OPENSUSE-SU-2021:3943-1
Advisory lineage Upstream: 2 Downstream: 0
Upstream
Published: 06 Dec 2021, 13:47
Last modified:04 Feb 2026, 04:40
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
06 Dec 2021, 13:47
Published
Vulnerability first disclosed
04 Feb 2026, 04:40
Last Modified
Vulnerability information updated
Description
Recommended update for php7 This update for php7 fixes the following issues: - CVE-2021-21703: Fixed local privilege escalation via PHP-FPM (bsc#1192050). - CVE-2021-21707: Fixed special character breaks path in xml parsing (bsc#1193041). - Added patch to prevent memory access violation in php7 when running test suite (bsc#1175508)
Affected Systems
- opensuse•php7-test&distro=openSUSE Leap 15.3
< 7.4.6-3.29.1
- opensuse•php7&distro=openSUSE Leap 15.3
< 7.4.6-3.29.1
References (6)
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D5SCXUGIHHCMMDJ4KQPRDMJZB4DQFEII/
- https://bugzilla.suse.com/1175508
- https://bugzilla.suse.com/1192050
- https://bugzilla.suse.com/1193041
- https://www.suse.com/security/cve/CVE-2021-21703
- https://www.suse.com/security/cve/CVE-2021-21707