SUSE-SU-2023:3498-1

UNKNOWN

Security update for php7

Published Aug 31, 2023

Modified 2 years ago

Fix available

Details

This update for php7 fixes the following issues:

CVE-2023-3823: Fixed an issue with external entity loading in XML without enabling it. (bsc#1214106)
CVE-2023-3824: Fixed a buffer overflow in phar_dir_read(). (bsc#1214103)

Affected Packages(52 packages)

apache2-mod_php7

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

Fixed in:

7.4.33-150200.3.60.1

php7

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

Fixed in:

7.4.33-150200.3.60.1

php7-bcmath

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

Fixed in:

7.4.33-150200.3.60.1

php7-bz2

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

Fixed in:

7.4.33-150200.3.60.1

php7-calendar

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

Fixed in:

7.4.33-150200.3.60.1

php7-ctype

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

Fixed in:

7.4.33-150200.3.60.1

php7-curl

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

Fixed in:

7.4.33-150200.3.60.1

php7-dba

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

Fixed in:

7.4.33-150200.3.60.1

php7-devel

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

Fixed in:

7.4.33-150200.3.60.1

php7-dom

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

Fixed in:

7.4.33-150200.3.60.1

References

https://bugzilla.suse.com/1214103

https://bugzilla.suse.com/1214106

https://www.suse.com/security/cve/CVE-2023-3823

https://www.suse.com/security/cve/CVE-2023-3824

https://www.suse.com/support/update/announcement/2023/suse-su-20233498-1/

Upstream

CVE-2023-3823 CVE-2023-3824

Related

CVE-2023-3823 CVE-2023-3824

Ecosystems(11)

SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

Timeline

PublishedAug 31, 2023

ModifiedAug 31, 2023

SUSE-SU-2023:3498-1 | Mondoo Vulnerability Intelligence