Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

SUSE: 2018:2640-1 Moderate: php7 Out of Bounds Access Correction

suse
Calendar Grey September 6, 2018
Dist Suse Esm H88
SUSE Security Bulletin: resolve CVE-2017-9118 within php7 by way of Announcement ID SUSE-SU-2018:2640-1 for impacted software.
An update that fixes one vulnerability is now available

Summary

This update for php7 fixes the following issues: - CVE-2017-9118: Fixed an out of bounds access in php_pcre_replace_impl via a crafted preg_replace call (bsc#1105466) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2018-1852=1 - SUSE Linux Enterprise Module for Web Scripting 12: zypper in -t patch SUSE-SLE-Module-Web-Scripting-12-2018-1852=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP3 (aarch64 ppc64le s390x x86_64): php7-debuginfo-7.0.7-50.49.1 php7-debugsource-7.0.7-50.49.1 php7-devel-7.0.7-50.49.1

References

#1105466

Cross- CVE-2017-9118

Affected Products:

SUSE Linux Enterprise Software Development Kit 12-SP3

SUSE Linux Enterprise Module for Web Scripting 12

https://www.suse.com/security/cve/CVE-2017-9118.html

https://bugzilla.suse.com/1105466

Announcement ID: SUSE-SU-2018:2640-1
Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here