File _patchinfo of Package patchinfo.7861
<patchinfo incident="7861">
<issue tracker="bnc" id="1099098">VUL-0: CVE-2018-12882: php7: exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allowsattackers to trigger a use-after-free (in exif_read_from_file) because it closesa stream that it is not responsible for closing. The vuln</issue>
<issue tracker="cve" id="2018-12882"/>
<category>security</category>
<rating>moderate</rating>
<packager>pgajdos</packager>
<description>This update for php7 fixes the following issues:
- CVE-2018-12882: exif_read_from_impl allowed attackers to trigger a
use-after-free (in exif_read_from_file) because it closed a stream that it is
not responsible for closing (bsc#1099098)
</description>
<summary>Security update for php7</summary>
</patchinfo>