File _patchinfo of Package patchinfo.12352

<patchinfo incident="12352">
  <issue tracker="bnc" id="1151793">PHP pecl install does not work</issue>
  <issue tracker="bnc" id="1146360">VUL-0: CVE-2019-11041: php5,php72,php7,php53: php: heap buffer over-read in exif_scan_thumbnail()</issue>
  <issue tracker="bnc" id="1145095">VUL-1: CVE-2019-11042: php5,php72,php7,php53: php: heap buffer over-read in exif_process_user_comment()</issue>
  <issue tracker="cve" id="2019-11041"/>
  <issue tracker="cve" id="2019-11042"/>
  <packager>pgajdos</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for php7</summary>
  <description>This update for php7 fixes the following issues:

Security issues fixed:

- CVE-2019-11041: Fixed heap buffer over-read in exif_scan_thumbnail() (bsc#1146360).
- CVE-2019-11042: Fixed heap buffer over-read in exif_process_user_comment() (bsc#1145095).

Non-security issue fixed:

- Drop -n from php invocation from pecl (bsc#1151793).
</description>
</patchinfo>
openSUSE Build Service is sponsored by