Skip to content
OpenAdvisories
High RHSA-2022:8197 2 CVEs

Red Hat Security Advisory: php security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 50

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream php 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-bcmath 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-bcmath-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-cli 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-cli-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-common 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-common-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-dba 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-dba-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-dbg 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-dbg-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-debugsource 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-devel 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-embedded 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-embedded-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-enchant 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-enchant-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-ffi 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-ffi-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-fpm 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-fpm-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-gd 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-gd-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-gmp 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-gmp-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-intl 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-intl-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-ldap 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-ldap-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-mbstring 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-mbstring-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-mysqlnd 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-mysqlnd-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-odbc 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-odbc-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-opcache 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-opcache-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pdo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pdo-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pgsql 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pgsql-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-process 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-process-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-snmp 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-snmp-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-soap 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-soap-debuginfo 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-xml 0:8.0.20-3.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream php-xml-debuginfo 0:8.0.20-3.el9

Vulnerabilities 2

  • High 8.2
    CVE-2021-21708

    UAF due to php_filter_float() failing

    In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which c…

    PHP Group PHP php7 php7.4 Debian Ubuntu Alpine
  • High 8.1
    CVE-2022-31625

    Freeing unallocated memory in php_pgsql_free_params()

    In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This …

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2055879
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2095447
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2095752
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2098521
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2104630
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8197.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-21708
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-21708
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-21708
  • article
    https://www.php.net/ChangeLog-7.php#PHP_7_4
  • report
    https://access.redhat.com/security/cve/CVE-2022-31625
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-31625
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-31625
  • article
    https://bugs.php.net/bug.php?id=81720