ALSA-2023:5927
ALSA-2023:5927 · Important: php:8.0 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: XML loading external entity without being enabled (CVE-2023-3823) * php: phar Buffer mismanagement (CVE-2023-3824) * php: 1-byte array overrun in common path resolve code (CVE-2023-0568) * php: DoS vulnerability when parsing multipart request body (CVE-2023-0662) * php: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (CVE-2023-3247) * php: Password_verify() always return true with some hash (CVE-2023-0567) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Affected products and versions
apcu-panel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.20-1.module_el8.6.0+2739+efabdb8f
Update to 5.1.20-1.module_el8.6.0+2739+efabdb8f
libzip AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.7.3-1.module_el8.6.0+2739+efabdb8f
Update to 1.7.3-1.module_el8.6.0+2739+efabdb8f
libzip AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.7.3-1.module_el8.6.0+3061+6878dd1b
Update to 1.7.3-1.module_el8.6.0+3061+6878dd1b
libzip-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.7.3-1.module_el8.6.0+2739+efabdb8f
Update to 1.7.3-1.module_el8.6.0+2739+efabdb8f
libzip-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.7.3-1.module_el8.6.0+3061+6878dd1b
Update to 1.7.3-1.module_el8.6.0+3061+6878dd1b
libzip-tools AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.7.3-1.module_el8.6.0+2739+efabdb8f
Update to 1.7.3-1.module_el8.6.0+2739+efabdb8f
libzip-tools AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.7.3-1.module_el8.6.0+3061+6878dd1b
Update to 1.7.3-1.module_el8.6.0+3061+6878dd1b
php AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-bcmath AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-cli AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-common AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-dba AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-dbg AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-embedded AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-enchant AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-ffi AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-fpm AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-gd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-gmp AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-intl AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-ldap AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-mbstring AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-mysqlnd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-odbc AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-opcache AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-pdo AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-pear AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1:1.10.13-1.module_el8.6.0+2739+efabdb8f
Update to 1:1.10.13-1.module_el8.6.0+2739+efabdb8f
php-pecl-apcu AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.20-1.module_el8.6.0+2739+efabdb8f
Update to 5.1.20-1.module_el8.6.0+2739+efabdb8f
php-pecl-apcu AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.20-1.module_el8.6.0+3061+6878dd1b
Update to 5.1.20-1.module_el8.6.0+3061+6878dd1b
php-pecl-apcu-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.20-1.module_el8.6.0+2739+efabdb8f
Update to 5.1.20-1.module_el8.6.0+2739+efabdb8f
php-pecl-apcu-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.20-1.module_el8.6.0+3061+6878dd1b
Update to 5.1.20-1.module_el8.6.0+3061+6878dd1b
php-pecl-rrd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.0.3-1.module_el8.6.0+2739+efabdb8f
Update to 2.0.3-1.module_el8.6.0+2739+efabdb8f
php-pecl-rrd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.0.3-1.module_el8.6.0+3061+6878dd1b
Update to 2.0.3-1.module_el8.6.0+3061+6878dd1b
php-pecl-xdebug3 AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.1.2-1.module_el8.6.0+2739+efabdb8f
Update to 3.1.2-1.module_el8.6.0+2739+efabdb8f
php-pecl-xdebug3 AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.1.2-1.module_el8.6.0+3061+6878dd1b
Update to 3.1.2-1.module_el8.6.0+3061+6878dd1b
php-pecl-zip AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.2-1.module_el8.6.0+2739+efabdb8f
Update to 1.19.2-1.module_el8.6.0+2739+efabdb8f
php-pecl-zip AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.19.2-1.module_el8.6.0+3061+6878dd1b
Update to 1.19.2-1.module_el8.6.0+3061+6878dd1b
php-pgsql AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-process AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-snmp AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-soap AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
php-xml AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 8.0.30-1.module_el8.8.0+3655+3335cff6
Update to 8.0.30-1.module_el8.8.0+3655+3335cff6
Original sources
- https://access.redhat.com/errata/RHSA-2023:5927
- https://access.redhat.com/security/cve/CVE-2023-0567
- https://access.redhat.com/security/cve/CVE-2023-0568
- https://access.redhat.com/security/cve/CVE-2023-0662
- https://access.redhat.com/security/cve/CVE-2023-3247
- https://access.redhat.com/security/cve/CVE-2023-3823
- https://access.redhat.com/security/cve/CVE-2023-3824
- https://bugzilla.redhat.com/2170761
- https://bugzilla.redhat.com/2170770
- https://bugzilla.redhat.com/2170771
- https://bugzilla.redhat.com/2219290
- https://bugzilla.redhat.com/2229396
- https://bugzilla.redhat.com/2230101
- https://errata.almalinux.org/8/ALSA-2023-5927.html
- https://osv.dev/vulnerability/ALSA-2023:5927