gpp_maybe Security update for php74

SUSE-SLE-SDK-12-SP5-2023-515

This update for php74 fixes the following issues: - CVE-2023-0568: Fixed NULL byte off-by-one in php_check_specific_open_basedir (bnc#1208366). - CVE-2023-0662: Fixed DoS vulnerability when parsing multipart request body (bnc#1208367). - CVE-2023-0567: Fixed vulnerability where BCrypt hashes erroneously validate if the salt is cut short by `$` (bsc#1208388).

• Release Date
  Feb 24 2023
• References
  Bugzilla: 1208366, 1208367, 1208388
  CVEs: CVE-2023-0567, CVE-2023-0662, CVE-2023-0568
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.5 x86_64

• Packages
  php74
  Interpreter for the PHP scripting language version 7

  7.4.33-1.53.1

  lock src

  php74-devel
  PHP7 development files for C/C++ extensions

  7.4.33-1.53.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.5 aarch64

• Packages
  php74
  Interpreter for the PHP scripting language version 7

  7.4.33-1.53.1

  lock src

  php74-devel
  PHP7 development files for C/C++ extensions

  7.4.33-1.53.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.5 ppc64le

• Packages
  php74
  Interpreter for the PHP scripting language version 7

  7.4.33-1.53.1

  lock src

  php74-devel
  PHP7 development files for C/C++ extensions

  7.4.33-1.53.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.5 s390x

• Packages
  php74
  Interpreter for the PHP scripting language version 7

  7.4.33-1.53.1

  lock src

  php74-devel
  PHP7 development files for C/C++ extensions

  7.4.33-1.53.1

  lock rpm