OPENSUSE-SU-2020:0642-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 09 May 2020, 22:20
Last modified:04 Feb 2026, 02:13

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 May 2020, 22:20
Published
Vulnerability first disclosed
04 Feb 2026, 02:13
Last Modified
Vulnerability information updated

Description

Security update for php7 This update for php7 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exif_read_data() (bsc#1168326). - CVE-2020-7066: Fixed URL truncation get_headers() if the URL contains zero (\0) character (bsc#1168352). This update was imported from the SUSE:SLE-15:Update update project.

Affected Systems

  • opensuse•php7-test&distro=openSUSE Leap 15.1

    < 7.2.5-lp151.6.25.1

  • opensuse•php7&distro=openSUSE Leap 15.1

    < 7.2.5-lp151.6.25.1

  • opensuse•tidy&distro=openSUSE Leap 15.1

    < 5.4.0-lp151.3.3.1

References (5)