Unscored SUSE-RU-2019:0823-1 7 CVEs

Optional update for php72

Published Mar 29, 2019 · Updated May 2, 2025

Ecosystem: SUSE

Summary

This update provides PHP 7.2 and subpackages to the SUSE Linux Enterprise 12 Web and Scripting Module.

It is a replacement of the php7 packages, the packages do not co-exist.

The mcrypt extensions was removed in PHP 7.2.

Fixed packages 13

Release	Package	Fixed in
SUSE · SLES 12 Linux Enterprise Module for Web and Scripting 12	libmemcached	1.0.18-3.2.1
SUSE · SLES 12 Linux Enterprise Module for Web and Scripting 12	php72	7.2.5-1.7.1
SUSE · SLES 12 Linux Enterprise Module for Web and Scripting 12	php72-memcached	3.1.3-1.3.1
SUSE · SLES 12 Linux Enterprise Module for Web and Scripting 12	tidy	1.0.20100204cvs-26.2.1
SUSE · SLES 12 SP3 Linux Enterprise Server 12 SP3	libmemcached	1.0.18-3.2.1
SUSE · SLES 12 SP4 Linux Enterprise Server 12 SP4	libmemcached	1.0.18-3.2.1
SUSE · SLES for SAP 12 SP3 Linux Enterprise Server for SAP Applications 12 SP3	libmemcached	1.0.18-3.2.1
SUSE · SLES for SAP 12 SP4 Linux Enterprise Server for SAP Applications 12 SP4	libmemcached	1.0.18-3.2.1
SUSE · SLES 12 SP3 Linux Enterprise Software Development Kit 12 SP3	php72	7.2.5-1.7.1
SUSE · SLES 12 SP3 Linux Enterprise Software Development Kit 12 SP3	tidy	1.0.20100204cvs-26.2.1
SUSE · SLES 12 SP4 Linux Enterprise Software Development Kit 12 SP4	libmemcached	1.0.18-3.2.1
SUSE · SLES 12 SP4 Linux Enterprise Software Development Kit 12 SP4	php72	7.2.5-1.7.1
SUSE · SLES 12 SP4 Linux Enterprise Software Development Kit 12 SP4	tidy	1.0.20100204cvs-26.2.1

Vulnerabilities 7

Unscored —

CVE-2018-20783

In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR readi…

php5 php7.0 php7.2 php7 Ubuntu Alpine

Feb 21, 2019
Unscored —

CVE-2019-9020 EPSS 10%

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid i…

php5 php7.0 php7.2 php7 Ubuntu Alpine

Feb 22, 2019
Unscored —

CVE-2019-9021 EPSS 10%

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-ba…

php5 php7.0 php7.2 php7 Ubuntu Alpine

Feb 22, 2019
Unscored —

CVE-2019-9022

An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses…

php5 php7.0 php7.2 php7 Ubuntu Alpine

Feb 22, 2019
Unscored —

CVE-2019-9023

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number …

php5 php7.0 php7.2 php7 Ubuntu Alpine

Feb 22, 2019
Unscored —

CVE-2019-9024

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_de…

php5 php7.0 php7.2 php7 Ubuntu Alpine

Feb 22, 2019
Unscored —

CVE-2019-9641

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There …

php5 php7.0 php7.2 php7 Ubuntu Alpine

Mar 8, 2019

References

report
https://bugzilla.suse.com/1126314
report
https://bugzilla.suse.com/1129032
web
https://www.suse.com/security/cve/CVE-2018-20783
web
https://www.suse.com/security/cve/CVE-2019-9020
web
https://www.suse.com/security/cve/CVE-2019-9021
web
https://www.suse.com/security/cve/CVE-2019-9022
web
https://www.suse.com/security/cve/CVE-2019-9023
web
https://www.suse.com/security/cve/CVE-2019-9024
web
https://www.suse.com/security/cve/CVE-2019-9641