openSUSE Security Advisory (SUSE-SU-2024:4146-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:4146-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2024-11233: Single byte overread with convert.quoted-printable-decode filter bsc1233702. - CVE-2024-11234: Configuring a proxy in a stream context might allow for CRLF injection in URIs bsc1233703. - CVE-2024-8929: Leak partial content of the...

openSUSE Security Advisory (SUSE-SU-2024:3733-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2024:3733-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3733-1 advisory. - CVE-2024-8925: Fixed erroneous parsing of multipart form data in HTTP POST requests leads to legitimate data not...

SUSE-SU-2024:3733-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2024-8925: Fixed erroneous parsing of multipart form data in HTTP POST requests leads to legitimate data not being processed bsc1231360 - CVE-2024-8927: Fixed cgi.forceredirect configuration is bypassable due to an environment variable...

SUSE: Security Advisory (SUSE-SU-2024:2037-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2024:2037-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2037-1 advisory. - CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies as secure...

SUSE-SU-2024:2037-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies as secure bsc1222857 - CVE-2024-3096: Fixed bypass on null byte leading passwords checked via passwordverify bsc1222858 -...

OPENSUSE-SU-2024:10290-1 apache2-mod_php7-7.0.14-1.4 on GA media

These are all security issues fixed in the apache2-modphp7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12476-1 php7-7.4.33-1.1 on GA media

These are all security issues fixed in the php7-7.4.33-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11569-1 php7-7.4.24-2.1 on GA media

These are all security issues fixed in the php7-7.4.24-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11168-1 php7-pear-1.10.21-1.2 on GA media

These are all security issues fixed in the php7-pear-1.10.21-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11861-1 php7-7.4.28-1.1 on GA media

These are all security issues fixed in the php7-7.4.28-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11640-1 php7-7.4.26-1.1 on GA media

These are all security issues fixed in the php7-7.4.26-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12377-1 php7-7.4.32-1.1 on GA media

These are all security issues fixed in the php7-7.4.32-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11594-1 php7-7.4.25-1.1 on GA media

These are all security issues fixed in the php7-7.4.25-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11167-1 php7-7.4.24-1.1 on GA media

These are all security issues fixed in the php7-7.4.24-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-36407 SuiteCRM unauthenticated user password reset on php7

SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions prior to 7.14.4 and 8.6.1, a user password can be reset from an unauthenticated attacker. The attacker does not get access to the new password. But this can be annoying for the user. This attack is...

SUSE SLES15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2024:1444-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1444-1 advisory. - CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies...

openSUSE Security Advisory (SUSE-SU-2024:1444-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...