Skip to content
OpenAdvisories
Medium ELSA-2022-7628 3 CVEs

Moderate: php:7.4 security, bug fix, and enhancement update (Oracle Linux 8)

Published Nov 15, 2022 · Updated Nov 15, 2022

Ecosystem: Oracle Linux

Summary

libzip
[1.6.1-1]
- update to 1.6.1
- enable lzma support

php
[7.4.30-1]
- rebase to 7.4.30 #2099615

[7.4.19-3]
- fix password of excessive length triggers buffer overflow leading to RCE
CVE-2022-31626

[7.4.19-2]
- fix SSRF bypass in FILTER_VALIDATE_URL
CVE-2021-21705
- fix Local privilege escalation via PHP-FPM
CVE-2021-21703

[7.4.19-1]
- rebase to 7.4.19 #1944110

Fixed packages 37

ReleasePackageFixed in
Oracle Linux · 8 apcu-panel 0:5.1.18-1.module+el8.3.0+7685+72d70b58
Oracle Linux · 8 libzip 0:1.6.1-1.module+el8.3.0+7685+72d70b58
Oracle Linux · 8 libzip-devel 0:1.6.1-1.module+el8.3.0+7685+72d70b58
Oracle Linux · 8 libzip-tools 0:1.6.1-1.module+el8.3.0+7685+72d70b58
Oracle Linux · 8 php 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-bcmath 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-cli 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-common 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-dba 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-dbg 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-devel 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-embedded 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-enchant 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-ffi 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-fpm 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-gd 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-gmp 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-intl 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-json 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-ldap 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-mbstring 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-mysqlnd 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-odbc 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-opcache 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-pdo 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-pear 1:1.10.13-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-pecl-apcu 0:5.1.18-1.module+el8.3.0+7685+72d70b58
Oracle Linux · 8 php-pecl-apcu-devel 0:5.1.18-1.module+el8.3.0+7685+72d70b58
Oracle Linux · 8 php-pecl-rrd 0:2.0.1-1.module+el8.3.0+7685+72d70b58
Oracle Linux · 8 php-pecl-xdebug 0:2.9.5-1.module+el8.3.0+7685+72d70b58
Oracle Linux · 8 php-pecl-zip 0:1.18.2-1.module+el8.3.0+7685+72d70b58
Oracle Linux · 8 php-pgsql 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-process 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-snmp 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-soap 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-xml 0:7.4.30-1.module+el8.7.0+20800+8e29b882
Oracle Linux · 8 php-xmlrpc 0:7.4.30-1.module+el8.7.0+20800+8e29b882

Vulnerabilities 3

  • High 8.2
    CVE-2021-21708

    UAF due to php_filter_float() failing

    In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which c…

    PHP Group PHP php7 php7.4 Debian Ubuntu Alpine
  • High 7.1
    CVE-2021-32610 EPSS 73%

    Directory Traversal in Archive_Tar

    In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.

    drupal/core drupal7 drupal7 php-pear Debian Ubuntu Alpine Packagist
  • Medium 5.3
    CVE-2021-21707 Public exploit EPSS 25%

    Special characters break path parsing in XML functions

    In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function …

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine