File _patchinfo of Package patchinfo.7720

<patchinfo incident="7720">
  <issue id="1096984" tracker="bnc">VUL-1: CVE-2018-10360: php5,php53,php7: The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remoteattackers to cause a denial of service (out-of-bounds read and applicationcrash) via a crafted ELF file.</issue>
  <issue id="1103659" tracker="bnc">VUL-1: CVE-2018-14851: php5,php7,php53: exif: buffer over-read in exif_process_IFD_in_MAKERNOTE()</issue>
  <issue id="1105466" tracker="bnc">VUL-0: CVE-2017-9118: php5,php7,php53: Out of bounds access in php_pcre.c:php_pcre_replace_impl()</issue>
  <issue id="1099098" tracker="bnc">VUL-0: CVE-2018-12882: php7: exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allowsattackers to trigger a use-after-free (in exif_read_from_file) because it closesa stream that it is not responsible for closing. The vuln</issue>
  <issue tracker="cve" id="2018-10360"/>
  <issue tracker="cve" id="2018-14851"/>
  <issue tracker="cve" id="2018-12882"/>
  <issue tracker="cve" id="2017-9118"/>
  <category>security</category>
  <rating>moderate</rating>
  <packager>pgajdos</packager>
  <description>This update for php5 fixes the following issues:

The following security issues were fixed:

- CVE-2018-10360: Fixed an out-of-bounds read in the do_core_note function in
  readelf.c in libmagic.a, which allowed remote attackers to cause a denial of
  service via a crafted ELF file (bsc#1096984)
- CVE-2018-14851: Fixed an out-of-bound read in exif_process_IFD_in_MAKERNOTE,
  which could be exploited by an attacker via crafted JPG files, and could
  result in an application crash. (bsc#1103659)
- CVE-2018-12882: Fixed an use-after-free in exif_read_from_impl in
  ext/exif/exif.c (bsc#1099098)
- CVE-2017-9118: Fixed an out of bounds access in php_pcre_replace_impl via a
  crafted preg_replace call (bsc#1105466)
</description>
  <summary>Security update for php5</summary>
</patchinfo>