Use of insufficiently random values in PHP - CVE-2023-0567

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU72166

Use of insufficiently random values in PHP - CVE-2023-0567

Published: February 14, 2023 / Updated: February 28, 2023


Vulnerability identifier: #VU72166
CSH Severity: Medium
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-0567
CWE-ID: CWE-330
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass authentication.

The vulnerability exists due to an error within the Password_verify() function, which always returns true with some hashes. A remote attacker can bypass authentication process and gain unauthorized access to the application.


Affected software

PHP
Gentoo Linux
Debian Linux
Amazon Linux AMI
Oracle Linux
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Software Development Kit 12
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Oracle Solaris
Web and Scripting Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
Slackware Linux
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Package Hub 15
Legacy Module
openSUSE Leap
Ubuntu
openEuler
Junos OS
Fedora
php7.0-cgi (Ubuntu package)
php7.0-fpm (Ubuntu package)
php7.0-cli (Ubuntu package)
libapache2-mod-php7.0 (Ubuntu package)
php7.0 (Ubuntu package)
libzip
libzip-tools
libzip-devel
php-pear
php-pecl-zip
php-pecl-rrd
php-pecl-xdebug
php-pecl-apcu
php-pecl-apcu-devel
apcu-panel
php7.2-fpm (Ubuntu package)
php7.2-cli (Ubuntu package)
libapache2-mod-php7.2 (Ubuntu package)
php7.2-cgi (Ubuntu package)
php7.2 (Ubuntu package)
php-xml
php-gd
php-enchant
php-pdo
php-opcache
php-devel
php-json
php-dba
php-fpm
php-odbc
php-tidy
php-sodium
php-gmp
php-pgsql
php-mbstring
php-debugsource
php-cli
php-soap
php-intl
php-dbg
php-recode
php-help
php
php-common
php-xmlrpc
php-ldap
php-embedded
php-bcmath
php-process
php-snmp
php-debuginfo
php-mysqlnd
php7-ftp-debuginfo
php7-sockets
php7-xmlreader-debuginfo
php7-ftp
php7-curl-debuginfo
php7-phar-debuginfo
php7-zip-debuginfo
php7-gmp-debuginfo
php7-wddx-debuginfo
php7-exif-debuginfo
php7-posix
php7-pdo
php7-readline
php7-xmlwriter
apache2-mod_php7-debuginfo
php7-sqlite
php7-pcntl-debuginfo
php7-sysvmsg
php7-ldap-debuginfo
php7-xmlwriter-debuginfo
php7-gmp
php7-curl
php7-dom
php7-posix-debuginfo
php7-intl
php7-dom-debuginfo
php7-mbstring-debuginfo
php7-openssl
php7-tidy
php7-wddx
php7-zlib
php7-snmp-debuginfo
php7-dba
php7-intl-debuginfo
php7-phar
php7-pcntl
php7-fpm-debuginfo
php7-gd
php7-sysvshm-debuginfo
php7-sockets-debuginfo
php7-iconv
php7-soap
php7-shmop
php7-ctype-debuginfo
php7-openssl-debuginfo
php7-xmlrpc
php7-json
php7-json-debuginfo
php7-calendar-debuginfo
php7-ldap
php7-gettext
php7-tokenizer
php7-mysql-debuginfo
php7-zlib-debuginfo
php7-sysvsem
php7-debugsource
php7-odbc
php7-readline-debuginfo
php7-pgsql
php7-xsl-debuginfo
php7-bz2-debuginfo
php7-tidy-debuginfo
apache2-mod_php7
php7-calendar
php7-zip
php7-pdo-debuginfo
php7-exif
php7-sodium
php7-odbc-debuginfo
php7-fastcgi-debuginfo
php7-gd-debuginfo
php7
php7-opcache-debuginfo
php7-fileinfo
php7-sqlite-debuginfo
php7-ctype
php7-xmlrpc-debuginfo
php7-snmp
php7-xsl
php7-sysvsem-debuginfo
php7-fileinfo-debuginfo
php7-mbstring
php7-sysvshm
php7-gettext-debuginfo
php7-iconv-debuginfo
php7-fastcgi
php7-mysql
php7-devel
php7-bcmath-debuginfo
php7-sodium-debuginfo
php7-bcmath
php7-dba-debuginfo
php7-bz2
php7-fpm
php7-sysvmsg-debuginfo
php7-soap-debuginfo
php7-shmop-debuginfo
php7-debuginfo
php7-pear
php7-pear-Archive_Tar
php7-pgsql-debuginfo
php7-enchant
php7-tokenizer-debuginfo
php7-enchant-debuginfo
php7-xmlreader
php7-opcache
php7.4-cli (Ubuntu package)
libapache2-mod-php7.4 (Ubuntu package)
php7.4-cgi (Ubuntu package)
php7.4 (Ubuntu package)
php7.4-fpm (Ubuntu package)
php7.4 (Debian package)
php74-gmp-debuginfo
php74-fpm-debuginfo
php74-odbc
php74-exif-debuginfo
php74-ftp-debuginfo
php74-zlib-debuginfo
php74-json-debuginfo
php74-opcache-debuginfo
php74-debuginfo
php74-calendar-debuginfo
php74-enchant
php74-pdo
php74-zip
php74-gettext
php74-xsl
php74-soap-debuginfo
php74-ctype-debuginfo
php74-xmlreader
php74-curl
php74-gd
php74-iconv
php74-xmlreader-debuginfo
php74-xmlrpc-debuginfo
php74-zip-debuginfo
apache2-mod_php74
php74-phar
php74-zlib
php74-mysql
php74-fastcgi-debuginfo
php74-bz2
php74-readline
php74-tokenizer
php74-opcache
php74
php74-snmp
php74-mysql-debuginfo
php74-intl-debuginfo
php74-xmlwriter
php74-gettext-debuginfo
php74-xmlwriter-debuginfo
php74-bcmath
php74-openssl
php74-sqlite-debuginfo
php74-sqlite
php74-enchant-debuginfo
php74-intl
php74-sodium
php74-pdo-debuginfo
php74-odbc-debuginfo
php74-pgsql
php74-debugsource
php74-sysvshm-debuginfo
php74-fileinfo
php74-snmp-debuginfo
php74-mbstring
php74-fastcgi
php74-iconv-debuginfo
php74-fpm
php74-bcmath-debuginfo
php74-ldap-debuginfo
php74-dom
php74-sysvmsg
php74-sysvshm
php74-dba
php74-pgsql-debuginfo
php74-readline-debuginfo
php74-sysvsem-debuginfo
php74-sodium-debuginfo
php74-fileinfo-debuginfo
php74-posix
php74-gmp
php74-gd-debuginfo
php74-sockets-debuginfo
php74-pcntl
php74-phar-debuginfo
php74-calendar
php74-ftp
php74-exif
php74-openssl-debuginfo
php74-tidy-debuginfo
php74-pcntl-debuginfo
php74-dom-debuginfo
php74-shmop-debuginfo
php74-curl-debuginfo
php74-ctype
apache2-mod_php74-debuginfo
php74-tidy
php74-xsl-debuginfo
php74-soap
php74-json
php74-devel
php74-bz2-debuginfo
php74-shmop
php74-posix-debuginfo
php74-ldap
php74-mbstring-debuginfo
php74-sysvsem
php74-dba-debuginfo
php74-sysvmsg-debuginfo
php74-xmlrpc
php74-sockets
php74-tokenizer-debuginfo
php-ffi
php7-firebird
php7-firebird-debuginfo
php7-fpm-debugsource
php7-fastcgi-debugsource
apache2-mod_php7-debugsource
php7-test
php7-embed-debugsource
php7-embed-debuginfo
php7-embed
php7-cli-debuginfo
php7-cli
php (Red Hat package)
php8.1 (Ubuntu package)
php8.1
php8.1-fpm (Ubuntu package)
libapache2-mod-php8.1 (Ubuntu package)
php8.1-cgi (Ubuntu package)
php8.1-cli (Ubuntu package)

How to mitigate CVE-2023-0567

Install updates from vendor's website.

PHP - addressed in versions 8.0.28, 8.1.16, 8.2.3
Junos OS - addressed in versions 21.4R3-S8, 22.1R3-S6, 22.2R3-S4, 22.3R3-S3, 22.4R3-S2, 23.2R2-S2, 23.4R1-S2, 23.4R2, 24.2R1
php7.0-cgi (Ubuntu package) - update to Ubuntu Pro
php7.0-fpm (Ubuntu package) - update to Ubuntu Pro
php7.0-cli (Ubuntu package) - update to Ubuntu Pro
libapache2-mod-php7.0 (Ubuntu package) - update to Ubuntu Pro
php7.0 (Ubuntu package) - update to Ubuntu Pro
libzip - addressed in versions 1.6.1-1, 1.7.3-1
libzip-tools - addressed in versions 1.6.1-1, 1.7.3-1
libzip-devel - addressed in versions 1.6.1-1, 1.7.3-1
php-pear - addressed in versions 1.10.13-1, 1.10.13-1.0.1
php-pecl-zip - update to 1.18.2-1
php-pecl-rrd - update to 2.0.1-1
php-pecl-xdebug - update to 2.9.5-1
php-pecl-apcu - update to 5.1.18-1
php-pecl-apcu-devel - update to 5.1.18-1
apcu-panel - update to 5.1.18-1
php7.2-fpm (Ubuntu package) - update to 7.2.24-0ubuntu0.18.04.17
php7.2-cli (Ubuntu package) - update to 7.2.24-0ubuntu0.18.04.17
libapache2-mod-php7.2 (Ubuntu package) - update to 7.2.24-0ubuntu0.18.04.17
php7.2-cgi (Ubuntu package) - update to 7.2.24-0ubuntu0.18.04.17
php7.2 (Ubuntu package) - update to 7.2.24-0ubuntu0.18.04.17
php-xml - addressed in versions 7.2.34-3, 8.0.30-1
php-gd - addressed in versions 7.2.34-3, 8.0.30-1
php-enchant - addressed in versions 7.2.34-3, 8.0.30-1
php-pdo - addressed in versions 7.2.34-3, 8.0.30-1
php-opcache - addressed in versions 7.2.34-3, 8.0.30-1
php-devel - addressed in versions 7.2.34-3, 8.0.30-1
php-json - update to 7.2.34-3
php-dba - addressed in versions 7.2.34-3, 8.0.30-1
php-fpm - addressed in versions 7.2.34-3, 8.0.30-1
php-odbc - addressed in versions 7.2.34-3, 8.0.30-1
php-tidy - addressed in versions 7.2.34-3, 8.0.30-1
php-sodium - addressed in versions 7.2.34-3, 8.0.30-1
php-gmp - addressed in versions 7.2.34-3, 8.0.30-1
php-pgsql - addressed in versions 7.2.34-3, 8.0.30-1
php-mbstring - addressed in versions 7.2.34-3, 8.0.30-1
php-debugsource - addressed in versions 7.2.34-3, 8.0.30-1
php-cli - addressed in versions 7.2.34-3, 8.0.30-1
php-soap - addressed in versions 7.2.34-3, 8.0.30-1
php-intl - addressed in versions 7.2.34-3, 8.0.30-1
php-dbg - addressed in versions 7.2.34-3, 8.0.30-1
php-recode - update to 7.2.34-3
php-help - addressed in versions 7.2.34-3, 8.0.30-1
php - addressed in versions 7.2.34-3, 8.0.30-1
php-common - addressed in versions 7.2.34-3, 8.0.30-1
php-xmlrpc - update to 7.2.34-3
php-ldap - addressed in versions 7.2.34-3, 8.0.30-1
php-embedded - addressed in versions 7.2.34-3, 8.0.30-1
php-bcmath - addressed in versions 7.2.34-3, 8.0.30-1
php-process - addressed in versions 7.2.34-3, 8.0.30-1
php-snmp - addressed in versions 7.2.34-3, 8.0.30-1
php-debuginfo - addressed in versions 7.2.34-3, 8.0.30-1
php-mysqlnd - addressed in versions 7.2.34-3, 8.0.30-1
php7-ftp-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-sockets - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-xmlreader-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-ftp - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-curl-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-phar-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-zip-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-gmp-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-wddx-debuginfo - update to 7.2.34-150000.4.109.1
php7-exif-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-posix - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-pdo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-readline - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-xmlwriter - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
apache2-mod_php7-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-sqlite - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-pcntl-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-sysvmsg - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-ldap-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-xmlwriter-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-gmp - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-curl - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-dom - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-posix-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-intl - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-dom-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-mbstring-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-openssl - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-tidy - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-wddx - update to 7.2.34-150000.4.109.1
php7-zlib - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-snmp-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-dba - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-intl-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-phar - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-pcntl - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-fpm-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-gd - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-sysvshm-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-sockets-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-iconv - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-soap - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-shmop - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-ctype-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-openssl-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-xmlrpc - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-json - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-json-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-calendar-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-ldap - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-gettext - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-tokenizer - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-mysql-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-zlib-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-sysvsem - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-debugsource - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-odbc - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-readline-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-pgsql - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-xsl-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-bz2-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-tidy-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
apache2-mod_php7 - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-calendar - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-zip - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-pdo-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-exif - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-sodium - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-odbc-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-fastcgi-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-gd-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7 - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-opcache-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-fileinfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-sqlite-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-ctype - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-xmlrpc-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-snmp - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-xsl - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-sysvsem-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-fileinfo-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-mbstring - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-sysvshm - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-gettext-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-iconv-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-fastcgi - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-mysql - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-devel - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-bcmath-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-sodium-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-bcmath - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-dba-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-bz2 - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-fpm - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-sysvmsg-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-soap-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-shmop-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-pear - update to 7.2.34-150000.4.109.1
php7-pear-Archive_Tar - update to 7.2.34-150000.4.109.1
php7-pgsql-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-enchant - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-tokenizer-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-enchant-debuginfo - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-xmlreader - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7-opcache - addressed in versions 7.2.34-150000.4.109.1, 7.4.33-150200.3.51.1, 7.4.33-150400.4.19.1
php7.4-cli (Ubuntu package) - update to 7.4.3-4ubuntu2.18
libapache2-mod-php7.4 (Ubuntu package) - update to 7.4.3-4ubuntu2.18
php7.4-cgi (Ubuntu package) - update to 7.4.3-4ubuntu2.18
php7.4 (Ubuntu package) - update to 7.4.3-4ubuntu2.18
php7.4-fpm (Ubuntu package) - update to 7.4.3-4ubuntu2.18
php - update to 7.4.33
php7.4 (Debian package) - update to 7.4.33-1+deb11u3
php74-gmp-debuginfo - update to 7.4.33-1.53.1
php74-fpm-debuginfo - update to 7.4.33-1.53.1
php74-odbc - update to 7.4.33-1.53.1
php74-exif-debuginfo - update to 7.4.33-1.53.1
php74-ftp-debuginfo - update to 7.4.33-1.53.1
php74-zlib-debuginfo - update to 7.4.33-1.53.1
php74-json-debuginfo - update to 7.4.33-1.53.1
php74-opcache-debuginfo - update to 7.4.33-1.53.1
php74-debuginfo - update to 7.4.33-1.53.1
php74-calendar-debuginfo - update to 7.4.33-1.53.1
php74-enchant - update to 7.4.33-1.53.1
php74-pdo - update to 7.4.33-1.53.1
php74-zip - update to 7.4.33-1.53.1
php74-gettext - update to 7.4.33-1.53.1
php74-xsl - update to 7.4.33-1.53.1
php74-soap-debuginfo - update to 7.4.33-1.53.1
php74-ctype-debuginfo - update to 7.4.33-1.53.1
php74-xmlreader - update to 7.4.33-1.53.1
php74-curl - update to 7.4.33-1.53.1
php74-gd - update to 7.4.33-1.53.1
php74-iconv - update to 7.4.33-1.53.1
php74-xmlreader-debuginfo - update to 7.4.33-1.53.1
php74-xmlrpc-debuginfo - update to 7.4.33-1.53.1
php74-zip-debuginfo - update to 7.4.33-1.53.1
apache2-mod_php74 - update to 7.4.33-1.53.1
php74-phar - update to 7.4.33-1.53.1
php74-zlib - update to 7.4.33-1.53.1
php74-mysql - update to 7.4.33-1.53.1
php74-fastcgi-debuginfo - update to 7.4.33-1.53.1
php74-bz2 - update to 7.4.33-1.53.1
php74-readline - update to 7.4.33-1.53.1
php74-tokenizer - update to 7.4.33-1.53.1
php74-opcache - update to 7.4.33-1.53.1
php74 - update to 7.4.33-1.53.1
php74-snmp - update to 7.4.33-1.53.1
php74-mysql-debuginfo - update to 7.4.33-1.53.1
php74-intl-debuginfo - update to 7.4.33-1.53.1
php74-xmlwriter - update to 7.4.33-1.53.1
php74-gettext-debuginfo - update to 7.4.33-1.53.1
php74-xmlwriter-debuginfo - update to 7.4.33-1.53.1
php74-bcmath - update to 7.4.33-1.53.1
php74-openssl - update to 7.4.33-1.53.1
php74-sqlite-debuginfo - update to 7.4.33-1.53.1
php74-sqlite - update to 7.4.33-1.53.1
php74-enchant-debuginfo - update to 7.4.33-1.53.1
php74-intl - update to 7.4.33-1.53.1
php74-sodium - update to 7.4.33-1.53.1
php74-pdo-debuginfo - update to 7.4.33-1.53.1
php74-odbc-debuginfo - update to 7.4.33-1.53.1
php74-pgsql - update to 7.4.33-1.53.1
php74-debugsource - update to 7.4.33-1.53.1
php74-sysvshm-debuginfo - update to 7.4.33-1.53.1
php74-fileinfo - update to 7.4.33-1.53.1
php74-snmp-debuginfo - update to 7.4.33-1.53.1
php74-mbstring - update to 7.4.33-1.53.1
php74-fastcgi - update to 7.4.33-1.53.1
php74-iconv-debuginfo - update to 7.4.33-1.53.1
php74-fpm - update to 7.4.33-1.53.1
php74-bcmath-debuginfo - update to 7.4.33-1.53.1
php74-ldap-debuginfo - update to 7.4.33-1.53.1
php74-dom - update to 7.4.33-1.53.1
php74-sysvmsg - update to 7.4.33-1.53.1
php74-sysvshm - update to 7.4.33-1.53.1
php74-dba - update to 7.4.33-1.53.1
php74-pgsql-debuginfo - update to 7.4.33-1.53.1
php74-readline-debuginfo - update to 7.4.33-1.53.1
php74-sysvsem-debuginfo - update to 7.4.33-1.53.1
php74-sodium-debuginfo - update to 7.4.33-1.53.1
php74-fileinfo-debuginfo - update to 7.4.33-1.53.1
php74-posix - update to 7.4.33-1.53.1
php74-gmp - update to 7.4.33-1.53.1
php74-gd-debuginfo - update to 7.4.33-1.53.1
php74-sockets-debuginfo - update to 7.4.33-1.53.1
php74-pcntl - update to 7.4.33-1.53.1
php74-phar-debuginfo - update to 7.4.33-1.53.1
php74-calendar - update to 7.4.33-1.53.1
php74-ftp - update to 7.4.33-1.53.1
php74-exif - update to 7.4.33-1.53.1
php74-openssl-debuginfo - update to 7.4.33-1.53.1
php74-tidy-debuginfo - update to 7.4.33-1.53.1
php74-pcntl-debuginfo - update to 7.4.33-1.53.1
php74-dom-debuginfo - update to 7.4.33-1.53.1
php74-shmop-debuginfo - update to 7.4.33-1.53.1
php74-curl-debuginfo - update to 7.4.33-1.53.1
php74-ctype - update to 7.4.33-1.53.1
apache2-mod_php74-debuginfo - update to 7.4.33-1.53.1
php74-tidy - update to 7.4.33-1.53.1
php74-xsl-debuginfo - update to 7.4.33-1.53.1
php74-soap - update to 7.4.33-1.53.1
php74-json - update to 7.4.33-1.53.1
php74-devel - update to 7.4.33-1.53.1
php74-bz2-debuginfo - update to 7.4.33-1.53.1
php74-shmop - update to 7.4.33-1.53.1
php74-posix-debuginfo - update to 7.4.33-1.53.1
php74-ldap - update to 7.4.33-1.53.1
php74-mbstring-debuginfo - update to 7.4.33-1.53.1
php74-sysvsem - update to 7.4.33-1.53.1
php74-dba-debuginfo - update to 7.4.33-1.53.1
php74-sysvmsg-debuginfo - update to 7.4.33-1.53.1
php74-xmlrpc - update to 7.4.33-1.53.1
php74-sockets - update to 7.4.33-1.53.1
php74-tokenizer-debuginfo - update to 7.4.33-1.53.1
php-json - update to 7.4.33-2.0.1
php-ldap - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-mbstring - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-mysqlnd - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-odbc - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-opcache - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-pdo - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-pgsql - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-process - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-snmp - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-soap - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-xml - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-bcmath - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-xmlrpc - update to 7.4.33-2.0.1
php-intl - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-gmp - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-gd - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-fpm - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-ffi - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-enchant - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-embedded - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-devel - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-dbg - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-dba - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-common - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php-cli - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php - addressed in versions 7.4.33-2.0.1, 8.0.30-1.0.1
php7-firebird - update to 7.4.33-150200.3.51.1
php7-firebird-debuginfo - update to 7.4.33-150200.3.51.1
php7-fpm-debugsource - update to 7.4.33-150400.4.19.1
php7-fastcgi-debugsource - update to 7.4.33-150400.4.19.1
apache2-mod_php7-debugsource - update to 7.4.33-150400.4.19.1
php7-test - update to 7.4.33-150400.4.19.1
php7-embed-debugsource - update to 7.4.33-150400.4.19.1
php7-embed-debuginfo - update to 7.4.33-150400.4.19.1
php7-embed - update to 7.4.33-150400.4.19.1
php7-cli-debuginfo - update to 7.4.33-150400.4.19.1
php7-cli - update to 7.4.33-150400.4.19.1
php-ffi - update to 8.0.30-1
php (Red Hat package) - update to 8.0.30-1.el9_2
php8.1-fpm (Ubuntu package) - addressed in versions 8.1.2-1ubuntu2.11, 8.1.7-1ubuntu3.3
libapache2-mod-php8.1 (Ubuntu package) - addressed in versions 8.1.2-1ubuntu2.11, 8.1.7-1ubuntu3.3
php8.1 (Ubuntu package) - addressed in versions 8.1.2-1ubuntu2.11, 8.1.7-1ubuntu3.3
php8.1-cgi (Ubuntu package) - addressed in versions 8.1.2-1ubuntu2.11, 8.1.7-1ubuntu3.3
php8.1-cli (Ubuntu package) - addressed in versions 8.1.2-1ubuntu2.11, 8.1.7-1ubuntu3.3
php8.1 - update to 8.1.16-1
php - addressed in versions 8.1.16-1.fc36, 8.1.16-1.fc37

External References

Related Security Bulletins