shield Security update for php7

SUSE-SLE-Module-Web-Scripting-15-2019-1461

This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892). - CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886). - CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889). - CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887). - CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883). - CVE-2019-9022: Fixed a vulnerability which could allow a hostile DNS server to make PHP misuse memcpy (bsc#1126827). - CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821). - CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711). - CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122). - CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713). - CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823). - CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722). - CVE-2018-19935: Fixed a Denial of Service in php_imap.c which could be triggered via an empty string in the message argument to imap_mail (bsc#1118832). - CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838). - CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837). - CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322). Other issue addressed: - Deleted README.default_socket_timeout which is not needed anymore (bsc#1129032). - Enabled php7 testsuite (bsc#1119396).

• Release Date
  Jun 11 2019
• References
  Bugzilla: 1132838, 1132837, 1128892, 1128886, 1128889, 1128887, 1128883, 1129032, 1126827, 1126711, 1126713, 1127122, 1126823, 1126821, 1128722, 1119396, 1118832, 1134322
  CVEs: CVE-2019-11035, CVE-2019-11034, CVE-2019-11036, CVE-2019-9637, CVE-2019-9675, CVE-2019-9638, CVE-2019-9639, CVE-2019-9640, CVE-2019-9022, CVE-2018-20783, CVE-2019-9024, CVE-2019-9021, CVE-2019-9020, CVE-2019-9023, CVE-2019-9641, CVE-2018-19935
• Type
  security
• Severity
  moderate

cloud_download Downloads

Web and Scripting Module 15 ppc64le

• Packages
  apache2-mod_php7
  PHP7 module for the Apache 2.x webserver

  7.2.5-4.32.1 lock rpm

  php7
  Interpreter for the PHP scripting language version 7

  7.2.5-4.32.1 lock rpm lock src

  php7-bcmath
  "Binary Calculator" extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-bz2
  bzip2 codec support for PHP

  7.2.5-4.32.1 lock rpm

  php7-calendar
  PHP7 Extension Module

  7.2.5-4.32.1 lock rpm

  php7-ctype
  Character class extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-curl
  libcurl integration for PHP

  7.2.5-4.32.1 lock rpm

  php7-dba
  Database abstraction layer for PHP

  7.2.5-4.32.1 lock rpm

  php7-devel
  PHP7 development files for C/C++ extensions

  7.2.5-4.32.1 lock rpm

  php7-dom
  Document Object Model extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-enchant
  Spell checking extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-exif
  EXIF metadata extensions for PHP

  7.2.5-4.32.1 lock rpm

  php7-fastcgi
  FastCGI PHP7 Module

  7.2.5-4.32.1 lock rpm

  php7-fileinfo
  File identification extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-fpm
  FastCGI Process Manager PHP7 Module

  7.2.5-4.32.1 lock rpm

  php7-ftp
  FTP protocol support for PHP

  7.2.5-4.32.1 lock rpm

  php7-gd
  GD Graphics Library extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-gettext
  Native language support for PHP

  7.2.5-4.32.1 lock rpm

  php7-gmp
  Bignum extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-iconv
  Character set conversion functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-intl
  ICU integration for PHP

  7.2.5-4.32.1 lock rpm

  php7-json
  JSON (de)serializer functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-ldap
  LDAP protocol support for PHP

  7.2.5-4.32.1 lock rpm

  php7-mbstring
  Multibyte string functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-mysql
  MySQL database client for PHP

  7.2.5-4.32.1 lock rpm

  php7-odbc
  ODBC extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-opcache
  Opcode cache extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-openssl
  OpenSSL integration for PHP

  7.2.5-4.32.1 lock rpm

  php7-pcntl
  Process Control extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-pdo
  PHP Data Objects extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-pear
  PHP Extension and Application Repository

  7.2.5-4.32.1 lock rpm

  php7-pear-Archive_Tar
  Tar file management class

  7.2.5-4.32.1 lock rpm

  php7-pgsql
  PostgreSQL database client for PHP

  7.2.5-4.32.1 lock rpm

  php7-phar
  PHP Archive extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-posix
  POSIX functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-shmop
  Alternate, low-level shared memory implementation for PHP

  7.2.5-4.32.1 lock rpm

  php7-snmp
  SNMP extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-soap
  SOAP/WSDL extension module for PHP

  7.2.5-4.32.1 lock rpm

  php7-sockets
  Berkeley sockets API for PHP

  7.2.5-4.32.1 lock rpm

  php7-sodium
  Cryptographic Extension Based on Libsodium

  7.2.5-4.32.1 lock rpm

  php7-sqlite
  SQLite database client for PHP

  7.2.5-4.32.1 lock rpm

  php7-sysvmsg
  SysV Message Queue support for PHP

  7.2.5-4.32.1 lock rpm

  php7-sysvsem
  SysV Semaphore support for PHP

  7.2.5-4.32.1 lock rpm

  php7-sysvshm
  SysV Shared Memory support for PHP

  7.2.5-4.32.1 lock rpm

  php7-tokenizer
  Extension module to access Zend Engine's PHP tokenizer

  7.2.5-4.32.1 lock rpm

  php7-wddx
  WDDX support for PHP

  7.2.5-4.32.1 lock rpm

  php7-xmlreader
  Streaming XML reader extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-xmlrpc
  XML RPC support for PHP

  7.2.5-4.32.1 lock rpm

  php7-xmlwriter
  Streaming-based XML writer extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-xsl
  PHP7 Extension Module

  7.2.5-4.32.1 lock rpm

  php7-zip
  ZIP archive support for PHP

  7.2.5-4.32.1 lock rpm

  php7-zlib
  Zlib compression support for PHP

  7.2.5-4.32.1 lock rpm

Web and Scripting Module 15 s390x

• Packages
  apache2-mod_php7
  PHP7 module for the Apache 2.x webserver

  7.2.5-4.32.1 lock rpm

  php7
  Interpreter for the PHP scripting language version 7

  7.2.5-4.32.1 lock rpm lock src

  php7-bcmath
  "Binary Calculator" extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-bz2
  bzip2 codec support for PHP

  7.2.5-4.32.1 lock rpm

  php7-calendar
  PHP7 Extension Module

  7.2.5-4.32.1 lock rpm

  php7-ctype
  Character class extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-curl
  libcurl integration for PHP

  7.2.5-4.32.1 lock rpm

  php7-dba
  Database abstraction layer for PHP

  7.2.5-4.32.1 lock rpm

  php7-devel
  PHP7 development files for C/C++ extensions

  7.2.5-4.32.1 lock rpm

  php7-dom
  Document Object Model extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-enchant
  Spell checking extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-exif
  EXIF metadata extensions for PHP

  7.2.5-4.32.1 lock rpm

  php7-fastcgi
  FastCGI PHP7 Module

  7.2.5-4.32.1 lock rpm

  php7-fileinfo
  File identification extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-fpm
  FastCGI Process Manager PHP7 Module

  7.2.5-4.32.1 lock rpm

  php7-ftp
  FTP protocol support for PHP

  7.2.5-4.32.1 lock rpm

  php7-gd
  GD Graphics Library extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-gettext
  Native language support for PHP

  7.2.5-4.32.1 lock rpm

  php7-gmp
  Bignum extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-iconv
  Character set conversion functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-intl
  ICU integration for PHP

  7.2.5-4.32.1 lock rpm

  php7-json
  JSON (de)serializer functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-ldap
  LDAP protocol support for PHP

  7.2.5-4.32.1 lock rpm

  php7-mbstring
  Multibyte string functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-mysql
  MySQL database client for PHP

  7.2.5-4.32.1 lock rpm

  php7-odbc
  ODBC extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-opcache
  Opcode cache extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-openssl
  OpenSSL integration for PHP

  7.2.5-4.32.1 lock rpm

  php7-pcntl
  Process Control extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-pdo
  PHP Data Objects extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-pear
  PHP Extension and Application Repository

  7.2.5-4.32.1 lock rpm

  php7-pear-Archive_Tar
  Tar file management class

  7.2.5-4.32.1 lock rpm

  php7-pgsql
  PostgreSQL database client for PHP

  7.2.5-4.32.1 lock rpm

  php7-phar
  PHP Archive extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-posix
  POSIX functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-shmop
  Alternate, low-level shared memory implementation for PHP

  7.2.5-4.32.1 lock rpm

  php7-snmp
  SNMP extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-soap
  SOAP/WSDL extension module for PHP

  7.2.5-4.32.1 lock rpm

  php7-sockets
  Berkeley sockets API for PHP

  7.2.5-4.32.1 lock rpm

  php7-sodium
  Cryptographic Extension Based on Libsodium

  7.2.5-4.32.1 lock rpm

  php7-sqlite
  SQLite database client for PHP

  7.2.5-4.32.1 lock rpm

  php7-sysvmsg
  SysV Message Queue support for PHP

  7.2.5-4.32.1 lock rpm

  php7-sysvsem
  SysV Semaphore support for PHP

  7.2.5-4.32.1 lock rpm

  php7-sysvshm
  SysV Shared Memory support for PHP

  7.2.5-4.32.1 lock rpm

  php7-tokenizer
  Extension module to access Zend Engine's PHP tokenizer

  7.2.5-4.32.1 lock rpm

  php7-wddx
  WDDX support for PHP

  7.2.5-4.32.1 lock rpm

  php7-xmlreader
  Streaming XML reader extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-xmlrpc
  XML RPC support for PHP

  7.2.5-4.32.1 lock rpm

  php7-xmlwriter
  Streaming-based XML writer extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-xsl
  PHP7 Extension Module

  7.2.5-4.32.1 lock rpm

  php7-zip
  ZIP archive support for PHP

  7.2.5-4.32.1 lock rpm

  php7-zlib
  Zlib compression support for PHP

  7.2.5-4.32.1 lock rpm

Web and Scripting Module 15 aarch64

• Packages
  apache2-mod_php7
  PHP7 module for the Apache 2.x webserver

  7.2.5-4.32.1 lock rpm

  php7
  Interpreter for the PHP scripting language version 7

  7.2.5-4.32.1 lock rpm lock src

  php7-bcmath
  "Binary Calculator" extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-bz2
  bzip2 codec support for PHP

  7.2.5-4.32.1 lock rpm

  php7-calendar
  PHP7 Extension Module

  7.2.5-4.32.1 lock rpm

  php7-ctype
  Character class extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-curl
  libcurl integration for PHP

  7.2.5-4.32.1 lock rpm

  php7-dba
  Database abstraction layer for PHP

  7.2.5-4.32.1 lock rpm

  php7-devel
  PHP7 development files for C/C++ extensions

  7.2.5-4.32.1 lock rpm

  php7-dom
  Document Object Model extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-enchant
  Spell checking extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-exif
  EXIF metadata extensions for PHP

  7.2.5-4.32.1 lock rpm

  php7-fastcgi
  FastCGI PHP7 Module

  7.2.5-4.32.1 lock rpm

  php7-fileinfo
  File identification extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-fpm
  FastCGI Process Manager PHP7 Module

  7.2.5-4.32.1 lock rpm

  php7-ftp
  FTP protocol support for PHP

  7.2.5-4.32.1 lock rpm

  php7-gd
  GD Graphics Library extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-gettext
  Native language support for PHP

  7.2.5-4.32.1 lock rpm

  php7-gmp
  Bignum extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-iconv
  Character set conversion functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-intl
  ICU integration for PHP

  7.2.5-4.32.1 lock rpm

  php7-json
  JSON (de)serializer functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-ldap
  LDAP protocol support for PHP

  7.2.5-4.32.1 lock rpm

  php7-mbstring
  Multibyte string functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-mysql
  MySQL database client for PHP

  7.2.5-4.32.1 lock rpm

  php7-odbc
  ODBC extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-opcache
  Opcode cache extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-openssl
  OpenSSL integration for PHP

  7.2.5-4.32.1 lock rpm

  php7-pcntl
  Process Control extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-pdo
  PHP Data Objects extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-pear
  PHP Extension and Application Repository

  7.2.5-4.32.1 lock rpm

  php7-pear-Archive_Tar
  Tar file management class

  7.2.5-4.32.1 lock rpm

  php7-pgsql
  PostgreSQL database client for PHP

  7.2.5-4.32.1 lock rpm

  php7-phar
  PHP Archive extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-posix
  POSIX functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-shmop
  Alternate, low-level shared memory implementation for PHP

  7.2.5-4.32.1 lock rpm

  php7-snmp
  SNMP extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-soap
  SOAP/WSDL extension module for PHP

  7.2.5-4.32.1 lock rpm

  php7-sockets
  Berkeley sockets API for PHP

  7.2.5-4.32.1 lock rpm

  php7-sodium
  Cryptographic Extension Based on Libsodium

  7.2.5-4.32.1 lock rpm

  php7-sqlite
  SQLite database client for PHP

  7.2.5-4.32.1 lock rpm

  php7-sysvmsg
  SysV Message Queue support for PHP

  7.2.5-4.32.1 lock rpm

  php7-sysvsem
  SysV Semaphore support for PHP

  7.2.5-4.32.1 lock rpm

  php7-sysvshm
  SysV Shared Memory support for PHP

  7.2.5-4.32.1 lock rpm

  php7-tokenizer
  Extension module to access Zend Engine's PHP tokenizer

  7.2.5-4.32.1 lock rpm

  php7-wddx
  WDDX support for PHP

  7.2.5-4.32.1 lock rpm

  php7-xmlreader
  Streaming XML reader extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-xmlrpc
  XML RPC support for PHP

  7.2.5-4.32.1 lock rpm

  php7-xmlwriter
  Streaming-based XML writer extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-xsl
  PHP7 Extension Module

  7.2.5-4.32.1 lock rpm

  php7-zip
  ZIP archive support for PHP

  7.2.5-4.32.1 lock rpm

  php7-zlib
  Zlib compression support for PHP

  7.2.5-4.32.1 lock rpm

Web and Scripting Module 15 x86_64

• Packages
  apache2-mod_php7
  PHP7 module for the Apache 2.x webserver

  7.2.5-4.32.1 lock rpm

  php7
  Interpreter for the PHP scripting language version 7

  7.2.5-4.32.1 lock rpm lock src

  php7-bcmath
  "Binary Calculator" extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-bz2
  bzip2 codec support for PHP

  7.2.5-4.32.1 lock rpm

  php7-calendar
  PHP7 Extension Module

  7.2.5-4.32.1 lock rpm

  php7-ctype
  Character class extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-curl
  libcurl integration for PHP

  7.2.5-4.32.1 lock rpm

  php7-dba
  Database abstraction layer for PHP

  7.2.5-4.32.1 lock rpm

  php7-devel
  PHP7 development files for C/C++ extensions

  7.2.5-4.32.1 lock rpm

  php7-dom
  Document Object Model extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-enchant
  Spell checking extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-exif
  EXIF metadata extensions for PHP

  7.2.5-4.32.1 lock rpm

  php7-fastcgi
  FastCGI PHP7 Module

  7.2.5-4.32.1 lock rpm

  php7-fileinfo
  File identification extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-fpm
  FastCGI Process Manager PHP7 Module

  7.2.5-4.32.1 lock rpm

  php7-ftp
  FTP protocol support for PHP

  7.2.5-4.32.1 lock rpm

  php7-gd
  GD Graphics Library extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-gettext
  Native language support for PHP

  7.2.5-4.32.1 lock rpm

  php7-gmp
  Bignum extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-iconv
  Character set conversion functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-intl
  ICU integration for PHP

  7.2.5-4.32.1 lock rpm

  php7-json
  JSON (de)serializer functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-ldap
  LDAP protocol support for PHP

  7.2.5-4.32.1 lock rpm

  php7-mbstring
  Multibyte string functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-mysql
  MySQL database client for PHP

  7.2.5-4.32.1 lock rpm

  php7-odbc
  ODBC extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-opcache
  Opcode cache extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-openssl
  OpenSSL integration for PHP

  7.2.5-4.32.1 lock rpm

  php7-pcntl
  Process Control extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-pdo
  PHP Data Objects extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-pear
  PHP Extension and Application Repository

  7.2.5-4.32.1 lock rpm

  php7-pear-Archive_Tar
  Tar file management class

  7.2.5-4.32.1 lock rpm

  php7-pgsql
  PostgreSQL database client for PHP

  7.2.5-4.32.1 lock rpm

  php7-phar
  PHP Archive extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-posix
  POSIX functions for PHP

  7.2.5-4.32.1 lock rpm

  php7-shmop
  Alternate, low-level shared memory implementation for PHP

  7.2.5-4.32.1 lock rpm

  php7-snmp
  SNMP extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-soap
  SOAP/WSDL extension module for PHP

  7.2.5-4.32.1 lock rpm

  php7-sockets
  Berkeley sockets API for PHP

  7.2.5-4.32.1 lock rpm

  php7-sodium
  Cryptographic Extension Based on Libsodium

  7.2.5-4.32.1 lock rpm

  php7-sqlite
  SQLite database client for PHP

  7.2.5-4.32.1 lock rpm

  php7-sysvmsg
  SysV Message Queue support for PHP

  7.2.5-4.32.1 lock rpm

  php7-sysvsem
  SysV Semaphore support for PHP

  7.2.5-4.32.1 lock rpm

  php7-sysvshm
  SysV Shared Memory support for PHP

  7.2.5-4.32.1 lock rpm

  php7-tokenizer
  Extension module to access Zend Engine's PHP tokenizer

  7.2.5-4.32.1 lock rpm

  php7-wddx
  WDDX support for PHP

  7.2.5-4.32.1 lock rpm

  php7-xmlreader
  Streaming XML reader extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-xmlrpc
  XML RPC support for PHP

  7.2.5-4.32.1 lock rpm

  php7-xmlwriter
  Streaming-based XML writer extension for PHP

  7.2.5-4.32.1 lock rpm

  php7-xsl
  PHP7 Extension Module

  7.2.5-4.32.1 lock rpm

  php7-zip
  ZIP archive support for PHP

  7.2.5-4.32.1 lock rpm

  php7-zlib
  Zlib compression support for PHP

  7.2.5-4.32.1 lock rpm