ALSA-2024:10952
ALSA-2024:10952 · Moderate: php:7.4 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: 1-byte array overrun in common path resolve code (CVE-2023-0568) * php: Password_verify() always return true with some hash (CVE-2023-0567) * php: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (CVE-2023-3247) * php: XML loading external entity without being enabled (CVE-2023-3823) * php: phar Buffer mismanagement (CVE-2023-3824) * php: host/secure cookie bypass due to partial CVE-2022-31629 fix (CVE-2024-2756) * php: password_verify can erroneously return true, opening ATO risk (CVE-2024-3096) * php: Filter bypass in filter_var (FILTER_VALIDATE_URL) (CVE-2024-5458) * php: Erroneous parsing of multipart form data (CVE-2024-8925) * php: cgi.force_redirect configuration is bypassable due to the environment variable collision (CVE-2024-8927) * php: PHP-FPM Log Manipulation Vulnerability (CVE-2024-9026) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Affected products and versions
apcu-panel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.18-1.module_el8.6.0+2750+78feabcb
Update to 5.1.18-1.module_el8.6.0+2750+78feabcb
libzip AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.6.1-1.module_el8.6.0+3239+bedf0508
Update to 1.6.1-1.module_el8.6.0+3239+bedf0508
libzip AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.6.1-1.module_el8.6.0+2750+78feabcb
Update to 1.6.1-1.module_el8.6.0+2750+78feabcb
libzip AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.6.1-1.module_el8.10.0+3935+28808425
Update to 1.6.1-1.module_el8.10.0+3935+28808425
libzip-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.6.1-1.module_el8.10.0+3935+28808425
Update to 1.6.1-1.module_el8.10.0+3935+28808425
libzip-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.6.1-1.module_el8.6.0+3239+bedf0508
Update to 1.6.1-1.module_el8.6.0+3239+bedf0508
libzip-tools AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.6.1-1.module_el8.6.0+3239+bedf0508
Update to 1.6.1-1.module_el8.6.0+3239+bedf0508
libzip-tools AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.6.1-1.module_el8.6.0+2750+78feabcb
Update to 1.6.1-1.module_el8.6.0+2750+78feabcb
libzip-tools AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.6.1-1.module_el8.10.0+3935+28808425
Update to 1.6.1-1.module_el8.10.0+3935+28808425
php AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-bcmath AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-cli AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-common AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-dba AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-dbg AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-embedded AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-enchant AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-ffi AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-fpm AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-gd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-gmp AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-intl AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-json AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-ldap AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-mbstring AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-mysqlnd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-odbc AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-opcache AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-pdo AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-pear AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1:1.10.13-1.module_el8.10.0+3935+28808425
Update to 1:1.10.13-1.module_el8.10.0+3935+28808425
php-pecl-apcu AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.18-1.module_el8.10.0+3935+28808425
Update to 5.1.18-1.module_el8.10.0+3935+28808425
php-pecl-apcu AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.18-1.module_el8.6.0+2750+78feabcb
Update to 5.1.18-1.module_el8.6.0+2750+78feabcb
php-pecl-apcu-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.18-1.module_el8.6.0+2750+78feabcb
Update to 5.1.18-1.module_el8.6.0+2750+78feabcb
php-pecl-apcu-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 5.1.18-1.module_el8.10.0+3935+28808425
Update to 5.1.18-1.module_el8.10.0+3935+28808425
php-pecl-rrd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.0.1-1.module_el8.6.0+3059+d65eee13
Update to 2.0.1-1.module_el8.6.0+3059+d65eee13
php-pecl-rrd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.0.1-1.module_el8.6.0+2750+78feabcb
Update to 2.0.1-1.module_el8.6.0+2750+78feabcb
php-pecl-rrd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.0.1-1.module_el8.4.0+2229+b272fdef
Update to 2.0.1-1.module_el8.4.0+2229+b272fdef
php-pecl-rrd AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.0.1-1.module_el8.3.0+2009+b272fdef
Update to 2.0.1-1.module_el8.3.0+2009+b272fdef
php-pecl-xdebug AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.9.5-1.module_el8.10.0+3935+28808425
Update to 2.9.5-1.module_el8.10.0+3935+28808425
php-pecl-xdebug AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.9.5-1.module_el8.6.0+3239+bedf0508
Update to 2.9.5-1.module_el8.6.0+3239+bedf0508
php-pecl-xdebug AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2.9.5-1.module_el8.6.0+2750+78feabcb
Update to 2.9.5-1.module_el8.6.0+2750+78feabcb
php-pecl-zip AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.18.2-1.module_el8.6.0+2750+78feabcb
Update to 1.18.2-1.module_el8.6.0+2750+78feabcb
php-pecl-zip AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.18.2-1.module_el8.10.0+3935+28808425
Update to 1.18.2-1.module_el8.10.0+3935+28808425
php-pecl-zip AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.18.2-1.module_el8.6.0+3239+bedf0508
Update to 1.18.2-1.module_el8.6.0+3239+bedf0508
php-pgsql AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-process AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-snmp AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-soap AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-xml AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
php-xmlrpc AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.4.33-2.module_el8.10.0+3935+28808425
Update to 7.4.33-2.module_el8.10.0+3935+28808425
Original sources
- https://access.redhat.com/errata/RHSA-2024:10952
- https://access.redhat.com/security/cve/CVE-2023-0567
- https://access.redhat.com/security/cve/CVE-2023-0568
- https://access.redhat.com/security/cve/CVE-2023-3247
- https://access.redhat.com/security/cve/CVE-2023-3823
- https://access.redhat.com/security/cve/CVE-2023-3824
- https://access.redhat.com/security/cve/CVE-2024-2756
- https://access.redhat.com/security/cve/CVE-2024-3096
- https://access.redhat.com/security/cve/CVE-2024-5458
- https://access.redhat.com/security/cve/CVE-2024-8925
- https://access.redhat.com/security/cve/CVE-2024-8927
- https://access.redhat.com/security/cve/CVE-2024-9026
- https://bugzilla.redhat.com/2170770
- https://bugzilla.redhat.com/2170771
- https://bugzilla.redhat.com/2219290
- https://bugzilla.redhat.com/2229396
- https://bugzilla.redhat.com/2230101
- https://bugzilla.redhat.com/2275058
- https://bugzilla.redhat.com/2275061
- https://bugzilla.redhat.com/2291252
- https://bugzilla.redhat.com/2317049
- https://bugzilla.redhat.com/2317051
- https://bugzilla.redhat.com/2317144
- https://errata.almalinux.org/8/ALSA-2024-10952.html
- https://osv.dev/vulnerability/ALSA-2024:10952