SUSE-SU-2022:4068-1
- Source
- https://www.suse.com/support/update/announcement/2022/suse-su-20224068-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:4068-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2022:4068-1
- Related
- Published
- 2022-11-18T10:55:22Z
- Modified
- 2022-11-18T10:55:22Z
- Summary
- Security update for php74
- Details
-
This update for php74 fixes the following issues:
- Version update to 7.4.33:
- CVE-2022-31630: Fixed out-of-bounds read due to insufficient input validation in imageloadfont() (bsc#1204979).
CVE-2022-37454: Fixed buffer overflow in hash_update() on long parameter (bsc#1204577).
Version update to 7.4.32 (jsc#SLE-23639)
- CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing 'quines' gzip files. (bsc#1203867)
- CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as secure in the victim's browser. (bsc#1203870)
- References
-
- https://www.suse.com/support/update/announcement/2022/suse-su-20224068-1/
- https://bugzilla.suse.com/1203867
- https://bugzilla.suse.com/1203870
- https://bugzilla.suse.com/1204577
- https://bugzilla.suse.com/1204979
- https://www.suse.com/security/cve/CVE-2017-8923
- https://www.suse.com/security/cve/CVE-2020-7068
- https://www.suse.com/security/cve/CVE-2020-7069
- https://www.suse.com/security/cve/CVE-2020-7070
- https://www.suse.com/security/cve/CVE-2020-7071
- https://www.suse.com/security/cve/CVE-2021-21702
- https://www.suse.com/security/cve/CVE-2021-21703
- https://www.suse.com/security/cve/CVE-2021-21704
- https://www.suse.com/security/cve/CVE-2021-21705
- https://www.suse.com/security/cve/CVE-2021-21706
- https://www.suse.com/security/cve/CVE-2021-21707
- https://www.suse.com/security/cve/CVE-2021-21708
- https://www.suse.com/security/cve/CVE-2022-31625
- https://www.suse.com/security/cve/CVE-2022-31626
- https://www.suse.com/security/cve/CVE-2022-31628
- https://www.suse.com/security/cve/CVE-2022-31629
- https://www.suse.com/security/cve/CVE-2022-31630
- https://www.suse.com/security/cve/CVE-2022-37454
Affected packages
SUSE:Linux Enterprise Module for Web and Scripting 12 / php74
Package
- Name
- php74
- Purl
- pkg:rpm/suse/php74&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed7.4.33-1.47.2
Ecosystem specific
{
"binaries": [
{
"php74-pdo": "7.4.33-1.47.2",
"php74-ldap": "7.4.33-1.47.2",
"php74-fileinfo": "7.4.33-1.47.2",
"php74-pgsql": "7.4.33-1.47.2",
"php74-curl": "7.4.33-1.47.2",
"php74-iconv": "7.4.33-1.47.2",
"php74-openssl": "7.4.33-1.47.2",
"php74-snmp": "7.4.33-1.47.2",
"php74-enchant": "7.4.33-1.47.2",
"php74-sodium": "7.4.33-1.47.2",
"php74": "7.4.33-1.47.2",
"php74-bz2": "7.4.33-1.47.2",
"php74-sockets": "7.4.33-1.47.2",
"php74-bcmath": "7.4.33-1.47.2",
"php74-phar": "7.4.33-1.47.2",
"php74-json": "7.4.33-1.47.2",
"php74-fpm": "7.4.33-1.47.2",
"php74-xsl": "7.4.33-1.47.2",
"php74-xmlreader": "7.4.33-1.47.2",
"php74-readline": "7.4.33-1.47.2",
"php74-sysvsem": "7.4.33-1.47.2",
"php74-intl": "7.4.33-1.47.2",
"php74-tokenizer": "7.4.33-1.47.2",
"php74-odbc": "7.4.33-1.47.2",
"php74-sysvmsg": "7.4.33-1.47.2",
"php74-mbstring": "7.4.33-1.47.2",
"php74-xmlwriter": "7.4.33-1.47.2",
"php74-ctype": "7.4.33-1.47.2",
"php74-opcache": "7.4.33-1.47.2",
"php74-gmp": "7.4.33-1.47.2",
"php74-dba": "7.4.33-1.47.2",
"php74-posix": "7.4.33-1.47.2",
"php74-mysql": "7.4.33-1.47.2",
"php74-calendar": "7.4.33-1.47.2",
"php74-shmop": "7.4.33-1.47.2",
"php74-zip": "7.4.33-1.47.2",
"php74-gettext": "7.4.33-1.47.2",
"php74-tidy": "7.4.33-1.47.2",
"php74-pcntl": "7.4.33-1.47.2",
"php74-fastcgi": "7.4.33-1.47.2",
"php74-sqlite": "7.4.33-1.47.2",
"php74-sysvshm": "7.4.33-1.47.2",
"php74-ftp": "7.4.33-1.47.2",
"php74-dom": "7.4.33-1.47.2",
"php74-gd": "7.4.33-1.47.2",
"apache2-mod_php74": "7.4.33-1.47.2",
"php74-xmlrpc": "7.4.33-1.47.2",
"php74-soap": "7.4.33-1.47.2",
"php74-zlib": "7.4.33-1.47.2",
"php74-exif": "7.4.33-1.47.2"
}
]
}