SUSE-SU-2017:3237-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 07 Dec 2017, 14:32
Last modified:04 Feb 2026, 03:42

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

07 Dec 2017, 14:32
Published
Vulnerability first disclosed
04 Feb 2026, 03:42
Last Modified
Vulnerability information updated

Description

Security update for php7 This update for php7 fixes the following issues: Security issues fixed: - CVE-2017-16642: Fix timelib_meridian error that could be used to leak information from the interpreter (bsc#1067441). - CVE-2017-9229: Fix invalid pointer dereference in left_adjust_char_head() (bsc#1069631). - CVE-2017-9228: Fix heap out-of-bounds write that occurs in bitset_set_range() during regex compilation (bsc#1069606). Bugs fixed: - Fix wrong reference when serialize/unserialize an object (bsc#1063815).

Affected Systems

  • suse•php7&distro=SUSE Linux Enterprise Module for Web and Scripting 12

    < 7.0.7-50.23.1

  • suse•php7&distro=SUSE Linux Enterprise Software Development Kit 12 SP2

    < 7.0.7-50.23.1

  • suse•php7&distro=SUSE Linux Enterprise Software Development Kit 12 SP3

    < 7.0.7-50.23.1

References (8)