:3830-1
SUSE-SU-2022:3830-1 · Security update for php7
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for php7 fixes the following issues: - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing 'quines' gzip files. (bsc#1203867) - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as secure in the victim's browser. (bsc#1203870)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
php7 openSUSE:Leap 15.4
- Affected ranges
- ECOSYSTEM: < 7.2.5-150000.4.98.2
Update to 7.2.5-150000.4.98.2