Описание
Security update for php53
This update for php53 fixes the following issues:
Security issues fixed:
- CVE-2020-7059: Fixed an out-of-bounds read in php_strip_tags_ex (bsc#1162629).
- CVE-2019-11045: Fixed an issue with the PHP DirectoryIterator class that accepts filenames with embedded \0 bytes (bsc#1159923).
- CVE-2019-11046: Fixed an out-of-bounds read in bc_shift_addsub (bsc#1159924).
- CVE-2019-11047: Fixed an information disclosure in exif_read_data (bsc#1159922).
- CVE-2019-11050: Fixed a buffer over-read in the EXIF extension (bsc#1159927).
- CVE-2019-20433: Fixed a buffer over-read when processing strings ending with a single '\0' byte with ucs-2 and ucs-4 encoding (bsc#1161982).
Список пакетов
SUSE Linux Enterprise Point of Sale 11 SP3
SUSE Linux Enterprise Server 11 SP4-LTSS
Ссылки
- Link for SUSE-SU-2020:14289-1
- E-Mail link for SUSE-SU-2020:14289-1
- SUSE Security Ratings
- SUSE Bug 1159922
- SUSE Bug 1159923
- SUSE Bug 1159924
- SUSE Bug 1159927
- SUSE Bug 1161982
- SUSE Bug 1162629
- SUSE CVE CVE-2019-11045 page
- SUSE CVE CVE-2019-11046 page
- SUSE CVE CVE-2019-11047 page
- SUSE CVE CVE-2019-11050 page
- SUSE CVE CVE-2019-20433 page
- SUSE CVE CVE-2020-7059 page
Описание
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access.
Затронутые продукты
Ссылки
- CVE-2019-11045
- SUSE Bug 1159923
Описание
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP bcmath extension functions on some systems, including Windows, can be tricked into reading beyond the allocated space by supplying it with string containing characters that are identified as numeric by the OS but aren't ASCII numbers. This can read to disclosure of the content of some memory locations.
Затронутые продукты
Ссылки
- CVE-2019-11046
- SUSE Bug 1159924
Описание
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
Затронутые продукты
Ссылки
- CVE-2019-11047
- SUSE Bug 1159922
Описание
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
Затронутые продукты
Ссылки
- CVE-2019-11050
- SUSE Bug 1159927
Описание
libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable.
Затронутые продукты
Ссылки
- CVE-2019-20433
- SUSE Bug 1161982
Описание
When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash.
Затронутые продукты
Ссылки
- CVE-2020-7059
- SUSE Bug 1162629