SUSE-SU-2017:3277-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 13 Dec 2017, 16:12
Last modified:04 Feb 2026, 02:57

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

13 Dec 2017, 16:12
Published
Vulnerability first disclosed
04 Feb 2026, 02:57
Last Modified
Vulnerability information updated

Description

Security update for php5 This update for php5 fixes the following issues: Security issues fixed: - CVE-2017-16642: Fix timelib_meridian error that could be used to leak information from the interpreter (bsc#1067441). - CVE-2017-4025: Fix pathname truncation in set_include_path, tempnam, rmdir, and readlink (bsc#1067090). - CVE-2017-9228: Fix heap out-of-bounds write that occurs in bitset_set_range() during regex compilation (bsc#1069606). - CVE-2017-9229: Fix invalid pointer dereference in left_adjust_char_head() (bsc#1069631).

Affected Systems

  • suse•php5&distro=SUSE Linux Enterprise Module for Web and Scripting 12

    < 5.5.14-109.13.1

  • suse•php5&distro=SUSE Linux Enterprise Software Development Kit 12 SP2

    < 5.5.14-109.13.1

  • suse•php5&distro=SUSE Linux Enterprise Software Development Kit 12 SP3

    < 5.5.14-109.13.1

References (9)