Описание
Security update for php7
This update for php7 fixes the following issues:
- CVE-2021-21703: Fixed local privilege escalation via PHP-FPM (bsc#1192050).
- CVE-2021-21707: Fixed special character breaks path in xml parsing (bsc#1193041).
- CVE-2017-8923: Fixed denial of service (application crash) when using .= with a long string (zend_string_extend func in Zend/zend_string.h) (bsc#1038980).
- CVE-2015-9253: Fixed endless loop when the master process restarts a child process using program execution functions (bsc#1081790).
Список пакетов
SUSE Enterprise Storage 6
apache2-mod_php7-7.2.5-4.89.4
php7-7.2.5-4.89.4
php7-bcmath-7.2.5-4.89.4
php7-bz2-7.2.5-4.89.4
php7-calendar-7.2.5-4.89.4
php7-ctype-7.2.5-4.89.4
php7-curl-7.2.5-4.89.4
php7-dba-7.2.5-4.89.4
php7-devel-7.2.5-4.89.4
php7-dom-7.2.5-4.89.4
php7-enchant-7.2.5-4.89.4
php7-exif-7.2.5-4.89.4
php7-fastcgi-7.2.5-4.89.4
php7-fileinfo-7.2.5-4.89.4
php7-fpm-7.2.5-4.89.4
php7-ftp-7.2.5-4.89.4
php7-gd-7.2.5-4.89.4
php7-gettext-7.2.5-4.89.4
php7-gmp-7.2.5-4.89.4
php7-iconv-7.2.5-4.89.4
php7-intl-7.2.5-4.89.4
php7-json-7.2.5-4.89.4
php7-ldap-7.2.5-4.89.4
php7-mbstring-7.2.5-4.89.4
php7-mysql-7.2.5-4.89.4
php7-odbc-7.2.5-4.89.4
php7-opcache-7.2.5-4.89.4
php7-openssl-7.2.5-4.89.4
php7-pcntl-7.2.5-4.89.4
php7-pdo-7.2.5-4.89.4
php7-pear-7.2.5-4.89.4
php7-pear-Archive_Tar-7.2.5-4.89.4
php7-pgsql-7.2.5-4.89.4
php7-phar-7.2.5-4.89.4
php7-posix-7.2.5-4.89.4
php7-readline-7.2.5-4.89.4
php7-shmop-7.2.5-4.89.4
php7-snmp-7.2.5-4.89.4
php7-soap-7.2.5-4.89.4
php7-sockets-7.2.5-4.89.4
php7-sodium-7.2.5-4.89.4
php7-sqlite-7.2.5-4.89.4
php7-sysvmsg-7.2.5-4.89.4
php7-sysvsem-7.2.5-4.89.4
php7-sysvshm-7.2.5-4.89.4
php7-tidy-7.2.5-4.89.4
php7-tokenizer-7.2.5-4.89.4
php7-wddx-7.2.5-4.89.4
php7-xmlreader-7.2.5-4.89.4
php7-xmlrpc-7.2.5-4.89.4
php7-xmlwriter-7.2.5-4.89.4
php7-xsl-7.2.5-4.89.4
php7-zip-7.2.5-4.89.4
php7-zlib-7.2.5-4.89.4
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS
apache2-mod_php7-7.2.5-4.89.4
php7-7.2.5-4.89.4
php7-bcmath-7.2.5-4.89.4
php7-bz2-7.2.5-4.89.4
php7-calendar-7.2.5-4.89.4
php7-ctype-7.2.5-4.89.4
php7-curl-7.2.5-4.89.4
php7-dba-7.2.5-4.89.4
php7-devel-7.2.5-4.89.4
php7-dom-7.2.5-4.89.4
php7-enchant-7.2.5-4.89.4
php7-exif-7.2.5-4.89.4
php7-fastcgi-7.2.5-4.89.4
php7-fileinfo-7.2.5-4.89.4
php7-fpm-7.2.5-4.89.4
php7-ftp-7.2.5-4.89.4
php7-gd-7.2.5-4.89.4
php7-gettext-7.2.5-4.89.4
php7-gmp-7.2.5-4.89.4
php7-iconv-7.2.5-4.89.4
php7-intl-7.2.5-4.89.4
php7-json-7.2.5-4.89.4
php7-ldap-7.2.5-4.89.4
php7-mbstring-7.2.5-4.89.4
php7-mysql-7.2.5-4.89.4
php7-odbc-7.2.5-4.89.4
php7-opcache-7.2.5-4.89.4
php7-openssl-7.2.5-4.89.4
php7-pcntl-7.2.5-4.89.4
php7-pdo-7.2.5-4.89.4
php7-pear-7.2.5-4.89.4
php7-pear-Archive_Tar-7.2.5-4.89.4
php7-pgsql-7.2.5-4.89.4
php7-phar-7.2.5-4.89.4
php7-posix-7.2.5-4.89.4
php7-readline-7.2.5-4.89.4
php7-shmop-7.2.5-4.89.4
php7-snmp-7.2.5-4.89.4
php7-soap-7.2.5-4.89.4
php7-sockets-7.2.5-4.89.4
php7-sodium-7.2.5-4.89.4
php7-sqlite-7.2.5-4.89.4
php7-sysvmsg-7.2.5-4.89.4
php7-sysvsem-7.2.5-4.89.4
php7-sysvshm-7.2.5-4.89.4
php7-tidy-7.2.5-4.89.4
php7-tokenizer-7.2.5-4.89.4
php7-wddx-7.2.5-4.89.4
php7-xmlreader-7.2.5-4.89.4
php7-xmlrpc-7.2.5-4.89.4
php7-xmlwriter-7.2.5-4.89.4
php7-xsl-7.2.5-4.89.4
php7-zip-7.2.5-4.89.4
php7-zlib-7.2.5-4.89.4
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
apache2-mod_php7-7.2.5-4.89.4
php7-7.2.5-4.89.4
php7-bcmath-7.2.5-4.89.4
php7-bz2-7.2.5-4.89.4
php7-calendar-7.2.5-4.89.4
php7-ctype-7.2.5-4.89.4
php7-curl-7.2.5-4.89.4
php7-dba-7.2.5-4.89.4
php7-devel-7.2.5-4.89.4
php7-dom-7.2.5-4.89.4
php7-enchant-7.2.5-4.89.4
php7-exif-7.2.5-4.89.4
php7-fastcgi-7.2.5-4.89.4
php7-fileinfo-7.2.5-4.89.4
php7-fpm-7.2.5-4.89.4
php7-ftp-7.2.5-4.89.4
php7-gd-7.2.5-4.89.4
php7-gettext-7.2.5-4.89.4
php7-gmp-7.2.5-4.89.4
php7-iconv-7.2.5-4.89.4
php7-intl-7.2.5-4.89.4
php7-json-7.2.5-4.89.4
php7-ldap-7.2.5-4.89.4
php7-mbstring-7.2.5-4.89.4
php7-mysql-7.2.5-4.89.4
php7-odbc-7.2.5-4.89.4
php7-opcache-7.2.5-4.89.4
php7-openssl-7.2.5-4.89.4
php7-pcntl-7.2.5-4.89.4
php7-pdo-7.2.5-4.89.4
php7-pear-7.2.5-4.89.4
php7-pear-Archive_Tar-7.2.5-4.89.4
php7-pgsql-7.2.5-4.89.4
php7-phar-7.2.5-4.89.4
php7-posix-7.2.5-4.89.4
php7-readline-7.2.5-4.89.4
php7-shmop-7.2.5-4.89.4
php7-snmp-7.2.5-4.89.4
php7-soap-7.2.5-4.89.4
php7-sockets-7.2.5-4.89.4
php7-sodium-7.2.5-4.89.4
php7-sqlite-7.2.5-4.89.4
php7-sysvmsg-7.2.5-4.89.4
php7-sysvsem-7.2.5-4.89.4
php7-sysvshm-7.2.5-4.89.4
php7-tidy-7.2.5-4.89.4
php7-tokenizer-7.2.5-4.89.4
php7-wddx-7.2.5-4.89.4
php7-xmlreader-7.2.5-4.89.4
php7-xmlrpc-7.2.5-4.89.4
php7-xmlwriter-7.2.5-4.89.4
php7-xsl-7.2.5-4.89.4
php7-zip-7.2.5-4.89.4
php7-zlib-7.2.5-4.89.4
SUSE Linux Enterprise High Performance Computing 15-ESPOS
apache2-mod_php7-7.2.5-4.89.4
php7-7.2.5-4.89.4
php7-bcmath-7.2.5-4.89.4
php7-bz2-7.2.5-4.89.4
php7-calendar-7.2.5-4.89.4
php7-ctype-7.2.5-4.89.4
php7-curl-7.2.5-4.89.4
php7-dba-7.2.5-4.89.4
php7-devel-7.2.5-4.89.4
php7-dom-7.2.5-4.89.4
php7-enchant-7.2.5-4.89.4
php7-exif-7.2.5-4.89.4
php7-fastcgi-7.2.5-4.89.4
php7-fileinfo-7.2.5-4.89.4
php7-fpm-7.2.5-4.89.4
php7-ftp-7.2.5-4.89.4
php7-gd-7.2.5-4.89.4
php7-gettext-7.2.5-4.89.4
php7-gmp-7.2.5-4.89.4
php7-iconv-7.2.5-4.89.4
php7-intl-7.2.5-4.89.4
php7-json-7.2.5-4.89.4
php7-ldap-7.2.5-4.89.4
php7-mbstring-7.2.5-4.89.4
php7-mysql-7.2.5-4.89.4
php7-odbc-7.2.5-4.89.4
php7-opcache-7.2.5-4.89.4
php7-openssl-7.2.5-4.89.4
php7-pcntl-7.2.5-4.89.4
php7-pdo-7.2.5-4.89.4
php7-pear-7.2.5-4.89.4
php7-pear-Archive_Tar-7.2.5-4.89.4
php7-pgsql-7.2.5-4.89.4
php7-phar-7.2.5-4.89.4
php7-posix-7.2.5-4.89.4
php7-readline-7.2.5-4.89.4
php7-shmop-7.2.5-4.89.4
php7-snmp-7.2.5-4.89.4
php7-soap-7.2.5-4.89.4
php7-sockets-7.2.5-4.89.4
php7-sodium-7.2.5-4.89.4
php7-sqlite-7.2.5-4.89.4
php7-sysvmsg-7.2.5-4.89.4
php7-sysvsem-7.2.5-4.89.4
php7-sysvshm-7.2.5-4.89.4
php7-tokenizer-7.2.5-4.89.4
php7-wddx-7.2.5-4.89.4
php7-xmlreader-7.2.5-4.89.4
php7-xmlrpc-7.2.5-4.89.4
php7-xmlwriter-7.2.5-4.89.4
php7-xsl-7.2.5-4.89.4
php7-zip-7.2.5-4.89.4
php7-zlib-7.2.5-4.89.4
SUSE Linux Enterprise High Performance Computing 15-LTSS
apache2-mod_php7-7.2.5-4.89.4
php7-7.2.5-4.89.4
php7-bcmath-7.2.5-4.89.4
php7-bz2-7.2.5-4.89.4
php7-calendar-7.2.5-4.89.4
php7-ctype-7.2.5-4.89.4
php7-curl-7.2.5-4.89.4
php7-dba-7.2.5-4.89.4
php7-devel-7.2.5-4.89.4
php7-dom-7.2.5-4.89.4
php7-enchant-7.2.5-4.89.4
php7-exif-7.2.5-4.89.4
php7-fastcgi-7.2.5-4.89.4
php7-fileinfo-7.2.5-4.89.4
php7-fpm-7.2.5-4.89.4
php7-ftp-7.2.5-4.89.4
php7-gd-7.2.5-4.89.4
php7-gettext-7.2.5-4.89.4
php7-gmp-7.2.5-4.89.4
php7-iconv-7.2.5-4.89.4
php7-intl-7.2.5-4.89.4
php7-json-7.2.5-4.89.4
php7-ldap-7.2.5-4.89.4
php7-mbstring-7.2.5-4.89.4
php7-mysql-7.2.5-4.89.4
php7-odbc-7.2.5-4.89.4
php7-opcache-7.2.5-4.89.4
php7-openssl-7.2.5-4.89.4
php7-pcntl-7.2.5-4.89.4
php7-pdo-7.2.5-4.89.4
php7-pear-7.2.5-4.89.4
php7-pear-Archive_Tar-7.2.5-4.89.4
php7-pgsql-7.2.5-4.89.4
php7-phar-7.2.5-4.89.4
php7-posix-7.2.5-4.89.4
php7-readline-7.2.5-4.89.4
php7-shmop-7.2.5-4.89.4
php7-snmp-7.2.5-4.89.4
php7-soap-7.2.5-4.89.4
php7-sockets-7.2.5-4.89.4
php7-sodium-7.2.5-4.89.4
php7-sqlite-7.2.5-4.89.4
php7-sysvmsg-7.2.5-4.89.4
php7-sysvsem-7.2.5-4.89.4
php7-sysvshm-7.2.5-4.89.4
php7-tokenizer-7.2.5-4.89.4
php7-wddx-7.2.5-4.89.4
php7-xmlreader-7.2.5-4.89.4
php7-xmlrpc-7.2.5-4.89.4
php7-xmlwriter-7.2.5-4.89.4
php7-xsl-7.2.5-4.89.4
php7-zip-7.2.5-4.89.4
php7-zlib-7.2.5-4.89.4
SUSE Linux Enterprise Server 15 SP1-BCL
apache2-mod_php7-7.2.5-4.89.4
php7-7.2.5-4.89.4
php7-bcmath-7.2.5-4.89.4
php7-bz2-7.2.5-4.89.4
php7-calendar-7.2.5-4.89.4
php7-ctype-7.2.5-4.89.4
php7-curl-7.2.5-4.89.4
php7-dba-7.2.5-4.89.4
php7-devel-7.2.5-4.89.4
php7-dom-7.2.5-4.89.4
php7-enchant-7.2.5-4.89.4
php7-exif-7.2.5-4.89.4
php7-fastcgi-7.2.5-4.89.4
php7-fileinfo-7.2.5-4.89.4
php7-fpm-7.2.5-4.89.4
php7-ftp-7.2.5-4.89.4
php7-gd-7.2.5-4.89.4
php7-gettext-7.2.5-4.89.4
php7-gmp-7.2.5-4.89.4
php7-iconv-7.2.5-4.89.4
php7-intl-7.2.5-4.89.4
php7-json-7.2.5-4.89.4
php7-ldap-7.2.5-4.89.4
php7-mbstring-7.2.5-4.89.4
php7-mysql-7.2.5-4.89.4
php7-odbc-7.2.5-4.89.4
php7-opcache-7.2.5-4.89.4
php7-openssl-7.2.5-4.89.4
php7-pcntl-7.2.5-4.89.4
php7-pdo-7.2.5-4.89.4
php7-pear-7.2.5-4.89.4
php7-pear-Archive_Tar-7.2.5-4.89.4
php7-pgsql-7.2.5-4.89.4
php7-phar-7.2.5-4.89.4
php7-posix-7.2.5-4.89.4
php7-readline-7.2.5-4.89.4
php7-shmop-7.2.5-4.89.4
php7-snmp-7.2.5-4.89.4
php7-soap-7.2.5-4.89.4
php7-sockets-7.2.5-4.89.4
php7-sodium-7.2.5-4.89.4
php7-sqlite-7.2.5-4.89.4
php7-sysvmsg-7.2.5-4.89.4
php7-sysvsem-7.2.5-4.89.4
php7-sysvshm-7.2.5-4.89.4
php7-tidy-7.2.5-4.89.4
php7-tokenizer-7.2.5-4.89.4
php7-wddx-7.2.5-4.89.4
php7-xmlreader-7.2.5-4.89.4
php7-xmlrpc-7.2.5-4.89.4
php7-xmlwriter-7.2.5-4.89.4
php7-xsl-7.2.5-4.89.4
php7-zip-7.2.5-4.89.4
php7-zlib-7.2.5-4.89.4
SUSE Linux Enterprise Server 15 SP1-LTSS
apache2-mod_php7-7.2.5-4.89.4
php7-7.2.5-4.89.4
php7-bcmath-7.2.5-4.89.4
php7-bz2-7.2.5-4.89.4
php7-calendar-7.2.5-4.89.4
php7-ctype-7.2.5-4.89.4
php7-curl-7.2.5-4.89.4
php7-dba-7.2.5-4.89.4
php7-devel-7.2.5-4.89.4
php7-dom-7.2.5-4.89.4
php7-enchant-7.2.5-4.89.4
php7-exif-7.2.5-4.89.4
php7-fastcgi-7.2.5-4.89.4
php7-fileinfo-7.2.5-4.89.4
php7-fpm-7.2.5-4.89.4
php7-ftp-7.2.5-4.89.4
php7-gd-7.2.5-4.89.4
php7-gettext-7.2.5-4.89.4
php7-gmp-7.2.5-4.89.4
php7-iconv-7.2.5-4.89.4
php7-intl-7.2.5-4.89.4
php7-json-7.2.5-4.89.4
php7-ldap-7.2.5-4.89.4
php7-mbstring-7.2.5-4.89.4
php7-mysql-7.2.5-4.89.4
php7-odbc-7.2.5-4.89.4
php7-opcache-7.2.5-4.89.4
php7-openssl-7.2.5-4.89.4
php7-pcntl-7.2.5-4.89.4
php7-pdo-7.2.5-4.89.4
php7-pear-7.2.5-4.89.4
php7-pear-Archive_Tar-7.2.5-4.89.4
php7-pgsql-7.2.5-4.89.4
php7-phar-7.2.5-4.89.4
php7-posix-7.2.5-4.89.4
php7-readline-7.2.5-4.89.4
php7-shmop-7.2.5-4.89.4
php7-snmp-7.2.5-4.89.4
php7-soap-7.2.5-4.89.4
php7-sockets-7.2.5-4.89.4
php7-sodium-7.2.5-4.89.4
php7-sqlite-7.2.5-4.89.4
php7-sysvmsg-7.2.5-4.89.4
php7-sysvsem-7.2.5-4.89.4
php7-sysvshm-7.2.5-4.89.4
php7-tidy-7.2.5-4.89.4
php7-tokenizer-7.2.5-4.89.4
php7-wddx-7.2.5-4.89.4
php7-xmlreader-7.2.5-4.89.4
php7-xmlrpc-7.2.5-4.89.4
php7-xmlwriter-7.2.5-4.89.4
php7-xsl-7.2.5-4.89.4
php7-zip-7.2.5-4.89.4
php7-zlib-7.2.5-4.89.4
SUSE Linux Enterprise Server 15-LTSS
apache2-mod_php7-7.2.5-4.89.4
php7-7.2.5-4.89.4
php7-bcmath-7.2.5-4.89.4
php7-bz2-7.2.5-4.89.4
php7-calendar-7.2.5-4.89.4
php7-ctype-7.2.5-4.89.4
php7-curl-7.2.5-4.89.4
php7-dba-7.2.5-4.89.4
php7-devel-7.2.5-4.89.4
php7-dom-7.2.5-4.89.4
php7-enchant-7.2.5-4.89.4
php7-exif-7.2.5-4.89.4
php7-fastcgi-7.2.5-4.89.4
php7-fileinfo-7.2.5-4.89.4
php7-fpm-7.2.5-4.89.4
php7-ftp-7.2.5-4.89.4
php7-gd-7.2.5-4.89.4
php7-gettext-7.2.5-4.89.4
php7-gmp-7.2.5-4.89.4
php7-iconv-7.2.5-4.89.4
php7-intl-7.2.5-4.89.4
php7-json-7.2.5-4.89.4
php7-ldap-7.2.5-4.89.4
php7-mbstring-7.2.5-4.89.4
php7-mysql-7.2.5-4.89.4
php7-odbc-7.2.5-4.89.4
php7-opcache-7.2.5-4.89.4
php7-openssl-7.2.5-4.89.4
php7-pcntl-7.2.5-4.89.4
php7-pdo-7.2.5-4.89.4
php7-pear-7.2.5-4.89.4
php7-pear-Archive_Tar-7.2.5-4.89.4
php7-pgsql-7.2.5-4.89.4
php7-phar-7.2.5-4.89.4
php7-posix-7.2.5-4.89.4
php7-readline-7.2.5-4.89.4
php7-shmop-7.2.5-4.89.4
php7-snmp-7.2.5-4.89.4
php7-soap-7.2.5-4.89.4
php7-sockets-7.2.5-4.89.4
php7-sodium-7.2.5-4.89.4
php7-sqlite-7.2.5-4.89.4
php7-sysvmsg-7.2.5-4.89.4
php7-sysvsem-7.2.5-4.89.4
php7-sysvshm-7.2.5-4.89.4
php7-tokenizer-7.2.5-4.89.4
php7-wddx-7.2.5-4.89.4
php7-xmlreader-7.2.5-4.89.4
php7-xmlrpc-7.2.5-4.89.4
php7-xmlwriter-7.2.5-4.89.4
php7-xsl-7.2.5-4.89.4
php7-zip-7.2.5-4.89.4
php7-zlib-7.2.5-4.89.4
SUSE Linux Enterprise Server for SAP Applications 15
apache2-mod_php7-7.2.5-4.89.4
php7-7.2.5-4.89.4
php7-bcmath-7.2.5-4.89.4
php7-bz2-7.2.5-4.89.4
php7-calendar-7.2.5-4.89.4
php7-ctype-7.2.5-4.89.4
php7-curl-7.2.5-4.89.4
php7-dba-7.2.5-4.89.4
php7-devel-7.2.5-4.89.4
php7-dom-7.2.5-4.89.4
php7-enchant-7.2.5-4.89.4
php7-exif-7.2.5-4.89.4
php7-fastcgi-7.2.5-4.89.4
php7-fileinfo-7.2.5-4.89.4
php7-fpm-7.2.5-4.89.4
php7-ftp-7.2.5-4.89.4
php7-gd-7.2.5-4.89.4
php7-gettext-7.2.5-4.89.4
php7-gmp-7.2.5-4.89.4
php7-iconv-7.2.5-4.89.4
php7-intl-7.2.5-4.89.4
php7-json-7.2.5-4.89.4
php7-ldap-7.2.5-4.89.4
php7-mbstring-7.2.5-4.89.4
php7-mysql-7.2.5-4.89.4
php7-odbc-7.2.5-4.89.4
php7-opcache-7.2.5-4.89.4
php7-openssl-7.2.5-4.89.4
php7-pcntl-7.2.5-4.89.4
php7-pdo-7.2.5-4.89.4
php7-pear-7.2.5-4.89.4
php7-pear-Archive_Tar-7.2.5-4.89.4
php7-pgsql-7.2.5-4.89.4
php7-phar-7.2.5-4.89.4
php7-posix-7.2.5-4.89.4
php7-readline-7.2.5-4.89.4
php7-shmop-7.2.5-4.89.4
php7-snmp-7.2.5-4.89.4
php7-soap-7.2.5-4.89.4
php7-sockets-7.2.5-4.89.4
php7-sodium-7.2.5-4.89.4
php7-sqlite-7.2.5-4.89.4
php7-sysvmsg-7.2.5-4.89.4
php7-sysvsem-7.2.5-4.89.4
php7-sysvshm-7.2.5-4.89.4
php7-tokenizer-7.2.5-4.89.4
php7-wddx-7.2.5-4.89.4
php7-xmlreader-7.2.5-4.89.4
php7-xmlrpc-7.2.5-4.89.4
php7-xmlwriter-7.2.5-4.89.4
php7-xsl-7.2.5-4.89.4
php7-zip-7.2.5-4.89.4
php7-zlib-7.2.5-4.89.4
SUSE Linux Enterprise Server for SAP Applications 15 SP1
apache2-mod_php7-7.2.5-4.89.4
php7-7.2.5-4.89.4
php7-bcmath-7.2.5-4.89.4
php7-bz2-7.2.5-4.89.4
php7-calendar-7.2.5-4.89.4
php7-ctype-7.2.5-4.89.4
php7-curl-7.2.5-4.89.4
php7-dba-7.2.5-4.89.4
php7-devel-7.2.5-4.89.4
php7-dom-7.2.5-4.89.4
php7-enchant-7.2.5-4.89.4
php7-exif-7.2.5-4.89.4
php7-fastcgi-7.2.5-4.89.4
php7-fileinfo-7.2.5-4.89.4
php7-fpm-7.2.5-4.89.4
php7-ftp-7.2.5-4.89.4
php7-gd-7.2.5-4.89.4
php7-gettext-7.2.5-4.89.4
php7-gmp-7.2.5-4.89.4
php7-iconv-7.2.5-4.89.4
php7-intl-7.2.5-4.89.4
php7-json-7.2.5-4.89.4
php7-ldap-7.2.5-4.89.4
php7-mbstring-7.2.5-4.89.4
php7-mysql-7.2.5-4.89.4
php7-odbc-7.2.5-4.89.4
php7-opcache-7.2.5-4.89.4
php7-openssl-7.2.5-4.89.4
php7-pcntl-7.2.5-4.89.4
php7-pdo-7.2.5-4.89.4
php7-pear-7.2.5-4.89.4
php7-pear-Archive_Tar-7.2.5-4.89.4
php7-pgsql-7.2.5-4.89.4
php7-phar-7.2.5-4.89.4
php7-posix-7.2.5-4.89.4
php7-readline-7.2.5-4.89.4
php7-shmop-7.2.5-4.89.4
php7-snmp-7.2.5-4.89.4
php7-soap-7.2.5-4.89.4
php7-sockets-7.2.5-4.89.4
php7-sodium-7.2.5-4.89.4
php7-sqlite-7.2.5-4.89.4
php7-sysvmsg-7.2.5-4.89.4
php7-sysvsem-7.2.5-4.89.4
php7-sysvshm-7.2.5-4.89.4
php7-tidy-7.2.5-4.89.4
php7-tokenizer-7.2.5-4.89.4
php7-wddx-7.2.5-4.89.4
php7-xmlreader-7.2.5-4.89.4
php7-xmlrpc-7.2.5-4.89.4
php7-xmlwriter-7.2.5-4.89.4
php7-xsl-7.2.5-4.89.4
php7-zip-7.2.5-4.89.4
php7-zlib-7.2.5-4.89.4
Ссылки
- Link for SUSE-SU-2022:0679-1
- E-Mail link for SUSE-SU-2022:0679-1
- SUSE Security Ratings
- SUSE Bug 1038980
- SUSE Bug 1081790
- SUSE Bug 1192050
- SUSE Bug 1193041
- SUSE CVE CVE-2015-9253 page
- SUSE CVE CVE-2017-8923 page
- SUSE CVE CVE-2021-21703 page
- SUSE CVE CVE-2021-21707 page
Описание
An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master process restarts a child process in an endless loop when using program execution functions (e.g., passthru, exec, shell_exec, or system) with a non-blocking STDIN stream, causing this master process to consume 100% of the CPU, and consume disk space with a large volume of error logs, as demonstrated by an attack by a customer of a shared-hosting facility.
Затронутые продукты
SUSE Enterprise Storage 6:apache2-mod_php7-7.2.5-4.89.4
SUSE Enterprise Storage 6:php7-7.2.5-4.89.4
SUSE Enterprise Storage 6:php7-bcmath-7.2.5-4.89.4
SUSE Enterprise Storage 6:php7-bz2-7.2.5-4.89.4
Ссылки
- CVE-2015-9253
- SUSE Bug 1081790
Описание
The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.
Затронутые продукты
SUSE Enterprise Storage 6:apache2-mod_php7-7.2.5-4.89.4
SUSE Enterprise Storage 6:php7-7.2.5-4.89.4
SUSE Enterprise Storage 6:php7-bcmath-7.2.5-4.89.4
SUSE Enterprise Storage 6:php7-bz2-7.2.5-4.89.4
Ссылки
- CVE-2017-8923
- SUSE Bug 1038980
Описание
In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the main process and write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and writes, which can be used to escalate privileges from local unprivileged user to the root user.
Затронутые продукты
SUSE Enterprise Storage 6:apache2-mod_php7-7.2.5-4.89.4
SUSE Enterprise Storage 6:php7-7.2.5-4.89.4
SUSE Enterprise Storage 6:php7-bcmath-7.2.5-4.89.4
SUSE Enterprise Storage 6:php7-bz2-7.2.5-4.89.4
Ссылки
- CVE-2021-21703
- SUSE Bug 1192050
Описание
In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus interpreting the filename differently from what the user intended, which may lead it to reading a different file than intended.
Затронутые продукты
SUSE Enterprise Storage 6:apache2-mod_php7-7.2.5-4.89.4
SUSE Enterprise Storage 6:php7-7.2.5-4.89.4
SUSE Enterprise Storage 6:php7-bcmath-7.2.5-4.89.4
SUSE Enterprise Storage 6:php7-bz2-7.2.5-4.89.4
Ссылки
- CVE-2021-21707
- SUSE Bug 1193041