< back to search

shield Security update for php5
SUSE-SLE-SDK-12-SP4-2019-985

This update for php5 fixes the following issues: Security issues fixed: - CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821). - CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711). - CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122). - CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713). - CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823). - CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722).

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.4 aarch64
  • Packages
    php5
    PHP5 Core Files
    5.5.14-109.51.6 lock src
    php5-devel
    Include files of PHP5
    5.5.14-109.51.6 lock rpm
SUSE Linux Enterprise Software Development Kit 12.4 s390x
  • Packages
    php5
    PHP5 Core Files
    5.5.14-109.51.6 lock src
    php5-devel
    Include files of PHP5
    5.5.14-109.51.6 lock rpm
SUSE Linux Enterprise Software Development Kit 12.4 x86_64
  • Packages
    php5
    PHP5 Core Files
    5.5.14-109.51.6 lock src
    php5-devel
    Include files of PHP5
    5.5.14-109.51.6 lock rpm
SUSE Linux Enterprise Software Development Kit 12.4 ppc64le
  • Packages
    php5
    PHP5 Core Files
    5.5.14-109.51.6 lock src
    php5-devel
    Include files of PHP5
    5.5.14-109.51.6 lock rpm