File _patchinfo of Package patchinfo.14671

<patchinfo incident="14671">
  <issue tracker="cve" id="2020-7066"/>
  <issue tracker="cve" id="2020-7064"/>
  <issue tracker="bnc" id="1168326">VUL-1: CVE-2020-7064: php5,php72,php7,php53:  read one byte of uninitialized memory via malicious data</issue>
  <issue tracker="bnc" id="1168352">VUL-1: CVE-2020-7066: php72,php7: URL truncation if the URL contains zero (\0) character</issue>
  <summary>Security update for php7</summary>
  <description>This update for php7 fixes the following issues:

- CVE-2020-7064: Fixed a one byte read of uninitialized memory in exif_read_data() (bsc#1168326).
- CVE-2020-7066: Fixed URL truncation get_headers() if the URL contains zero (\0) character (bsc#1168352).
openSUSE Build Service is sponsored by