{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:0848","synopsis":"Moderate: php:8.0 security update","severity":"SEVERITY_MODERATE","topic":"An update is available for php-pear, php-pecl-xdebug3, module.php-pecl-apcu, php-pecl-rrd, module.php-pecl-zip, module.php-pecl-xdebug3, module.php, libzip, php-pecl-apcu, module.php-pecl-rrd, php, module.libzip, php-pecl-zip, module.php-pear.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (8.0). (BZ#2161666)\n\nSecurity Fix(es):\n\n* XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454)\n\n* php: standard insecure cookie could be treated as a `__Host-` or `__Secure-` cookie by PHP applications (CVE-2022-31629)\n\n* php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630)\n\n* php: Due to an integer overflow PDO::quote() may return unquoted string (CVE-2022-31631)\n\n* php: phar wrapper can occur dos when using quine gzip file (CVE-2022-31628)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2133687","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2133687","description":""},{"ticket":"2133688","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2133688","description":""},{"ticket":"2139280","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2139280","description":""},{"ticket":"2140200","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2140200","description":""},{"ticket":"2158791","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2158791","description":""}],"cves":[{"name":"CVE-2022-31628","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-31628","cvss3ScoringVector":"CVSS:3.1\/AV:L\/AC:L\/PR:H\/UI:N\/S:U\/C:N\/I:N\/A:H","cvss3BaseScore":"4.4","cwe":"CWE-674"},{"name":"CVE-2022-31629","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-31629","cvss3ScoringVector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:U\/C:N\/I:H\/A:N","cvss3BaseScore":"6.5","cwe":"CWE-20"},{"name":"CVE-2022-31630","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-31630","cvss3ScoringVector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:L\/I:N\/A:L","cvss3BaseScore":"6.5","cwe":"CWE-20->CWE-125"},{"name":"CVE-2022-31631","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-31631","cvss3ScoringVector":"CVSS:3.1\/AV:N\/AC:H\/PR:N\/UI:N\/S:U\/C:N\/I:N\/A:H","cvss3BaseScore":"5.9","cwe":"CWE-190"},{"name":"CVE-2022-37454","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-37454","cvss3ScoringVector":"CVSS:3.1\/AV:N\/AC:H\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H","cvss3BaseScore":"8.1","cwe":"CWE-680"}],"references":[],"publishedAt":"2023-02-22T01:08:53.668036Z","rpms":{"Rocky Linux 8":{"nvras":["apcu-panel-0:5.1.20-1.module+el8.6.0+790+fc63e43f.noarch.rpm","libzip-0:1.7.3-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","libzip-0:1.7.3-1.module+el8.6.0+790+fc63e43f.src.rpm","libzip-0:1.7.3-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","libzip-debuginfo-0:1.7.3-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","libzip-debuginfo-0:1.7.3-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","libzip-debugsource-0:1.7.3-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","libzip-debugsource-0:1.7.3-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","libzip-devel-0:1.7.3-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","libzip-devel-0:1.7.3-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","libzip-tools-0:1.7.3-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","libzip-tools-0:1.7.3-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","libzip-tools-debuginfo-0:1.7.3-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","libzip-tools-debuginfo-0:1.7.3-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","php-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.src.rpm","php-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-bcmath-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-bcmath-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-bcmath-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-bcmath-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-cli-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-cli-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-cli-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-cli-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-common-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-common-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-common-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-common-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-dba-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-dba-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-dba-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-dba-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-dbg-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-dbg-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-dbg-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-dbg-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-debugsource-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-debugsource-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-devel-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-devel-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-embedded-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-embedded-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-embedded-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-embedded-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-enchant-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-enchant-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-enchant-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-enchant-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-ffi-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-ffi-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-ffi-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-ffi-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-fpm-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-fpm-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-fpm-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-fpm-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-gd-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-gd-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-gd-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-gd-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-gmp-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-gmp-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-gmp-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-gmp-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-intl-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-intl-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-intl-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-intl-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-ldap-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-ldap-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-ldap-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-ldap-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-mbstring-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-mbstring-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-mbstring-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-mbstring-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-mysqlnd-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-mysqlnd-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-mysqlnd-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-mysqlnd-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-odbc-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-odbc-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-odbc-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-odbc-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-opcache-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-opcache-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-opcache-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-opcache-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-pdo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-pdo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-pdo-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-pdo-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-pear-1:1.10.13-1.module+el8.7.0+1067+0a7071cc.noarch.rpm","php-pear-1:1.10.13-1.module+el8.7.0+1067+0a7071cc.src.rpm","php-pecl-apcu-0:5.1.20-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","php-pecl-apcu-0:5.1.20-1.module+el8.6.0+790+fc63e43f.src.rpm","php-pecl-apcu-0:5.1.20-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","php-pecl-apcu-debuginfo-0:5.1.20-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","php-pecl-apcu-debuginfo-0:5.1.20-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","php-pecl-apcu-debugsource-0:5.1.20-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","php-pecl-apcu-debugsource-0:5.1.20-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","php-pecl-apcu-devel-0:5.1.20-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","php-pecl-apcu-devel-0:5.1.20-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","php-pecl-rrd-0:2.0.3-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","php-pecl-rrd-0:2.0.3-1.module+el8.6.0+790+fc63e43f.src.rpm","php-pecl-rrd-0:2.0.3-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","php-pecl-rrd-debuginfo-0:2.0.3-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","php-pecl-rrd-debuginfo-0:2.0.3-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","php-pecl-rrd-debugsource-0:2.0.3-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","php-pecl-rrd-debugsource-0:2.0.3-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","php-pecl-xdebug3-0:3.1.2-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","php-pecl-xdebug3-0:3.1.2-1.module+el8.6.0+790+fc63e43f.src.rpm","php-pecl-xdebug3-0:3.1.2-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","php-pecl-xdebug3-debuginfo-0:3.1.2-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","php-pecl-xdebug3-debuginfo-0:3.1.2-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","php-pecl-xdebug3-debugsource-0:3.1.2-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","php-pecl-xdebug3-debugsource-0:3.1.2-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","php-pecl-zip-0:1.19.2-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","php-pecl-zip-0:1.19.2-1.module+el8.6.0+790+fc63e43f.src.rpm","php-pecl-zip-0:1.19.2-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","php-pecl-zip-debuginfo-0:1.19.2-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","php-pecl-zip-debuginfo-0:1.19.2-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","php-pecl-zip-debugsource-0:1.19.2-1.module+el8.6.0+790+fc63e43f.aarch64.rpm","php-pecl-zip-debugsource-0:1.19.2-1.module+el8.6.0+790+fc63e43f.x86_64.rpm","php-pgsql-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-pgsql-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-pgsql-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-pgsql-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-process-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-process-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-process-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-process-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-snmp-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-snmp-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-snmp-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-snmp-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-soap-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-soap-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-soap-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-soap-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-xml-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-xml-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm","php-xml-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.aarch64.rpm","php-xml-debuginfo-0:8.0.27-1.module+el8.7.0+1156+de6c8de9.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[]}