Synopsis:          Moderate: php security update
Advisory ID:       SLSA-2018:0406-1
Issue Date:        2018-03-06
CVE Numbers:       CVE-2017-7890
--

Security Fix(es):

* php: Buffer over-read from unitialized data in gdImageCreateFromGifCtx
function (CVE-2017-7890)
--

SL7
  x86_64
    php-5.4.16-43.el7_4.1.x86_64.rpm
    php-bcmath-5.4.16-43.el7_4.1.x86_64.rpm
    php-cli-5.4.16-43.el7_4.1.x86_64.rpm
    php-common-5.4.16-43.el7_4.1.x86_64.rpm
    php-dba-5.4.16-43.el7_4.1.x86_64.rpm
    php-debuginfo-5.4.16-43.el7_4.1.x86_64.rpm
    php-devel-5.4.16-43.el7_4.1.x86_64.rpm
    php-embedded-5.4.16-43.el7_4.1.x86_64.rpm
    php-enchant-5.4.16-43.el7_4.1.x86_64.rpm
    php-fpm-5.4.16-43.el7_4.1.x86_64.rpm
    php-gd-5.4.16-43.el7_4.1.x86_64.rpm
    php-intl-5.4.16-43.el7_4.1.x86_64.rpm
    php-ldap-5.4.16-43.el7_4.1.x86_64.rpm
    php-mbstring-5.4.16-43.el7_4.1.x86_64.rpm
    php-mysql-5.4.16-43.el7_4.1.x86_64.rpm
    php-mysqlnd-5.4.16-43.el7_4.1.x86_64.rpm
    php-odbc-5.4.16-43.el7_4.1.x86_64.rpm
    php-pdo-5.4.16-43.el7_4.1.x86_64.rpm
    php-pgsql-5.4.16-43.el7_4.1.x86_64.rpm
    php-process-5.4.16-43.el7_4.1.x86_64.rpm
    php-pspell-5.4.16-43.el7_4.1.x86_64.rpm
    php-recode-5.4.16-43.el7_4.1.x86_64.rpm
    php-snmp-5.4.16-43.el7_4.1.x86_64.rpm
    php-soap-5.4.16-43.el7_4.1.x86_64.rpm
    php-xml-5.4.16-43.el7_4.1.x86_64.rpm
    php-xmlrpc-5.4.16-43.el7_4.1.x86_64.rpm

- Scientific Linux Development Team

SciLinux: SLSA-2018-0406-1 Moderate: php on SL7.x x86_64

php: Buffer over-read from unitialized data in gdImageCreateFromGifCtx function (CVE-2017-7890) SL7 x86_64 php-5.4.16-43.el7_4.1.x86_64.rpm php-bcmath-5.4.16-43.el7_4.1.x86_64.rpm ...

Summary

Moderate: php security update



Security Fixes

* php: Buffer over-read from unitialized data in gdImageCreateFromGifCtx function (CVE-2017-7890)
SL7 x86_64 php-5.4.16-43.el7_4.1.x86_64.rpm php-bcmath-5.4.16-43.el7_4.1.x86_64.rpm php-cli-5.4.16-43.el7_4.1.x86_64.rpm php-common-5.4.16-43.el7_4.1.x86_64.rpm php-dba-5.4.16-43.el7_4.1.x86_64.rpm php-debuginfo-5.4.16-43.el7_4.1.x86_64.rpm php-devel-5.4.16-43.el7_4.1.x86_64.rpm php-embedded-5.4.16-43.el7_4.1.x86_64.rpm php-enchant-5.4.16-43.el7_4.1.x86_64.rpm php-fpm-5.4.16-43.el7_4.1.x86_64.rpm php-gd-5.4.16-43.el7_4.1.x86_64.rpm php-intl-5.4.16-43.el7_4.1.x86_64.rpm php-ldap-5.4.16-43.el7_4.1.x86_64.rpm php-mbstring-5.4.16-43.el7_4.1.x86_64.rpm php-mysql-5.4.16-43.el7_4.1.x86_64.rpm php-mysqlnd-5.4.16-43.el7_4.1.x86_64.rpm php-odbc-5.4.16-43.el7_4.1.x86_64.rpm php-pdo-5.4.16-43.el7_4.1.x86_64.rpm php-pgsql-5.4.16-43.el7_4.1.x86_64.rpm php-process-5.4.16-43.el7_4.1.x86_64.rpm php-pspell-5.4.16-43.el7_4.1.x86_64.rpm php-recode-5.4.16-43.el7_4.1.x86_64.rpm php-snmp-5.4.16-43.el7_4.1.x86_64.rpm php-soap-5.4.16-43.el7_4.1.x86_64.rpm php-xml-5.4.16-43.el7_4.1.x86_64.rpm php-xmlrpc-5.4.16-43.el7_4.1.x86_64.rpm
- Scientific Linux Development Team

Severity
Advisory ID: SLSA-2018:0406-1
Issued Date: : 2018-03-06
CVE Numbers: CVE-2017-7890