Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-4146


Security update for php7


Type: security
Severity: moderate
Issued: 2024-12-03
Description:
This update for php7 fixes the following issues:

- CVE-2024-11233: Single byte overread with convert.quoted-printable-decode filter (bsc#1233702).
- CVE-2024-11234: Configuring a proxy in a stream context might allow for CRLF injection in URIs (bsc#1233703).
- CVE-2024-8929: Leak partial content of the heap through heap buffer over-read (bsc#1233651).


              

Packages


  • php7-embed-7.4.33-150400.4.43.1