Security update for php72 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:0397-1 Final 1 1 2020-02-18T13:21:38Z current 2020-02-18T13:21:38Z 2020-02-18T13:21:38Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for php72 This update for php72 fixes the following issues: Security issues fixed: - CVE-2020-7059: Fixed an out-of-bounds read in php_strip_tags_ex (bsc#1162629). - CVE-2020-7060: Fixed a global buffer-overflow in mbfl_filt_conv_big5_wchar (bsc#1162632). - CVE-2019-20433: Fixed a buffer over-read when processing strings ending with a single '\0' byte with ucs-2 and ucs-4 encoding (bsc#1161982). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2020-397,SUSE-SLE-Module-Web-Scripting-12-2020-397,SUSE-SLE-SDK-12-SP4-2020-397,SUSE-SLE-SDK-12-SP5-2020-397 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20200397-1/ Link for SUSE-SU-2020:0397-1 https://lists.suse.com/pipermail/sle-security-updates/2020-February/006490.html E-Mail link for SUSE-SU-2020:0397-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1161982 SUSE Bug 1161982 https://bugzilla.suse.com/1162629 SUSE Bug 1162629 https://bugzilla.suse.com/1162632 SUSE Bug 1162632 https://www.suse.com/security/cve/CVE-2019-20433/ SUSE CVE CVE-2019-20433 page https://www.suse.com/security/cve/CVE-2020-7059/ SUSE CVE CVE-2020-7059 page https://www.suse.com/security/cve/CVE-2020-7060/ SUSE CVE CVE-2020-7060 page SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 apache2-mod_php72-7.2.5-1.37.1 php72-7.2.5-1.37.1 php72-bcmath-7.2.5-1.37.1 php72-bz2-7.2.5-1.37.1 php72-calendar-7.2.5-1.37.1 php72-ctype-7.2.5-1.37.1 php72-curl-7.2.5-1.37.1 php72-dba-7.2.5-1.37.1 php72-devel-7.2.5-1.37.1 php72-dom-7.2.5-1.37.1 php72-embed-7.2.5-1.37.1 php72-enchant-7.2.5-1.37.1 php72-exif-7.2.5-1.37.1 php72-fastcgi-7.2.5-1.37.1 php72-fileinfo-7.2.5-1.37.1 php72-fpm-7.2.5-1.37.1 php72-ftp-7.2.5-1.37.1 php72-gd-7.2.5-1.37.1 php72-gettext-7.2.5-1.37.1 php72-gmp-7.2.5-1.37.1 php72-iconv-7.2.5-1.37.1 php72-imap-7.2.5-1.37.1 php72-intl-7.2.5-1.37.1 php72-json-7.2.5-1.37.1 php72-ldap-7.2.5-1.37.1 php72-mbstring-7.2.5-1.37.1 php72-mysql-7.2.5-1.37.1 php72-odbc-7.2.5-1.37.1 php72-opcache-7.2.5-1.37.1 php72-openssl-7.2.5-1.37.1 php72-pcntl-7.2.5-1.37.1 php72-pdo-7.2.5-1.37.1 php72-pear-7.2.5-1.37.1 php72-pear-Archive_Tar-7.2.5-1.37.1 php72-pgsql-7.2.5-1.37.1 php72-phar-7.2.5-1.37.1 php72-posix-7.2.5-1.37.1 php72-pspell-7.2.5-1.37.1 php72-readline-7.2.5-1.37.1 php72-shmop-7.2.5-1.37.1 php72-snmp-7.2.5-1.37.1 php72-soap-7.2.5-1.37.1 php72-sockets-7.2.5-1.37.1 php72-sodium-7.2.5-1.37.1 php72-sqlite-7.2.5-1.37.1 php72-sysvmsg-7.2.5-1.37.1 php72-sysvsem-7.2.5-1.37.1 php72-sysvshm-7.2.5-1.37.1 php72-tidy-7.2.5-1.37.1 php72-tokenizer-7.2.5-1.37.1 php72-wddx-7.2.5-1.37.1 php72-xmlreader-7.2.5-1.37.1 php72-xmlrpc-7.2.5-1.37.1 php72-xmlwriter-7.2.5-1.37.1 php72-xsl-7.2.5-1.37.1 php72-zip-7.2.5-1.37.1 php72-zlib-7.2.5-1.37.1 apache2-mod_php72-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-bcmath-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-bz2-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-calendar-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-ctype-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-curl-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-dba-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-dom-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-enchant-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-exif-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-fastcgi-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-fileinfo-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-fpm-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-ftp-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-gd-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-gettext-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-gmp-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-iconv-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-imap-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-intl-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-json-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-ldap-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-mbstring-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-mysql-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-odbc-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-opcache-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-openssl-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-pcntl-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-pdo-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-pear-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-pear-Archive_Tar-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-pgsql-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-phar-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-posix-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-pspell-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-readline-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-shmop-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-snmp-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-soap-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-sockets-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-sodium-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-sqlite-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-sysvmsg-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-sysvsem-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-sysvshm-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-tidy-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-tokenizer-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-wddx-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-xmlreader-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-xmlrpc-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-xmlwriter-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-xsl-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-zip-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-zlib-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 php72-devel-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 php72-devel-7.2.5-1.37.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable. CVE-2019-20433 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php72-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-bcmath-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-bz2-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-calendar-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-ctype-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-curl-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-dba-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-dom-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-enchant-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-exif-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-fastcgi-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-fileinfo-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-fpm-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-ftp-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-gd-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-gettext-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-gmp-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-iconv-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-imap-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-intl-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-json-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-ldap-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-mbstring-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-mysql-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-odbc-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-opcache-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-openssl-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pcntl-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pdo-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pear-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pear-Archive_Tar-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pgsql-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-phar-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-posix-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pspell-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-readline-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-shmop-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-snmp-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-soap-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sockets-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sodium-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sqlite-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sysvmsg-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sysvsem-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sysvshm-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-tidy-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-tokenizer-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-wddx-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-xmlreader-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-xmlrpc-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-xmlwriter-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-xsl-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-zip-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-zlib-7.2.5-1.37.1 SUSE Linux Enterprise Software Development Kit 12 SP4:php72-devel-7.2.5-1.37.1 SUSE Linux Enterprise Software Development Kit 12 SP5:php72-devel-7.2.5-1.37.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200397-1/ https://www.suse.com/security/cve/CVE-2019-20433.html CVE-2019-20433 https://bugzilla.suse.com/1161982 SUSE Bug 1161982 When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash. CVE-2020-7059 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php72-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-bcmath-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-bz2-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-calendar-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-ctype-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-curl-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-dba-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-dom-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-enchant-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-exif-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-fastcgi-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-fileinfo-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-fpm-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-ftp-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-gd-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-gettext-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-gmp-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-iconv-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-imap-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-intl-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-json-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-ldap-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-mbstring-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-mysql-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-odbc-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-opcache-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-openssl-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pcntl-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pdo-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pear-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pear-Archive_Tar-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pgsql-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-phar-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-posix-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pspell-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-readline-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-shmop-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-snmp-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-soap-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sockets-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sodium-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sqlite-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sysvmsg-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sysvsem-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sysvshm-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-tidy-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-tokenizer-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-wddx-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-xmlreader-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-xmlrpc-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-xmlwriter-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-xsl-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-zip-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-zlib-7.2.5-1.37.1 SUSE Linux Enterprise Software Development Kit 12 SP4:php72-devel-7.2.5-1.37.1 SUSE Linux Enterprise Software Development Kit 12 SP5:php72-devel-7.2.5-1.37.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200397-1/ https://www.suse.com/security/cve/CVE-2020-7059.html CVE-2020-7059 https://bugzilla.suse.com/1162629 SUSE Bug 1162629 When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash. CVE-2020-7060 SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_php72-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-bcmath-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-bz2-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-calendar-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-ctype-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-curl-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-dba-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-dom-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-enchant-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-exif-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-fastcgi-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-fileinfo-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-fpm-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-ftp-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-gd-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-gettext-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-gmp-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-iconv-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-imap-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-intl-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-json-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-ldap-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-mbstring-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-mysql-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-odbc-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-opcache-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-openssl-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pcntl-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pdo-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pear-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pear-Archive_Tar-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pgsql-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-phar-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-posix-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-pspell-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-readline-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-shmop-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-snmp-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-soap-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sockets-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sodium-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sqlite-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sysvmsg-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sysvsem-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-sysvshm-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-tidy-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-tokenizer-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-wddx-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-xmlreader-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-xmlrpc-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-xmlwriter-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-xsl-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-zip-7.2.5-1.37.1 SUSE Linux Enterprise Module for Web and Scripting 12:php72-zlib-7.2.5-1.37.1 SUSE Linux Enterprise Software Development Kit 12 SP4:php72-devel-7.2.5-1.37.1 SUSE Linux Enterprise Software Development Kit 12 SP5:php72-devel-7.2.5-1.37.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200397-1/ https://www.suse.com/security/cve/CVE-2020-7060.html CVE-2020-7060 https://bugzilla.suse.com/1162632 SUSE Bug 1162632