This update for php7 fixes the following issues:
- CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV,
only first 7 bytes of the IV was used (bsc#1177351).
- CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352).
- Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786)
This update for php7 fixes the following issues:
- CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223).
- Do not install outdated README.SUSE (bsc#1174010).
- Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786).
This update for php7 fixes the following issues:
Security issue fixed:
- CVE-2019-11048: Improved the handling of overly long filenames or field names in HTTP file uploads (bsc#1171999).