Lucene search

RedHatRHSA-2023:0848

HistoryFeb 21, 2023 - 8:48 a.m.

(RHSA-2023:0848) Moderate: php:8.0 security update

2023-02-2108:48:54

access.redhat.com

php

apache http server

buffer overflow

insecure cookie

input validation

integer overflow

dos attack

0.025 Low

EPSS

Percentile

90.2%

JSON

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (8.0). (BZ#2161666)

Security Fix(es):

XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454)
php: standard insecure cookie could be treated as a __Host- or __Secure- cookie by PHP applications (CVE-2022-31629)
php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630)
php: Due to an integer overflow PDO::quote() may return unquoted string (CVE-2022-31631)
php: phar wrapper can occur dos when using quine gzip file (CVE-2022-31628)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyaarch64php-ldap< 8.0.27-1.module+el8.7.0+17863+0ad92cd2php-ldap-8.0.27-1.module+el8.7.0+17863+0ad92cd2.aarch64.rpm
RedHatanyaarch64php-mbstring< 8.0.27-1.module+el8.7.0+17863+0ad92cd2php-mbstring-8.0.27-1.module+el8.7.0+17863+0ad92cd2.aarch64.rpm
RedHatanyaarch64php-pecl-apcu-debugsource< 5.1.20-1.module+el8.6.0+13671+84712317php-pecl-apcu-debugsource-5.1.20-1.module+el8.6.0+13671+84712317.aarch64.rpm
RedHatanyaarch64php-opcache-debuginfo< 8.0.27-1.module+el8.7.0+17863+0ad92cd2php-opcache-debuginfo-8.0.27-1.module+el8.7.0+17863+0ad92cd2.aarch64.rpm
RedHatanyx86_64php-ldap< 8.0.27-1.module+el8.7.0+17863+0ad92cd2php-ldap-8.0.27-1.module+el8.7.0+17863+0ad92cd2.x86_64.rpm
RedHatanys390xphp-mbstring< 8.0.27-1.module+el8.7.0+17863+0ad92cd2php-mbstring-8.0.27-1.module+el8.7.0+17863+0ad92cd2.s390x.rpm
RedHatanys390xlibzip-debugsource< 1.7.3-1.module+el8.6.0+13671+84712317libzip-debugsource-1.7.3-1.module+el8.6.0+13671+84712317.s390x.rpm
RedHatanyppc64lephp-pecl-rrd-debuginfo< 2.0.3-1.module+el8.6.0+13671+84712317php-pecl-rrd-debuginfo-2.0.3-1.module+el8.6.0+13671+84712317.ppc64le.rpm
RedHatanyaarch64php-opcache< 8.0.27-1.module+el8.7.0+17863+0ad92cd2php-opcache-8.0.27-1.module+el8.7.0+17863+0ad92cd2.aarch64.rpm
RedHatanyx86_64php-bcmath< 8.0.27-1.module+el8.7.0+17863+0ad92cd2php-bcmath-8.0.27-1.module+el8.7.0+17863+0ad92cd2.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	aarch64	php-ldap	< 8.0.27-1.module+el8.7.0+17863+0ad92cd2	php-ldap-8.0.27-1.module+el8.7.0+17863+0ad92cd2.aarch64.rpm
RedHat	any	aarch64	php-mbstring	< 8.0.27-1.module+el8.7.0+17863+0ad92cd2	php-mbstring-8.0.27-1.module+el8.7.0+17863+0ad92cd2.aarch64.rpm
RedHat	any	aarch64	php-pecl-apcu-debugsource	< 5.1.20-1.module+el8.6.0+13671+84712317	php-pecl-apcu-debugsource-5.1.20-1.module+el8.6.0+13671+84712317.aarch64.rpm
RedHat	any	aarch64	php-opcache-debuginfo	< 8.0.27-1.module+el8.7.0+17863+0ad92cd2	php-opcache-debuginfo-8.0.27-1.module+el8.7.0+17863+0ad92cd2.aarch64.rpm
RedHat	any	x86_64	php-ldap	< 8.0.27-1.module+el8.7.0+17863+0ad92cd2	php-ldap-8.0.27-1.module+el8.7.0+17863+0ad92cd2.x86_64.rpm
RedHat	any	s390x	php-mbstring	< 8.0.27-1.module+el8.7.0+17863+0ad92cd2	php-mbstring-8.0.27-1.module+el8.7.0+17863+0ad92cd2.s390x.rpm
RedHat	any	s390x	libzip-debugsource	< 1.7.3-1.module+el8.6.0+13671+84712317	libzip-debugsource-1.7.3-1.module+el8.6.0+13671+84712317.s390x.rpm
RedHat	any	ppc64le	php-pecl-rrd-debuginfo	< 2.0.3-1.module+el8.6.0+13671+84712317	php-pecl-rrd-debuginfo-2.0.3-1.module+el8.6.0+13671+84712317.ppc64le.rpm
RedHat	any	aarch64	php-opcache	< 8.0.27-1.module+el8.7.0+17863+0ad92cd2	php-opcache-8.0.27-1.module+el8.7.0+17863+0ad92cd2.aarch64.rpm
RedHat	any	x86_64	php-bcmath	< 8.0.27-1.module+el8.7.0+17863+0ad92cd2	php-bcmath-8.0.27-1.module+el8.7.0+17863+0ad92cd2.x86_64.rpm

Rows per page:

1-10 of 2781