< back to search

gpp_maybe Security update for php7

SUSE-SLE-Module-Packagehub-Subpackages-15-SP2-2020-2941

This update for php7 fixes the following issues: - CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351). - CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352).

Release Date

Oct 16 2020
References

Bugzilla: 1177351, 1177352
CVEs: CVE-2020-7069, CVE-2020-7070
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Package Hub 15.2 aarch64

Packages

php7
Interpreter for the PHP scripting language version 7

7.4.6-3.11.1 lock src

php7-embed
Embedded SAPI Library

7.4.6-3.11.1 lock rpm

SUSE Package Hub 15.2 ppc64le

Packages

php7
Interpreter for the PHP scripting language version 7

7.4.6-3.11.1 lock src

php7-embed
Embedded SAPI Library

7.4.6-3.11.1 lock rpm

SUSE Package Hub 15.2 s390x

Packages

php7
Interpreter for the PHP scripting language version 7

7.4.6-3.11.1 lock src

php7-embed
Embedded SAPI Library

7.4.6-3.11.1 lock rpm

SUSE Package Hub 15.2 x86_64

Packages

php7
Interpreter for the PHP scripting language version 7

7.4.6-3.11.1 lock src

php7-embed
Embedded SAPI Library

7.4.6-3.11.1 lock rpm