Oval Definition:	oval:com.redhat.rhsa:def:20228197
Revision Date: 2022-11-15 Version: 636 Title: RHSA-2022:8197: php security, bug fix, and enhancement update (Moderate) Description: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php (8.0.20). (BZ#2095752) Security Fix(es): php: Use after free due to php_filter_float() failing for ints (CVE-2021-21708) php: Uninitialized array in pg_query_params() leading to RCE (CVE-2022-31625) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes linked from the References section. Family: unix Class: patch Status: Reference(s): CVE-2021-21708 CVE-2022-31625 RHSA-2022:8197 Platform(s): Red Hat Enterprise Linux 9 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 9 is installed AND php is earlier than 0:8.0.20-3.el9 AND php is signed with Red Hat redhatrelease2 key php-bcmath is earlier than 0:8.0.20-3.el9 AND php-bcmath is signed with Red Hat redhatrelease2 key php-cli is earlier than 0:8.0.20-3.el9 AND php-cli is signed with Red Hat redhatrelease2 key php-common is earlier than 0:8.0.20-3.el9 AND php-common is signed with Red Hat redhatrelease2 key php-dba is earlier than 0:8.0.20-3.el9 AND php-dba is signed with Red Hat redhatrelease2 key php-dbg is earlier than 0:8.0.20-3.el9 AND php-dbg is signed with Red Hat redhatrelease2 key php-devel is earlier than 0:8.0.20-3.el9 AND php-devel is signed with Red Hat redhatrelease2 key php-embedded is earlier than 0:8.0.20-3.el9 AND php-embedded is signed with Red Hat redhatrelease2 key php-enchant is earlier than 0:8.0.20-3.el9 AND php-enchant is signed with Red Hat redhatrelease2 key php-ffi is earlier than 0:8.0.20-3.el9 AND php-ffi is signed with Red Hat redhatrelease2 key php-fpm is earlier than 0:8.0.20-3.el9 AND php-fpm is signed with Red Hat redhatrelease2 key php-gd is earlier than 0:8.0.20-3.el9 AND php-gd is signed with Red Hat redhatrelease2 key php-gmp is earlier than 0:8.0.20-3.el9 AND php-gmp is signed with Red Hat redhatrelease2 key php-intl is earlier than 0:8.0.20-3.el9 AND php-intl is signed with Red Hat redhatrelease2 key php-ldap is earlier than 0:8.0.20-3.el9 AND php-ldap is signed with Red Hat redhatrelease2 key php-mbstring is earlier than 0:8.0.20-3.el9 AND php-mbstring is signed with Red Hat redhatrelease2 key php-mysqlnd is earlier than 0:8.0.20-3.el9 AND php-mysqlnd is signed with Red Hat redhatrelease2 key php-odbc is earlier than 0:8.0.20-3.el9 AND php-odbc is signed with Red Hat redhatrelease2 key php-opcache is earlier than 0:8.0.20-3.el9 AND php-opcache is signed with Red Hat redhatrelease2 key php-pdo is earlier than 0:8.0.20-3.el9 AND php-pdo is signed with Red Hat redhatrelease2 key php-pgsql is earlier than 0:8.0.20-3.el9 AND php-pgsql is signed with Red Hat redhatrelease2 key php-process is earlier than 0:8.0.20-3.el9 AND php-process is signed with Red Hat redhatrelease2 key php-snmp is earlier than 0:8.0.20-3.el9 AND php-snmp is signed with Red Hat redhatrelease2 key php-soap is earlier than 0:8.0.20-3.el9 AND php-soap is signed with Red Hat redhatrelease2 key php-xml is earlier than 0:8.0.20-3.el9 AND php-xml is signed with Red Hat redhatrelease2 key
BACK