Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:2809-1

Опубликовано: 29 окт. 2019
Источник: suse-cvrf

Описание

Security update for php7

This update for php7 fixes the following issues:

Security issue fixed:

  • CVE-2019-11043: Fixed possible remote code execution via env_path_info underflow in fpm_main.c (bsc#1154999).

Список пакетов

SUSE Linux Enterprise Module for Web and Scripting 12
apache2-mod_php7-7.0.7-50.88.1
php7-7.0.7-50.88.1
php7-bcmath-7.0.7-50.88.1
php7-bz2-7.0.7-50.88.1
php7-calendar-7.0.7-50.88.1
php7-ctype-7.0.7-50.88.1
php7-curl-7.0.7-50.88.1
php7-dba-7.0.7-50.88.1
php7-dom-7.0.7-50.88.1
php7-enchant-7.0.7-50.88.1
php7-exif-7.0.7-50.88.1
php7-fastcgi-7.0.7-50.88.1
php7-fileinfo-7.0.7-50.88.1
php7-fpm-7.0.7-50.88.1
php7-ftp-7.0.7-50.88.1
php7-gd-7.0.7-50.88.1
php7-gettext-7.0.7-50.88.1
php7-gmp-7.0.7-50.88.1
php7-iconv-7.0.7-50.88.1
php7-imap-7.0.7-50.88.1
php7-intl-7.0.7-50.88.1
php7-json-7.0.7-50.88.1
php7-ldap-7.0.7-50.88.1
php7-mbstring-7.0.7-50.88.1
php7-mcrypt-7.0.7-50.88.1
php7-mysql-7.0.7-50.88.1
php7-odbc-7.0.7-50.88.1
php7-opcache-7.0.7-50.88.1
php7-openssl-7.0.7-50.88.1
php7-pcntl-7.0.7-50.88.1
php7-pdo-7.0.7-50.88.1
php7-pear-7.0.7-50.88.1
php7-pear-Archive_Tar-7.0.7-50.88.1
php7-pgsql-7.0.7-50.88.1
php7-phar-7.0.7-50.88.1
php7-posix-7.0.7-50.88.1
php7-pspell-7.0.7-50.88.1
php7-shmop-7.0.7-50.88.1
php7-snmp-7.0.7-50.88.1
php7-soap-7.0.7-50.88.1
php7-sockets-7.0.7-50.88.1
php7-sqlite-7.0.7-50.88.1
php7-sysvmsg-7.0.7-50.88.1
php7-sysvsem-7.0.7-50.88.1
php7-sysvshm-7.0.7-50.88.1
php7-tokenizer-7.0.7-50.88.1
php7-wddx-7.0.7-50.88.1
php7-xmlreader-7.0.7-50.88.1
php7-xmlrpc-7.0.7-50.88.1
php7-xmlwriter-7.0.7-50.88.1
php7-xsl-7.0.7-50.88.1
php7-zip-7.0.7-50.88.1
php7-zlib-7.0.7-50.88.1
SUSE Linux Enterprise Software Development Kit 12 SP4
php7-devel-7.0.7-50.88.1
SUSE Linux Enterprise Software Development Kit 12 SP5
php7-devel-7.0.7-50.88.1

Ссылки

Описание

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.

Затронутые продукты
SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php7-7.0.7-50.88.1
SUSE Linux Enterprise Module for Web and Scripting 12:php7-7.0.7-50.88.1
SUSE Linux Enterprise Module for Web and Scripting 12:php7-bcmath-7.0.7-50.88.1
SUSE Linux Enterprise Module for Web and Scripting 12:php7-bz2-7.0.7-50.88.1
Ссылки