Summary
[8.0.20-3]
- snmp3 calls using authPriv or authNoPriv immediately return false #2104630
[8.0.20-2]
- fix patch41 not applied (use system nikic/php-parser when available)
[8.0.20-1]
- rebase to 8.0.20 #2095752
- clean unneeded dependency on useradd command #2095447
- add upstream patch to initialize pcre before mbstring
- retrieve tzdata version from /usr/share/zoneinfo/tzdata.zi
Fixed packages 25
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | php | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-bcmath | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-cli | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-common | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-dba | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-dbg | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-devel | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-embedded | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-enchant | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-ffi | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-fpm | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-gd | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-gmp | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-intl | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-ldap | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-mbstring | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-mysqlnd | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-odbc | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-opcache | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-pdo | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-pgsql | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-process | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-snmp | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-soap | 0:8.0.20-3.el9 |
| Oracle Linux · 9 | php-xml | 0:8.0.20-3.el9 |
Vulnerabilities 2
-
High 8.2
UAF due to php_filter_float() failing
In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which c…
-
High 8.1
Freeing unallocated memory in php_pgsql_free_params()
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This …