Security update for php5 SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2019:1503-1 Final 1 1 2019-06-03T08:41:42Z current 2019-06-03T08:41:42Z 2019-06-03T08:41:42Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for php5 This update for php5 fixes the following issues: Security issues fixed: - CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838). - CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837). - CVE-2019-9637: Fixed a potential information disclosure in rename() (bsc#1128892). - CVE-2019-9675: Fixed a potential buffer overflow in phar_tar_writeheaders_int() (bsc#1128886). - CVE-2019-9638: Fixed an uninitialized read in exif_process_IFD_in_MAKERNOTE() related to value_len (bsc#1128889). - CVE-2019-9639: Fixed an uninitialized read in exif_process_IFD_in_MAKERNOTE() related to data_len (bsc#1128887). - CVE-2019-9640: Fixed an invalid Read in exif_process_SOFn() (bsc#1128883). - CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322). This update was imported from the SUSE:SLE-12:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html E-Mail link for openSUSE-SU-2019:1503-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.3 apache2-mod_php5-5.5.14-118.1 php5-5.5.14-118.1 php5-bcmath-5.5.14-118.1 php5-bz2-5.5.14-118.1 php5-calendar-5.5.14-118.1 php5-ctype-5.5.14-118.1 php5-curl-5.5.14-118.1 php5-dba-5.5.14-118.1 php5-devel-5.5.14-118.1 php5-dom-5.5.14-118.1 php5-enchant-5.5.14-118.1 php5-exif-5.5.14-118.1 php5-fastcgi-5.5.14-118.1 php5-fileinfo-5.5.14-118.1 php5-firebird-5.5.14-118.1 php5-fpm-5.5.14-118.1 php5-ftp-5.5.14-118.1 php5-gd-5.5.14-118.1 php5-gettext-5.5.14-118.1 php5-gmp-5.5.14-118.1 php5-iconv-5.5.14-118.1 php5-imap-5.5.14-118.1 php5-intl-5.5.14-118.1 php5-json-5.5.14-118.1 php5-ldap-5.5.14-118.1 php5-mbstring-5.5.14-118.1 php5-mcrypt-5.5.14-118.1 php5-mssql-5.5.14-118.1 php5-mysql-5.5.14-118.1 php5-odbc-5.5.14-118.1 php5-opcache-5.5.14-118.1 php5-openssl-5.5.14-118.1 php5-pcntl-5.5.14-118.1 php5-pdo-5.5.14-118.1 php5-pear-5.5.14-118.1 php5-pgsql-5.5.14-118.1 php5-phar-5.5.14-118.1 php5-posix-5.5.14-118.1 php5-pspell-5.5.14-118.1 php5-readline-5.5.14-118.1 php5-shmop-5.5.14-118.1 php5-snmp-5.5.14-118.1 php5-soap-5.5.14-118.1 php5-sockets-5.5.14-118.1 php5-sqlite-5.5.14-118.1 php5-suhosin-5.5.14-118.1 php5-sysvmsg-5.5.14-118.1 php5-sysvsem-5.5.14-118.1 php5-sysvshm-5.5.14-118.1 php5-tidy-5.5.14-118.1 php5-tokenizer-5.5.14-118.1 php5-wddx-5.5.14-118.1 php5-xmlreader-5.5.14-118.1 php5-xmlrpc-5.5.14-118.1 php5-xmlwriter-5.5.14-118.1 php5-xsl-5.5.14-118.1 php5-zip-5.5.14-118.1 php5-zlib-5.5.14-118.1 apache2-mod_php5-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-bcmath-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-bz2-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-calendar-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-ctype-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-curl-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-dba-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-devel-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-dom-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-enchant-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-exif-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-fastcgi-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-fileinfo-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-firebird-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-fpm-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-ftp-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-gd-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-gettext-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-gmp-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-iconv-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-imap-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-intl-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-json-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-ldap-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-mbstring-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-mcrypt-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-mssql-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-mysql-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-odbc-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-opcache-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-openssl-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-pcntl-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-pdo-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-pear-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-pgsql-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-phar-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-posix-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-pspell-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-readline-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-shmop-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-snmp-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-soap-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-sockets-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-sqlite-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-suhosin-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-sysvmsg-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-sysvsem-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-sysvshm-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-tidy-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-tokenizer-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-wddx-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-xmlreader-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-xmlrpc-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-xmlwriter-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-xsl-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-zip-5.5.14-118.1 as a component of openSUSE Leap 42.3 php5-zlib-5.5.14-118.1 as a component of openSUSE Leap 42.3 When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash. CVE-2019-11034 openSUSE Leap 42.3:apache2-mod_php5-5.5.14-118.1 openSUSE Leap 42.3:php5-5.5.14-118.1 openSUSE Leap 42.3:php5-bcmath-5.5.14-118.1 openSUSE Leap 42.3:php5-bz2-5.5.14-118.1 openSUSE Leap 42.3:php5-calendar-5.5.14-118.1 openSUSE Leap 42.3:php5-ctype-5.5.14-118.1 openSUSE Leap 42.3:php5-curl-5.5.14-118.1 openSUSE Leap 42.3:php5-dba-5.5.14-118.1 openSUSE Leap 42.3:php5-devel-5.5.14-118.1 openSUSE Leap 42.3:php5-dom-5.5.14-118.1 openSUSE Leap 42.3:php5-enchant-5.5.14-118.1 openSUSE Leap 42.3:php5-exif-5.5.14-118.1 openSUSE Leap 42.3:php5-fastcgi-5.5.14-118.1 openSUSE Leap 42.3:php5-fileinfo-5.5.14-118.1 openSUSE Leap 42.3:php5-firebird-5.5.14-118.1 openSUSE Leap 42.3:php5-fpm-5.5.14-118.1 openSUSE Leap 42.3:php5-ftp-5.5.14-118.1 openSUSE Leap 42.3:php5-gd-5.5.14-118.1 openSUSE Leap 42.3:php5-gettext-5.5.14-118.1 openSUSE Leap 42.3:php5-gmp-5.5.14-118.1 openSUSE Leap 42.3:php5-iconv-5.5.14-118.1 openSUSE Leap 42.3:php5-imap-5.5.14-118.1 openSUSE Leap 42.3:php5-intl-5.5.14-118.1 openSUSE Leap 42.3:php5-json-5.5.14-118.1 openSUSE Leap 42.3:php5-ldap-5.5.14-118.1 openSUSE Leap 42.3:php5-mbstring-5.5.14-118.1 openSUSE Leap 42.3:php5-mcrypt-5.5.14-118.1 openSUSE Leap 42.3:php5-mssql-5.5.14-118.1 openSUSE Leap 42.3:php5-mysql-5.5.14-118.1 openSUSE Leap 42.3:php5-odbc-5.5.14-118.1 openSUSE Leap 42.3:php5-opcache-5.5.14-118.1 openSUSE Leap 42.3:php5-openssl-5.5.14-118.1 openSUSE Leap 42.3:php5-pcntl-5.5.14-118.1 openSUSE Leap 42.3:php5-pdo-5.5.14-118.1 openSUSE Leap 42.3:php5-pear-5.5.14-118.1 openSUSE Leap 42.3:php5-pgsql-5.5.14-118.1 openSUSE Leap 42.3:php5-phar-5.5.14-118.1 openSUSE Leap 42.3:php5-posix-5.5.14-118.1 openSUSE Leap 42.3:php5-pspell-5.5.14-118.1 openSUSE Leap 42.3:php5-readline-5.5.14-118.1 openSUSE Leap 42.3:php5-shmop-5.5.14-118.1 openSUSE Leap 42.3:php5-snmp-5.5.14-118.1 openSUSE Leap 42.3:php5-soap-5.5.14-118.1 openSUSE Leap 42.3:php5-sockets-5.5.14-118.1 openSUSE Leap 42.3:php5-sqlite-5.5.14-118.1 openSUSE Leap 42.3:php5-suhosin-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvmsg-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvsem-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvshm-5.5.14-118.1 openSUSE Leap 42.3:php5-tidy-5.5.14-118.1 openSUSE Leap 42.3:php5-tokenizer-5.5.14-118.1 openSUSE Leap 42.3:php5-wddx-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlreader-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlrpc-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlwriter-5.5.14-118.1 openSUSE Leap 42.3:php5-xsl-5.5.14-118.1 openSUSE Leap 42.3:php5-zip-5.5.14-118.1 openSUSE Leap 42.3:php5-zlib-5.5.14-118.1 moderate Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html https://www.suse.com/security/cve/CVE-2019-11034.html CVE-2019-11034 https://bugzilla.suse.com/1132838 SUSE Bug 1132838 When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash. CVE-2019-11035 openSUSE Leap 42.3:apache2-mod_php5-5.5.14-118.1 openSUSE Leap 42.3:php5-5.5.14-118.1 openSUSE Leap 42.3:php5-bcmath-5.5.14-118.1 openSUSE Leap 42.3:php5-bz2-5.5.14-118.1 openSUSE Leap 42.3:php5-calendar-5.5.14-118.1 openSUSE Leap 42.3:php5-ctype-5.5.14-118.1 openSUSE Leap 42.3:php5-curl-5.5.14-118.1 openSUSE Leap 42.3:php5-dba-5.5.14-118.1 openSUSE Leap 42.3:php5-devel-5.5.14-118.1 openSUSE Leap 42.3:php5-dom-5.5.14-118.1 openSUSE Leap 42.3:php5-enchant-5.5.14-118.1 openSUSE Leap 42.3:php5-exif-5.5.14-118.1 openSUSE Leap 42.3:php5-fastcgi-5.5.14-118.1 openSUSE Leap 42.3:php5-fileinfo-5.5.14-118.1 openSUSE Leap 42.3:php5-firebird-5.5.14-118.1 openSUSE Leap 42.3:php5-fpm-5.5.14-118.1 openSUSE Leap 42.3:php5-ftp-5.5.14-118.1 openSUSE Leap 42.3:php5-gd-5.5.14-118.1 openSUSE Leap 42.3:php5-gettext-5.5.14-118.1 openSUSE Leap 42.3:php5-gmp-5.5.14-118.1 openSUSE Leap 42.3:php5-iconv-5.5.14-118.1 openSUSE Leap 42.3:php5-imap-5.5.14-118.1 openSUSE Leap 42.3:php5-intl-5.5.14-118.1 openSUSE Leap 42.3:php5-json-5.5.14-118.1 openSUSE Leap 42.3:php5-ldap-5.5.14-118.1 openSUSE Leap 42.3:php5-mbstring-5.5.14-118.1 openSUSE Leap 42.3:php5-mcrypt-5.5.14-118.1 openSUSE Leap 42.3:php5-mssql-5.5.14-118.1 openSUSE Leap 42.3:php5-mysql-5.5.14-118.1 openSUSE Leap 42.3:php5-odbc-5.5.14-118.1 openSUSE Leap 42.3:php5-opcache-5.5.14-118.1 openSUSE Leap 42.3:php5-openssl-5.5.14-118.1 openSUSE Leap 42.3:php5-pcntl-5.5.14-118.1 openSUSE Leap 42.3:php5-pdo-5.5.14-118.1 openSUSE Leap 42.3:php5-pear-5.5.14-118.1 openSUSE Leap 42.3:php5-pgsql-5.5.14-118.1 openSUSE Leap 42.3:php5-phar-5.5.14-118.1 openSUSE Leap 42.3:php5-posix-5.5.14-118.1 openSUSE Leap 42.3:php5-pspell-5.5.14-118.1 openSUSE Leap 42.3:php5-readline-5.5.14-118.1 openSUSE Leap 42.3:php5-shmop-5.5.14-118.1 openSUSE Leap 42.3:php5-snmp-5.5.14-118.1 openSUSE Leap 42.3:php5-soap-5.5.14-118.1 openSUSE Leap 42.3:php5-sockets-5.5.14-118.1 openSUSE Leap 42.3:php5-sqlite-5.5.14-118.1 openSUSE Leap 42.3:php5-suhosin-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvmsg-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvsem-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvshm-5.5.14-118.1 openSUSE Leap 42.3:php5-tidy-5.5.14-118.1 openSUSE Leap 42.3:php5-tokenizer-5.5.14-118.1 openSUSE Leap 42.3:php5-wddx-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlreader-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlrpc-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlwriter-5.5.14-118.1 openSUSE Leap 42.3:php5-xsl-5.5.14-118.1 openSUSE Leap 42.3:php5-zip-5.5.14-118.1 openSUSE Leap 42.3:php5-zlib-5.5.14-118.1 moderate Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html https://www.suse.com/security/cve/CVE-2019-11035.html CVE-2019-11035 https://bugzilla.suse.com/1132837 SUSE Bug 1132837 When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash. CVE-2019-11036 openSUSE Leap 42.3:apache2-mod_php5-5.5.14-118.1 openSUSE Leap 42.3:php5-5.5.14-118.1 openSUSE Leap 42.3:php5-bcmath-5.5.14-118.1 openSUSE Leap 42.3:php5-bz2-5.5.14-118.1 openSUSE Leap 42.3:php5-calendar-5.5.14-118.1 openSUSE Leap 42.3:php5-ctype-5.5.14-118.1 openSUSE Leap 42.3:php5-curl-5.5.14-118.1 openSUSE Leap 42.3:php5-dba-5.5.14-118.1 openSUSE Leap 42.3:php5-devel-5.5.14-118.1 openSUSE Leap 42.3:php5-dom-5.5.14-118.1 openSUSE Leap 42.3:php5-enchant-5.5.14-118.1 openSUSE Leap 42.3:php5-exif-5.5.14-118.1 openSUSE Leap 42.3:php5-fastcgi-5.5.14-118.1 openSUSE Leap 42.3:php5-fileinfo-5.5.14-118.1 openSUSE Leap 42.3:php5-firebird-5.5.14-118.1 openSUSE Leap 42.3:php5-fpm-5.5.14-118.1 openSUSE Leap 42.3:php5-ftp-5.5.14-118.1 openSUSE Leap 42.3:php5-gd-5.5.14-118.1 openSUSE Leap 42.3:php5-gettext-5.5.14-118.1 openSUSE Leap 42.3:php5-gmp-5.5.14-118.1 openSUSE Leap 42.3:php5-iconv-5.5.14-118.1 openSUSE Leap 42.3:php5-imap-5.5.14-118.1 openSUSE Leap 42.3:php5-intl-5.5.14-118.1 openSUSE Leap 42.3:php5-json-5.5.14-118.1 openSUSE Leap 42.3:php5-ldap-5.5.14-118.1 openSUSE Leap 42.3:php5-mbstring-5.5.14-118.1 openSUSE Leap 42.3:php5-mcrypt-5.5.14-118.1 openSUSE Leap 42.3:php5-mssql-5.5.14-118.1 openSUSE Leap 42.3:php5-mysql-5.5.14-118.1 openSUSE Leap 42.3:php5-odbc-5.5.14-118.1 openSUSE Leap 42.3:php5-opcache-5.5.14-118.1 openSUSE Leap 42.3:php5-openssl-5.5.14-118.1 openSUSE Leap 42.3:php5-pcntl-5.5.14-118.1 openSUSE Leap 42.3:php5-pdo-5.5.14-118.1 openSUSE Leap 42.3:php5-pear-5.5.14-118.1 openSUSE Leap 42.3:php5-pgsql-5.5.14-118.1 openSUSE Leap 42.3:php5-phar-5.5.14-118.1 openSUSE Leap 42.3:php5-posix-5.5.14-118.1 openSUSE Leap 42.3:php5-pspell-5.5.14-118.1 openSUSE Leap 42.3:php5-readline-5.5.14-118.1 openSUSE Leap 42.3:php5-shmop-5.5.14-118.1 openSUSE Leap 42.3:php5-snmp-5.5.14-118.1 openSUSE Leap 42.3:php5-soap-5.5.14-118.1 openSUSE Leap 42.3:php5-sockets-5.5.14-118.1 openSUSE Leap 42.3:php5-sqlite-5.5.14-118.1 openSUSE Leap 42.3:php5-suhosin-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvmsg-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvsem-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvshm-5.5.14-118.1 openSUSE Leap 42.3:php5-tidy-5.5.14-118.1 openSUSE Leap 42.3:php5-tokenizer-5.5.14-118.1 openSUSE Leap 42.3:php5-wddx-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlreader-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlrpc-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlwriter-5.5.14-118.1 openSUSE Leap 42.3:php5-xsl-5.5.14-118.1 openSUSE Leap 42.3:php5-zip-5.5.14-118.1 openSUSE Leap 42.3:php5-zlib-5.5.14-118.1 moderate Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html https://www.suse.com/security/cve/CVE-2019-11036.html CVE-2019-11036 https://bugzilla.suse.com/1134322 SUSE Bug 1134322 An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data. CVE-2019-9637 openSUSE Leap 42.3:apache2-mod_php5-5.5.14-118.1 openSUSE Leap 42.3:php5-5.5.14-118.1 openSUSE Leap 42.3:php5-bcmath-5.5.14-118.1 openSUSE Leap 42.3:php5-bz2-5.5.14-118.1 openSUSE Leap 42.3:php5-calendar-5.5.14-118.1 openSUSE Leap 42.3:php5-ctype-5.5.14-118.1 openSUSE Leap 42.3:php5-curl-5.5.14-118.1 openSUSE Leap 42.3:php5-dba-5.5.14-118.1 openSUSE Leap 42.3:php5-devel-5.5.14-118.1 openSUSE Leap 42.3:php5-dom-5.5.14-118.1 openSUSE Leap 42.3:php5-enchant-5.5.14-118.1 openSUSE Leap 42.3:php5-exif-5.5.14-118.1 openSUSE Leap 42.3:php5-fastcgi-5.5.14-118.1 openSUSE Leap 42.3:php5-fileinfo-5.5.14-118.1 openSUSE Leap 42.3:php5-firebird-5.5.14-118.1 openSUSE Leap 42.3:php5-fpm-5.5.14-118.1 openSUSE Leap 42.3:php5-ftp-5.5.14-118.1 openSUSE Leap 42.3:php5-gd-5.5.14-118.1 openSUSE Leap 42.3:php5-gettext-5.5.14-118.1 openSUSE Leap 42.3:php5-gmp-5.5.14-118.1 openSUSE Leap 42.3:php5-iconv-5.5.14-118.1 openSUSE Leap 42.3:php5-imap-5.5.14-118.1 openSUSE Leap 42.3:php5-intl-5.5.14-118.1 openSUSE Leap 42.3:php5-json-5.5.14-118.1 openSUSE Leap 42.3:php5-ldap-5.5.14-118.1 openSUSE Leap 42.3:php5-mbstring-5.5.14-118.1 openSUSE Leap 42.3:php5-mcrypt-5.5.14-118.1 openSUSE Leap 42.3:php5-mssql-5.5.14-118.1 openSUSE Leap 42.3:php5-mysql-5.5.14-118.1 openSUSE Leap 42.3:php5-odbc-5.5.14-118.1 openSUSE Leap 42.3:php5-opcache-5.5.14-118.1 openSUSE Leap 42.3:php5-openssl-5.5.14-118.1 openSUSE Leap 42.3:php5-pcntl-5.5.14-118.1 openSUSE Leap 42.3:php5-pdo-5.5.14-118.1 openSUSE Leap 42.3:php5-pear-5.5.14-118.1 openSUSE Leap 42.3:php5-pgsql-5.5.14-118.1 openSUSE Leap 42.3:php5-phar-5.5.14-118.1 openSUSE Leap 42.3:php5-posix-5.5.14-118.1 openSUSE Leap 42.3:php5-pspell-5.5.14-118.1 openSUSE Leap 42.3:php5-readline-5.5.14-118.1 openSUSE Leap 42.3:php5-shmop-5.5.14-118.1 openSUSE Leap 42.3:php5-snmp-5.5.14-118.1 openSUSE Leap 42.3:php5-soap-5.5.14-118.1 openSUSE Leap 42.3:php5-sockets-5.5.14-118.1 openSUSE Leap 42.3:php5-sqlite-5.5.14-118.1 openSUSE Leap 42.3:php5-suhosin-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvmsg-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvsem-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvshm-5.5.14-118.1 openSUSE Leap 42.3:php5-tidy-5.5.14-118.1 openSUSE Leap 42.3:php5-tokenizer-5.5.14-118.1 openSUSE Leap 42.3:php5-wddx-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlreader-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlrpc-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlwriter-5.5.14-118.1 openSUSE Leap 42.3:php5-xsl-5.5.14-118.1 openSUSE Leap 42.3:php5-zip-5.5.14-118.1 openSUSE Leap 42.3:php5-zlib-5.5.14-118.1 low Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html https://www.suse.com/security/cve/CVE-2019-9637.html CVE-2019-9637 https://bugzilla.suse.com/1128892 SUSE Bug 1128892 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len. CVE-2019-9638 openSUSE Leap 42.3:apache2-mod_php5-5.5.14-118.1 openSUSE Leap 42.3:php5-5.5.14-118.1 openSUSE Leap 42.3:php5-bcmath-5.5.14-118.1 openSUSE Leap 42.3:php5-bz2-5.5.14-118.1 openSUSE Leap 42.3:php5-calendar-5.5.14-118.1 openSUSE Leap 42.3:php5-ctype-5.5.14-118.1 openSUSE Leap 42.3:php5-curl-5.5.14-118.1 openSUSE Leap 42.3:php5-dba-5.5.14-118.1 openSUSE Leap 42.3:php5-devel-5.5.14-118.1 openSUSE Leap 42.3:php5-dom-5.5.14-118.1 openSUSE Leap 42.3:php5-enchant-5.5.14-118.1 openSUSE Leap 42.3:php5-exif-5.5.14-118.1 openSUSE Leap 42.3:php5-fastcgi-5.5.14-118.1 openSUSE Leap 42.3:php5-fileinfo-5.5.14-118.1 openSUSE Leap 42.3:php5-firebird-5.5.14-118.1 openSUSE Leap 42.3:php5-fpm-5.5.14-118.1 openSUSE Leap 42.3:php5-ftp-5.5.14-118.1 openSUSE Leap 42.3:php5-gd-5.5.14-118.1 openSUSE Leap 42.3:php5-gettext-5.5.14-118.1 openSUSE Leap 42.3:php5-gmp-5.5.14-118.1 openSUSE Leap 42.3:php5-iconv-5.5.14-118.1 openSUSE Leap 42.3:php5-imap-5.5.14-118.1 openSUSE Leap 42.3:php5-intl-5.5.14-118.1 openSUSE Leap 42.3:php5-json-5.5.14-118.1 openSUSE Leap 42.3:php5-ldap-5.5.14-118.1 openSUSE Leap 42.3:php5-mbstring-5.5.14-118.1 openSUSE Leap 42.3:php5-mcrypt-5.5.14-118.1 openSUSE Leap 42.3:php5-mssql-5.5.14-118.1 openSUSE Leap 42.3:php5-mysql-5.5.14-118.1 openSUSE Leap 42.3:php5-odbc-5.5.14-118.1 openSUSE Leap 42.3:php5-opcache-5.5.14-118.1 openSUSE Leap 42.3:php5-openssl-5.5.14-118.1 openSUSE Leap 42.3:php5-pcntl-5.5.14-118.1 openSUSE Leap 42.3:php5-pdo-5.5.14-118.1 openSUSE Leap 42.3:php5-pear-5.5.14-118.1 openSUSE Leap 42.3:php5-pgsql-5.5.14-118.1 openSUSE Leap 42.3:php5-phar-5.5.14-118.1 openSUSE Leap 42.3:php5-posix-5.5.14-118.1 openSUSE Leap 42.3:php5-pspell-5.5.14-118.1 openSUSE Leap 42.3:php5-readline-5.5.14-118.1 openSUSE Leap 42.3:php5-shmop-5.5.14-118.1 openSUSE Leap 42.3:php5-snmp-5.5.14-118.1 openSUSE Leap 42.3:php5-soap-5.5.14-118.1 openSUSE Leap 42.3:php5-sockets-5.5.14-118.1 openSUSE Leap 42.3:php5-sqlite-5.5.14-118.1 openSUSE Leap 42.3:php5-suhosin-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvmsg-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvsem-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvshm-5.5.14-118.1 openSUSE Leap 42.3:php5-tidy-5.5.14-118.1 openSUSE Leap 42.3:php5-tokenizer-5.5.14-118.1 openSUSE Leap 42.3:php5-wddx-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlreader-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlrpc-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlwriter-5.5.14-118.1 openSUSE Leap 42.3:php5-xsl-5.5.14-118.1 openSUSE Leap 42.3:php5-zip-5.5.14-118.1 openSUSE Leap 42.3:php5-zlib-5.5.14-118.1 moderate Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html https://www.suse.com/security/cve/CVE-2019-9638.html CVE-2019-9638 https://bugzilla.suse.com/1128889 SUSE Bug 1128889 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable. CVE-2019-9639 openSUSE Leap 42.3:apache2-mod_php5-5.5.14-118.1 openSUSE Leap 42.3:php5-5.5.14-118.1 openSUSE Leap 42.3:php5-bcmath-5.5.14-118.1 openSUSE Leap 42.3:php5-bz2-5.5.14-118.1 openSUSE Leap 42.3:php5-calendar-5.5.14-118.1 openSUSE Leap 42.3:php5-ctype-5.5.14-118.1 openSUSE Leap 42.3:php5-curl-5.5.14-118.1 openSUSE Leap 42.3:php5-dba-5.5.14-118.1 openSUSE Leap 42.3:php5-devel-5.5.14-118.1 openSUSE Leap 42.3:php5-dom-5.5.14-118.1 openSUSE Leap 42.3:php5-enchant-5.5.14-118.1 openSUSE Leap 42.3:php5-exif-5.5.14-118.1 openSUSE Leap 42.3:php5-fastcgi-5.5.14-118.1 openSUSE Leap 42.3:php5-fileinfo-5.5.14-118.1 openSUSE Leap 42.3:php5-firebird-5.5.14-118.1 openSUSE Leap 42.3:php5-fpm-5.5.14-118.1 openSUSE Leap 42.3:php5-ftp-5.5.14-118.1 openSUSE Leap 42.3:php5-gd-5.5.14-118.1 openSUSE Leap 42.3:php5-gettext-5.5.14-118.1 openSUSE Leap 42.3:php5-gmp-5.5.14-118.1 openSUSE Leap 42.3:php5-iconv-5.5.14-118.1 openSUSE Leap 42.3:php5-imap-5.5.14-118.1 openSUSE Leap 42.3:php5-intl-5.5.14-118.1 openSUSE Leap 42.3:php5-json-5.5.14-118.1 openSUSE Leap 42.3:php5-ldap-5.5.14-118.1 openSUSE Leap 42.3:php5-mbstring-5.5.14-118.1 openSUSE Leap 42.3:php5-mcrypt-5.5.14-118.1 openSUSE Leap 42.3:php5-mssql-5.5.14-118.1 openSUSE Leap 42.3:php5-mysql-5.5.14-118.1 openSUSE Leap 42.3:php5-odbc-5.5.14-118.1 openSUSE Leap 42.3:php5-opcache-5.5.14-118.1 openSUSE Leap 42.3:php5-openssl-5.5.14-118.1 openSUSE Leap 42.3:php5-pcntl-5.5.14-118.1 openSUSE Leap 42.3:php5-pdo-5.5.14-118.1 openSUSE Leap 42.3:php5-pear-5.5.14-118.1 openSUSE Leap 42.3:php5-pgsql-5.5.14-118.1 openSUSE Leap 42.3:php5-phar-5.5.14-118.1 openSUSE Leap 42.3:php5-posix-5.5.14-118.1 openSUSE Leap 42.3:php5-pspell-5.5.14-118.1 openSUSE Leap 42.3:php5-readline-5.5.14-118.1 openSUSE Leap 42.3:php5-shmop-5.5.14-118.1 openSUSE Leap 42.3:php5-snmp-5.5.14-118.1 openSUSE Leap 42.3:php5-soap-5.5.14-118.1 openSUSE Leap 42.3:php5-sockets-5.5.14-118.1 openSUSE Leap 42.3:php5-sqlite-5.5.14-118.1 openSUSE Leap 42.3:php5-suhosin-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvmsg-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvsem-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvshm-5.5.14-118.1 openSUSE Leap 42.3:php5-tidy-5.5.14-118.1 openSUSE Leap 42.3:php5-tokenizer-5.5.14-118.1 openSUSE Leap 42.3:php5-wddx-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlreader-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlrpc-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlwriter-5.5.14-118.1 openSUSE Leap 42.3:php5-xsl-5.5.14-118.1 openSUSE Leap 42.3:php5-zip-5.5.14-118.1 openSUSE Leap 42.3:php5-zlib-5.5.14-118.1 low Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html https://www.suse.com/security/cve/CVE-2019-9639.html CVE-2019-9639 https://bugzilla.suse.com/1128887 SUSE Bug 1128887 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn. CVE-2019-9640 openSUSE Leap 42.3:apache2-mod_php5-5.5.14-118.1 openSUSE Leap 42.3:php5-5.5.14-118.1 openSUSE Leap 42.3:php5-bcmath-5.5.14-118.1 openSUSE Leap 42.3:php5-bz2-5.5.14-118.1 openSUSE Leap 42.3:php5-calendar-5.5.14-118.1 openSUSE Leap 42.3:php5-ctype-5.5.14-118.1 openSUSE Leap 42.3:php5-curl-5.5.14-118.1 openSUSE Leap 42.3:php5-dba-5.5.14-118.1 openSUSE Leap 42.3:php5-devel-5.5.14-118.1 openSUSE Leap 42.3:php5-dom-5.5.14-118.1 openSUSE Leap 42.3:php5-enchant-5.5.14-118.1 openSUSE Leap 42.3:php5-exif-5.5.14-118.1 openSUSE Leap 42.3:php5-fastcgi-5.5.14-118.1 openSUSE Leap 42.3:php5-fileinfo-5.5.14-118.1 openSUSE Leap 42.3:php5-firebird-5.5.14-118.1 openSUSE Leap 42.3:php5-fpm-5.5.14-118.1 openSUSE Leap 42.3:php5-ftp-5.5.14-118.1 openSUSE Leap 42.3:php5-gd-5.5.14-118.1 openSUSE Leap 42.3:php5-gettext-5.5.14-118.1 openSUSE Leap 42.3:php5-gmp-5.5.14-118.1 openSUSE Leap 42.3:php5-iconv-5.5.14-118.1 openSUSE Leap 42.3:php5-imap-5.5.14-118.1 openSUSE Leap 42.3:php5-intl-5.5.14-118.1 openSUSE Leap 42.3:php5-json-5.5.14-118.1 openSUSE Leap 42.3:php5-ldap-5.5.14-118.1 openSUSE Leap 42.3:php5-mbstring-5.5.14-118.1 openSUSE Leap 42.3:php5-mcrypt-5.5.14-118.1 openSUSE Leap 42.3:php5-mssql-5.5.14-118.1 openSUSE Leap 42.3:php5-mysql-5.5.14-118.1 openSUSE Leap 42.3:php5-odbc-5.5.14-118.1 openSUSE Leap 42.3:php5-opcache-5.5.14-118.1 openSUSE Leap 42.3:php5-openssl-5.5.14-118.1 openSUSE Leap 42.3:php5-pcntl-5.5.14-118.1 openSUSE Leap 42.3:php5-pdo-5.5.14-118.1 openSUSE Leap 42.3:php5-pear-5.5.14-118.1 openSUSE Leap 42.3:php5-pgsql-5.5.14-118.1 openSUSE Leap 42.3:php5-phar-5.5.14-118.1 openSUSE Leap 42.3:php5-posix-5.5.14-118.1 openSUSE Leap 42.3:php5-pspell-5.5.14-118.1 openSUSE Leap 42.3:php5-readline-5.5.14-118.1 openSUSE Leap 42.3:php5-shmop-5.5.14-118.1 openSUSE Leap 42.3:php5-snmp-5.5.14-118.1 openSUSE Leap 42.3:php5-soap-5.5.14-118.1 openSUSE Leap 42.3:php5-sockets-5.5.14-118.1 openSUSE Leap 42.3:php5-sqlite-5.5.14-118.1 openSUSE Leap 42.3:php5-suhosin-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvmsg-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvsem-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvshm-5.5.14-118.1 openSUSE Leap 42.3:php5-tidy-5.5.14-118.1 openSUSE Leap 42.3:php5-tokenizer-5.5.14-118.1 openSUSE Leap 42.3:php5-wddx-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlreader-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlrpc-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlwriter-5.5.14-118.1 openSUSE Leap 42.3:php5-xsl-5.5.14-118.1 openSUSE Leap 42.3:php5-zip-5.5.14-118.1 openSUSE Leap 42.3:php5-zlib-5.5.14-118.1 low Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html https://www.suse.com/security/cve/CVE-2019-9640.html CVE-2019-9640 https://bugzilla.suse.com/1128883 SUSE Bug 1128883 ** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue allows theoretical compromise of security, but a practical attack is usually impossible." CVE-2019-9675 openSUSE Leap 42.3:apache2-mod_php5-5.5.14-118.1 openSUSE Leap 42.3:php5-5.5.14-118.1 openSUSE Leap 42.3:php5-bcmath-5.5.14-118.1 openSUSE Leap 42.3:php5-bz2-5.5.14-118.1 openSUSE Leap 42.3:php5-calendar-5.5.14-118.1 openSUSE Leap 42.3:php5-ctype-5.5.14-118.1 openSUSE Leap 42.3:php5-curl-5.5.14-118.1 openSUSE Leap 42.3:php5-dba-5.5.14-118.1 openSUSE Leap 42.3:php5-devel-5.5.14-118.1 openSUSE Leap 42.3:php5-dom-5.5.14-118.1 openSUSE Leap 42.3:php5-enchant-5.5.14-118.1 openSUSE Leap 42.3:php5-exif-5.5.14-118.1 openSUSE Leap 42.3:php5-fastcgi-5.5.14-118.1 openSUSE Leap 42.3:php5-fileinfo-5.5.14-118.1 openSUSE Leap 42.3:php5-firebird-5.5.14-118.1 openSUSE Leap 42.3:php5-fpm-5.5.14-118.1 openSUSE Leap 42.3:php5-ftp-5.5.14-118.1 openSUSE Leap 42.3:php5-gd-5.5.14-118.1 openSUSE Leap 42.3:php5-gettext-5.5.14-118.1 openSUSE Leap 42.3:php5-gmp-5.5.14-118.1 openSUSE Leap 42.3:php5-iconv-5.5.14-118.1 openSUSE Leap 42.3:php5-imap-5.5.14-118.1 openSUSE Leap 42.3:php5-intl-5.5.14-118.1 openSUSE Leap 42.3:php5-json-5.5.14-118.1 openSUSE Leap 42.3:php5-ldap-5.5.14-118.1 openSUSE Leap 42.3:php5-mbstring-5.5.14-118.1 openSUSE Leap 42.3:php5-mcrypt-5.5.14-118.1 openSUSE Leap 42.3:php5-mssql-5.5.14-118.1 openSUSE Leap 42.3:php5-mysql-5.5.14-118.1 openSUSE Leap 42.3:php5-odbc-5.5.14-118.1 openSUSE Leap 42.3:php5-opcache-5.5.14-118.1 openSUSE Leap 42.3:php5-openssl-5.5.14-118.1 openSUSE Leap 42.3:php5-pcntl-5.5.14-118.1 openSUSE Leap 42.3:php5-pdo-5.5.14-118.1 openSUSE Leap 42.3:php5-pear-5.5.14-118.1 openSUSE Leap 42.3:php5-pgsql-5.5.14-118.1 openSUSE Leap 42.3:php5-phar-5.5.14-118.1 openSUSE Leap 42.3:php5-posix-5.5.14-118.1 openSUSE Leap 42.3:php5-pspell-5.5.14-118.1 openSUSE Leap 42.3:php5-readline-5.5.14-118.1 openSUSE Leap 42.3:php5-shmop-5.5.14-118.1 openSUSE Leap 42.3:php5-snmp-5.5.14-118.1 openSUSE Leap 42.3:php5-soap-5.5.14-118.1 openSUSE Leap 42.3:php5-sockets-5.5.14-118.1 openSUSE Leap 42.3:php5-sqlite-5.5.14-118.1 openSUSE Leap 42.3:php5-suhosin-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvmsg-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvsem-5.5.14-118.1 openSUSE Leap 42.3:php5-sysvshm-5.5.14-118.1 openSUSE Leap 42.3:php5-tidy-5.5.14-118.1 openSUSE Leap 42.3:php5-tokenizer-5.5.14-118.1 openSUSE Leap 42.3:php5-wddx-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlreader-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlrpc-5.5.14-118.1 openSUSE Leap 42.3:php5-xmlwriter-5.5.14-118.1 openSUSE Leap 42.3:php5-xsl-5.5.14-118.1 openSUSE Leap 42.3:php5-zip-5.5.14-118.1 openSUSE Leap 42.3:php5-zlib-5.5.14-118.1 moderate Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html https://www.suse.com/security/cve/CVE-2019-9675.html CVE-2019-9675 https://bugzilla.suse.com/1128886 SUSE Bug 1128886