shield Security update for php5

SUSE-SLE-SDK-12-SP3-2018-1871

This update for php5 fixes the following issues: The following security issues were fixed: - CVE-2018-10360: Fixed an out-of-bounds read in the do_core_note function in readelf.c in libmagic.a, which allowed remote attackers to cause a denial of service via a crafted ELF file (bsc#1096984) - CVE-2018-14851: Fixed an out-of-bound read in exif_process_IFD_in_MAKERNOTE, which could be exploited by an attacker via crafted JPG files, and could result in an application crash. (bsc#1103659) - CVE-2018-12882: Fixed an use-after-free in exif_read_from_impl in ext/exif/exif.c (bsc#1099098) - CVE-2017-9118: Fixed an out of bounds access in php_pcre_replace_impl via a crafted preg_replace call (bsc#1105466)

• Release Date
  Sep 10 2018
• References
  Bugzilla: 1096984, 1103659, 1105466, 1099098
  CVEs: CVE-2018-10360, CVE-2018-14851, CVE-2018-12882, CVE-2017-9118
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.3 ppc64le

• Packages
  php5
  PHP5 Core Files

  5.5.14-109.38.1

  lock src

  php5-devel
  Include files of PHP5

  5.5.14-109.38.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 aarch64

• Packages
  php5
  PHP5 Core Files

  5.5.14-109.38.1

  lock src

  php5-devel
  Include files of PHP5

  5.5.14-109.38.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 s390x

• Packages
  php5
  PHP5 Core Files

  5.5.14-109.38.1

  lock src

  php5-devel
  Include files of PHP5

  5.5.14-109.38.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 x86_64

• Packages
  php5
  PHP5 Core Files

  5.5.14-109.38.1

  lock src

  php5-devel
  Include files of PHP5

  5.5.14-109.38.1

  lock rpm