SUSE-SU-2022:4068-1: php74&distro=SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2022:4068-1 is a vulnerability in php74&distro=SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 18 · Downstream 0 · Related 18Timeline
- 18-11-2022PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for php74 This update for php74 fixes the following issues: - Version update to 7.4.33: - CVE-2022-31630: Fixed out-of-bounds read due to insufficient input validation in imageloadfont() (bsc#1204979). - CVE-2022-37454: Fixed buffer overflow in hash_update() on long parameter (bsc#1204577). - Version update to 7.4.32 (jsc#SLE-23639) - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing 'quines' gzip files. (bsc#1203867) - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as secure in the victim's browser. (bsc#1203870)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- php74&distro=SUSE Linux Enterprise Module for Web and Scripting 12< 7.4.33-1.47.2
- php74&distro=SUSE Linux Enterprise Software Development Kit 12 SP5< 7.4.33-1.47.2
1 vendor · 2 products