Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

SUSE: 2020:14289-1 Moderate: php53 Security Threat Fixes

suse
Calendar Grey February 24, 2020
Dist Suse Esm H88
SUSE releases a controlled patch for php53 to address significant security flaws and maintain system integrity.
An update that fixes 6 vulnerabilities is now available

Summary

This update for php53 fixes the following issues: Security issues fixed: - CVE-2020-7059: Fixed an out-of-bounds read in php_strip_tags_ex (bsc#1162629). - CVE-2019-11045: Fixed an issue with the PHP DirectoryIterator class that accepts filenames with embedded \0 bytes (bsc#1159923). - CVE-2019-11046: Fixed an out-of-bounds read in bc_shift_addsub (bsc#1159924). - CVE-2019-11047: Fixed an information disclosure in exif_read_data (bsc#1159922). - CVE-2019-11050: Fixed a buffer over-read in the EXIF extension (bsc#1159927). - CVE-2019-20433: Fixed a buffer over-read when processing strings ending with a single '\0' byte with ucs-2 and ucs-4 encoding (bsc#1161982). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods

Topics%20covered

Topics Covered

security advisory moderate update buffer overflow information disclosure php53 SUSE Linux Enterprise

References

#1159922 #1159923 #1159924 #1159927 #1161982

#1162629

Cross- CVE-2019-11045 CVE-2019-11046 CVE-2019-11047

CVE-2019-11050 CVE-2019-20433 CVE-2020-7059

Affected Products:

SUSE Linux Enterprise Server 11-SP4-LTSS

SUSE Linux Enterprise Point of Sale 11-SP3

SUSE Linux Enterprise Debuginfo 11-SP4

SUSE Linux Enterprise Debuginfo 11-SP3

https://www.suse.com/security/cve/CVE-2019-11045.html

https://www.suse.com/security/cve/CVE-2019-11046.html

https://www.suse.com/security/cve/CVE-2019-11047.html

https://www.suse.com/security/cve/CVE-2019-11050.html

https://www.suse.com/security/cve/CVE-2019-20433.html

https://www.suse.com/security/cve/CVE-2020-7059.html

https://bugzilla.suse.com/1159922

https://bugzilla.suse.com/1159923

Announcement ID: SUSE-SU-2020:14289-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate update buffer overflow information disclosure php53 SUSE Linux Enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here