SUSE-SU-2019:1746-1

Details

This update for php5 fixes the following issues:

Security issues fixed:

CVE-2019-11039: Fixed a heap-buffer-overflow on php_jpg_get16 (bsc#1138173).
CVE-2019-11040: Fixed an out-of-bounds read due to an integer overflow in iconv.c:_php_iconv_mime_decode() (bsc#1138172).
CVE-2015-1351: Fixed a use after free in opcache extension (bsc#1137633).

Affected Packages(54 packages)

apache2-mod_php5

SUSE Linux Enterprise Module for Web and Scripting 12

Fixed in:

5.5.14-109.63.2

php5

SUSE Linux Enterprise Module for Web and Scripting 12SUSE Linux Enterprise Software Development Kit 12 SP3SUSE Linux Enterprise Software Development Kit 12 SP4

Fixed in:

5.5.14-109.63.2

php5-bcmath

SUSE Linux Enterprise Module for Web and Scripting 12

Fixed in:

5.5.14-109.63.2

php5-bz2

SUSE Linux Enterprise Module for Web and Scripting 12

Fixed in:

5.5.14-109.63.2

php5-calendar

SUSE Linux Enterprise Module for Web and Scripting 12