This update for php7 fixes the following issues:
- CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV,
only first 7 bytes of the IV was used (bsc#1177351).
- CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352).
- Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786)
This update for php7 fixes the following issues:
- CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223).
- Do not install outdated README.SUSE (bsc#1174010).
- Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786).
This update for php7 fixes the following issues:
Security issue fixed:
- CVE-2019-11048: Improved the handling of overly long filenames or field names in HTTP file uploads (bsc#1171999).
This update for php7 fixes the following issues:
- CVE-2020-7064: Fixed a one byte read of uninitialized memory in exif_read_data() (bsc#1168326).
- CVE-2020-7066: Fixed URL truncation get_headers() if the URL contains zero (\0) character (bsc#1168352).
This update for php7 fixes the following issues:
- CVE-2020-7062: Fixed a null pointer dereference when using file upload functionality
under specific circumstances (bsc#1165280).
- CVE-2020-7063: Fixed an issue where adding files change the permissions to default (bsc#1165289).
- CVE-2020-7059: Fixed an out of bounds read in php_strip_tags_ex which may have led to
denial of service (bsc#1162629).
- CVE-2020-7060: Fixed a global buffer overflow in mbfl_filt_conv_big5_wchar which may have led to
memory corruption (bsc#1162632).
This update for php7 fixes the following issues:
- CVE-2019-11045: Fixed an issue with improper input validation in the filename handling of the DirectoryIterator class (bsc#1159923).
- CVE-2019-11046: Fixed an information leak in bc_shift_addsub() (bsc#1159924).
- CVE-2019-11047, CVE-2019-11050: Fixed multiple information leaks in exif_read_data() (bsc#1159922, bsc#1159927).
This update for php7 fixes the following issues:
Security issue fixed:
- CVE-2019-11043: Fixed possible remote code execution via env_path_info underflow in fpm_main.c (bsc#1154999).
This update for php7 fixes the following issues:
Security issues fixed:
- CVE-2019-11041: Fixed heap buffer over-read in exif_scan_thumbnail() (bsc#1146360).
- CVE-2019-11042: Fixed heap buffer over-read in exif_process_user_comment() (bsc#1145095).
Non-security issue fixed:
- Drop -n from php invocation from pecl (bsc#1151793).
This update for php7 fixes the following issues:
Security issues fixed:
- CVE-2019-11039: Fixed a heap-buffer-overflow on php_jpg_get16 (bsc#1138173).
- CVE-2019-11040: Fixed an out-of-bounds read due to an integer overflow in
iconv.c:_php_iconv_mime_decode() (bsc#1138172).