Security update for php5 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:1325-1 Final 1 1 2019-05-23T13:18:02Z current 2019-05-23T13:18:02Z 2019-05-23T13:18:02Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for php5 This update for php5 fixes the following issues: Security issues fixed: - CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838). - CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837). - CVE-2019-9637: Fixed a potential information disclosure in rename() (bsc#1128892). - CVE-2019-9675: Fixed a potential buffer overflow in phar_tar_writeheaders_int() (bsc#1128886). - CVE-2019-9638: Fixed an uninitialized read in exif_process_IFD_in_MAKERNOTE() related to value_len (bsc#1128889). - CVE-2019-9639: Fixed an uninitialized read in exif_process_IFD_in_MAKERNOTE() related to data_len (bsc#1128887). - CVE-2019-9640: Fixed an invalid Read in exif_process_SOFn() (bsc#1128883). - CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2019-1325,SUSE-SLE-Module-Web-Scripting-12-2019-1325,SUSE-SLE-SDK-12-SP3-2019-1325,SUSE-SLE-SDK-12-SP4-2019-1325 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20191325-1/ Link for SUSE-SU-2019:1325-1 https://lists.suse.com/pipermail/sle-security-updates/2019-May/005489.html E-Mail link for SUSE-SU-2019:1325-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1128883 SUSE Bug 1128883 https://bugzilla.suse.com/1128886 SUSE Bug 1128886 https://bugzilla.suse.com/1128887 SUSE Bug 1128887 https://bugzilla.suse.com/1128889 SUSE Bug 1128889 https://bugzilla.suse.com/1128892 SUSE Bug 1128892 https://bugzilla.suse.com/1132837 SUSE Bug 1132837 https://bugzilla.suse.com/1132838 SUSE Bug 1132838 https://bugzilla.suse.com/1134322 SUSE Bug 1134322 https://www.suse.com/security/cve/CVE-2019-11034/ SUSE CVE CVE-2019-11034 page https://www.suse.com/security/cve/CVE-2019-11035/ SUSE CVE CVE-2019-11035 page https://www.suse.com/security/cve/CVE-2019-11036/ SUSE CVE CVE-2019-11036 page https://www.suse.com/security/cve/CVE-2019-9637/ SUSE CVE CVE-2019-9637 page https://www.suse.com/security/cve/CVE-2019-9638/ SUSE CVE CVE-2019-9638 page https://www.suse.com/security/cve/CVE-2019-9639/ SUSE CVE CVE-2019-9639 page https://www.suse.com/security/cve/CVE-2019-9640/ SUSE CVE CVE-2019-9640 page https://www.suse.com/security/cve/CVE-2019-9675/ SUSE CVE CVE-2019-9675 page SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 apache2-mod_php5-5.5.14-109.58.1 php5-5.5.14-109.58.1 php5-bcmath-5.5.14-109.58.1 php5-bz2-5.5.14-109.58.1 php5-calendar-5.5.14-109.58.1 php5-ctype-5.5.14-109.58.1 php5-curl-5.5.14-109.58.1 php5-dba-5.5.14-109.58.1 php5-devel-5.5.14-109.58.1 php5-dom-5.5.14-109.58.1 php5-enchant-5.5.14-109.58.1 php5-exif-5.5.14-109.58.1 php5-fastcgi-5.5.14-109.58.1 php5-fileinfo-5.5.14-109.58.1 php5-firebird-5.5.14-109.58.1 php5-fpm-5.5.14-109.58.1 php5-ftp-5.5.14-109.58.1 php5-gd-5.5.14-109.58.1 php5-gettext-5.5.14-109.58.1 php5-gmp-5.5.14-109.58.1 php5-iconv-5.5.14-109.58.1 php5-imap-5.5.14-109.58.1 php5-intl-5.5.14-109.58.1 php5-json-5.5.14-109.58.1 php5-ldap-5.5.14-109.58.1 php5-mbstring-5.5.14-109.58.1 php5-mcrypt-5.5.14-109.58.1 php5-mssql-5.5.14-109.58.1 php5-mysql-5.5.14-109.58.1 php5-odbc-5.5.14-109.58.1 php5-opcache-5.5.14-109.58.1 php5-openssl-5.5.14-109.58.1 php5-pcntl-5.5.14-109.58.1 php5-pdo-5.5.14-109.58.1 php5-pear-5.5.14-109.58.1 php5-pgsql-5.5.14-109.58.1 php5-phar-5.5.14-109.58.1 php5-posix-5.5.14-109.58.1 php5-pspell-5.5.14-109.58.1 php5-readline-5.5.14-109.58.1 php5-shmop-5.5.14-109.58.1 php5-snmp-5.5.14-109.58.1 php5-soap-5.5.14-109.58.1 php5-sockets-5.5.14-109.58.1 php5-sqlite-5.5.14-109.58.1 php5-suhosin-5.5.14-109.58.1 php5-sysvmsg-5.5.14-109.58.1 php5-sysvsem-5.5.14-109.58.1 php5-sysvshm-5.5.14-109.58.1 php5-tidy-5.5.14-109.58.1 php5-tokenizer-5.5.14-109.58.1 php5-wddx-5.5.14-109.58.1 php5-xmlreader-5.5.14-109.58.1 php5-xmlrpc-5.5.14-109.58.1 php5-xmlwriter-5.5.14-109.58.1 php5-xsl-5.5.14-109.58.1 php5-zip-5.5.14-109.58.1 php5-zlib-5.5.14-109.58.1 apache2-mod_php5-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-bcmath-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-bz2-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-calendar-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-ctype-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-curl-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-dba-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-dom-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-enchant-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-exif-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-fastcgi-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-fileinfo-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-fpm-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-ftp-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-gd-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-gettext-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-gmp-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-iconv-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-imap-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-intl-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-json-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-ldap-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-mbstring-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-mcrypt-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-mysql-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-odbc-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-opcache-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-openssl-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pcntl-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pdo-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pear-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pgsql-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-phar-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-posix-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-pspell-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-shmop-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-snmp-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-soap-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sockets-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sqlite-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-suhosin-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sysvmsg-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sysvsem-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-sysvshm-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-tokenizer-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-wddx-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xmlreader-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xmlrpc-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xmlwriter-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-xsl-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-zip-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-zlib-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php5-devel-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 php5-devel-5.5.14-109.58.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash. CVE-2019-11034 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP3:php5-devel-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP4:php5-devel-5.5.14-109.58.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191325-1/ https://www.suse.com/security/cve/CVE-2019-11034.html CVE-2019-11034 https://bugzilla.suse.com/1132838 SUSE Bug 1132838 When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash. CVE-2019-11035 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP3:php5-devel-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP4:php5-devel-5.5.14-109.58.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191325-1/ https://www.suse.com/security/cve/CVE-2019-11035.html CVE-2019-11035 https://bugzilla.suse.com/1132837 SUSE Bug 1132837 When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash. CVE-2019-11036 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP3:php5-devel-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP4:php5-devel-5.5.14-109.58.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191325-1/ https://www.suse.com/security/cve/CVE-2019-11036.html CVE-2019-11036 https://bugzilla.suse.com/1134322 SUSE Bug 1134322 An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data. CVE-2019-9637 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP3:php5-devel-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP4:php5-devel-5.5.14-109.58.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191325-1/ https://www.suse.com/security/cve/CVE-2019-9637.html CVE-2019-9637 https://bugzilla.suse.com/1128892 SUSE Bug 1128892 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len. CVE-2019-9638 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP3:php5-devel-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP4:php5-devel-5.5.14-109.58.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191325-1/ https://www.suse.com/security/cve/CVE-2019-9638.html CVE-2019-9638 https://bugzilla.suse.com/1128889 SUSE Bug 1128889 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable. CVE-2019-9639 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP3:php5-devel-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP4:php5-devel-5.5.14-109.58.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191325-1/ https://www.suse.com/security/cve/CVE-2019-9639.html CVE-2019-9639 https://bugzilla.suse.com/1128887 SUSE Bug 1128887 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn. CVE-2019-9640 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP3:php5-devel-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP4:php5-devel-5.5.14-109.58.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191325-1/ https://www.suse.com/security/cve/CVE-2019-9640.html CVE-2019-9640 https://bugzilla.suse.com/1128883 SUSE Bug 1128883 ** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue allows theoretical compromise of security, but a practical attack is usually impossible." CVE-2019-9675 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bcmath-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-bz2-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-calendar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ctype-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-curl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dba-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-dom-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-enchant-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-exif-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fastcgi-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fileinfo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-fpm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ftp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gd-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gettext-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-gmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-iconv-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-imap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-intl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-json-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-ldap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mbstring-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mcrypt-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-mysql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-odbc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-opcache-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-openssl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pcntl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pdo-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pear-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pgsql-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-phar-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-posix-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-pspell-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-shmop-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-snmp-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-soap-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sockets-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sqlite-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-suhosin-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvmsg-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvsem-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-sysvshm-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-tokenizer-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-wddx-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlreader-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlrpc-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xmlwriter-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-xsl-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zip-5.5.14-109.58.1 SUSE Linux Enterprise Module for Web and Scripting 12:php5-zlib-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP3:php5-devel-5.5.14-109.58.1 SUSE Linux Enterprise Software Development Kit 12 SP4:php5-devel-5.5.14-109.58.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191325-1/ https://www.suse.com/security/cve/CVE-2019-9675.html CVE-2019-9675 https://bugzilla.suse.com/1128886 SUSE Bug 1128886