Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Leap:15.5:Update
patchinfo.26013
_patchinfo
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File _patchinfo of Package patchinfo.26013
<patchinfo incident="26013"> <issue tracker="jsc" id="SLE-23639"/> <issue tracker="jsc" id="SLE-24723"/> <issue tracker="bnc" id="1200772">php8-devel lacks requires</issue> <issue tracker="bnc" id="1192050">VUL-0: CVE-2021-21703: php74,php5,php72,php53,php7: php: Local privilege escalation via PHP-FPM</issue> <issue tracker="bnc" id="1203867">VUL-0: CVE-2022-31628: php5,php72,php74,php8,php53,php7: uncontrolled recursion in the phar uncompressor while decompressing "quines" gzip files</issue> <issue tracker="bnc" id="1203870">VUL-0: CVE-2022-31629: php72,php7,php5,php8,php53,php74: attackers may be able to set an insecure cookie that will treated as secure in the victim's browser</issue> <issue tracker="cve" id="2021-21703"/> <issue tracker="cve" id="2022-31628"/> <issue tracker="cve" id="2022-31629"/> <packager>pgajdos</packager> <rating>important</rating> <category>security</category> <summary>Security update for php8</summary> <description>This update for php8 fixes the following issues: - php8 was updated to version 8.0.24 - php8 was updated to version 8.0.23 (jsc#SLE-23639). - CVE-2021-21703: Fixed a local privilege escalation via PHP-FPM. (bsc#1192050) - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing "quines" gzip files. (bsc#1203867) - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as secure in the victim's browser. (bsc#1203870) - Fixed missing devel package requires pear and pecl extensions (jsc#SLE-24723, bsc#1200772). </description> </patchinfo>
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor