< back to search

shield Security update for php5
SUSE-SLE-SDK-12-SP4-2020-522

This update for php5 fixes the following issues: Security issues fixed: - CVE-2019-11041: Fixed heap buffer over-read in exif_scan_thumbnail() (bsc#1146360). - CVE-2019-11042: Fixed heap buffer over-read in exif_process_user_comment() (bsc#1145095). - CVE-2019-11043: Fixed possible remote code execution via env_path_info underflow in fpm_main.c (bsc#1154999). - CVE-2019-11045: Fixed an issue with the PHP DirectoryIterator class that accepts filenames with embedded \0 bytes (bsc#1159923). - CVE-2019-11046: Fixed an out-of-bounds read in bc_shift_addsub (bsc#1159924). - CVE-2019-11047: Fixed an information disclosure in exif_read_data (bsc#1159922). - CVE-2019-11050: Fixed a buffer over-read in the EXIF extension (bsc#1159927). - CVE-2020-7059: Fixed an out-of-bounds read in php_strip_tags_ex (bsc#1162629). - CVE-2020-7060: Fixed a global buffer-overflow in mbfl_filt_conv_big5_wchar (bsc#1162632).

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.4 ppc64le
  • Packages
    php5
    PHP5 Core Files
    5.5.14-109.68.1 lock src
    php5-devel
    Include files of PHP5
    5.5.14-109.68.1 lock rpm
SUSE Linux Enterprise Software Development Kit 12.4 s390x
  • Packages
    php5
    PHP5 Core Files
    5.5.14-109.68.1 lock src
    php5-devel
    Include files of PHP5
    5.5.14-109.68.1 lock rpm
SUSE Linux Enterprise Software Development Kit 12.4 x86_64
  • Packages
    php5
    PHP5 Core Files
    5.5.14-109.68.1 lock src
    php5-devel
    Include files of PHP5
    5.5.14-109.68.1 lock rpm
SUSE Linux Enterprise Software Development Kit 12.4 aarch64
  • Packages
    php5
    PHP5 Core Files
    5.5.14-109.68.1 lock src
    php5-devel
    Include files of PHP5
    5.5.14-109.68.1 lock rpm