{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:0965","synopsis":"Moderate: php security update","severity":"SEVERITY_MODERATE","topic":"An update is available for php.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (8.0.27). (BZ#2161667)\n\nSecurity Fix(es):\n\n* XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454)\n\n* php: standard insecure cookie could be treated as a `__Host-` or `__Secure-` cookie by PHP applications (CVE-2022-31629)\n\n* php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630)\n\n* php: Due to an integer overflow PDO::quote() may return unquoted string (CVE-2022-31631)\n\n* php: phar wrapper can occur dos when using quine gzip file (CVE-2022-31628)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2133687","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2133687","description":""},{"ticket":"2133688","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2133688","description":""},{"ticket":"2139280","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2139280","description":""},{"ticket":"2140200","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2140200","description":""},{"ticket":"2158791","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2158791","description":""}],"cves":[{"name":"CVE-2022-31628","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-31628","cvss3ScoringVector":"CVSS:3.1\/AV:L\/AC:L\/PR:H\/UI:N\/S:U\/C:N\/I:N\/A:H","cvss3BaseScore":"4.4","cwe":"CWE-674"},{"name":"CVE-2022-31629","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-31629","cvss3ScoringVector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:U\/C:N\/I:H\/A:N","cvss3BaseScore":"6.5","cwe":"CWE-20"},{"name":"CVE-2022-31630","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-31630","cvss3ScoringVector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:L\/I:N\/A:L","cvss3BaseScore":"6.5","cwe":"CWE-20->CWE-125"},{"name":"CVE-2022-31631","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-31631","cvss3ScoringVector":"CVSS:3.1\/AV:N\/AC:H\/PR:N\/UI:N\/S:U\/C:N\/I:N\/A:H","cvss3BaseScore":"5.9","cwe":"CWE-190"},{"name":"CVE-2022-37454","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-37454","cvss3ScoringVector":"CVSS:3.1\/AV:N\/AC:H\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H","cvss3BaseScore":"8.1","cwe":"CWE-680"}],"references":[],"publishedAt":"2023-04-06T15:53:36.002725Z","rpms":{"Rocky Linux 9":{"nvras":["php-0:8.0.27-1.el9_1.aarch64.rpm","php-0:8.0.27-1.el9_1.ppc64le.rpm","php-0:8.0.27-1.el9_1.s390x.rpm","php-0:8.0.27-1.el9_1.src.rpm","php-0:8.0.27-1.el9_1.x86_64.rpm","php-bcmath-0:8.0.27-1.el9_1.aarch64.rpm","php-bcmath-0:8.0.27-1.el9_1.ppc64le.rpm","php-bcmath-0:8.0.27-1.el9_1.s390x.rpm","php-bcmath-0:8.0.27-1.el9_1.x86_64.rpm","php-bcmath-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-bcmath-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-bcmath-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-bcmath-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-cli-0:8.0.27-1.el9_1.aarch64.rpm","php-cli-0:8.0.27-1.el9_1.ppc64le.rpm","php-cli-0:8.0.27-1.el9_1.s390x.rpm","php-cli-0:8.0.27-1.el9_1.x86_64.rpm","php-cli-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-cli-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-cli-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-cli-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-common-0:8.0.27-1.el9_1.aarch64.rpm","php-common-0:8.0.27-1.el9_1.ppc64le.rpm","php-common-0:8.0.27-1.el9_1.s390x.rpm","php-common-0:8.0.27-1.el9_1.x86_64.rpm","php-common-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-common-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-common-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-common-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-dba-0:8.0.27-1.el9_1.aarch64.rpm","php-dba-0:8.0.27-1.el9_1.ppc64le.rpm","php-dba-0:8.0.27-1.el9_1.s390x.rpm","php-dba-0:8.0.27-1.el9_1.x86_64.rpm","php-dba-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-dba-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-dba-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-dba-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-dbg-0:8.0.27-1.el9_1.aarch64.rpm","php-dbg-0:8.0.27-1.el9_1.ppc64le.rpm","php-dbg-0:8.0.27-1.el9_1.s390x.rpm","php-dbg-0:8.0.27-1.el9_1.x86_64.rpm","php-dbg-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-dbg-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-dbg-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-dbg-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-debugsource-0:8.0.27-1.el9_1.aarch64.rpm","php-debugsource-0:8.0.27-1.el9_1.ppc64le.rpm","php-debugsource-0:8.0.27-1.el9_1.s390x.rpm","php-debugsource-0:8.0.27-1.el9_1.x86_64.rpm","php-devel-0:8.0.27-1.el9_1.aarch64.rpm","php-devel-0:8.0.27-1.el9_1.ppc64le.rpm","php-devel-0:8.0.27-1.el9_1.s390x.rpm","php-devel-0:8.0.27-1.el9_1.x86_64.rpm","php-embedded-0:8.0.27-1.el9_1.aarch64.rpm","php-embedded-0:8.0.27-1.el9_1.ppc64le.rpm","php-embedded-0:8.0.27-1.el9_1.s390x.rpm","php-embedded-0:8.0.27-1.el9_1.x86_64.rpm","php-embedded-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-embedded-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-embedded-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-embedded-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-enchant-0:8.0.27-1.el9_1.aarch64.rpm","php-enchant-0:8.0.27-1.el9_1.ppc64le.rpm","php-enchant-0:8.0.27-1.el9_1.s390x.rpm","php-enchant-0:8.0.27-1.el9_1.x86_64.rpm","php-enchant-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-enchant-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-enchant-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-enchant-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-ffi-0:8.0.27-1.el9_1.aarch64.rpm","php-ffi-0:8.0.27-1.el9_1.ppc64le.rpm","php-ffi-0:8.0.27-1.el9_1.s390x.rpm","php-ffi-0:8.0.27-1.el9_1.x86_64.rpm","php-ffi-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-ffi-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-ffi-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-ffi-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-fpm-0:8.0.27-1.el9_1.aarch64.rpm","php-fpm-0:8.0.27-1.el9_1.ppc64le.rpm","php-fpm-0:8.0.27-1.el9_1.s390x.rpm","php-fpm-0:8.0.27-1.el9_1.x86_64.rpm","php-fpm-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-fpm-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-fpm-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-fpm-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-gd-0:8.0.27-1.el9_1.aarch64.rpm","php-gd-0:8.0.27-1.el9_1.ppc64le.rpm","php-gd-0:8.0.27-1.el9_1.s390x.rpm","php-gd-0:8.0.27-1.el9_1.x86_64.rpm","php-gd-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-gd-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-gd-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-gd-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-gmp-0:8.0.27-1.el9_1.aarch64.rpm","php-gmp-0:8.0.27-1.el9_1.ppc64le.rpm","php-gmp-0:8.0.27-1.el9_1.s390x.rpm","php-gmp-0:8.0.27-1.el9_1.x86_64.rpm","php-gmp-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-gmp-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-gmp-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-gmp-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-intl-0:8.0.27-1.el9_1.aarch64.rpm","php-intl-0:8.0.27-1.el9_1.ppc64le.rpm","php-intl-0:8.0.27-1.el9_1.s390x.rpm","php-intl-0:8.0.27-1.el9_1.x86_64.rpm","php-intl-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-intl-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-intl-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-intl-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-ldap-0:8.0.27-1.el9_1.aarch64.rpm","php-ldap-0:8.0.27-1.el9_1.ppc64le.rpm","php-ldap-0:8.0.27-1.el9_1.s390x.rpm","php-ldap-0:8.0.27-1.el9_1.x86_64.rpm","php-ldap-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-ldap-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-ldap-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-ldap-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-mbstring-0:8.0.27-1.el9_1.aarch64.rpm","php-mbstring-0:8.0.27-1.el9_1.ppc64le.rpm","php-mbstring-0:8.0.27-1.el9_1.s390x.rpm","php-mbstring-0:8.0.27-1.el9_1.x86_64.rpm","php-mbstring-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-mbstring-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-mbstring-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-mbstring-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-mysqlnd-0:8.0.27-1.el9_1.aarch64.rpm","php-mysqlnd-0:8.0.27-1.el9_1.ppc64le.rpm","php-mysqlnd-0:8.0.27-1.el9_1.s390x.rpm","php-mysqlnd-0:8.0.27-1.el9_1.x86_64.rpm","php-mysqlnd-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-mysqlnd-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-mysqlnd-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-mysqlnd-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-odbc-0:8.0.27-1.el9_1.aarch64.rpm","php-odbc-0:8.0.27-1.el9_1.ppc64le.rpm","php-odbc-0:8.0.27-1.el9_1.s390x.rpm","php-odbc-0:8.0.27-1.el9_1.x86_64.rpm","php-odbc-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-odbc-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-odbc-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-odbc-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-opcache-0:8.0.27-1.el9_1.aarch64.rpm","php-opcache-0:8.0.27-1.el9_1.ppc64le.rpm","php-opcache-0:8.0.27-1.el9_1.s390x.rpm","php-opcache-0:8.0.27-1.el9_1.x86_64.rpm","php-opcache-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-opcache-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-opcache-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-opcache-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-pdo-0:8.0.27-1.el9_1.aarch64.rpm","php-pdo-0:8.0.27-1.el9_1.ppc64le.rpm","php-pdo-0:8.0.27-1.el9_1.s390x.rpm","php-pdo-0:8.0.27-1.el9_1.x86_64.rpm","php-pdo-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-pdo-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-pdo-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-pdo-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-pgsql-0:8.0.27-1.el9_1.aarch64.rpm","php-pgsql-0:8.0.27-1.el9_1.ppc64le.rpm","php-pgsql-0:8.0.27-1.el9_1.s390x.rpm","php-pgsql-0:8.0.27-1.el9_1.x86_64.rpm","php-pgsql-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-pgsql-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-pgsql-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-pgsql-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-process-0:8.0.27-1.el9_1.aarch64.rpm","php-process-0:8.0.27-1.el9_1.ppc64le.rpm","php-process-0:8.0.27-1.el9_1.s390x.rpm","php-process-0:8.0.27-1.el9_1.x86_64.rpm","php-process-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-process-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-process-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-process-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-snmp-0:8.0.27-1.el9_1.aarch64.rpm","php-snmp-0:8.0.27-1.el9_1.ppc64le.rpm","php-snmp-0:8.0.27-1.el9_1.s390x.rpm","php-snmp-0:8.0.27-1.el9_1.x86_64.rpm","php-snmp-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-snmp-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-snmp-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-snmp-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-soap-0:8.0.27-1.el9_1.aarch64.rpm","php-soap-0:8.0.27-1.el9_1.ppc64le.rpm","php-soap-0:8.0.27-1.el9_1.s390x.rpm","php-soap-0:8.0.27-1.el9_1.x86_64.rpm","php-soap-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-soap-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-soap-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-soap-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm","php-xml-0:8.0.27-1.el9_1.aarch64.rpm","php-xml-0:8.0.27-1.el9_1.ppc64le.rpm","php-xml-0:8.0.27-1.el9_1.s390x.rpm","php-xml-0:8.0.27-1.el9_1.x86_64.rpm","php-xml-debuginfo-0:8.0.27-1.el9_1.aarch64.rpm","php-xml-debuginfo-0:8.0.27-1.el9_1.ppc64le.rpm","php-xml-debuginfo-0:8.0.27-1.el9_1.s390x.rpm","php-xml-debuginfo-0:8.0.27-1.el9_1.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[]}