ALSA-2023:0848
ALSA-2023:0848 · Moderate: php:8.0 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php (8.0). (BZ#2161666) Security Fix(es): * XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454) * php: standard insecure cookie could be treated as a `__Host-` or `__Secure-` cookie by PHP applications (CVE-2022-31629) * php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630) * php: Due to an integer overflow PDO::quote() may return unquoted string (CVE-2022-31631) * php: phar wrapper can occur dos when using quine gzip file (CVE-2022-31628) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Affected products and versions
apcu-panel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.20-1.module_el8.6.0+2739+efabdb8f
Update to 5.1.20-1.module_el8.6.0+2739+efabdb8f
libzip AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.7.3-1.module_el8.6.0+2739+efabdb8f
Update to 1.7.3-1.module_el8.6.0+2739+efabdb8f
libzip AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.7.3-1.module_el8.6.0+3061+6878dd1b
Update to 1.7.3-1.module_el8.6.0+3061+6878dd1b
libzip-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.7.3-1.module_el8.6.0+2739+efabdb8f
Update to 1.7.3-1.module_el8.6.0+2739+efabdb8f
libzip-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.7.3-1.module_el8.6.0+3061+6878dd1b
Update to 1.7.3-1.module_el8.6.0+3061+6878dd1b
libzip-tools AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.7.3-1.module_el8.6.0+2739+efabdb8f
Update to 1.7.3-1.module_el8.6.0+2739+efabdb8f
libzip-tools AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.7.3-1.module_el8.6.0+3061+6878dd1b
Update to 1.7.3-1.module_el8.6.0+3061+6878dd1b
php AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-bcmath AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-cli AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-common AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-dba AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-dbg AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-embedded AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-enchant AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-ffi AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-fpm AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-gd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-gmp AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-intl AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-ldap AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-mbstring AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-mysqlnd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-odbc AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-opcache AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-pdo AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-pear AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1:1.10.13-1.module_el8.6.0+2739+efabdb8f
Update to 1:1.10.13-1.module_el8.6.0+2739+efabdb8f
php-pecl-apcu AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.20-1.module_el8.6.0+2739+efabdb8f
Update to 5.1.20-1.module_el8.6.0+2739+efabdb8f
php-pecl-apcu AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.20-1.module_el8.6.0+3061+6878dd1b
Update to 5.1.20-1.module_el8.6.0+3061+6878dd1b
php-pecl-apcu-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.20-1.module_el8.6.0+2739+efabdb8f
Update to 5.1.20-1.module_el8.6.0+2739+efabdb8f
php-pecl-apcu-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.20-1.module_el8.6.0+3061+6878dd1b
Update to 5.1.20-1.module_el8.6.0+3061+6878dd1b
php-pecl-rrd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.0.3-1.module_el8.6.0+2739+efabdb8f
Update to 2.0.3-1.module_el8.6.0+2739+efabdb8f
php-pecl-rrd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.0.3-1.module_el8.6.0+3061+6878dd1b
Update to 2.0.3-1.module_el8.6.0+3061+6878dd1b
php-pecl-xdebug3 AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.1.2-1.module_el8.6.0+2739+efabdb8f
Update to 3.1.2-1.module_el8.6.0+2739+efabdb8f
php-pecl-xdebug3 AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.1.2-1.module_el8.6.0+3061+6878dd1b
Update to 3.1.2-1.module_el8.6.0+3061+6878dd1b
php-pecl-zip AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.2-1.module_el8.6.0+2739+efabdb8f
Update to 1.19.2-1.module_el8.6.0+2739+efabdb8f
php-pecl-zip AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.2-1.module_el8.6.0+3061+6878dd1b
Update to 1.19.2-1.module_el8.6.0+3061+6878dd1b
php-pgsql AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-process AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-snmp AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-soap AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
php-xml AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.27-1.module_el8.7.0+3401+dfb61c00
Update to 8.0.27-1.module_el8.7.0+3401+dfb61c00
Original sources
- https://access.redhat.com/errata/RHSA-2023:0848
- https://access.redhat.com/security/cve/CVE-2022-31628
- https://access.redhat.com/security/cve/CVE-2022-31629
- https://access.redhat.com/security/cve/CVE-2022-31630
- https://access.redhat.com/security/cve/CVE-2022-31631
- https://access.redhat.com/security/cve/CVE-2022-37454
- https://bugzilla.redhat.com/2133687
- https://bugzilla.redhat.com/2133688
- https://bugzilla.redhat.com/2139280
- https://bugzilla.redhat.com/2140200
- https://bugzilla.redhat.com/2158791
- https://errata.almalinux.org/8/ALSA-2023-0848.html
- https://osv.dev/vulnerability/ALSA-2023:0848