Stay Secure with the Latest Linux Advisories

security advisorybuffer overflowcritical

Mageia 8: 2023-0248 Critical: PHP Buffer Overflow And Entity Loading

Libxml - GHSA-3qrf-m4j2-pcrr (Security issue with external entity loading in XML without enabling it). (CVE-2023-3823) Phar - GHSA-jqcx-ccgc-xwhv (Buffer mismanagement in phar_dir_read()) (CVE-2023-3824) . MGASA-2023-0248 - Updated php packages fix security vulnerability Publication date: 23 Aug 2023 URL: https://advisories.mageia.org/MGASA-2023-0248.html Type: security Affected Mageia releases: 8 CVE: CVE-2023-3823, CVE-2023-3824 Libxml - GHSA-3qrf-m4j2-pcrr (Security issue with external entity loading in XML without enabling it). (CVE-2023-3823) Phar - GHSA-jqcx-ccgc-xwhv (Buffer mismanagement in phar_dir_read()) (CVE-2023-3824) References: - https://bugs.mageia.org/show_bug.cgi?id=32158 - https://www.php.net/ChangeLog-8.php#8.0.30 - https://www.cve.org/CVERecord?id=CVE-2023-3823 - https://www.cve.org/CVERecord?id=CVE-2023-3824 SRPMS: - 8/core/php-8.0.30-1.mga8 . Ubuntu 2023-0385 resolves serious python vulnerabilities affecting earlier editions by rectifying memory handling flaws and injection threats.. Mageia Security, PHP Update, Buffer Management, Entity Loading Issue, Software Patch. . Severity: Critical. LinuxSecurity.com Team

Aug 23, 2023 •Critical Mageia