Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

SUSE: 2018:1936-2 Moderate: php7 Use-After-Free Vulnerability Alert

suse
Calendar Grey July 12, 2018
Scroller Suse
SUSE releases a security notice concerning php7 to tackle a moderately severe use-after-free vulnerability. Update recommended.
An update that fixes one vulnerability is now available

Summary

This update for php7 fixes the following issues: - CVE-2018-12882: exif_read_from_impl allowed attackers to trigger a use-after-free (in exif_read_from_file) because it closed a stream that it is not responsible for closing (bsc#1099098). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Web Scripting 15: zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-2018-1317=1 Package List: - SUSE Linux Enterprise Module for Web Scripting 15 (noarch): php7-pear-7.2.5-4.3.1 php7-pear-Archive_Tar-7.2.5-4.3.1 - SUSE Linux Enterprise Module for Web Scripting 15 (x86_64): apache2-mod_php7-7.2.5-4.3.1

Topics%20covered

Topics Covered

security advisory software update moderate severity suse use-after-free php7

References

#1099098

Cross- CVE-2018-12882

Affected Products:

SUSE Linux Enterprise Module for Web Scripting 15

https://www.suse.com/security/cve/CVE-2018-12882.html

https://bugzilla.suse.com/1099098

Announcement ID: SUSE-SU-2018:1936-2
Rating: moderate

Topics%20covered

Topics Covered

security advisory software update moderate severity suse use-after-free php7

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.