Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2020.0066
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2020-0066)
Zusammenfassung:	The remote host is missing an update for the 'php' package(s) announced via the MGASA-2020-0066 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'php' package(s) announced via the MGASA-2020-0066 advisory. Vulnerability Insight: Updated php packages fix security vulnerabilities: Two buffer overflows in string and mbstring handling have been found (CVE-2020-7059, CVE-2020-7060). Other security fixes have been applied: - Session: Fixed bug #79091 (heap use-after-free in session_create_id()). - Date: Fixed bug #79015 (undefined-behavior in php_date.c). For other fixes in this update, see the referenced chagelog. Affected Software/OS: 'php' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-7059 Bugtraq: 20200218 [SECURITY] [DSA 4626-1] php7.3 security update (Google Search) https://seclists.org/bugtraq/2020/Feb/27 Bugtraq: 20200219 [SECURITY] [DSA 4628-1] php7.0 security update (Google Search) https://seclists.org/bugtraq/2020/Feb/31 Bugtraq: 20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update (Google Search) https://seclists.org/bugtraq/2021/Jan/3 https://security.netapp.com/advisory/ntap-20200221-0002/ Debian Security Information: DSA-4626 (Google Search) https://www.debian.org/security/2020/dsa-4626 Debian Security Information: DSA-4628 (Google Search) https://www.debian.org/security/2020/dsa-4628 https://security.gentoo.org/glsa/202003-57 https://bugs.php.net/bug.php?id=79099 https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpujul2020.html https://lists.debian.org/debian-lts-announce/2020/02/msg00030.html SuSE Security Announcement: openSUSE-SU-2020:0341 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html https://usn.ubuntu.com/4279-1/ Common Vulnerability Exposure (CVE) ID: CVE-2020-7060 https://bugs.php.net/bug.php?id=79037
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.