This update for php7 fixes the following issues: - fix CVE-2020-7068 [bsc#1175223]: Use of freed hash key in the phar_parse_zipfile function Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2020-2403=1 - SUSE Linux Enterprise Module for Web Scripting 12: zypper in -t patch SUSE-SLE-Module-Web-Scripting-12-2020-2403=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): php7-debuginfo-7.0.7-50.97.1 php7-debugsource-7.0.7-50.97.1 php7-devel-7.0.7-50.97.1
#1175223
Cross- CVE-2020-7068
Affected Products:
SUSE Linux Enterprise Software Development Kit 12-SP5
SUSE Linux Enterprise Module for Web Scripting 12
https://www.suse.com/security/cve/CVE-2020-7068.html
https://bugzilla.suse.com/1175223
Get the latest Linux and open source security news straight to your inbox.