Lucene search

K
suseSuseSUSE-SU-2012:0604-1
HistoryMay 09, 2012 - 10:08 p.m.

Security update for PHP5 (critical)

2012-05-0922:08:16
lists.opensuse.org
43

EPSS

0.951

Percentile

99.4%

This update fixes several security issues in PHP5:

  • CVE-2012-1172: A directory traversal bug has been
    fixed in PHP5
  • CVE-2012-1823, CVE-2012-2311: A command injection was
    possible when PHP5 was operated in CGI mode using
    commandline options. This problem does not affect PHP5 in
    the normal Apache module mode setup.