Headline

RHSA-2022:5467: Red Hat Security Advisory: php:7.4 security update

An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-31626: php: password of excessive length triggers buffer overflow leading to RCE

2 years ago

Red Hat Security Data

Open in Source

#sql #vulnerability #linux #red_hat #apache #js #php #rce #ldap #buffer_overflow #ibm #sap

Synopsis

Important: php:7.4 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

php: password of excessive length triggers buffer overflow leading to RCE (CVE-2022-31626)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, the httpd daemon must be restarted for the update to take effect.

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

BZ - 2098523 - CVE-2022-31626 php: password of excessive length triggers buffer overflow leading to RCE

Red Hat Enterprise Linux for x86_64 8

SRPM

libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src.rpm

SHA-256: ab8126b34de0337c40aa9165a671f01c387fa0f619f07cb007145d20a8059626

php-7.4.19-3.module+el8.6.0+15726+994cde98.src.rpm

SHA-256: 6aa345ba062441e50a7bffd624dab9d067ddb47cb58f9bdbaae8dc668100c14c

php-pear-1.10.12-1.module+el8.3.0+6678+b09f589e.src.rpm

SHA-256: d2ac133c4ec02b3046a19cb47076798f6654ad0476ae060cb2ed702b94d20134

php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.src.rpm

SHA-256: 5ef846d350d101cc5ade15412bd9a11c4939dce0d664556a45c7b388d54958dc

php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.src.rpm

SHA-256: 2c0dda676d2975cec816811a305cad43d1177f7064cb4f729d6febccceaf1bed

php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.src.rpm

SHA-256: 6cefdd897b02f017aa7f36bb1be5141ccde8baefd17f2e8af1c751315fa48057

php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.src.rpm

SHA-256: 37aa20b43d46ed37c3d11d64253a9be57307db957ac2de5cf0382f37e2200fd1

x86_64

apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch.rpm

SHA-256: 969124a440bc9018b5ccbf36175195f803908a47e3850e5203922a624b563955

libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: 909a4e2bfc39b47266aae1b0e7d50c237ba7f94a6d4c1334e82fa39467fe77da

libzip-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: 5b4b202ac79aef3b8000e6e30f966b46bb4aa6aed78ced7657ab4eb5a82cad2a

libzip-debugsource-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: 46397c3fe3f18a86771ffd19bda42c704f542c87bc474c37d2e274bf9405d200

libzip-devel-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: 190a912a533e67dd94974263dbf311586a0c6b8e80ec8d469e1e93f901881162

libzip-tools-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: 94028a5413773f56c98f3f0b4e220a16c0d91c6726fbea08dea26618df3cd9eb

libzip-tools-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: 99d5e36d9f94cd6d547176727902ac01f7e341d42e4f575a1461ef6242ccbfb3

php-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: a98ab2bac0365f0e52c67557e66f18f1f4f5821468d2361de4fde0b42d21fd24

php-bcmath-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: d137da93ef9cdb3830405fe0eb8fd1144582e1a4e0b81c662d041c22c69886f1

php-bcmath-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: d7b4d3e83254f45130de02ef01300bf08ef6c93ffa50f7db0e8e5152f6a278ef

php-cli-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: d2038cb96a2e242b73616da71b5759a6410e015b03f2d15db10ffe4e8e0b93c7

php-cli-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 132b812b361574d71fbbdae5db207a3b48cdf67abd229e0d15c7d2d44509cda9

php-common-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 90b5fe0b3321e97d9c4d74d03127b8cde6335a6b5f2a200043d2ac7cb73db13b

php-common-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: fff7a2a9425b89e1f971199f14c75cd07b98f8d12876d8279e6c4eac742c9254

php-dba-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: cfc1610dd1914962bcf2c3b7f22b0a1504c1eb5b9fc1eb7aa28a21b12818c9f0

php-dba-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 540d78ffe2a69dc3426fa5f50caa494361964d2f78134292456a2be2f2aa06b4

php-dbg-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: a81d0f2af22f6c2fa4a366eef9f7bb1508c80e1c415b2ab169168d416f9cd2d2

php-dbg-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 25d610a374a8ccc7d50801e5489f4c2ed1e08bf858ff748f7cb3b6ac3c3fc758

php-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: c9943b1bfee4fa6d919ff32302f2ec2c1d3d21e0ee832671fd9696b3d9b956da

php-debugsource-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: da7231ca60d36d6ad878e76a10b0d607707df4f3c6b599de3502b3530223d8a9

php-devel-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: e30c2a49dbfc4fa285be8fa734e22f9b9935dfc9aab0a12229bd7a3ed916fa1c

php-embedded-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: c44d46978e93bd6e0f288025d3267964c2cb1c62d3055b87cae4d6d38e44105d

php-embedded-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: b637e417de8198bb95cc3e06f1a8b9b87e15533caef251bed8b755b1ddf60d46

php-enchant-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 5d12f9a22046113b5a7afeff1f08cb99fab0655bc25c539009fa93add1780042

php-enchant-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 43431df0c80f9bfae351eb709caf82d533b29d9be16276851c7335a21d74ecf6

php-ffi-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 896883ff32c3fcd1d90eab0a3edce9cca361a565f5d54d09f9bda02ae94b3e65

php-ffi-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: c088e767066a6aba8811042971ac32aa343aed89b14d41fc6034c1988d254c72

php-fpm-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 25ebc47e00df4c91e1a89ae7fac62476a9affaaa6d020ff464a7b8a5cce94483

php-fpm-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: dcf6caaa051b713dede10f9d3471017017c6dee055ecc53c306b59b8717445ed

php-gd-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: fc71b33033e032674886d14405c42ccff66ec0f703ec8b1d9163d867c270077a

php-gd-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: fdb5bbe0d75c139aa4091081a4ef14d3166d01e810e29436b58adae4ccab060e

php-gmp-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: a8dd676dbaf534b92f8ad9948184cbe043163d2d49ad57c80a57b39b9f0d44b8

php-gmp-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: dc7e0e136aa1faadb18acd2507854d8f2148f52f6f87fe7eb49321031b6a90d6

php-intl-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 2484fd432925adc5ca00ebad0e8df8fd80919aab969a3d601db1aafd0ef6c943

php-intl-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: faa9824b10b66749ca3dddbacbdf7318097d22b05f6e20cd6a48302110d39d8e

php-json-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 7751212cff31c0f5708b99a46b7c7cf0a43e64593879f57495b26cb02403d733

php-json-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 3d080377211fef8ca6c34507b9cb8fdb3fa3debf1aa8eb48e2aaf416d36e69a8

php-ldap-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 13e075a15e0a420f0ec9084ee7d37f0435f418156a024c34af15d1c9e1ee2466

php-ldap-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: a55ba70097a3faac47fa1d565127d86714c348a9dbd6b9b44c6ebd878ba02bf5

php-mbstring-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 1d3a137af70f4f12ac0cd6bd7f7bb3055450abcc591b8e4e3a0afa886d65d9e0

php-mbstring-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: f6eab6d4f3d1bfa3f1ca957962979219f9ea79def1dd69853907062753612b68

php-mysqlnd-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 6bc5a3bf45aca9b03ca70e73c427623cd36c411358591a7013a53269220e90cb

php-mysqlnd-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: b68c1831802ca0c8b503347df8e22d354e126cd4fe824d0025e62a42480d9aea

php-odbc-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 97ad06dd441a7f32ad80ef44d1032213ad19e6f689a268f30dc62bcd91c49f53

php-odbc-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 6c5f5c8a60ef96f89e7e66e6ff762b97acba1b405c49e614cca6066c5aabd24b

php-opcache-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: a30d80882af903312eb171af866bb62b68b5baaceb38b98e82af814fd646ab69

php-opcache-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 34c64be41fc36ceb40a90a94c3983c5d15d789127c9a2586ca6c597bb95ad62d

php-pdo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 571f759d13a3a8d62de7b4d8bdb61d2233722cc517b455d143d4250a0782b817

php-pdo-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 2d885e0bc254c40491d2fc2ab313399712ebb3bd2cb4f29877d807cee80f636a

php-pear-1.10.12-1.module+el8.3.0+6678+b09f589e.noarch.rpm

SHA-256: 20f9d5e8e4c69b00959f3346c9620a7658ae1f6749fa4c8d77689d861ab0ab87

php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: 29274b94942f49de9c97e12a0998fb4b7f69c9cd03cb9e0b2033c548550cbc77

php-pecl-apcu-debuginfo-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: 28c8a225fe0d4a75ea3901b2df4d4153310c1bb36140d3f3887c9921a1b8aa73

php-pecl-apcu-debugsource-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: ab10f5783192ab58c2cf32bc6ef6fb574224ebb3dafe32fafb94353a23581774

php-pecl-apcu-devel-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: 56638437cbcee9779bb17923c2dfa349b8e1876afe97bd087b5acad45645577a

php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: 9c7d61cb1af7c7d4cb306c8fcf19377702c17d8889305d85d3da692635f22325

php-pecl-rrd-debuginfo-2.0.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: d7b9b9ea3d9ef10563159f7e4c4a93831b038751bba86a1af83397abe436bfb8

php-pecl-rrd-debugsource-2.0.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: b049012e9baeba02b55412972f1b3ab1fde443e785e34473bff755106524610d

php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: b889f21c8930e6eea3eed52006e9496a34112ed954507563ada7e6418910654f

php-pecl-xdebug-debuginfo-2.9.5-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: 20ad52dc5c8eec57abaff761f7b7a19df898e51f7482fdfe0c833bae518f6ada

php-pecl-xdebug-debugsource-2.9.5-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: c066d810e464e36485b4ecc2b3b717dcecb9b86739e5dea88919e1a599b627a6

php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: 9ad689763cec0d6379ed9efc9e5038b248ff65b6cd70ade588b064658af27c65

php-pecl-zip-debuginfo-1.18.2-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: bfb82456adc2289c4f382acf6bbe460fe997836009b4438d36679f882609c8fb

php-pecl-zip-debugsource-1.18.2-1.module+el8.3.0+6678+b09f589e.x86_64.rpm

SHA-256: 82238df0ed28b45f5c64e01858bd04a5eb59202b14425a3a323c86f967e7e090

php-pgsql-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 6c655bf0d732a457cc8a2d745c053d7676a0659cd8f08f9e46e667df41a5e118

php-pgsql-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: ba7a4fc38a8898803e5ab81395ff76417246dc139fb12219f96c45dceae03ab7

php-process-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 4eb595ba9fca2542fa92e76e9fd1c3bffe34e7b3724f86b2ed637799f57e276d

php-process-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: cc1f8e856ade6b044e68596c6b4a8bf8ad693c7bb95b38cafda4b8ab16403f5e

php-snmp-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: d7bfcda876abc3df96eac42b3ce082aa11e575cea98439151e9d6eb319ad7692

php-snmp-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 31d64b6d7838a8de643b0796c35da1a2c7f73659f946a2482b6a2110b972236e

php-soap-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 1b18dc7f8c45dec87fbfb132705b07632f93083df1456f40303623a973c312cf

php-soap-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 31a7bd49b55bbc253dffced479d398ca8013c1abec686b4f7035f62f6144ba91

php-xml-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: b2f339583da1d95c7e87197448674bfa94a7fc041f664694d4837b3eb4a45819

php-xml-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 73443c775461cf0444ad0184c852b17936d3c2b208e13b4ea1f35f7a95ff2dca

php-xmlrpc-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: 039c86a105d79c44967e9a5b05a5861d62b092c0cba8303c857de3636647ef01

php-xmlrpc-debuginfo-7.4.19-3.module+el8.6.0+15726+994cde98.x86_64.rpm

SHA-256: e433fe991d45a2c4347e389161adfcf5aa4372430170113a02c27999dca37ced

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6