Security update for php5
This update for php5 fixes the following issues: Security issues fixed: - CVE-2019-11039: Fixed a heap-buffer-overflow on php_jpg_get16 (bsc#1138173). - CVE-2019-11040: Fixed an out-of-bounds read due to an integer overflow in iconv.c:_php_iconv_mime_decode() (bsc#1138172). - CVE-2015-1351: Fixed a use after free in opcache extension (bsc#1137633).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for php5 fixes the following issues: Security issues fixed: - CVE-2019-11039: Fixed a heap-buffer-overflow on php_jpg_get16 (bsc#1138173). - CVE-2019-11040: Fixed an out-of-bounds read due to an integer overflow in iconv.c:_php_iconv_mime_decode() (bsc#1138172). - CVE-2015-1351: Fixed a use after free in opcache extension (bsc#1137633).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1137633
- https://bugzilla.suse.com/1138172
- https://bugzilla.suse.com/1138173
- https://www.suse.com/security/cve/CVE-2015-1351
- https://www.suse.com/security/cve/CVE-2019-11039
- https://www.suse.com/security/cve/CVE-2019-11040
- https://www.suse.com/support/update/announcement/2019/suse-su-20191746-1/