File _patchinfo of Package patchinfo.7861

<patchinfo incident="7861">
  <issue tracker="bnc" id="1099098">VUL-0: CVE-2018-12882: php7: exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allowsattackers to trigger a use-after-free (in exif_read_from_file) because it closesa stream that it is not responsible for closing. The vuln</issue>
  <issue tracker="cve" id="2018-12882"/>
  <category>security</category>
  <rating>moderate</rating>
  <packager>pgajdos</packager>
  <description>This update for php7 fixes the following issues:

- CVE-2018-12882: exif_read_from_impl allowed attackers to trigger a
  use-after-free (in exif_read_from_file) because it closed a stream that it is
  not responsible for closing (bsc#1099098)
</description>
  <summary>Security update for php7</summary>
</patchinfo>
openSUSE Build Service is sponsored by