RHSA-2020:1624
Vulnerability from csaf_opensuse - Published: 2020-04-28 00:00 - Updated: 2026-09-20 11:08Summary
security update for libzip
Severity
Moderate
Notes
Title of the patch: security update for libzip
Description of the patch: This security update provides a functional equivalent of RHSA-2020:1624.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2020:1624.
Patchnames: RHSA-2020:1624
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 | — |
Vendor Fix
|
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
moderate
4 (Medium)
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
low
4.3 (Medium)
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
moderate
5.4 (Medium)
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
moderate
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
low
6.5 (Medium)
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
moderate
5.1 (Medium)
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
moderate
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
low
5.3 (Medium)
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
moderate
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
low
Affected products
Recommended
35 products, the same list as for
CVE-2018-20783
Threats
Impact
low
References
54 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for libzip",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2020:1624.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2020:1624.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2020:1624",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2020_1624.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-20783 page",
"url": "https://www.suse.com/security/cve/CVE-2018-20783/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11034 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11034/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11035 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11035/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11036 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11036/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11039 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11039/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11040 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11040/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11041 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11041/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11042 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9020 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9021 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9022 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9022/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9023 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9023/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9024 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9024/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9637 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9638 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9638/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9639 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9640 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9640/"
}
],
"title": "security update for libzip",
"tracking": {
"current_release_date": "2026-09-20T11:08:18Z",
"generator": {
"date": "2020-04-28T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2020:1624",
"initial_release_date": "2020-04-28T00:00:00Z",
"revision_history": [
{
"date": "2020-04-28T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:08:18Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"product": {
"name": "apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch (php:7.2)",
"product_id": "apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/apcu-panel@5.1.12-2.module+el8.1.0+3202+af5476b9?arch=noarch\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"product": {
"name": "php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch (php:7.2)",
"product_id": "php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-pear@1.10.5-9.module+el8.1.0+3202+af5476b9?arch=noarch\u0026rpmmod=php:7.2:8000020200428214954:rhel8\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"product": {
"name": "libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64 (php:7.2)",
"product_id": "libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libzip:libzip:1.5.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libzip@1.5.1-2.module+el8.1.0+3202+af5476b9?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"product": {
"name": "libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64 (php:7.2)",
"product_id": "libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libzip:libzip:1.5.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libzip-devel@1.5.1-2.module+el8.1.0+3202+af5476b9?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8\u0026upstream=libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"product": {
"name": "libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64 (php:7.2)",
"product_id": "libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libzip:libzip:1.5.1:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libzip-tools@1.5.1-2.module+el8.1.0+3202+af5476b9?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8\u0026upstream=libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.src.rpm"
}
}
},
{
"category": "product_version",
"name": "php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-bcmath@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-cli@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-common@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-dba@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-dbg@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-devel@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-embedded@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-enchant@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-fpm@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-gd@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-gmp@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-intl@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-json@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-ldap@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-mbstring@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-mysqlnd@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-odbc@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-opcache@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-pdo@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"product": {
"name": "php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64 (php:7.2)",
"product_id": "php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-pecl-apcu@5.1.12-2.module+el8.1.0+3202+af5476b9?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"product": {
"name": "php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64 (php:7.2)",
"product_id": "php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-pecl-apcu-devel@5.1.12-2.module+el8.1.0+3202+af5476b9?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"product": {
"name": "php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64 (php:7.2)",
"product_id": "php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-pecl-zip@1.15.3-1.module+el8.1.0+3186+20164e6f?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-pgsql@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-process@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-recode@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-snmp@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-soap@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-xml@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
},
{
"category": "product_version",
"name": "php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product": {
"name": "php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64 (php:7.2)",
"product_id": "php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/php-xmlrpc@7.2.24-1.module+el8.2.0+4601+7c76a223?arch=x86_64\u0026rpmmod=php:7.2:8000020200428214954:rhel8"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2"
},
"product_reference": "apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2"
},
"product_reference": "libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2"
},
"product_reference": "libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2"
},
"product_reference": "libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2"
},
"product_reference": "php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2"
},
"product_reference": "php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2"
},
"product_reference": "php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2"
},
"product_reference": "php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
},
"product_reference": "php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-20783",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-20783"
}
],
"notes": [
{
"category": "general",
"text": "In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to phar_parse_pharfile in ext/phar/phar.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-20783",
"url": "https://www.suse.com/security/cve/CVE-2018-20783"
},
{
"category": "external",
"summary": "SUSE Bug 1126713 for CVE-2018-20783",
"url": "https://bugzilla.suse.com/1126713"
},
{
"category": "external",
"summary": "SUSE Bug 1127122 for CVE-2018-20783",
"url": "https://bugzilla.suse.com/1127122"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-20783"
},
{
"cve": "CVE-2019-11034",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11034"
}
],
"notes": [
{
"category": "general",
"text": "When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11034",
"url": "https://www.suse.com/security/cve/CVE-2019-11034"
},
{
"category": "external",
"summary": "SUSE Bug 1132838 for CVE-2019-11034",
"url": "https://bugzilla.suse.com/1132838"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11034"
},
{
"cve": "CVE-2019-11035",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11035"
}
],
"notes": [
{
"category": "general",
"text": "When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11035",
"url": "https://www.suse.com/security/cve/CVE-2019-11035"
},
{
"category": "external",
"summary": "SUSE Bug 1132837 for CVE-2019-11035",
"url": "https://bugzilla.suse.com/1132837"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11035"
},
{
"cve": "CVE-2019-11036",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11036"
}
],
"notes": [
{
"category": "general",
"text": "When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11036",
"url": "https://www.suse.com/security/cve/CVE-2019-11036"
},
{
"category": "external",
"summary": "SUSE Bug 1134322 for CVE-2019-11036",
"url": "https://bugzilla.suse.com/1134322"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11036"
},
{
"cve": "CVE-2019-11039",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11039"
}
],
"notes": [
{
"category": "general",
"text": "Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11039",
"url": "https://www.suse.com/security/cve/CVE-2019-11039"
},
{
"category": "external",
"summary": "SUSE Bug 1138173 for CVE-2019-11039",
"url": "https://bugzilla.suse.com/1138173"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-11039"
},
{
"cve": "CVE-2019-11040",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11040"
}
],
"notes": [
{
"category": "general",
"text": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11040",
"url": "https://www.suse.com/security/cve/CVE-2019-11040"
},
{
"category": "external",
"summary": "SUSE Bug 1138172 for CVE-2019-11040",
"url": "https://bugzilla.suse.com/1138172"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11040"
},
{
"cve": "CVE-2019-11041",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11041"
}
],
"notes": [
{
"category": "general",
"text": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11041",
"url": "https://www.suse.com/security/cve/CVE-2019-11041"
},
{
"category": "external",
"summary": "SUSE Bug 1146360 for CVE-2019-11041",
"url": "https://bugzilla.suse.com/1146360"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11041"
},
{
"cve": "CVE-2019-11042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11042"
}
],
"notes": [
{
"category": "general",
"text": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11042",
"url": "https://www.suse.com/security/cve/CVE-2019-11042"
},
{
"category": "external",
"summary": "SUSE Bug 1145095 for CVE-2019-11042",
"url": "https://bugzilla.suse.com/1145095"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11042"
},
{
"cve": "CVE-2019-9020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9020"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9020",
"url": "https://www.suse.com/security/cve/CVE-2019-9020"
},
{
"category": "external",
"summary": "SUSE Bug 1126711 for CVE-2019-9020",
"url": "https://bugzilla.suse.com/1126711"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-9020"
},
{
"cve": "CVE-2019-9021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9021"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the file name, a different vulnerability than CVE-2018-20783. This is related to phar_detect_phar_fname_ext in ext/phar/phar.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9021",
"url": "https://www.suse.com/security/cve/CVE-2019-9021"
},
{
"category": "external",
"summary": "SUSE Bug 1126713 for CVE-2019-9021",
"url": "https://bugzilla.suse.com/1126713"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-9021"
},
{
"cve": "CVE-2019-9022",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9022"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects php_parserr in ext/standard/dns.c for DNS_CAA and DNS_ANY queries.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9022",
"url": "https://www.suse.com/security/cve/CVE-2019-9022"
},
{
"category": "external",
"summary": "SUSE Bug 1126827 for CVE-2019-9022",
"url": "https://bugzilla.suse.com/1126827"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-9022"
},
{
"cve": "CVE-2019-9023",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9023"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in ext/mbstring/oniguruma/regcomp.c, ext/mbstring/oniguruma/regexec.c, ext/mbstring/oniguruma/regparse.c, ext/mbstring/oniguruma/enc/unicode.c, and ext/mbstring/oniguruma/src/utf32_be.c when a multibyte regular expression pattern contains invalid multibyte sequences.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9023",
"url": "https://www.suse.com/security/cve/CVE-2019-9023"
},
{
"category": "external",
"summary": "SUSE Bug 1126823 for CVE-2019-9023",
"url": "https://bugzilla.suse.com/1126823"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-9023"
},
{
"cve": "CVE-2019-9024",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9024"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9024",
"url": "https://www.suse.com/security/cve/CVE-2019-9024"
},
{
"category": "external",
"summary": "SUSE Bug 1126821 for CVE-2019-9024",
"url": "https://bugzilla.suse.com/1126821"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-9024"
},
{
"cve": "CVE-2019-9637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9637"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9637",
"url": "https://www.suse.com/security/cve/CVE-2019-9637"
},
{
"category": "external",
"summary": "SUSE Bug 1128892 for CVE-2019-9637",
"url": "https://bugzilla.suse.com/1128892"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-9637"
},
{
"cve": "CVE-2019-9638",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9638"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note-\u003eoffset relationship to value_len.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9638",
"url": "https://www.suse.com/security/cve/CVE-2019-9638"
},
{
"category": "external",
"summary": "SUSE Bug 1128889 for CVE-2019-9638",
"url": "https://bugzilla.suse.com/1128889"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-9638"
},
{
"cve": "CVE-2019-9639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9639"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9639",
"url": "https://www.suse.com/security/cve/CVE-2019-9639"
},
{
"category": "external",
"summary": "SUSE Bug 1128887 for CVE-2019-9639",
"url": "https://bugzilla.suse.com/1128887"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-9639"
},
{
"cve": "CVE-2019-9640",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9640"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9640",
"url": "https://www.suse.com/security/cve/CVE-2019-9640"
},
{
"category": "external",
"summary": "SUSE Bug 1128883 for CVE-2019-9640",
"url": "https://bugzilla.suse.com/1128883"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:apcu-panel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:libzip-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-devel-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:libzip-tools-0:1.5.1-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-bcmath-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-cli-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-common-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dba-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-dbg-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-devel-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-embedded-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-enchant-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-fpm-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-gmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-intl-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-json-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-ldap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mbstring-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-mysqlnd-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-odbc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-opcache-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pdo-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pear-1:1.10.5-9.module+el8.1.0+3202+af5476b9.noarch::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-apcu-devel-0:5.1.12-2.module+el8.1.0+3202+af5476b9.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pecl-zip-0:1.15.3-1.module+el8.1.0+3186+20164e6f.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-pgsql-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-process-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-recode-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-snmp-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-soap-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xml-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2",
"SUSE Liberty Linux 8:php-xmlrpc-0:7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64::php:7.2"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-04-28T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-9640"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…