< back to search

shield Security update for php7

SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1444

This update for php7 fixes the following issues: - CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies as secure (bsc#1222857) - CVE-2024-3096: Fixed bypass on null byte leading passwords checked via password_verify (bsc#1222858)

Release Date

Apr 26 2024
References

Bugzilla: 1222857, 1222858
CVEs: CVE-2024-3096, CVE-2024-2756
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Package Hub 15.5 aarch64

Packages

php7-embed
Embedded SAPI Library

7.4.33-150400.4.34.1 lock rpm lock src

SUSE Package Hub 15.5 ppc64le

Packages

php7-embed
Embedded SAPI Library

7.4.33-150400.4.34.1 lock rpm lock src

SUSE Package Hub 15.5 s390x

Packages

php7-embed
Embedded SAPI Library

7.4.33-150400.4.34.1 lock rpm lock src

SUSE Package Hub 15.5 x86_64

Packages

php7-embed
Embedded SAPI Library

7.4.33-150400.4.34.1 lock rpm lock src