Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:2849-1

Опубликовано: 25 сент. 2018
Источник: suse-cvrf

Описание

Security update for php7

This update for php7 fixes the following issues:

Security issue fixed:

  • CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr() that could result in remote code execution. This could have been exploited via a specially crafted JPEG image files. (bsc#1105434)

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
apache2-mod_php7-7.2.5-lp150.2.12.1
php7-7.2.5-lp150.2.12.1
php7-bcmath-7.2.5-lp150.2.12.1
php7-bz2-7.2.5-lp150.2.12.1
php7-calendar-7.2.5-lp150.2.12.1
php7-ctype-7.2.5-lp150.2.12.1
php7-curl-7.2.5-lp150.2.12.1
php7-dba-7.2.5-lp150.2.12.1
php7-devel-7.2.5-lp150.2.12.1
php7-dom-7.2.5-lp150.2.12.1
php7-embed-7.2.5-lp150.2.12.1
php7-enchant-7.2.5-lp150.2.12.1
php7-exif-7.2.5-lp150.2.12.1
php7-fastcgi-7.2.5-lp150.2.12.1
php7-fileinfo-7.2.5-lp150.2.12.1
php7-firebird-7.2.5-lp150.2.12.1
php7-fpm-7.2.5-lp150.2.12.1
php7-ftp-7.2.5-lp150.2.12.1
php7-gd-7.2.5-lp150.2.12.1
php7-gettext-7.2.5-lp150.2.12.1
php7-gmp-7.2.5-lp150.2.12.1
php7-iconv-7.2.5-lp150.2.12.1
php7-intl-7.2.5-lp150.2.12.1
php7-json-7.2.5-lp150.2.12.1
php7-ldap-7.2.5-lp150.2.12.1
php7-mbstring-7.2.5-lp150.2.12.1
php7-mysql-7.2.5-lp150.2.12.1
php7-odbc-7.2.5-lp150.2.12.1
php7-opcache-7.2.5-lp150.2.12.1
php7-openssl-7.2.5-lp150.2.12.1
php7-pcntl-7.2.5-lp150.2.12.1
php7-pdo-7.2.5-lp150.2.12.1
php7-pear-7.2.5-lp150.2.12.1
php7-pear-Archive_Tar-7.2.5-lp150.2.12.1
php7-pgsql-7.2.5-lp150.2.12.1
php7-phar-7.2.5-lp150.2.12.1
php7-posix-7.2.5-lp150.2.12.1
php7-readline-7.2.5-lp150.2.12.1
php7-shmop-7.2.5-lp150.2.12.1
php7-snmp-7.2.5-lp150.2.12.1
php7-soap-7.2.5-lp150.2.12.1
php7-sockets-7.2.5-lp150.2.12.1
php7-sodium-7.2.5-lp150.2.12.1
php7-sqlite-7.2.5-lp150.2.12.1
php7-sysvmsg-7.2.5-lp150.2.12.1
php7-sysvsem-7.2.5-lp150.2.12.1
php7-sysvshm-7.2.5-lp150.2.12.1
php7-tidy-7.2.5-lp150.2.12.1
php7-tokenizer-7.2.5-lp150.2.12.1
php7-wddx-7.2.5-lp150.2.12.1
php7-xmlreader-7.2.5-lp150.2.12.1
php7-xmlrpc-7.2.5-lp150.2.12.1
php7-xmlwriter-7.2.5-lp150.2.12.1
php7-xsl-7.2.5-lp150.2.12.1
php7-zip-7.2.5-lp150.2.12.1
php7-zlib-7.2.5-lp150.2.12.1

Ссылки

Описание

Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.

Затронутые продукты
openSUSE Leap 15.0:apache2-mod_php7-7.2.5-lp150.2.12.1
openSUSE Leap 15.0:php7-7.2.5-lp150.2.12.1
openSUSE Leap 15.0:php7-bcmath-7.2.5-lp150.2.12.1
openSUSE Leap 15.0:php7-bz2-7.2.5-lp150.2.12.1
Ссылки