SUSE: Security Advisory (SUSE-SU-2022:1764-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:1764-1 Security update for php7

This update for php7 fixes the following issues: - Fixed filtervar bypass vulnerability bsc1197644...

OPENSUSE-SU-2022:0847-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2021-21708: Fixed a memory corruption issue when processing integers from an untrusted source bsc1196252...

OPENSUSE-SU-2021:1570-1 Recommended update for php7

This update for php7 fixes the following issues: - CVE-2021-21703: Fixed local privilege escalation via PHP-FPM bsc1192050. - CVE-2021-21707: Fixed special character breaks path in xml parsing bsc1193041. - Added patch to prevent memory access violation in php7 when running test suite bsc1175508...

SUSE SLES15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2021:3943-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3943-1 advisory. - CVE-2021-21703: Fixed local privilege escalation via PHP-FPM bsc1192050. - CVE-2021-21707: Fixed special character breaks path in xml parsing...

SUSE-SU-2021:3943-1 Recommended update for php7

This update for php7 fixes the following issues: - CVE-2021-21703: Fixed local privilege escalation via PHP-FPM bsc1192050. - CVE-2021-21707: Fixed special character breaks path in xml parsing bsc1193041. - Added patch to prevent memory access violation in php7 when running test suite bsc1175508...

Recommended update for php7 (moderate)

openSUSE Security Update: Recommended update for php7 Announcement ID: openSUSE-SU-2021:3943-1 Rating: moderate References: 1175508 1192050 1193041 Cross-References: CVE-2021-21703 CVE-2021-21707 CVSS scores: CVE-2021-21703 NVD : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-21703 SUSE:...

OPENSUSE-SU-2021:1130-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2021-21704: Fixed security issues in pdofirebase module bsc1188035. - CVE-2021-21705: Fixed SSRF bypass in FILTERVALIDATEURL bsc1188037. This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2021:0101-1 Security update for php7

This update for php7 fixes the following issue: - CVE-2020-7071: Fixed an insufficient filter in parseurl that accepted URLs with invalid userinfo bsc1180706. This update was imported from the SUSE:SLE-15:Update update project...

SUSE-SU-2020:2403-1 Security update for php7

This update for php7 fixes the following issues: - fix CVE-2020-7068 bsc1175223: Use of freed hash key in the pharparsezipfile function...

SUSE-SU-2018:3988-1 Recommended update for php7

This update for php7 fixes the following issues: Security issue fixed: - CVE-2018-19518: Fixed imapopen script injection flaw bsc1117107...

SUSE-SU-2018:1886-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2018-12882: exifreadfromimpl allowed attackers to trigger a use-after-free in exifreadfromfile because it closed a stream that it is not responsible for closing bsc1099098...