540 matches found
openSUSE Security Update : php7 (openSUSE-2018-119)
This update for php7 fixes several issues. These security issues were fixed : - CVE-2018-5712: Prevent reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file that allowed for information disclosure bsc1076220. - CVE-2018-5711: Prevent integer signedness error that coul...
SUSE-SU-2018:0308-1 Security update for php7
This update for php7 fixes several issues. These security issues were fixed: - CVE-2018-5712: Prevent reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file that allowed for information disclosure bsc1076220. - CVE-2018-5711: Prevent integer signedness error that could...
openSUSE Security Update : php7 (openSUSE-2017-1353)
This update for php7 fixes the following issues : Security issues fixed : - CVE-2017-16642: Fix timelibmeridian error that could be used to leak information from the interpreter bsc1067441. - CVE-2017-9229: Fix invalid pointer dereference in leftadjustcharhead bsc1069631. - CVE-2017-9228: Fix hea...
SUSE-SU-2017:3237-1 Security update for php7
This update for php7 fixes the following issues: Security issues fixed: - CVE-2017-16642: Fix timelibmeridian error that could be used to leak information from the interpreter bsc1067441. - CVE-2017-9229: Fix invalid pointer dereference in leftadjustcharhead bsc1069631. - CVE-2017-9228: Fix heap...
Security fix for the ALT Linux 8 package php7 version 7.1.11-alt1
Nov. 3, 2017 Anton Farygin 7.1.11-alt1 - 7.1.11 Fixes: CVE-2016-1283...
openSUSE Security Update : php7 (openSUSE-2017-1061)
This update for php7 fixes several issues. These security issues were fixed : - CVE-2017-12932: Prevent heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue could have...
SUSE-SU-2017:2468-1 Security update for php7
This update for php7 fixes several issues. These security issues were fixed: - CVE-2017-12932: Prevent heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue could have...
openSUSE Security Update : php7 (openSUSE-2017-994)
This update for php7 fixes the following issues : - CVE-2016-10397: parseurl can be bypassed to return fake host. bsc1047454 - CVE-2017-11142: Remoteattackers could cause a CPU consumption denial of service attack by injectinglong form variables, related to main/phpvariables. bsc1048100 -...
openSUSE: Security Advisory for php7 (openSUSE-SU-2017:2337-1)
The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for php7 (important)
This update for php7 fixes the following issues: - CVE-2016-10397: parseurl can be bypassed to return fake host. bsc1047454 - CVE-2017-11142: Remoteattackers could cause a CPU consumption denial of service attack by injectinglong form variables, related to main/phpvariables. bsc1048100 -...
SUSE-SU-2017:2303-1 Security update for php7
This update for php7 fixes the following issues: - CVE-2016-10397: parseurl can be bypassed to return fake host. bsc1047454 - CVE-2017-11142: Remoteattackers could cause a CPU consumption denial of service attack by injectinglong form variables, related to main/phpvariables. bsc1048100 -...
Fedora 26 : ming (2017-198ca8ba07)
Release 0.4.8 no ABI or API changes - Add PHP7 compatibility - Fix C++ output of disassembler - Fix heap overflows in parser.c CVE-2017-7578 - Avoid division by zero in listmp3 when no valid frame was found CVE-2016-9265 - Don't try printing unknown block CVE-2016-9828 - Parse Protect tag's...
openSUSE Security Update : php7 (openSUSE-2017-790)
This update for php7 fixes the following security issues : - CVE-2017-9224: stack out-of-bounds read occurs in matchat could lead to Denial of service bsc1040891 - CVE-2017-9226: heap out-of-bounds write orread occurs in nextstateval could lead to Denial of servicebsc1040889 - CVE-2017-9227: stac...
Internet Bug Bounty: Use-after-free in PHP7's unserialize()
The bug submitted at: https://bugs.php.net/bug.php?id=74614 The fix committed at: https://github.com/php/php-src/commit/d02f953faf4afdd1576acb1380e4cd3c050ac599...
SUSE-SU-2017:1717-1 Security update for php7
This update for php7 fixes the following security issues: - CVE-2017-9224: stack out-of-bounds read occurs in matchat could lead to Denial of service bsc1040891 - CVE-2017-9226: heap out-of-bounds write orread occurs in nextstateval could lead to Denial of servicebsc1040889 - CVE-2017-9227: stack...
Internet Bug Bounty: PHP mbstring / Oniguruma multiple remote heap/stack corruptions
Oniguruma 1 by K. Kosako is a BSD licensed regular expression library that supports a variety of character encodings. The Ruby programming language, in version 1.9, as well as PHP's multi-byte string module since PHP5, use Oniguruma as their regular expression engine. It is also used in products...
Fedora 25 : ming (2017-d43d46f1ca)
Release 0.4.8 no ABI or API changes - Add PHP7 compatibility - Fix C++ output of disassembler - Fix heap overflows in parser.c CVE-2017-7578 - Avoid division by zero in listmp3 when no valid frame was found CVE-2016-9265 - Don't try printing unknown block CVE-2016-9828 - Parse Protect tag's...
Fedora 24 : ming (2017-ed6b6a1d7a)
Release 0.4.8 no ABI or API changes - Add PHP7 compatibility - Fix C++ output of disassembler - Fix heap overflows in parser.c CVE-2017-7578 - Avoid division by zero in listmp3 when no valid frame was found CVE-2016-9265 - Don't try printing unknown block CVE-2016-9828 - Parse Protect tag's...
openSUSE Security Update : php7 (openSUSE-2017-458)
This update for php7 fixes the following issues : Security issue fixed : - CVE-2015-8994: code permission/sensitive data protection vulnerability bsc1027210. This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...