SUSE-SU-2023:3498-1: Security update for php7
This update for php7 fixes the following issues: CVE-2023-3823: Fixed an issue with external entity loading in XML without enabling it. (bsc#1214106) CVE-2023-3824: Fixed a buffer overflow in phardirread(). (bsc#1214103)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/php7-bcmath-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-shmop-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-pgsql-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-readlineto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-dba-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-develto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-intl-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-fastcgito a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-zlibto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-fpmto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7to a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-sysvshmto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-tidy-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-pdo-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-fileinfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-mysql-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-curlto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-socketsto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-mysqlto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-sqlite-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-mbstring-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-zip-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-xmlreaderto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-sysvmsg-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-iconvto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-ldap-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-exif-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-fpm-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-fileinfo-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-jsonto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-snmpto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-domto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-odbcto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-posix-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-opcacheto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-ctypeto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-enchant-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-ctype-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-sodium-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-dbato a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-tidyto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-gettextto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-xmlwriterto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-posixto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-ftpto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-sysvshm-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-xmlreader-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-xsl-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-xslto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-pcntl-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-zipto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-shmopto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-zlib-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-ldapto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-sodiumto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-xmlrpcto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-opensslto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-tokenizer-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-debugsourceto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-odbc-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-gdto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-pgsqlto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-gmp-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-gmpto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-ftp-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-bz2-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-dom-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-calendar-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-gettext-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-soapto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-sockets-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-curl-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-sysvsem-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-soap-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-openssl-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-sysvmsgto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-sysvsemto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-tokenizerto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-xmlwriter-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-readline-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-enchantto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-fastcgi-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-bz2to a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-pdoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-xmlrpc-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-sqliteto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-pcntlto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-iconv-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-gd-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-intlto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-opcache-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-exifto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-mbstringto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-json-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-pharto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-calendarto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-phar-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-snmp-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-bcmathto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3.60.1 - Upgrade
Upgrade
suse/php7-xmlreaderto a version that resolves this vulnerability.Fixed in 7.4.33-150200.3 - Upgrade
Upgrade
php7to a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-3498=1 - Upgrade
Upgrade
php7to a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-3498=1 - Upgrade
Upgrade
php7to a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-3498=1 - Upgrade
Upgrade
php7to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-3498=1 - Upgrade
Upgrade
php7to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-3498=1 - Upgrade
Upgrade
php7to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-3498=1 - Upgrade
Upgrade
php7to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-3498=1 - Upgrade
Upgrade
php7to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3498=1 - Upgrade
Upgrade
php7to a version that resolves this vulnerability.Patch SUSE-Storage-7-2023-3498=1 - Upgrade
Upgrade
php7to a version that resolves this vulnerability.Patch SUSE-Storage-7.1-2023-3498=1 - Upgrade
Upgrade
php7to a version that resolves this vulnerability.Patch openSUSE-SLE-15.4-2023-3498=1