< back to search

gpp_maybe Security update for php5

SUSE-SLE-SDK-12-SP3-2018-914

This update for php5 fixes the following issues: Security issues fixed: - CVE-2018-10545: Fix access controls in FPM child processes (bsc#1091367). - CVE-2018-10547: Fix Reflected XSS on the PHAR 403 and 404 error pages (bsc#1091362). - CVE-2018-10546: Fix an infinite loop exists in ext/iconv/iconv.c (bsc#1091363). - CVE-2018-10548: Fix remote denial of service in ext/ldap/ldap.c (bsc#1091355).

Release Date

May 15 2018
References

Bugzilla: 1091367, 1091355, 1091363, 1091362
CVEs: CVE-2018-10548, CVE-2018-10545, CVE-2018-10546, CVE-2018-10547
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Software Development Kit 12.3 aarch64

Packages

php5
PHP5 Core Files

5.5.14-109.27.2 lock src

php5-devel
Include files of PHP5

5.5.14-109.27.2 lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 ppc64le

Packages

php5
PHP5 Core Files

5.5.14-109.27.2 lock src

php5-devel
Include files of PHP5

5.5.14-109.27.2 lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 x86_64

Packages

php5
PHP5 Core Files

5.5.14-109.27.2 lock src

php5-devel
Include files of PHP5

5.5.14-109.27.2 lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 s390x

Packages

php5
PHP5 Core Files

5.5.14-109.27.2 lock src

php5-devel
Include files of PHP5

5.5.14-109.27.2 lock rpm