shield Security update for php72

SUSE-SLE-Module-Web-Scripting-12-2019-988

This update for php72 fixes the following issues: - CVE-2019-9637: Due to the way rename() across filesystems is implemented, it was possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data. (bsc#1128892) - CVE-2019-9675: phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue allows theoretical compromise of security, but a practical attack is usually impossible." (bsc#1128886) - CVE-2019-9638: An issue was discovered in the EXIF component in PHP. There was an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len. (bsc#1128889) - CVE-2019-9639: An issue was discovered in the EXIF component in PHP. There was an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable. (bsc#1128887) - CVE-2019-9640: An issue was discovered in the EXIF component in PHP. There was an Invalid Read in exif_process_SOFn. (bsc#1128883)

• Release Date
  Apr 23 2019
• References
  Bugzilla: 1128883, 1128892, 1128887, 1128886, 1128889
  CVEs: CVE-2019-9640, CVE-2019-9637, CVE-2019-9638, CVE-2019-9675, CVE-2019-9639
• Type
  security
• Severity
  moderate

cloud_download Downloads

Web and Scripting Module 12 ppc64le

• Packages
  apache2-mod_php72
  PHP7 module for the Apache 2.x webserver

  7.2.5-1.10.1 lock rpm

  php72
  Interpreter for the PHP scripting language version 7

  7.2.5-1.10.1 lock rpm lock src

  php72-bcmath
  "Binary Calculator" extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-bz2
  bzip2 codec support for PHP

  7.2.5-1.10.1 lock rpm

  php72-calendar
  PHP7 Extension Module

  7.2.5-1.10.1 lock rpm

  php72-ctype
  Character class extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-curl
  libcurl integration for PHP

  7.2.5-1.10.1 lock rpm

  php72-dba
  Database abstraction layer for PHP

  7.2.5-1.10.1 lock rpm

  php72-dom
  Document Object Model extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-enchant
  Spell checking extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-exif
  EXIF metadata extensions for PHP

  7.2.5-1.10.1 lock rpm

  php72-fastcgi
  FastCGI PHP7 Module

  7.2.5-1.10.1 lock rpm

  php72-fileinfo
  File identification extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-fpm
  FastCGI Process Manager PHP7 Module

  7.2.5-1.10.1 lock rpm

  php72-ftp
  FTP protocol support for PHP

  7.2.5-1.10.1 lock rpm

  php72-gd
  GD Graphics Library extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-gettext
  Native language support for PHP

  7.2.5-1.10.1 lock rpm

  php72-gmp
  Bignum extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-iconv
  Character set conversion functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-imap
  PHP7 Extension Module

  7.2.5-1.10.1 lock rpm

  php72-intl
  ICU integration for PHP

  7.2.5-1.10.1 lock rpm

  php72-json
  JSON (de)serializer functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-ldap
  LDAP protocol support for PHP

  7.2.5-1.10.1 lock rpm

  php72-mbstring
  Multibyte string functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-mysql
  MySQL database client for PHP

  7.2.5-1.10.1 lock rpm

  php72-odbc
  ODBC extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-opcache
  Opcode cache extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-openssl
  OpenSSL integration for PHP

  7.2.5-1.10.1 lock rpm

  php72-pcntl
  Process Control extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-pdo
  PHP Data Objects extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-pear
  PHP Extension and Application Repository

  7.2.5-1.10.1 lock rpm

  php72-pear-Archive_Tar
  Tar file management class

  7.2.5-1.10.1 lock rpm

  php72-pgsql
  PostgreSQL database client for PHP

  7.2.5-1.10.1 lock rpm

  php72-phar
  PHP Archive extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-posix
  POSIX functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-pspell
  PHP7 pspell extension

  7.2.5-1.10.1 lock rpm

  php72-readline
  PHP7 readline extension

  7.2.5-1.10.1 lock rpm

  php72-shmop
  Alternate, low-level shared memory implementation for PHP

  7.2.5-1.10.1 lock rpm

  php72-snmp
  SNMP extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-soap
  SOAP/WSDL extension module for PHP

  7.2.5-1.10.1 lock rpm

  php72-sockets
  Berkeley sockets API for PHP

  7.2.5-1.10.1 lock rpm

  php72-sqlite
  SQLite database client for PHP

  7.2.5-1.10.1 lock rpm

  php72-sysvmsg
  SysV Message Queue support for PHP

  7.2.5-1.10.1 lock rpm

  php72-sysvsem
  SysV Semaphore support for PHP

  7.2.5-1.10.1 lock rpm

  php72-sysvshm
  SysV Shared Memory support for PHP

  7.2.5-1.10.1 lock rpm

  php72-tidy
  PHP7 binding for the Tidy HTML cleaner

  7.2.5-1.10.1 lock rpm

  php72-tokenizer
  Extension module to access Zend Engine's PHP tokenizer

  7.2.5-1.10.1 lock rpm

  php72-wddx
  WDDX support for PHP

  7.2.5-1.10.1 lock rpm

  php72-xmlreader
  Streaming XML reader extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-xmlrpc
  XML RPC support for PHP

  7.2.5-1.10.1 lock rpm

  php72-xmlwriter
  Streaming-based XML writer extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-xsl
  PHP7 Extension Module

  7.2.5-1.10.1 lock rpm

  php72-zip
  ZIP archive support for PHP

  7.2.5-1.10.1 lock rpm

  php72-zlib
  Zlib compression support for PHP

  7.2.5-1.10.1 lock rpm

Web and Scripting Module 12 x86_64

• Packages
  apache2-mod_php72
  PHP7 module for the Apache 2.x webserver

  7.2.5-1.10.1 lock rpm

  php72
  Interpreter for the PHP scripting language version 7

  7.2.5-1.10.1 lock rpm lock src

  php72-bcmath
  "Binary Calculator" extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-bz2
  bzip2 codec support for PHP

  7.2.5-1.10.1 lock rpm

  php72-calendar
  PHP7 Extension Module

  7.2.5-1.10.1 lock rpm

  php72-ctype
  Character class extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-curl
  libcurl integration for PHP

  7.2.5-1.10.1 lock rpm

  php72-dba
  Database abstraction layer for PHP

  7.2.5-1.10.1 lock rpm

  php72-dom
  Document Object Model extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-enchant
  Spell checking extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-exif
  EXIF metadata extensions for PHP

  7.2.5-1.10.1 lock rpm

  php72-fastcgi
  FastCGI PHP7 Module

  7.2.5-1.10.1 lock rpm

  php72-fileinfo
  File identification extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-fpm
  FastCGI Process Manager PHP7 Module

  7.2.5-1.10.1 lock rpm

  php72-ftp
  FTP protocol support for PHP

  7.2.5-1.10.1 lock rpm

  php72-gd
  GD Graphics Library extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-gettext
  Native language support for PHP

  7.2.5-1.10.1 lock rpm

  php72-gmp
  Bignum extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-iconv
  Character set conversion functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-imap
  PHP7 Extension Module

  7.2.5-1.10.1 lock rpm

  php72-intl
  ICU integration for PHP

  7.2.5-1.10.1 lock rpm

  php72-json
  JSON (de)serializer functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-ldap
  LDAP protocol support for PHP

  7.2.5-1.10.1 lock rpm

  php72-mbstring
  Multibyte string functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-mysql
  MySQL database client for PHP

  7.2.5-1.10.1 lock rpm

  php72-odbc
  ODBC extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-opcache
  Opcode cache extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-openssl
  OpenSSL integration for PHP

  7.2.5-1.10.1 lock rpm

  php72-pcntl
  Process Control extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-pdo
  PHP Data Objects extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-pear
  PHP Extension and Application Repository

  7.2.5-1.10.1 lock rpm

  php72-pear-Archive_Tar
  Tar file management class

  7.2.5-1.10.1 lock rpm

  php72-pgsql
  PostgreSQL database client for PHP

  7.2.5-1.10.1 lock rpm

  php72-phar
  PHP Archive extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-posix
  POSIX functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-pspell
  PHP7 pspell extension

  7.2.5-1.10.1 lock rpm

  php72-readline
  PHP7 readline extension

  7.2.5-1.10.1 lock rpm

  php72-shmop
  Alternate, low-level shared memory implementation for PHP

  7.2.5-1.10.1 lock rpm

  php72-snmp
  SNMP extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-soap
  SOAP/WSDL extension module for PHP

  7.2.5-1.10.1 lock rpm

  php72-sockets
  Berkeley sockets API for PHP

  7.2.5-1.10.1 lock rpm

  php72-sqlite
  SQLite database client for PHP

  7.2.5-1.10.1 lock rpm

  php72-sysvmsg
  SysV Message Queue support for PHP

  7.2.5-1.10.1 lock rpm

  php72-sysvsem
  SysV Semaphore support for PHP

  7.2.5-1.10.1 lock rpm

  php72-sysvshm
  SysV Shared Memory support for PHP

  7.2.5-1.10.1 lock rpm

  php72-tidy
  PHP7 binding for the Tidy HTML cleaner

  7.2.5-1.10.1 lock rpm

  php72-tokenizer
  Extension module to access Zend Engine's PHP tokenizer

  7.2.5-1.10.1 lock rpm

  php72-wddx
  WDDX support for PHP

  7.2.5-1.10.1 lock rpm

  php72-xmlreader
  Streaming XML reader extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-xmlrpc
  XML RPC support for PHP

  7.2.5-1.10.1 lock rpm

  php72-xmlwriter
  Streaming-based XML writer extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-xsl
  PHP7 Extension Module

  7.2.5-1.10.1 lock rpm

  php72-zip
  ZIP archive support for PHP

  7.2.5-1.10.1 lock rpm

  php72-zlib
  Zlib compression support for PHP

  7.2.5-1.10.1 lock rpm

Web and Scripting Module 12 aarch64

• Packages
  apache2-mod_php72
  PHP7 module for the Apache 2.x webserver

  7.2.5-1.10.1 lock rpm

  php72
  Interpreter for the PHP scripting language version 7

  7.2.5-1.10.1 lock rpm lock src

  php72-bcmath
  "Binary Calculator" extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-bz2
  bzip2 codec support for PHP

  7.2.5-1.10.1 lock rpm

  php72-calendar
  PHP7 Extension Module

  7.2.5-1.10.1 lock rpm

  php72-ctype
  Character class extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-curl
  libcurl integration for PHP

  7.2.5-1.10.1 lock rpm

  php72-dba
  Database abstraction layer for PHP

  7.2.5-1.10.1 lock rpm

  php72-dom
  Document Object Model extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-enchant
  Spell checking extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-exif
  EXIF metadata extensions for PHP

  7.2.5-1.10.1 lock rpm

  php72-fastcgi
  FastCGI PHP7 Module

  7.2.5-1.10.1 lock rpm

  php72-fileinfo
  File identification extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-fpm
  FastCGI Process Manager PHP7 Module

  7.2.5-1.10.1 lock rpm

  php72-ftp
  FTP protocol support for PHP

  7.2.5-1.10.1 lock rpm

  php72-gd
  GD Graphics Library extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-gettext
  Native language support for PHP

  7.2.5-1.10.1 lock rpm

  php72-gmp
  Bignum extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-iconv
  Character set conversion functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-imap
  PHP7 Extension Module

  7.2.5-1.10.1 lock rpm

  php72-intl
  ICU integration for PHP

  7.2.5-1.10.1 lock rpm

  php72-json
  JSON (de)serializer functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-ldap
  LDAP protocol support for PHP

  7.2.5-1.10.1 lock rpm

  php72-mbstring
  Multibyte string functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-mysql
  MySQL database client for PHP

  7.2.5-1.10.1 lock rpm

  php72-odbc
  ODBC extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-opcache
  Opcode cache extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-openssl
  OpenSSL integration for PHP

  7.2.5-1.10.1 lock rpm

  php72-pcntl
  Process Control extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-pdo
  PHP Data Objects extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-pear
  PHP Extension and Application Repository

  7.2.5-1.10.1 lock rpm

  php72-pear-Archive_Tar
  Tar file management class

  7.2.5-1.10.1 lock rpm

  php72-pgsql
  PostgreSQL database client for PHP

  7.2.5-1.10.1 lock rpm

  php72-phar
  PHP Archive extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-posix
  POSIX functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-pspell
  PHP7 pspell extension

  7.2.5-1.10.1 lock rpm

  php72-readline
  PHP7 readline extension

  7.2.5-1.10.1 lock rpm

  php72-shmop
  Alternate, low-level shared memory implementation for PHP

  7.2.5-1.10.1 lock rpm

  php72-snmp
  SNMP extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-soap
  SOAP/WSDL extension module for PHP

  7.2.5-1.10.1 lock rpm

  php72-sockets
  Berkeley sockets API for PHP

  7.2.5-1.10.1 lock rpm

  php72-sqlite
  SQLite database client for PHP

  7.2.5-1.10.1 lock rpm

  php72-sysvmsg
  SysV Message Queue support for PHP

  7.2.5-1.10.1 lock rpm

  php72-sysvsem
  SysV Semaphore support for PHP

  7.2.5-1.10.1 lock rpm

  php72-sysvshm
  SysV Shared Memory support for PHP

  7.2.5-1.10.1 lock rpm

  php72-tidy
  PHP7 binding for the Tidy HTML cleaner

  7.2.5-1.10.1 lock rpm

  php72-tokenizer
  Extension module to access Zend Engine's PHP tokenizer

  7.2.5-1.10.1 lock rpm

  php72-wddx
  WDDX support for PHP

  7.2.5-1.10.1 lock rpm

  php72-xmlreader
  Streaming XML reader extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-xmlrpc
  XML RPC support for PHP

  7.2.5-1.10.1 lock rpm

  php72-xmlwriter
  Streaming-based XML writer extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-xsl
  PHP7 Extension Module

  7.2.5-1.10.1 lock rpm

  php72-zip
  ZIP archive support for PHP

  7.2.5-1.10.1 lock rpm

  php72-zlib
  Zlib compression support for PHP

  7.2.5-1.10.1 lock rpm

Web and Scripting Module 12 s390x

• Packages
  apache2-mod_php72
  PHP7 module for the Apache 2.x webserver

  7.2.5-1.10.1 lock rpm

  php72
  Interpreter for the PHP scripting language version 7

  7.2.5-1.10.1 lock rpm lock src

  php72-bcmath
  "Binary Calculator" extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-bz2
  bzip2 codec support for PHP

  7.2.5-1.10.1 lock rpm

  php72-calendar
  PHP7 Extension Module

  7.2.5-1.10.1 lock rpm

  php72-ctype
  Character class extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-curl
  libcurl integration for PHP

  7.2.5-1.10.1 lock rpm

  php72-dba
  Database abstraction layer for PHP

  7.2.5-1.10.1 lock rpm

  php72-dom
  Document Object Model extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-enchant
  Spell checking extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-exif
  EXIF metadata extensions for PHP

  7.2.5-1.10.1 lock rpm

  php72-fastcgi
  FastCGI PHP7 Module

  7.2.5-1.10.1 lock rpm

  php72-fileinfo
  File identification extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-fpm
  FastCGI Process Manager PHP7 Module

  7.2.5-1.10.1 lock rpm

  php72-ftp
  FTP protocol support for PHP

  7.2.5-1.10.1 lock rpm

  php72-gd
  GD Graphics Library extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-gettext
  Native language support for PHP

  7.2.5-1.10.1 lock rpm

  php72-gmp
  Bignum extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-iconv
  Character set conversion functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-imap
  PHP7 Extension Module

  7.2.5-1.10.1 lock rpm

  php72-intl
  ICU integration for PHP

  7.2.5-1.10.1 lock rpm

  php72-json
  JSON (de)serializer functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-ldap
  LDAP protocol support for PHP

  7.2.5-1.10.1 lock rpm

  php72-mbstring
  Multibyte string functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-mysql
  MySQL database client for PHP

  7.2.5-1.10.1 lock rpm

  php72-odbc
  ODBC extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-opcache
  Opcode cache extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-openssl
  OpenSSL integration for PHP

  7.2.5-1.10.1 lock rpm

  php72-pcntl
  Process Control extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-pdo
  PHP Data Objects extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-pear
  PHP Extension and Application Repository

  7.2.5-1.10.1 lock rpm

  php72-pear-Archive_Tar
  Tar file management class

  7.2.5-1.10.1 lock rpm

  php72-pgsql
  PostgreSQL database client for PHP

  7.2.5-1.10.1 lock rpm

  php72-phar
  PHP Archive extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-posix
  POSIX functions for PHP

  7.2.5-1.10.1 lock rpm

  php72-pspell
  PHP7 pspell extension

  7.2.5-1.10.1 lock rpm

  php72-readline
  PHP7 readline extension

  7.2.5-1.10.1 lock rpm

  php72-shmop
  Alternate, low-level shared memory implementation for PHP

  7.2.5-1.10.1 lock rpm

  php72-snmp
  SNMP extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-soap
  SOAP/WSDL extension module for PHP

  7.2.5-1.10.1 lock rpm

  php72-sockets
  Berkeley sockets API for PHP

  7.2.5-1.10.1 lock rpm

  php72-sqlite
  SQLite database client for PHP

  7.2.5-1.10.1 lock rpm

  php72-sysvmsg
  SysV Message Queue support for PHP

  7.2.5-1.10.1 lock rpm

  php72-sysvsem
  SysV Semaphore support for PHP

  7.2.5-1.10.1 lock rpm

  php72-sysvshm
  SysV Shared Memory support for PHP

  7.2.5-1.10.1 lock rpm

  php72-tidy
  PHP7 binding for the Tidy HTML cleaner

  7.2.5-1.10.1 lock rpm

  php72-tokenizer
  Extension module to access Zend Engine's PHP tokenizer

  7.2.5-1.10.1 lock rpm

  php72-wddx
  WDDX support for PHP

  7.2.5-1.10.1 lock rpm

  php72-xmlreader
  Streaming XML reader extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-xmlrpc
  XML RPC support for PHP

  7.2.5-1.10.1 lock rpm

  php72-xmlwriter
  Streaming-based XML writer extension for PHP

  7.2.5-1.10.1 lock rpm

  php72-xsl
  PHP7 Extension Module

  7.2.5-1.10.1 lock rpm

  php72-zip
  ZIP archive support for PHP

  7.2.5-1.10.1 lock rpm

  php72-zlib
  Zlib compression support for PHP

  7.2.5-1.10.1 lock rpm