VDB
SUSE-SU-2022%3A4069-1
SUSE-SU-2022%3A4069-1
PUBLISHED
CVSS 8.600000381469727 HIGH
Record from OSV · Published November 18, 2022
Security update for php7
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| php7 | SUSE:Manager Retail Branch Server 4.1 | 7.4.33-150200.3.46.2 |
| php7 | SUSE:Linux Enterprise Module for Web and Scripting 15 SP3 | 7.4.33-150200.3.46.2 |
| php7 | SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | 7.4.33-150200.3.46.2 |
| php7 | SUSE:Manager Server 4.1 | 7.4.33-150200.3.46.2 |
| php7 | SUSE:Linux Enterprise Server 15 SP2-LTSS | 7.4.33-150200.3.46.2 |
| php7 | SUSE:Linux Enterprise Module for Package Hub 15 SP3 | 7.4.33-150200.3.46.2 |
| php7 | SUSE:Manager Proxy 4.1 | 7.4.33-150200.3.46.2 |
| php7 | openSUSE:Leap 15.4 | 7.4.33-150200.3.46.2 |
| php7 | SUSE:Enterprise Storage 7 | 7.4.33-150200.3.46.2 |
| php7-test | openSUSE:Leap 15.3 | 7.4.33-150200.3.46.2 |
| php7 | SUSE:Linux Enterprise Server 15 SP2-BCL | 7.4.33-150200.3.46.2 |
| php7 | SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS | 7.4.33-150200.3.46.2 |
2 more packages have a fixed version. See every fix in Lookup.
Risk scores
CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| SUSE:Manager Retail Branch Server 4.1 | php7 | 0 |
| SUSE:Linux Enterprise Module for Web and Scripting 15 SP3 | php7 | 0 |
| SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | php7 | 0 |
| SUSE:Manager Server 4.1 | php7 | 0 |
| SUSE:Linux Enterprise Server 15 SP2-LTSS | php7 | 0 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP3 | php7 | 0 |
| SUSE:Manager Proxy 4.1 | php7 | 0 |
| openSUSE:Leap 15.4 | php7 | 0 |
| SUSE:Enterprise Storage 7 | php7 | 0 |
| openSUSE:Leap 15.3 | php7-test | 0 |
| SUSE:Linux Enterprise Server 15 SP2-BCL | php7 | 0 |
| SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS | php7 | 0 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | php7 | 0 |
| openSUSE:Leap 15.3 | php7 | 0 |
Timeline
- Nov 18, 2022 CVE Published
- Sep 20, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln SUSE-SU-2022%3A4069-1
vulnetix vdb fixes SUSE-SU-2022%3A4069-1Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/SUSE-SU-2022%253A4069-1/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://bugzilla.suse.com/1203867 report
- https://www.suse.com/security/cve/CVE-2017-8923 url
- https://www.suse.com/security/cve/CVE-2020-7068 url
- https://www.suse.com/security/cve/CVE-2020-7069 url
- https://www.suse.com/security/cve/CVE-2020-7070 url
- https://www.suse.com/security/cve/CVE-2020-7071 url
- https://www.suse.com/security/cve/CVE-2021-21702 url
- https://www.suse.com/security/cve/CVE-2021-21703 url
- https://www.suse.com/security/cve/CVE-2021-21707 url
- https://www.suse.com/security/cve/CVE-2021-21708 url
- https://www.suse.com/security/cve/CVE-2022-31625 url
- https://www.suse.com/security/cve/CVE-2022-31626 url
- https://www.suse.com/security/cve/CVE-2022-31628 url
- https://www.suse.com/security/cve/CVE-2022-31629 url
- https://www.suse.com/security/cve/CVE-2022-31630 url
- https://bugzilla.suse.com/1204577 report
- https://www.suse.com/security/cve/CVE-2021-21705 url
- https://www.suse.com/support/update/announcement/2022/suse-su-20224069-1/ advisory
- https://bugzilla.suse.com/1203870 report
- https://bugzilla.suse.com/1204979 report
…and 3 more