File _patchinfo of Package patchinfo.21654

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.21654

<patchinfo incident="21654">
  <issue tracker="bnc" id="1192050">VUL-0: CVE-2021-21703: php74,php5,php72,php53,php7: php: Local privilege escalation via PHP-FPM</issue>
  <issue tracker="bnc" id="1193041">VUL-0: CVE-2021-21707: php72,php7,php74,php53,php5: php: special character breaks path in xml parsing</issue>
  <issue tracker="bnc" id="1038980">VUL-1: CVE-2017-8923: php7: denial of service (application crash) by using .= with a long string (zend_string_extend func in Zend/zend_string.h)</issue>
  <issue tracker="bnc" id="1081790">VUL-0: CVE-2015-9253: php5, php53, php7: The php-fpm master process restarts a child process in an endless loop when using program execution functions</issue>
  <issue tracker="cve" id="2015-9253"/>
  <issue tracker="cve" id="2017-8923"/>
  <issue tracker="cve" id="2021-21703" />
  <issue tracker="cve" id="2021-21707" />
  <packager>pgajdos</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for php7</summary>
  <description>This update for php7 fixes the following issues:

- CVE-2021-21703: Fixed local privilege escalation via PHP-FPM (bsc#1192050).
- CVE-2021-21707: Fixed special character breaks path in xml parsing (bsc#1193041).
- CVE-2017-8923: Fixed denial of service (application crash) when using .= with a long string (zend_string_extend func in Zend/zend_string.h) (bsc#1038980).
- CVE-2015-9253: Fixed endless loop when the master process restarts a child process using program execution functions (bsc#1081790).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.21654

Places