p PatchFirst

ALSA-2021:4213

ALSA-2021:4213 · Moderate: php:7.4 security, bug fix, and enhancement update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php (7.4.19). (BZ#1944110) Security Fix(es): * php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV (CVE-2020-7069) * php: FILTER_VALIDATE_URL accepts URLs with invalid userinfo (CVE-2020-7071) * php: Use of freed hash key in the phar_parse_zipfile function (CVE-2020-7068) * php: URL decoding of cookie names can lead to different interpretation of cookies between browser and server (CVE-2020-7070) * php: NULL pointer dereference in SoapClient (CVE-2021-21702) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fix available

Published
Updated

Stack: system · php

Affected products and versions

  • apcu-panel AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 5.1.18-1.module_el8.6.0+2750+78feabcb

    Update to 5.1.18-1.module_el8.6.0+2750+78feabcb

  • libzip AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 1.6.1-1.module_el8.6.0+2750+78feabcb

    Update to 1.6.1-1.module_el8.6.0+2750+78feabcb

  • libzip-devel AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 1.6.1-1.module_el8.6.0+2750+78feabcb

    Update to 1.6.1-1.module_el8.6.0+2750+78feabcb

  • libzip-tools AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 1.6.1-1.module_el8.6.0+2750+78feabcb

    Update to 1.6.1-1.module_el8.6.0+2750+78feabcb

  • php AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-bcmath AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-cli AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-common AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-dba AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-dbg AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-devel AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-embedded AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-enchant AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-ffi AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-fpm AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-gd AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-gmp AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-intl AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-json AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-ldap AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-mbstring AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-mysqlnd AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-odbc AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

  • php-opcache AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-3.module_el8.6.0+2976+8b9a0d08

    Update to 7.4.19-3.module_el8.6.0+2976+8b9a0d08

Original sources

Check your server →