gpp_maybe Security update for php7

SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-4069

This update for php7 fixes the following issues: - Version update to 7.4.33: - CVE-2022-31630: Fixed out-of-bounds read due to insufficient input validation in imageloadfont() (bsc#1204979). - CVE-2022-37454: Fixed buffer overflow in hash_update() on long parameter (bsc#1204577). - Version update to 7.4.32 (jsc#SLE-23639) - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing "quines" gzip files. (bsc#1203867) - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as secure in the victim's browser. (bsc#1203870)

• Release Date
  Nov 18 2022
• References
  Bugzilla: 1204979, 1204577, 1203867, 1203870
  CVEs: CVE-2021-21707, CVE-2021-21704, CVE-2022-37454, CVE-2017-8923, CVE-2021-21702, CVE-2021-21708, CVE-2021-21705, CVE-2020-7071, CVE-2020-7070, CVE-2020-7069, CVE-2020-7068, CVE-2022-31629, CVE-2022-31625, CVE-2021-21706, CVE-2022-31626, CVE-2022-31630, CVE-2021-21703, CVE-2022-31628
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Package Hub 15.3 s390x

• Packages
  php7
  Interpreter for the PHP scripting language version 7

  7.4.33-150200.3.46.2 lock src

  php7-embed
  Embedded SAPI Library

  7.4.33-150200.3.46.2 lock rpm

SUSE Package Hub 15.3 aarch64

• Packages
  php7
  Interpreter for the PHP scripting language version 7

  7.4.33-150200.3.46.2 lock src

  php7-embed
  Embedded SAPI Library

  7.4.33-150200.3.46.2 lock rpm

SUSE Package Hub 15.3 ppc64le

• Packages
  php7
  Interpreter for the PHP scripting language version 7

  7.4.33-150200.3.46.2 lock src

  php7-embed
  Embedded SAPI Library

  7.4.33-150200.3.46.2 lock rpm

SUSE Package Hub 15.3 x86_64

• Packages
  php7
  Interpreter for the PHP scripting language version 7

  7.4.33-150200.3.46.2 lock src

  php7-embed
  Embedded SAPI Library

  7.4.33-150200.3.46.2 lock rpm