Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

openSUSE 42.3: 2018:1913-1 Moderate: php7 Use-After-Free Risk

opensuse
Calendar Grey July 7, 2018
Dist Opensuse Esm H88
New openSUSE patch released to resolve a significant vulnerability in php7, targeting a serious use-after-free bug.
An update that fixes one vulnerability is now available.

Description

This update for php7 fixes the following issues:

- CVE-2018-12882: exif_read_from_impl allowed attackers to trigger a

use-after-free (in exif_read_from_file) because it closed a stream that

it is not responsible for closing (bsc#1099098)

This update was imported from the SUSE:SLE-12:Update update project.

Topics%20covered

Topics Covered

security advisory moderate software update security fix openSUSE use-after-free php7

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 42.3:

zypper in -t patch openSUSE-2018-708=1

Package List

- openSUSE Leap 42.3 (i586 x86_64):

apache2-mod_php7-7.0.7-40.1

apache2-mod_php7-debuginfo-7.0.7-40.1

php7-7.0.7-40.1

php7-bcmath-7.0.7-40.1

php7-bcmath-debuginfo-7.0.7-40.1

php7-bz2-7.0.7-40.1

php7-bz2-debuginfo-7.0.7-40.1

php7-calendar-7.0.7-40.1

php7-calendar-debuginfo-7.0.7-40.1

php7-ctype-7.0.7-40.1

php7-ctype-debuginfo-7.0.7-40.1

php7-curl-7.0.7-40.1

php7-curl-debuginfo-7.0.7-40.1

php7-dba-7.0.7-40.1

php7-dba-debuginfo-7.0.7-40.1

php7-debuginfo-7.0.7-40.1

php7-debugsource-7.0.7-40.1

php7-devel-7.0.7-40.1

php7-dom-7.0.7-40.1

php7-dom-debuginfo-7.0.7-40.1

php7-enchant-7.0.7-40.1

php7-enchant-debuginfo-7.0.7-40.1

php7-exif-7.0.7-40.1

php7-exif-debuginfo-7.0.7-40.1

php7-fastcgi-7.0.7-40.1

php7-fastcgi-debuginfo-7.0.7-40.1

php7-fileinfo-7.0.7-40.1

php7-fileinfo-debuginfo-7.0.7-40.1

php7-firebird-7.0.7-40.1

php7-firebird-debuginfo-7.0.7-40.1

php7-fpm-7.0.7-40.1

php7-fpm-debuginfo-7.0.7-40.1

php7-ftp-7.0.7-40.1

php7-ftp-debuginfo-7.0.7-40.1

php7-gd-7.0.7-40.1

php7-gd-debuginfo-7.0.7-40.1

php7-gettext-7.0.7-40.1

php7-gettext...

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2018-12882.html

https://bugzilla.suse.com/1099098

--

Announcement ID: openSUSE-SU-2018:1913-1
Rating: moderate
Affected Products: openSUSE Leap 42.3

Topics%20covered

Topics Covered

security advisory moderate software update security fix openSUSE use-after-free php7

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here