Mageia Security Update: MGASA-2020-0066 Critical PHP Buffer Overflows
mageia
January 28, 2020
Updated php packages fix security vulnerabilities: Two buffer overflows in string and mbstring handling have been found (CVE-2020-7059, CVE-2020-7060)
Summary
Updated php packages fix security vulnerabilities:
Two buffer overflows in string and mbstring handling have been found
(CVE-2020-7059, CVE-2020-7060).
Other security fixes have been applied:
- Session: Fixed bug #79091 (heap use-after-free in session_create_id()).
- Date: Fixed bug #79015 (undefined-behavior in php_date.c).
For other fixes in this update, see the referenced chagelog.
References
- https://bugs.mageia.org/show_bug.cgi?id=26126
- https://www.php.net/ChangeLog-7.php#7.3.14
- https://www.cve.org/CVERecord?id=CVE-2020-7059
- https://www.cve.org/CVERecord?id=CVE-2020-7060
Resolution
SRPMS
- 7/core/php-7.3.14-1.mga7
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Publication date: 28 Jan 2020
URL: https://advisories.mageia.org/MGASA-2020-0066.html
Type: security
CVE: CVE-2020-7059,
CVE-2020-7060
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!