MGASA-2023-0248 - Updated php packages fix security vulnerability

Publication date: 23 Aug 2023
URL: https://advisories.mageia.org/MGASA-2023-0248.html
Type: security
Affected Mageia releases: 8
CVE: CVE-2023-3823,
     CVE-2023-3824

Libxml - GHSA-3qrf-m4j2-pcrr (Security issue with external entity loading
in XML without enabling it). (CVE-2023-3823)
Phar - GHSA-jqcx-ccgc-xwhv (Buffer mismanagement in phar_dir_read())
(CVE-2023-3824)

References:
- https://bugs.mageia.org/show_bug.cgi?id=32158
- https://www.php.net/ChangeLog-8.php#8.0.30
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3823
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3824

SRPMS:
- 8/core/php-8.0.30-1.mga8