< back to search

gpp_maybe Security update for php7

SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-513

This update for php7 fixes the following issues: - CVE-2023-0568: Fixed NULL byte off-by-one in php_check_specific_open_basedir (bnc#1208366). - CVE-2023-0662: Fixed DoS vulnerability when parsing multipart request body (bnc#1208367). - CVE-2023-0567: Fixed vulnerability where BCrypt hashes erroneously validate if the salt is cut short by `$` (bsc#1208388).

Release Date

Feb 24 2023
References

Bugzilla: 1208367, 1208366, 1208388
CVEs: CVE-2023-0567, CVE-2023-0568, CVE-2023-0662
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Package Hub 15.4 ppc64le

Packages

php7-embed
Embedded SAPI Library

7.4.33-150400.4.19.1 lock rpm lock src

SUSE Package Hub 15.4 aarch64

Packages

php7-embed
Embedded SAPI Library

7.4.33-150400.4.19.1 lock rpm lock src

SUSE Package Hub 15.4 s390x

Packages

php7-embed
Embedded SAPI Library

7.4.33-150400.4.19.1 lock rpm lock src

SUSE Package Hub 15.4 x86_64

Packages

php7-embed
Embedded SAPI Library

7.4.33-150400.4.19.1 lock rpm lock src