Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
98
security advisorybuffer overflowRed Hat Enterprise LinuxRed Hat Enterprise Linux 8 RHSA-2023-2903-01 Moderate PHP 7.4 Fix
An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: php:7.4 security update Advisory ID: RHSA-2023:2903-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:2903 Issue date: 2023-05-16 CVE Names: CVE-2022-31628 CVE-2022-31629 CVE-2022-31630 CVE-2022-31631 CVE-2022-37454 ==================================================================== 1. Summary: An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php (7.4.33). Security Fix(es): * XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454) * php: standard insecure cookie could be treated as a '__Host-' or '__Secure-' cookie by PHP applications (CVE-2022-31629) * php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630) * php: PDO::quote() may return unquoted string due to an integer overflow (CVE-2022-31631) * php: phar: infinite loop when decompressing quine gzip file (CVE-2022-31628) For more details about the security issue(s), including the impact, aCVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon must be restarted for the update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 2133687 - CVE-2022-31629 php: standard insecure cookie could be treated as a '__Host-' or '__Secure-' cookie by PHP applications 2133688 - CVE-2022-31628 php: phar: infinite loop when decompressing quine gzip file 2139280 - CVE-2022-31630 php: OOB read due to insufficient input validation in imageloadfont() 2140200 - CVE-2022-37454 XKCP: buffer overflow in the SHA-3 reference implementation 2158791 - CVE-2022-31631 php: PDO::quote() may return unquoted string due to an integer overflow 6. Package List: Red Hat Enterprise Linux AppStream (v.8): Source: libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src.rpm php-7.4.33-1.module+el8.8.0+17865+ef7eddfa.src.rpm php-pear-1.10.13-1.module+el8.7.0+15127+a450a8db.src.rpm php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.src.rpm php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.src.rpm php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.src.rpm php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.src.rpm aarch64: libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm libzip-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm libzip-debugsource-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm libzip-devel-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm libzip-tools-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm libzip-tools-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-bcmath-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-bcmath-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-cli-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-cli-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-common-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-common-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-dba-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-dba-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-dbg-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-dbg-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-debugsource-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-devel-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-embedded-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-embedded-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-enchant-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-enchant-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-ffi-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-ffi-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-fpm-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-fpm-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-gd-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-gd-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-gmp-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-gmp-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-intl-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-intl-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-json-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-json-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-ldap-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-ldap-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-mbstring-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-mbstring-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-mysqlnd-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-mysqlnd-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-odbc-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-odbc-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-opcache-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-opcache-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-pdo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-pdo-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-apcu-debuginfo-5.1.18-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-apcu-debugsource-5.1.18-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-apcu-devel-5.1.18-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-rrd-debuginfo-2.0.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-rrd-debugsource-2.0.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-xdebug-debuginfo-2.9.5-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-xdebug-debugsource-2.9.5-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-zip-debuginfo-1.18.2-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-zip-debugsource-1.18.2-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pgsql-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-pgsql-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-process-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-process-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-snmp-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-snmp-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-soap-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-soap-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-xml-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-xml-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-xmlrpc-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm php-xmlrpc-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.aarch64.rpm noarch: apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch.rpm php-pear-1.10.13-1.module+el8.7.0+15127+a450a8db.noarch.rpm ppc64le: libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm libzip-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm libzip-debugsource-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm libzip-devel-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm libzip-tools-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm libzip-tools-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-bcmath-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-bcmath-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-cli-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-cli-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-common-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-common-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-dba-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-dba-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-dbg-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-dbg-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-debugsource-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-devel-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-embedded-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-embedded-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-enchant-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-enchant-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-ffi-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-ffi-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-fpm-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-fpm-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-gd-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-gd-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-gmp-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-gmp-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-intl-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-intl-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-json-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-json-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-ldap-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-ldap-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-mbstring-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-mbstring-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-mysqlnd-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-mysqlnd-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-odbc-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-odbc-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-opcache-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-opcache-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-pdo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-pdo-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-apcu-debuginfo-5.1.18-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-apcu-debugsource-5.1.18-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-apcu-devel-5.1.18-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-rrd-debuginfo-2.0.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-rrd-debugsource-2.0.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-xdebug-debuginfo-2.9.5-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-xdebug-debugsource-2.9.5-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-zip-debuginfo-1.18.2-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-zip-debugsource-1.18.2-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pgsql-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-pgsql-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-process-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-process-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-snmp-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-snmp-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-soap-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-soap-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-xml-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-xml-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-xmlrpc-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm php-xmlrpc-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.ppc64le.rpm s390x: libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm libzip-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm libzip-debugsource-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm libzip-devel-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm libzip-tools-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm libzip-tools-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-bcmath-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-bcmath-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-cli-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-cli-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-common-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-common-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-dba-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-dba-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-dbg-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-dbg-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-debugsource-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-devel-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-embedded-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-embedded-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-enchant-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-enchant-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-ffi-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-ffi-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-fpm-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-fpm-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-gd-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-gd-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-gmp-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-gmp-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-intl-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-intl-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-json-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-json-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-ldap-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-ldap-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-mbstring-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-mbstring-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-mysqlnd-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-mysqlnd-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-odbc-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-odbc-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-opcache-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-opcache-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-pdo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-pdo-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-apcu-debuginfo-5.1.18-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-apcu-debugsource-5.1.18-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-apcu-devel-5.1.18-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-rrd-debuginfo-2.0.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-rrd-debugsource-2.0.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-xdebug-debuginfo-2.9.5-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-xdebug-debugsource-2.9.5-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-zip-debuginfo-1.18.2-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-zip-debugsource-1.18.2-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pgsql-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-pgsql-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-process-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-process-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-snmp-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-snmp-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-soap-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-soap-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-xml-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-xml-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-xmlrpc-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm php-xmlrpc-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.s390x.rpm x86_64: libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm libzip-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm libzip-debugsource-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm libzip-devel-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm libzip-tools-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm libzip-tools-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-bcmath-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-bcmath-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-cli-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-cli-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-common-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-common-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-dba-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-dba-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-dbg-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-dbg-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-debugsource-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-devel-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-embedded-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-embedded-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-enchant-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-enchant-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-ffi-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-ffi-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-fpm-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-fpm-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-gd-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-gd-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-gmp-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-gmp-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-intl-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-intl-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-json-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-json-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-ldap-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-ldap-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-mbstring-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-mbstring-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-mysqlnd-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-mysqlnd-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-odbc-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-odbc-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-opcache-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-opcache-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-pdo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-pdo-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-apcu-debuginfo-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-apcu-debugsource-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-apcu-devel-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-rrd-debuginfo-2.0.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-rrd-debugsource-2.0.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-xdebug-debuginfo-2.9.5-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-xdebug-debugsource-2.9.5-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-zip-debuginfo-1.18.2-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-zip-debugsource-1.18.2-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pgsql-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-pgsql-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-process-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-process-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-snmp-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-snmp-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-soap-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-soap-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-xml-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-xml-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-xmlrpc-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm php-xmlrpc-debuginfo-7.4.33-1.module+el8.8.0+17865+ef7eddfa.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2022-31628 https://access.redhat.com/security/cve/CVE-2022-31629 https://access.redhat.com/security/cve/CVE-2022-31630 https://access.redhat.com/security/cve/CVE-2022-31631 https://access.redhat.com/security/cve/CVE-2022-37454 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBZGNwgtzjgjWX9erEAQhHFQ/+LwML5FwZ5RQAqzYAbNaRaP6Qp6dQa1aO hHM5xdJbibiBORgVGlYM7HtFx6d0obMicz5jk3tEqQgk24s3Ul0R9clF2cmJZfu4 ccQNZFxdheZAddyKryFnYdASpPz91hYbxizAIDtuSpqZyfQ4nycezBXTcEZrlTz5 A/9GnJKu1PDBjnI+Du9h1HsKi/Ssd0wo4eq51F1n4CN2OMBsRzAvP4OZquQvNB81 GABrVvxifrY+38b5+FUfpweoJ0V3+EKiQPf0T8rL/nf3E/lcm93t4Y1OITTju0jD IuuOMpTbe8I1KpoHYsZZO6guh4LzjkWHmDTKxFk5DKQ+xpl3bTi2KmqOMDviwMx/ fbAJup3TtoTjiJs/TESEJhlYoPG9OSl8aN8gPHxGB6Qi1D1ZmuaH6kPj4tbTviu1 jXx03R35K5/KI4Elg5czCKSlLrVFRDR4HI4hmET0ULyxVsX+NfmAwfNRWLu4jMrc dAmiC8hgmMha4sSife97NJumOQ8UAJTzlNpYqWfC20WFIFTt33o/nJ+KSOpUPY2B sUU4QoJalt8HIUKimse8CpjU5AQXXKz3BrOKWWkPLASRXzQMY+MiIHj1EMjWHHP5 mvUT53xtsaa8JztJ9BGrDdlCB+UG+jzYxMxRsa/eok5ZvwNrf3t56ERqYdZBRIut RNhJTthk/U4=6W5m -----END PGP SIGNATURE----- -- RHSA-announce mailing list
May 16, 2023
Red Hat
98
security advisorymoderatelocal privilege escalationRed Hat 8: RHSA-2022-1935-01 Moderate: php Local Escalation and SSRF
An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: php:7.4 security update Advisory ID: RHSA-2022:1935-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:1935 Issue date: 2022-05-10 CVE Names: CVE-2021-21703 CVE-2021-21705 ==================================================================== 1. Summary: An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Local privilege escalation via PHP-FPM (CVE-2021-21703) * php: SSRF bypass in FILTER_VALIDATE_URL (CVE-2021-21705) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpddaemon must be restarted for the update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1978755 - CVE-2021-21705 php: SSRF bypass in FILTER_VALIDATE_URL 2016535 - CVE-2021-21703 php: Local privilege escalation via PHP-FPM 6. Package List: Red Hat Enterprise Linux AppStream (v.8): Source: libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src.rpm php-7.4.19-2.module+el8.6.0+13953+0a59ce9f.src.rpm php-pear-1.10.12-1.module+el8.3.0+6678+b09f589e.src.rpm php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.src.rpm php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.src.rpm php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.src.rpm php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.src.rpm aarch64: libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm libzip-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm libzip-debugsource-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm libzip-devel-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm libzip-tools-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm libzip-tools-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-bcmath-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-bcmath-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-cli-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-cli-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-common-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-common-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-dba-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-dba-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-dbg-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-dbg-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-debugsource-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-devel-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-embedded-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-embedded-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-enchant-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-enchant-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-ffi-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-ffi-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-fpm-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-fpm-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-gd-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-gd-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-gmp-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-gmp-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-intl-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-intl-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-json-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-json-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-ldap-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-ldap-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-mbstring-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-mbstring-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-mysqlnd-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-mysqlnd-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-odbc-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-odbc-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-opcache-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-opcache-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-pdo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-pdo-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-apcu-debuginfo-5.1.18-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-apcu-debugsource-5.1.18-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-apcu-devel-5.1.18-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-rrd-debuginfo-2.0.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-rrd-debugsource-2.0.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-xdebug-debuginfo-2.9.5-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-xdebug-debugsource-2.9.5-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-zip-debuginfo-1.18.2-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-zip-debugsource-1.18.2-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pgsql-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-pgsql-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-process-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-process-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-snmp-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-snmp-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-soap-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-soap-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-xml-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-xml-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-xmlrpc-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm php-xmlrpc-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.aarch64.rpm noarch: apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch.rpm php-pear-1.10.12-1.module+el8.3.0+6678+b09f589e.noarch.rpm ppc64le: libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm libzip-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm libzip-debugsource-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm libzip-devel-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm libzip-tools-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm libzip-tools-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-bcmath-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-bcmath-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-cli-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-cli-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-common-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-common-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-dba-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-dba-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-dbg-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-dbg-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-debugsource-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-devel-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-embedded-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-embedded-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-enchant-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-enchant-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-ffi-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-ffi-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-fpm-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-fpm-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-gd-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-gd-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-gmp-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-gmp-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-intl-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-intl-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-json-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-json-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-ldap-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-ldap-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-mbstring-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-mbstring-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-mysqlnd-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-mysqlnd-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-odbc-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-odbc-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-opcache-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-opcache-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-pdo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-pdo-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-apcu-debuginfo-5.1.18-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-apcu-debugsource-5.1.18-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-apcu-devel-5.1.18-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-rrd-debuginfo-2.0.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-rrd-debugsource-2.0.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-xdebug-debuginfo-2.9.5-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-xdebug-debugsource-2.9.5-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-zip-debuginfo-1.18.2-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-zip-debugsource-1.18.2-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pgsql-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-pgsql-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-process-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-process-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-snmp-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-snmp-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-soap-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-soap-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-xml-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-xml-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-xmlrpc-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm php-xmlrpc-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.ppc64le.rpm s390x: libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm libzip-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm libzip-debugsource-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm libzip-devel-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm libzip-tools-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm libzip-tools-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-bcmath-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-bcmath-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-cli-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-cli-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-common-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-common-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-dba-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-dba-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-dbg-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-dbg-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-debugsource-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-devel-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-embedded-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-embedded-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-enchant-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-enchant-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-ffi-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-ffi-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-fpm-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-fpm-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-gd-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-gd-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-gmp-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-gmp-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-intl-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-intl-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-json-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-json-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-ldap-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-ldap-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-mbstring-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-mbstring-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-mysqlnd-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-mysqlnd-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-odbc-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-odbc-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-opcache-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-opcache-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-pdo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-pdo-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-apcu-debuginfo-5.1.18-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-apcu-debugsource-5.1.18-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-apcu-devel-5.1.18-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-rrd-debuginfo-2.0.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-rrd-debugsource-2.0.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-xdebug-debuginfo-2.9.5-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-xdebug-debugsource-2.9.5-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-zip-debuginfo-1.18.2-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-zip-debugsource-1.18.2-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pgsql-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-pgsql-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-process-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-process-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-snmp-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-snmp-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-soap-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-soap-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-xml-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-xml-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-xmlrpc-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm php-xmlrpc-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.s390x.rpm x86_64: libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm libzip-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm libzip-debugsource-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm libzip-devel-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm libzip-tools-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm libzip-tools-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-bcmath-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-bcmath-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-cli-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-cli-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-common-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-common-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-dba-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-dba-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-dbg-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-dbg-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-debugsource-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-devel-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-embedded-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-embedded-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-enchant-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-enchant-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-ffi-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-ffi-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-fpm-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-fpm-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-gd-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-gd-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-gmp-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-gmp-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-intl-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-intl-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-json-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-json-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-ldap-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-ldap-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-mbstring-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-mbstring-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-mysqlnd-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-mysqlnd-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-odbc-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-odbc-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-opcache-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-opcache-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-pdo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-pdo-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-apcu-debuginfo-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-apcu-debugsource-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-apcu-devel-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-rrd-debuginfo-2.0.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-rrd-debugsource-2.0.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-xdebug-debuginfo-2.9.5-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-xdebug-debugsource-2.9.5-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-zip-debuginfo-1.18.2-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-zip-debugsource-1.18.2-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pgsql-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-pgsql-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-process-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-process-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-snmp-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-snmp-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-soap-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-soap-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-xml-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-xml-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-xmlrpc-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm php-xmlrpc-debuginfo-7.4.19-2.module+el8.6.0+13953+0a59ce9f.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2021-21703 https://access.redhat.com/security/cve/CVE-2021-21705 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/ 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYnqRbNzjgjWX9erEAQj+KQ//a6GiNcZOpW5XSSmz/B4TALfhxsALYvcC yOrJ1rv8t0GN8rbZFGhW7CKzFHohk5ScpBnMp2KXH7VsBf9hIC6qO6LZ5gv6W+ER D1Bmq+EHeLpzHWOJhG1SQknj2TojEOamZsFHJHfBsAUcAzzBVQJipwUjLEW3XhHu grZmjaPnlxP95dpWOR1vuDxBmguMDROhgRd06xKfgY+wftFR8ggxqoNj58uu7uou M/lX/h+pqbJ//bp0PdMidOioVgnNBtqXvKbwLBzKztYCYs7/r4IeIIcbJjsC8goZ 8oLocTEKR+XHIaHcQumusg4q+kYaW3N7bbg896cyN2VXYBIeSK2Cez/sgMbkv3yq TVIQX3um4mBrqwTyEMYAZuGkuzHPKnU3FhrhI2/dcaL4UL1lWrtGHukXMda+ZPIL KiDV3cmZUncWTG3gUzmNe/w3rd2+TkW7P6c3h3g9bq2hY2F1bdp+p0c7eethPknb RfD/xPgAcAVBVTnr/IhQDlG9bmk1ktwdgZ4g1CFwTJTM+wZuumQnmJBfnd/Kc7gv WTL1t/XLL2QREKbjxsbLxyya/tN3zrM6ZN50v60z76PTdaB9dg8u+c3tVPiTIc4F 4Nxoa5ulyEa8PTq2HXZ1+9k3/1UaaGGATdo+uRKPvgL21h5zgO88qGQHJGRjQbwN DtJDz4XVhAo=eqjM -----END PGP SIGNATURE----- -- RHSA-announce mailing list
May 10, 2022
•Important
Red Hat
197
security advisorydebianarbitrary code executionDebian: DLA-2466-1 Critical: Drupal7 Arbitrary Code Execution
Two vulnerabilities were found in the Archive_Tar PHP module, used by Drupal, which could result in the execution of arbitrary code if a malicious user is allowed to upload tar archives. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2466-1
Nov 27, 2020
•Critical
Debian LTS
98
security advisoryupdatecriticalRed Hat Enterprise Linux 8: RHSA-2020:0322-01 Critical: php Module Exploit
An update for the php:7.2 module is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Critical: php:7.2 security update Advisory ID: RHSA-2020:0322-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:0322 Issue date: 2020-02-03 CVE Names: CVE-2019-11043 ==================================================================== 1. Summary: An update for the php:7.2 module is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream E4S (v. 8.0) - noarch, ppc64le, x86_64 3. Description: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: underflow in env_path_info in fpm_main.c (CVE-2019-11043) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon must be restarted for the update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1766378 - CVE-2019-11043 php: underflow in env_path_info infpm_main.c 6. Package List: Red Hat Enterprise Linux AppStream E4S (v.8.0): Source: libzip-1.5.1-1.module+el8+2561+1aca3413.src.rpm php-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.src.rpm php-pear-1.10.5-8.module+el8+2561+1aca3413.src.rpm php-pecl-apcu-5.1.12-1.module+el8+2561+1aca3413.src.rpm php-pecl-zip-1.15.3-1.module+el8+2561+1aca3413.src.rpm noarch: apcu-panel-5.1.12-1.module+el8+2561+1aca3413.noarch.rpm php-pear-1.10.5-8.module+el8+2561+1aca3413.noarch.rpm ppc64le: libzip-1.5.1-1.module+el8+2561+1aca3413.ppc64le.rpm libzip-debuginfo-1.5.1-1.module+el8+2561+1aca3413.ppc64le.rpm libzip-debugsource-1.5.1-1.module+el8+2561+1aca3413.ppc64le.rpm libzip-devel-1.5.1-1.module+el8+2561+1aca3413.ppc64le.rpm libzip-tools-1.5.1-1.module+el8+2561+1aca3413.ppc64le.rpm libzip-tools-debuginfo-1.5.1-1.module+el8+2561+1aca3413.ppc64le.rpm php-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-bcmath-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-bcmath-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-cli-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-cli-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-common-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-common-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-dba-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-dba-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-dbg-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-dbg-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-debugsource-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-devel-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-embedded-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-embedded-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-enchant-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-enchant-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-fpm-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-fpm-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-gd-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-gd-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-gmp-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-gmp-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-intl-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-intl-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-json-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-json-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-ldap-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-ldap-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-mbstring-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-mbstring-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-mysqlnd-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-mysqlnd-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-odbc-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-odbc-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-opcache-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-opcache-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-pdo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-pdo-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-pecl-apcu-5.1.12-1.module+el8+2561+1aca3413.ppc64le.rpm php-pecl-apcu-debuginfo-5.1.12-1.module+el8+2561+1aca3413.ppc64le.rpm php-pecl-apcu-debugsource-5.1.12-1.module+el8+2561+1aca3413.ppc64le.rpm php-pecl-apcu-devel-5.1.12-1.module+el8+2561+1aca3413.ppc64le.rpm php-pecl-zip-1.15.3-1.module+el8+2561+1aca3413.ppc64le.rpm php-pecl-zip-debuginfo-1.15.3-1.module+el8+2561+1aca3413.ppc64le.rpm php-pecl-zip-debugsource-1.15.3-1.module+el8+2561+1aca3413.ppc64le.rpm php-pgsql-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-pgsql-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-process-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-process-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-recode-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-recode-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-snmp-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-snmp-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-soap-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-soap-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-xml-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-xml-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-xmlrpc-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm php-xmlrpc-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.ppc64le.rpm x86_64: libzip-1.5.1-1.module+el8+2561+1aca3413.x86_64.rpm libzip-debuginfo-1.5.1-1.module+el8+2561+1aca3413.x86_64.rpm libzip-debugsource-1.5.1-1.module+el8+2561+1aca3413.x86_64.rpm libzip-devel-1.5.1-1.module+el8+2561+1aca3413.x86_64.rpm libzip-tools-1.5.1-1.module+el8+2561+1aca3413.x86_64.rpm libzip-tools-debuginfo-1.5.1-1.module+el8+2561+1aca3413.x86_64.rpm php-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-bcmath-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-bcmath-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-cli-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-cli-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-common-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-common-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-dba-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-dba-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-dbg-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-dbg-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-debugsource-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-devel-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-embedded-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-embedded-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-enchant-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-enchant-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-fpm-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-fpm-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-gd-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-gd-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-gmp-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-gmp-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-intl-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-intl-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-json-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-json-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-ldap-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-ldap-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-mbstring-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-mbstring-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-mysqlnd-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-mysqlnd-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-odbc-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-odbc-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-opcache-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-opcache-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-pdo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-pdo-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-pecl-apcu-5.1.12-1.module+el8+2561+1aca3413.x86_64.rpm php-pecl-apcu-debuginfo-5.1.12-1.module+el8+2561+1aca3413.x86_64.rpm php-pecl-apcu-debugsource-5.1.12-1.module+el8+2561+1aca3413.x86_64.rpm php-pecl-apcu-devel-5.1.12-1.module+el8+2561+1aca3413.x86_64.rpm php-pecl-zip-1.15.3-1.module+el8+2561+1aca3413.x86_64.rpm php-pecl-zip-debuginfo-1.15.3-1.module+el8+2561+1aca3413.x86_64.rpm php-pecl-zip-debugsource-1.15.3-1.module+el8+2561+1aca3413.x86_64.rpm php-pgsql-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-pgsql-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-process-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-process-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-recode-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-recode-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-snmp-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-snmp-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-soap-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-soap-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-xml-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-xml-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-xmlrpc-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm php-xmlrpc-debuginfo-7.2.11-1.1.module+el8.0.0+4664+17bd8d65.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-11043 https://access.redhat.com/security/updates/classification/#critical 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBXjiQo9zjgjWX9erEAQifGQ/+OGCw/MIhZ+bEPP/iO58IlyT0S1waIJkQ H6akm08d2dZQAy0zIRLrObqAEnJvZyO5itxAv+n+vaBPxTEaizKSDtZHaljXKfPZ 07HA78m3gcTDp9zWQlfTblZ6weclUEPDP436qlDbH9olU/spKi5x5fDe3VPN1Oc+ EMEfRE2eFrBluyphcjBD8SNmPokyrOOZ1qQdTSpjS7O5y0NhJ2KtpItWh10dZQ/9 3WNWQeXfWqogCO7psQ8R2lcQ1IEIpOnIpC65yhuaYvlaU+4MmMVi3Hto6X4GDSlX nrRgB5sT1AcDc0OwNSJZ5qThxvdhxASIyX1Sb2GAuZNHiQOPgikKvmBA2E0zDGg5 bXXkDjZrkKE8VFo5SsRhT/BpwpyC+GLalNs9OylyDITyYWUcVJfy3KajqX81htSA FL2AAUAOcu4cB7jGNplMzo5mfLhaSjkeK7JwOmY+NgsqBeX4bi4inE6R/uG6eWin bMYGF94Yhzy7/hr71G6/444Z+ZSvcf897zy9d7xqjNCPzf/uU/js5PZFTR1zdS9A X2msIzEWs0AHl44HyKETigL/CbdbwFayIOwTmtc4IZ5IuvbNGPUKz/jOqJ05FDXm xQ9gsOwuK0HJR96e6IKc0Pv822o45qP9gH7o/7hEBMZsB9w2913Jq4zf+2eR7aGs 6OVDGFDpWXI=MiBv -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Feb 03, 2020
•Critical
Red Hat
91
security advisorygentoobuffer overflowGentoo: Urgent PHP Module Memory Leak Threat Detected in 202306-7
If you use the wordwrap() function on user-supplied input, a specially-crafted input can overflow the allocated buffer and overwrite the heap.. - -------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200301-8 - -------------------------------------------------------------------- PACKAGE : mod_php php SUMMARY : buffer overflow DATE : 2003-01-13 15:01 UTC EXPLOIT : remote - -------------------------------------------------------------------- From advisory: "If you use the wordwrap() function on user-supplied input, a specially-crafted input can overflow the allocated buffer and overwrite the heap. Exploit looks very difficult, but still theoretically possible." Read the full advisory at http://marc.theaimsgroup.com/?l=bugtraq&m=104102689503192&w=2 SOLUTION It is recommended that all Gentoo Linux users who are running dev-php/php-4.2.3 and/or dev-php/mod_php-4.2.3 or earlier update their systems as follows: emerge rsync emerge php and/or emerge mod_php finish with: emerge clean - --------------------------------------------------------------------
Jan 13, 2003
•Critical
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!