ALSA-2022:1935
ALSA-2022:1935 · Moderate: php:7.4 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Local privilege escalation via PHP-FPM (CVE-2021-21703) * php: SSRF bypass in FILTER_VALIDATE_URL (CVE-2021-21705) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fix available
- Published
- Updated
Affected products and versions
apcu-panel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.18-1.module_el8.6.0+2750+78feabcb
Update to 5.1.18-1.module_el8.6.0+2750+78feabcb
libzip AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.6.1-1.module_el8.6.0+2750+78feabcb
Update to 1.6.1-1.module_el8.6.0+2750+78feabcb
libzip-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.6.1-1.module_el8.6.0+2750+78feabcb
Update to 1.6.1-1.module_el8.6.0+2750+78feabcb
libzip-tools AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.6.1-1.module_el8.6.0+2750+78feabcb
Update to 1.6.1-1.module_el8.6.0+2750+78feabcb
php AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-bcmath AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-cli AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-common AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-dba AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-dbg AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-embedded AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-enchant AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-ffi AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-fpm AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-gd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-gmp AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-intl AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-json AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-ldap AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-mbstring AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-mysqlnd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-odbc AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
php-opcache AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.19-2.module_el8.6.0+2750+78feabcb
Update to 7.4.19-2.module_el8.6.0+2750+78feabcb
Original sources
- https://access.redhat.com/errata/RHSA-2022:1935
- https://access.redhat.com/security/cve/CVE-2021-21703
- https://access.redhat.com/security/cve/CVE-2021-21705
- https://bugzilla.redhat.com/1978755
- https://bugzilla.redhat.com/2016535
- https://errata.almalinux.org/8/ALSA-2022-1935.html
- https://osv.dev/vulnerability/ALSA-2022:1935