gpp_maybe Security update for php7

SUSE-SLE-Module-Packagehub-Subpackages-15-SP1-2020-2997

This update for php7 fixes the following issues: - CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351). - CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352). - Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786)

• Release Date
  Oct 22 2020
• References
  Bugzilla: 1177351, 1177352, 1173786
  CVEs: CVE-2020-7069, CVE-2020-7070
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Package Hub 15.1 s390x

• Packages
  php7
  Interpreter for the PHP scripting language version 7

  7.2.5-4.67.2 lock src

  php7-embed
  Embedded SAPI Library

  7.2.5-4.67.2 lock rpm

SUSE Package Hub 15.1 x86_64

• Packages
  php7
  Interpreter for the PHP scripting language version 7

  7.2.5-4.67.2 lock src

  php7-embed
  Embedded SAPI Library

  7.2.5-4.67.2 lock rpm

SUSE Package Hub 15.1 ppc64le

• Packages
  php7
  Interpreter for the PHP scripting language version 7

  7.2.5-4.67.2 lock src

  php7-embed
  Embedded SAPI Library

  7.2.5-4.67.2 lock rpm

SUSE Package Hub 15.1 aarch64

• Packages
  php7
  Interpreter for the PHP scripting language version 7

  7.2.5-4.67.2 lock src

  php7-embed
  Embedded SAPI Library

  7.2.5-4.67.2 lock rpm