Security update for php7
This update for php7 fixes the following issues: - CVE-2020-7062: Fixed a null pointer dereference when using file upload functionality under specific circumstances (bsc#1165280). - CVE-2020-7063: Fixed an issue where adding files change the permissions to default (bsc#1165289). - CVE-2020-7059: Fixed an out of bounds read in php_strip_tags_ex which may have led to denial of service (bsc#1162629). - CVE-2020-7060: Fixed a global buffer overflow in mbfl_filt_conv_big5_wchar which may have led to memory corruption (bsc#1162632).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for php7 fixes the following issues: - CVE-2020-7062: Fixed a null pointer dereference when using file upload functionality under specific circumstances (bsc#1165280). - CVE-2020-7063: Fixed an issue where adding files change the permissions to default (bsc#1165289). - CVE-2020-7059: Fixed an out of bounds read in php_strip_tags_ex which may have led to denial of service (bsc#1162629). - CVE-2020-7060: Fixed a global buffer overflow in mbfl_filt_conv_big5_wchar which may have led to memory corruption (bsc#1162632).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1162629
- https://bugzilla.suse.com/1162632
- https://bugzilla.suse.com/1165280
- https://bugzilla.suse.com/1165289
- https://www.suse.com/security/cve/CVE-2020-7059
- https://www.suse.com/security/cve/CVE-2020-7060
- https://www.suse.com/security/cve/CVE-2020-7062
- https://www.suse.com/security/cve/CVE-2020-7063
- https://www.suse.com/support/update/announcement/2020/suse-su-20200622-1/