gpp_maybe Security update for php7

SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-3997

This update for php7 fixes the following issues: - Version update to 7.4.33: - CVE-2022-31630: Fixed out-of-bounds read due to insufficient input validation in imageloadfont() (bsc#1204979). - CVE-2022-37454: Fixed buffer overflow in hash_update() on long parameter (bsc#1204577). - Version update to 7.4.32 (jsc#SLE-23639) - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing "quines" gzip files. (bsc#1203867) - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as secure in the victim's browser. (bsc#1203870)

Release Date

Nov 15 2022
References

Bugzilla: 1204979, 1204577, 1203870, 1203867
CVEs: CVE-2022-37454, CVE-2022-31625, CVE-2022-31626, CVE-2021-21708, CVE-2022-31630, CVE-2021-21707, CVE-2022-31628, CVE-2022-31629
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Package Hub 15.4 ppc64le

Packages

php7-embed
Embedded SAPI Library

7.4.33-150400.4.13.1 lock rpm lock src

SUSE Package Hub 15.4 s390x

Packages

php7-embed
Embedded SAPI Library

7.4.33-150400.4.13.1 lock rpm lock src

SUSE Package Hub 15.4 aarch64

Packages

php7-embed
Embedded SAPI Library

7.4.33-150400.4.13.1 lock rpm lock src

SUSE Package Hub 15.4 x86_64

Packages

php7-embed
Embedded SAPI Library

7.4.33-150400.4.13.1 lock rpm lock src