Описание
Security update for php5
This update for php5 fixes the following issues:
Security issues fixed:
- CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).
- CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).
- CVE-2019-9637: Fixed a potential information disclosure in rename() (bsc#1128892).
- CVE-2019-9675: Fixed a potential buffer overflow in phar_tar_writeheaders_int() (bsc#1128886).
- CVE-2019-9638: Fixed an uninitialized read in exif_process_IFD_in_MAKERNOTE() related to value_len (bsc#1128889).
- CVE-2019-9639: Fixed an uninitialized read in exif_process_IFD_in_MAKERNOTE() related to data_len (bsc#1128887).
- CVE-2019-9640: Fixed an invalid Read in exif_process_SOFn() (bsc#1128883).
- CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).
Список пакетов
SUSE Linux Enterprise Module for Web and Scripting 12
SUSE Linux Enterprise Software Development Kit 12 SP3
SUSE Linux Enterprise Software Development Kit 12 SP4
Ссылки
- Link for SUSE-SU-2019:1325-1
- E-Mail link for SUSE-SU-2019:1325-1
- SUSE Security Ratings
- SUSE Bug 1128883
- SUSE Bug 1128886
- SUSE Bug 1128887
- SUSE Bug 1128889
- SUSE Bug 1128892
- SUSE Bug 1132837
- SUSE Bug 1132838
- SUSE Bug 1134322
- SUSE CVE CVE-2019-11034 page
- SUSE CVE CVE-2019-11035 page
- SUSE CVE CVE-2019-11036 page
- SUSE CVE CVE-2019-9637 page
- SUSE CVE CVE-2019-9638 page
- SUSE CVE CVE-2019-9639 page
- SUSE CVE CVE-2019-9640 page
- SUSE CVE CVE-2019-9675 page
Описание
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.
Затронутые продукты
Ссылки
- CVE-2019-11034
- SUSE Bug 1132838
Описание
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.
Затронутые продукты
Ссылки
- CVE-2019-11035
- SUSE Bug 1132837
Описание
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.
Затронутые продукты
Ссылки
- CVE-2019-11036
- SUSE Bug 1134322
Описание
An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.
Затронутые продукты
Ссылки
- CVE-2019-9637
- SUSE Bug 1128892
Описание
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len.
Затронутые продукты
Ссылки
- CVE-2019-9638
- SUSE Bug 1128889
Описание
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.
Затронутые продукты
Ссылки
- CVE-2019-9639
- SUSE Bug 1128887
Описание
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.
Затронутые продукты
Ссылки
- CVE-2019-9640
- SUSE Bug 1128883
Описание
** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue allows theoretical compromise of security, but a practical attack is usually impossible."
Затронутые продукты
Ссылки
- CVE-2019-9675
- SUSE Bug 1128886