Уведомление безопасности openSUSE-SU-2018:4030-1

Критичная (8.5)

(AV:N/AC:M/Au:S/C:C/I:C/A:C)

SUSE

apache2-mod_php7 (any) apache2-mod_php7-debuginfo (any) php7 (any) php7-bcmath (any) php7-bcmath-debuginfo (any) php7-bz2 (any) php7-bz2-debuginfo (any) php7-calendar (any) php7-calendar-debuginfo (any) php7-ctype (any) php7-ctype-debuginfo (any) php7-curl (any) php7-curl-debuginfo (any) php7-dba (any) php7-dba-debuginfo (any) php7-debuginfo (any) php7-debugsource (any) php7-devel (any) php7-dom (any) php7-dom-debuginfo (any) php7-enchant (any) php7-enchant-debuginfo (any) php7-exif (any) php7-exif-debuginfo (any) php7-fastcgi (any) php7-fastcgi-debuginfo (any) php7-fileinfo (any) php7-fileinfo-debuginfo (any) php7-firebird (any) php7-firebird-debuginfo (any) php7-fpm (any) php7-fpm-debuginfo (any) php7-ftp (any) php7-ftp-debuginfo (any) php7-gd (any) php7-gd-debuginfo (any) php7-gettext (any) php7-gettext-debuginfo (any) php7-gmp (any) php7-gmp-debuginfo (any) php7-iconv (any) php7-iconv-debuginfo (any) php7-imap (any) php7-imap-debuginfo (any) php7-intl (any) php7-intl-debuginfo (any) php7-json (any) php7-json-debuginfo (any) php7-ldap (any) php7-ldap-debuginfo (any) php7-mbstring (any) php7-mbstring-debuginfo (any) php7-mcrypt (any) php7-mcrypt-debuginfo (any) php7-mysql (any) php7-mysql-debuginfo (any) php7-odbc (any) php7-odbc-debuginfo (any) php7-opcache (any) php7-opcache-debuginfo (any) php7-openssl (any) php7-openssl-debuginfo (any) php7-pcntl (any) php7-pcntl-debuginfo (any) php7-pdo (any) php7-pdo-debuginfo (any) php7-pear (any) php7-pear-Archive_Tar (any) php7-pgsql (any) php7-pgsql-debuginfo (any) php7-phar (any) php7-phar-debuginfo (any) php7-posix (any) php7-posix-debuginfo (any) php7-pspell (any) php7-pspell-debuginfo (any) php7-readline (any) php7-readline-debuginfo (any) php7-shmop (any) php7-shmop-debuginfo (any) php7-snmp (any) php7-snmp-debuginfo (any) php7-soap (any) php7-soap-debuginfo (any) php7-sockets (any) php7-sockets-debuginfo (any) php7-sqlite (any) php7-sqlite-debuginfo (any) php7-sysvmsg (any) php7-sysvmsg-debuginfo (any) php7-sysvsem (any) php7-sysvsem-debuginfo (any) php7-sysvshm (any) php7-sysvshm-debuginfo (any) php7-tidy (any) php7-tidy-debuginfo (any) php7-tokenizer (any) php7-tokenizer-debuginfo (any) php7-wddx (any) php7-wddx-debuginfo (any) php7-xmlreader (any) php7-xmlreader-debuginfo (any) php7-xmlrpc (any) php7-xmlrpc-debuginfo (any) php7-xmlwriter (any) php7-xmlwriter-debuginfo (any) php7-xsl (any) php7-xsl-debuginfo (any) php7-zip (any) php7-zip-debuginfo (any) php7-zlib (any) php7-zlib-debuginfo (any)

Уведомление безопасности об уязвимостях openSUSE Leap 42.3

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
openSUSE Leap 42.3:
i586, x86_64:
php7-fileinfo - 7.0.7-52.1
php7-gd - 7.0.7-52.1
php7-opcache - 7.0.7-52.1
php7-pdo - 7.0.7-52.1
php7-intl-debuginfo - 7.0.7-52.1
php7-fpm - 7.0.7-52.1
php7-exif-debuginfo - 7.0.7-52.1
php7-gettext - 7.0.7-52.1
php7-firebird - 7.0.7-52.1
php7-tidy - 7.0.7-52.1
php7-sysvmsg-debuginfo - 7.0.7-52.1
php7-xmlreader - 7.0.7-52.1
php7-shmop - 7.0.7-52.1
php7-snmp-debuginfo - 7.0.7-52.1
php7-ldap - 7.0.7-52.1
php7-soap-debuginfo - 7.0.7-52.1
php7-mysql-debuginfo - 7.0.7-52.1
php7-xmlwriter - 7.0.7-52.1
php7-gettext-debuginfo - 7.0.7-52.1
php7-sysvmsg - 7.0.7-52.1
php7-odbc-debuginfo - 7.0.7-52.1
php7-sqlite-debuginfo - 7.0.7-52.1
php7-posix-debuginfo - 7.0.7-52.1
php7-iconv - 7.0.7-52.1
php7-xmlreader-debuginfo - 7.0.7-52.1
php7-dba - 7.0.7-52.1
php7-mbstring - 7.0.7-52.1
php7-snmp - 7.0.7-52.1
php7-xmlrpc-debuginfo - 7.0.7-52.1
php7-enchant - 7.0.7-52.1
php7-dom - 7.0.7-52.1
php7-mcrypt-debuginfo - 7.0.7-52.1
php7-zip - 7.0.7-52.1
php7-xmlwriter-debuginfo - 7.0.7-52.1
php7-soap - 7.0.7-52.1
php7-pgsql-debuginfo - 7.0.7-52.1
php7-gmp-debuginfo - 7.0.7-52.1
php7-zlib - 7.0.7-52.1
php7-sockets - 7.0.7-52.1
php7-sockets-debuginfo - 7.0.7-52.1
php7-tokenizer - 7.0.7-52.1
php7-ftp-debuginfo - 7.0.7-52.1
php7-readline - 7.0.7-52.1
php7-xmlrpc - 7.0.7-52.1
php7-fpm-debuginfo - 7.0.7-52.1
php7-mcrypt - 7.0.7-52.1
php7-bcmath-debuginfo - 7.0.7-52.1
php7-gd-debuginfo - 7.0.7-52.1
php7-readline-debuginfo - 7.0.7-52.1
php7-dba-debuginfo - 7.0.7-52.1
php7-sqlite - 7.0.7-52.1
php7-zlib-debuginfo - 7.0.7-52.1
php7-iconv-debuginfo - 7.0.7-52.1
php7-mbstring-debuginfo - 7.0.7-52.1
php7-tokenizer-debuginfo - 7.0.7-52.1
php7-debuginfo - 7.0.7-52.1
php7-bcmath - 7.0.7-52.1
php7-fileinfo-debuginfo - 7.0.7-52.1
php7-bz2-debuginfo - 7.0.7-52.1
php7-pgsql - 7.0.7-52.1
php7-zip-debuginfo - 7.0.7-52.1
php7-dom-debuginfo - 7.0.7-52.1
php7-pspell-debuginfo - 7.0.7-52.1
php7-ctype - 7.0.7-52.1
php7-json - 7.0.7-52.1
php7-curl-debuginfo - 7.0.7-52.1
php7-ctype-debuginfo - 7.0.7-52.1
php7-fastcgi-debuginfo - 7.0.7-52.1
php7-calendar - 7.0.7-52.1
php7-firebird-debuginfo - 7.0.7-52.1
php7-intl - 7.0.7-52.1
php7-phar - 7.0.7-52.1
php7-devel - 7.0.7-52.1
php7-gmp - 7.0.7-52.1
php7-posix - 7.0.7-52.1
php7-calendar-debuginfo - 7.0.7-52.1
php7-sysvshm-debuginfo - 7.0.7-52.1
php7-pspell - 7.0.7-52.1
apache2-mod_php7-debuginfo - 7.0.7-52.1
php7-xsl-debuginfo - 7.0.7-52.1
php7-openssl - 7.0.7-52.1
php7-pcntl-debuginfo - 7.0.7-52.1
php7-curl - 7.0.7-52.1
php7-exif - 7.0.7-52.1
php7-tidy-debuginfo - 7.0.7-52.1
php7-imap-debuginfo - 7.0.7-52.1
php7-pcntl - 7.0.7-52.1
php7-mysql - 7.0.7-52.1
php7-phar-debuginfo - 7.0.7-52.1
php7-sysvsem - 7.0.7-52.1
php7 - 7.0.7-52.1
php7-openssl-debuginfo - 7.0.7-52.1
php7-pdo-debuginfo - 7.0.7-52.1
php7-wddx-debuginfo - 7.0.7-52.1
php7-imap - 7.0.7-52.1
php7-odbc - 7.0.7-52.1
php7-debugsource - 7.0.7-52.1
php7-json-debuginfo - 7.0.7-52.1
php7-bz2 - 7.0.7-52.1
php7-wddx - 7.0.7-52.1
php7-ldap-debuginfo - 7.0.7-52.1
apache2-mod_php7 - 7.0.7-52.1
php7-enchant-debuginfo - 7.0.7-52.1
php7-xsl - 7.0.7-52.1
php7-sysvsem-debuginfo - 7.0.7-52.1
php7-fastcgi - 7.0.7-52.1
php7-shmop-debuginfo - 7.0.7-52.1
php7-ftp - 7.0.7-52.1
php7-sysvshm - 7.0.7-52.1
php7-opcache-debuginfo - 7.0.7-52.1
openSUSE Leap 42.3:
noarch:
php7-pear-Archive_Tar - 7.0.7-52.1
php7-pear - 7.0.7-52.1

http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00008.html
https://bugzilla.suse.com/1117107

Источник: CVE
Наименование: CVE-2018-19518
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19518