Headline

RHSA-2022:5468: Red Hat Security Advisory: php:8.0 security update

An update for the php:8.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-31626: php: password of excessive length triggers buffer overflow leading to RCE

2 years ago

Red Hat Security Data

Open in Source

#sql #vulnerability #linux #red_hat #apache #php #rce #ldap #buffer_overflow #ibm #sap

Synopsis

Important: php:8.0 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the php:8.0 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

php: password of excessive length triggers buffer overflow leading to RCE (CVE-2022-31626)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, the httpd daemon must be restarted for the update to take effect.

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

BZ - 2098523 - CVE-2022-31626 php: password of excessive length triggers buffer overflow leading to RCE

Red Hat Enterprise Linux for x86_64 8

SRPM

libzip-1.7.3-1.module+el8.6.0+13671+84712317.src.rpm

SHA-256: 130c2721c8857e3a843c117d88ba104e244ede96713e89ccf7f798564d60746a

php-8.0.13-3.module+el8.6.0+15725+0c79e7c4.src.rpm

SHA-256: a9c83b3383db2622dbaabc84a95d588e489a3a339c2f4edbabb63511fdffd28b

php-pear-1.10.13-1.module+el8.6.0+13671+84712317.src.rpm

SHA-256: 57ee65eadf73ebbca87a1d7fd37985972d0e5bcc9a4b51315881279a930ed9fa

php-pecl-apcu-5.1.20-1.module+el8.6.0+13671+84712317.src.rpm

SHA-256: 5ddba68be442aace8f2334d747089e28264288ea4621b321f27791e6ecf497e9

php-pecl-rrd-2.0.3-1.module+el8.6.0+13671+84712317.src.rpm

SHA-256: 0a80e83b75001d744fd2cf99c6bc92c5a27afc03162735920356422f6952cfe9

php-pecl-xdebug3-3.1.2-1.module+el8.6.0+13671+84712317.src.rpm

SHA-256: 7dc4905005c4057354c2c8bd1918c836384e31b308e0130f636c20cab512fb35

php-pecl-zip-1.19.2-1.module+el8.6.0+13671+84712317.src.rpm

SHA-256: 1c477fcc757f6041710c34c6bbf94186996e3ef0f02867dad81fd619b34a7dd9

x86_64

apcu-panel-5.1.20-1.module+el8.6.0+13671+84712317.noarch.rpm

SHA-256: d101f585108af2aa9c97fbb2e1414f180511c52e528c2858c6749686f86e1da1

php-pear-1.10.13-1.module+el8.6.0+13671+84712317.noarch.rpm

SHA-256: a8c05d35bde82372c5d5b3524e5a072ad5c047ead9023aeed6ae06704976dd18

libzip-1.7.3-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: 7d8f67c8c5cbcb488c4a2bd39f5ccade9ff845d830b7983a29f17d2d00c26ab2

libzip-debuginfo-1.7.3-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: 4c44f6add1b8594549a1e9bd7e2dcad0f9edac14f8bee628662c7a34f75f8437

libzip-debugsource-1.7.3-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: fa18a8a34be2ff6e43a1df6099d370269e4dac2ff5e42ad3c2c7f6041f89dd7f

libzip-devel-1.7.3-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: 0d2ec09bcf6f54dc4846c8a4b8fd54db69b3465af0662ebf938b0b52531e1ca4

libzip-tools-1.7.3-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: 2c334b4724faea1512d96d8779b7b712190969b4c56c45fb0915b97b8761c533

libzip-tools-debuginfo-1.7.3-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: d233f4c643442343c26ede85741ebdf4799ddcb6dcdab0228ca7e248f3774494

php-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 19c0ef255271c896abd1d178bbb9524dfdee2bcb9ebabc6d8d5f6bafda25ea26

php-bcmath-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 70a8bfd66cb784db5b9853eacbc5d8036d515b28995715040c5e887e29efb8b1

php-bcmath-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: f5fc5cfa6f5d14a4c9a38e4d2a0e9cdeacc2896dd92f85f2168f1c28af8bdc86

php-cli-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 6fc527f83b722d37a25df23c31ac5ca20e6a2f0b2e798dce45079b8b74310496

php-cli-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: d4895aceacbf286ca531748c5e538e5cbb1cdda8acec3a1d6c76b0a7063f687b

php-common-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 259f8e4b7c22f383a918dbee3f982d43082ae1f662d0c3c090c847d9bfd14892

php-common-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: c233639fb07754580b56a7e2634f36d2b0175f574887d2c2a95af1e69c5b0b81

php-dba-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 57472bb7b91becaaaac3d466810ddeecc2a97bd0d64648393376b6173fe2603b

php-dba-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 6477ec11ee8fe85422f8eda0e2a79966200143a895c50c00ee0a208bef478539

php-dbg-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 9e91c119f23daedc090bb129e9b051189317eb24ba381ae794df48b2757e6ba6

php-dbg-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 8eed96473f33e829316c6d6484c4077bf115f0e700e18fe016aa288e956d7ab9

php-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 214d0644dc57bb1194f1406ba67b952dc838bd2b385eae322be91644dee786dd

php-debugsource-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 833863f815df59d950541a03bf000819bd477e52e19f071ee771a500e2ea53b6

php-devel-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: b4517552e0d504902855effc74dfcf7667da1fde2d677e4e9aecf27f541a2ab3

php-embedded-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: b3757f83fc7a540b531adeb3dc78404c6d3b34e2fea45f43f98833014a0c63db

php-embedded-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: da2862e77acd653ad79de82c2bf8153f2b293a1eafa4557c0f9d8d6f773e5a23

php-enchant-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 01c2a03c306f9f1e235be79f84f3fcf5cf16e3529c39f5bc00b3f0965053e1bc

php-enchant-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: bf5e8ae3eecdd0bc96c4484a0f4fd95c0fd1b88bf523e837a5e15b6c17c2e319

php-ffi-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: e4a071a9d1346f8ba6ba19f6d74d72ce9a3770106f353dfda9216979645627cf

php-ffi-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 29029a8df8bce498e1d582710fc71844c72066fd555bafd9e53333500745cd3a

php-fpm-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: b006f8495ba6503285b9a051c34d450f3d859dc996a4a81fbae23c236dfa96f5

php-fpm-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 849cb562dab910f037dbbe45be660ae3c687c0fa366e50d01b34a40f05365624

php-gd-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: be392b362a564c70afd3beef998a6be03c84c04ddd3b56cee3299733de62adc7

php-gd-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: e2eae7d535f6a37960c3bb3365504c98e7fc17d4261585f9c241820ae6573974

php-gmp-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 0f7dd3e981fb1396ae4173464de721e7997c57bf6f91bd1b79b246776c9e784e

php-gmp-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 924751d6640bd0c7ccc83bc2ed499b326902ca439c6c8cae004d73b9a81d7221

php-intl-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 6578204c14a58f153598eedf6c524a1dca09d26423cf80cf9bcfc3923842c5a3

php-intl-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: cd0fd8759c33ece8f369effdf0a3cd12d46d7e7d66b4b88b5e9aa8f72f038e18

php-ldap-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 0140cfb70ef8a94969e6ac68cd7358a0916b6a0c2bafcf547b494e47e560d5b3

php-ldap-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: cdbc4f629878de93e30ea3d17527182ff4d788b8c1b38fc3fdf42e528707fd6e

php-mbstring-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 1870f7c7bf15edd8dc0b300210af78da76e7024833390768d17da7f8a935efe9

php-mbstring-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 3a9fbaa6a394cb08c487b3276e65aa6899326135271ceeb6b6124078eaddb302

php-mysqlnd-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: bc06870acde071902f9ab934b313a9934355148ac88a1743ec65d2f1b326b9eb

php-mysqlnd-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: f0fb18308f473cd89b6825c1a6676480c99529a68c80dfaba93ab7b491a50ad0

php-odbc-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: a4c420d2fdbb97801e57deadebee8e6019da74d3c3608ec880f3b9c99a17f701

php-odbc-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 4769c621644b3d9bc5bf0d6e23c9b0b3130973c859dec8ab2a2cca29aed49398

php-opcache-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 2c364c500792eb5ea07952a38d7117e79f6cc5ac7d38f909c987beb140988e78

php-opcache-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: e648dea1f71a769b486148db734e46467eb7403dcdd8022e807219aaa6c11b54

php-pdo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 1f561fb86e9d8967bf625c093724f80d57036d022c9109b9f664925b715e4c97

php-pdo-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 4a6316e6d14c1cfdf5b27672c40a75ab5a3a892ebdec605546722d397fbba64a

php-pecl-apcu-5.1.20-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: 098b98edf6bcadf980dd5b44434987174b23025762d4aff14164eacdc7e4ab09

php-pecl-apcu-debuginfo-5.1.20-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: 5b61e20545f0c3e5a0657ca789d83568457cfb25083230588dbc7384d9096434

php-pecl-apcu-debugsource-5.1.20-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: 376f762999a3dad7948cf022ec04c39f2145f60367ae260b9bb1a1fd13c8c4bf

php-pecl-apcu-devel-5.1.20-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: 03cc51194ec55c3360365220d9ebb91d3fd1ff5695d8bde5db02d5f897e9de40

php-pecl-rrd-2.0.3-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: 1cef0c9ff3ec9ddd66f458fd074f78ceb1c1b02bc37c62d04873c616d531e857

php-pecl-rrd-debuginfo-2.0.3-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: 595dcaa0a08f904fe85e900b437bdb2a7071cbd1d519b20c10acf242b9cc8a81

php-pecl-rrd-debugsource-2.0.3-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: f0b5f51622631efe1b298ca3469e483a4864a513ba6a1c17f3c5fdd0343fb26b

php-pecl-xdebug3-3.1.2-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: 40e4793f5e0fb6d725953d51c9d0a5bbdef608a74672df8c08d01e9ccf32b989

php-pecl-xdebug3-debuginfo-3.1.2-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: 86f6d21242013328713f6d4266d23d1d888d0428e30fd34cc12446cce018f9c9

php-pecl-xdebug3-debugsource-3.1.2-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: 6b0c15c320f162ad4d26e86e9730fbfadb1cda2a13a079b70827065c3b40e53a

php-pecl-zip-1.19.2-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: 07e694ba8ed7cd81f7a41a47fa9c79c9253db786bbb754196a8d60b9ecf5b953

php-pecl-zip-debuginfo-1.19.2-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: 908a4828e4ec77085e2fe8ecbb6b2afaf98543137e77eb13bf9a08b93641b714

php-pecl-zip-debugsource-1.19.2-1.module+el8.6.0+13671+84712317.x86_64.rpm

SHA-256: b316c24435230301da69ef98f6b69ca1d36c1fc2e105947e7237ee289ed886f4

php-pgsql-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: a16b01a875bfa92c6e1e50594bdbaaccac4d17624a985b8b46b30aba6df114d1

php-pgsql-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: e9f9bfb7ffeabfaa4fc01cd05a57a26396cfc6a41eda92245d6c9544cfa44fc2

php-process-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 4b8ff4ce4a783ccb1bbc639e81a67638c6291db7a48293b71c672ea3ab2d68c3

php-process-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 6348363c3b61de325f64bee91f0883c9518a4505ad3b80f85e200f8c1719436b

php-snmp-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 7e0ca84acfed58fa17dbec31d2f52d6ab00b9ba18512e6db40d30a905ead6a90

php-snmp-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: e089ebf63cea856931c80751c44157da111aa1ad0582966dbb54bdd1907bc71b

php-soap-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: e1ddb6cf46059928ecadee87be862e40b7fca3aef55a0c9f348b5a18ffc5ae26

php-soap-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: cae1ec4b57c1c6e55013a61c656da8ad1e92becc3546504e386591531c0c687c

php-xml-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 262701c8e27cba350a3663c667d81143847d3720fd0af78c9f9a35362c2d81b3

php-xml-debuginfo-8.0.13-3.module+el8.6.0+15725+0c79e7c4.x86_64.rpm

SHA-256: 621a04ac5b5e10fa576fb635e202d95b7d1272e51ec747d9c3fa3771b1d1146e

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6