Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

SUSE Linux Enterprise 12-SP3 Security Update: Important php5 Issues

suse
Calendar Grey May 15, 2018
Scroller Suse
Essential SUSE security patch tackles various php5 weaknesses and outlines guidance for users on how to apply updates.
An update that fixes four vulnerabilities is now available

Summary

This update for php5 fixes the following issues: Security issues fixed: - CVE-2018-10545: Fix access controls in FPM child processes (bsc#1091367). - CVE-2018-10547: Fix Reflected XSS on the PHAR 403 and 404 error pages (bsc#1091362). - CVE-2018-10546: Fix an infinite loop exists in ext/iconv/iconv.c (bsc#1091363). - CVE-2018-10548: Fix remote denial of service in ext/ldap/ldap.c (bsc#1091355). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2018-914=1 - SUSE Linux Enterprise Module for Web Scripting 12:

Topics%20covered

Topics Covered

security advisory XSS access control important remote denial of service SUSE Linux php5

References

#1091355 #1091362 #1091363 #1091367

Cross- CVE-2018-10545 CVE-2018-10546 CVE-2018-10547

CVE-2018-10548

Affected Products:

SUSE Linux Enterprise Software Development Kit 12-SP3

SUSE Linux Enterprise Module for Web Scripting 12

https://www.suse.com/security/cve/CVE-2018-10545.html

https://www.suse.com/security/cve/CVE-2018-10546.html

https://www.suse.com/security/cve/CVE-2018-10547.html

https://www.suse.com/security/cve/CVE-2018-10548.html

https://bugzilla.suse.com/1091355

https://bugzilla.suse.com/1091362

https://bugzilla.suse.com/1091363

https://bugzilla.suse.com/1091367

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2018:1291-1
Rating: important

Topics%20covered

Topics Covered

security advisory XSS access control important remote denial of service SUSE Linux php5

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.