Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-513


Security update for php7


Type: security
Severity: important
Issued: 2023-02-24
Description:
This update for php7 fixes the following issues:

  - CVE-2023-0568: Fixed NULL byte off-by-one in php_check_specific_open_basedir (bnc#1208366).
  - CVE-2023-0662: Fixed DoS vulnerability when parsing multipart request body (bnc#1208367).
  - CVE-2023-0567: Fixed vulnerability where BCrypt hashes erroneously validate if the salt is cut short by `$` (bsc#1208388).


              

Packages


  • php7-embed-7.4.33-150400.4.19.1