File _patchinfo of Package patchinfo.12352
<patchinfo incident="12352">
<issue tracker="bnc" id="1151793">PHP pecl install does not work</issue>
<issue tracker="bnc" id="1146360">VUL-0: CVE-2019-11041: php5,php72,php7,php53: php: heap buffer over-read in exif_scan_thumbnail()</issue>
<issue tracker="bnc" id="1145095">VUL-1: CVE-2019-11042: php5,php72,php7,php53: php: heap buffer over-read in exif_process_user_comment()</issue>
<issue tracker="cve" id="2019-11041"/>
<issue tracker="cve" id="2019-11042"/>
<packager>pgajdos</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for php7</summary>
<description>This update for php7 fixes the following issues:
Security issues fixed:
- CVE-2019-11041: Fixed heap buffer over-read in exif_scan_thumbnail() (bsc#1146360).
- CVE-2019-11042: Fixed heap buffer over-read in exif_process_user_comment() (bsc#1145095).
Non-security issue fixed:
- Drop -n from php invocation from pecl (bsc#1151793).
</description>
</patchinfo>