RLSA-2023:5927

Import Source
https://storage.googleapis.com/resf-osv-data/RLSA-2023:5927.json
Related
Published
2023-10-24T18:35:47.290826Z
Modified
2023-10-24T18:37:53.563722Z
Details

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: XML loading external entity without being enabled (CVE-2023-3823)

  • php: phar Buffer mismanagement (CVE-2023-3824)

  • php: 1-byte array overrun in common path resolve code (CVE-2023-0568)

  • php: DoS vulnerability when parsing multipart request body (CVE-2023-0662)

  • php: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (CVE-2023-3247)

  • php: Password_verify() always return true with some hash (CVE-2023-0567)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

Rocky Linux:8 / libzip

Package

Name
libzip

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0:1.7.3-1.module+el8.6.0+790+fc63e43f

Rocky Linux:8 / php

Package

Name
php

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0:8.0.30-1.module+el8.8.0+1550+d8f1b18f

Rocky Linux:8 / php-pear

Package

Name
php-pear

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
1:1.10.13-1.module+el8.7.0+1067+0a7071cc

Rocky Linux:8 / php-pecl-apcu

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0:5.1.20-1.module+el8.6.0+790+fc63e43f

Rocky Linux:8 / php-pecl-rrd

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0:2.0.3-1.module+el8.6.0+790+fc63e43f

Rocky Linux:8 / php-pecl-xdebug3

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0:3.1.2-1.module+el8.6.0+790+fc63e43f

Rocky Linux:8 / php-pecl-zip

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0:1.19.2-1.module+el8.6.0+790+fc63e43f