Security features bypass in PHP - CVE-2024-8927

Vulnerability identifier: #VU97746

CSH Severity: Medium

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-8927

CWE-ID: CWE-254

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to environment variable collision, which can lead to cgi.force_redirect bypass. A remote attacker can bypass implemented security restriction and gain unauthorized access to the application.

PHP
Gentoo Linux
Debian Linux
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Micro
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Anolis OS
Web and Scripting Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
Ubuntu
Slackware Linux
Legacy Module
SUSE Package Hub 15
openSUSE Leap
openEuler
Oracle Solaris
EasyApache
Oracle Secure Backup
libapache2-mod-php7.2 (Ubuntu package)
php7.0-fpm (Ubuntu package)
php7.0-cli (Ubuntu package)
php7.2-cgi (Ubuntu package)
php7.2-cli (Ubuntu package)
php7.2-fpm (Ubuntu package)
libapache2-mod-php7.0 (Ubuntu package)
php7.0-cgi (Ubuntu package)
libapache2-mod-php5 (Ubuntu package)
php5-cgi (Ubuntu package)
libzip
libzip-devel
libzip-tools
php-pear
php-pecl-zip
php-pecl-rrd
php-pecl-xdebug
php-pecl-apcu
apcu-panel
php-pecl-apcu-devel
php7.4-cgi (Ubuntu package)
libapache2-mod-php7.4 (Ubuntu package)
php7.4-fpm (Ubuntu package)
php7.4-cli (Ubuntu package)
php74-json
php74-bcmath
php74-openssl
php74-gettext-debuginfo
php74-json-debuginfo
php74-debugsource
php74-ftp
php74-gd
php74-pgsql-debuginfo
php74-sockets-debuginfo
php74-readline-debuginfo
php74-soap
php74-calendar
php74-tidy
php74-iconv
php74-debuginfo
php74-snmp
php74-exif-debuginfo
php74-posix
php74-sysvshm
php74-tokenizer-debuginfo
php74-zip
php74-fpm-debuginfo
php74-mbstring-debuginfo
php74-iconv-debuginfo
php74-bz2
php74-sysvsem-debuginfo
php74-dom-debuginfo
php74-sqlite
php74-xmlreader
php74-ftp-debuginfo
php74-odbc
php74-soap-debuginfo
php74-shmop
php74-opcache
php74-sockets
php74-openssl-debuginfo
php74-gd-debuginfo
php74-fileinfo
php74-readline
php74-curl-debuginfo
php74-fastcgi
php74-dom
php74-xmlrpc
php74
php74-odbc-debuginfo
php74-calendar-debuginfo
php74-sysvsem
php74-shmop-debuginfo
php74-sqlite-debuginfo
php74-sysvmsg
php74-zlib
php74-intl
php74-tidy-debuginfo
php74-xsl
php74-tokenizer
php74-dba
php74-sysvmsg-debuginfo
php74-xmlwriter
php74-gmp
php74-xmlreader-debuginfo
php74-xmlrpc-debuginfo
php74-ldap
php74-ldap-debuginfo
php74-posix-debuginfo
php74-bz2-debuginfo
php74-zip-debuginfo
php74-intl-debuginfo
php74-enchant
php74-opcache-debuginfo
php74-sodium-debuginfo
php74-gmp-debuginfo
php74-phar
apache2-mod_php74
php74-gettext
php74-ctype-debuginfo
php74-pcntl
php74-pdo-debuginfo
php74-enchant-debuginfo
php74-pdo
php74-devel
php74-sysvshm-debuginfo
php74-fileinfo-debuginfo
php74-xmlwriter-debuginfo
php74-exif
apache2-mod_php74-debuginfo
php74-pgsql
php74-pcntl-debuginfo
php74-ctype
php74-mbstring
php74-sodium
php74-fastcgi-debuginfo
php74-zlib-debuginfo
php74-mysql-debuginfo
php74-dba-debuginfo
php74-phar-debuginfo
php74-xsl-debuginfo
php74-snmp-debuginfo
php74-fpm
php74-mysql
php74-curl
php74-bcmath-debuginfo
php-fpm
php-ffi
php-intl
php-enchant
php-embedded
php-devel
php-dbg
php-dba
php-common
php-cli
php-bcmath
php
php-gmp
php-gd
php-xmlrpc
php-xml
php-soap
php-snmp
php-process
php-pgsql
php-pdo
php-opcache
php-odbc
php-mysqlnd
php-mbstring
php-ldap
php-json
php7-intl-debuginfo
php7-ldap-debuginfo
php7-tokenizer
php7-cli-debuginfo
php7-xmlrpc
php7-ldap
php7-sysvsem-debuginfo
php7-intl
php7-pcntl-debuginfo
php7-curl
php7-odbc-debuginfo
php7-pdo-debuginfo
php7-phar
php7-bz2
php7-test
php7-fastcgi-debugsource
php7-ftp-debuginfo
php7-embed-debuginfo
php7-zip-debuginfo
php7-calendar-debuginfo
php7
php7-bz2-debuginfo
php7-mysql-debuginfo
php7-enchant
php7-curl-debuginfo
php7-fpm
php7-xmlrpc-debuginfo
php7-dba-debuginfo
php7-gmp
php7-embed-debugsource
php7-gettext-debuginfo
php7-tokenizer-debuginfo
php7-opcache-debuginfo
php7-sysvmsg-debuginfo
php7-iconv
php7-xmlreader-debuginfo
php7-soap-debuginfo
php7-sockets-debuginfo
php7-gmp-debuginfo
php7-bcmath-debuginfo
php7-xsl
php7-sodium
php7-readline
php7-zlib-debuginfo
php7-shmop
php7-iconv-debuginfo
php7-enchant-debuginfo
php7-calendar
php7-exif
php7-snmp-debuginfo
php7-readline-debuginfo
php7-zip
php7-ftp
php7-posix
php7-pdo
php7-dba
php7-fileinfo-debuginfo
apache2-mod_php7-debugsource
php7-exif-debuginfo
php7-sqlite
php7-sysvshm
php7-openssl-debuginfo
php7-json-debuginfo
php7-opcache
php7-pcntl
php7-gd
php7-xmlreader
php7-pgsql-debuginfo
php7-sysvshm-debuginfo
php7-odbc
php7-dom-debuginfo
php7-debuginfo
php7-sqlite-debuginfo
php7-shmop-debuginfo
php7-tidy-debuginfo
php7-gettext
php7-posix-debuginfo
php7-fileinfo
php7-sodium-debuginfo
php7-soap
php7-embed
apache2-mod_php7-debuginfo
php7-snmp
php7-fpm-debuginfo
php7-fastcgi-debuginfo
php7-xmlwriter-debuginfo
php7-xmlwriter
php7-ctype-debuginfo
php7-cli
php7-bcmath
php7-debugsource
php7-sysvmsg
php7-sockets
php7-phar-debuginfo
php7-ctype
php7-mbstring
php7-fastcgi
apache2-mod_php7
php7-dom
php7-gd-debuginfo
php7-fpm-debugsource
php7-sysvsem
php7-devel
php7-json
php7-openssl
php7-tidy
php7-mysql
php7-xsl-debuginfo
php7-pgsql
php7-mbstring-debuginfo
php7-zlib
php-help
php-sodium
php-tidy
php-debugsource
php-debuginfo
php8-mbstring-debuginfo
php8-dom
php8-zlib
php8-sysvmsg-debuginfo
php8-embed-debugsource
php8-gd-debuginfo
php8-tidy
php8-ctype-debuginfo
php8-odbc
php8-sysvsem
php8-pcntl-debuginfo
apache2-mod_php8-debuginfo
php8-readline
php8-fileinfo-debuginfo
php8-sqlite
php8-soap
php8-pdo-debuginfo
php8-iconv-debuginfo
php8-mysql
php8-cli
php8-ftp-debuginfo
php8-devel
php8-debugsource
php8-intl-debuginfo
php8-bcmath-debuginfo
php8-pgsql-debuginfo
php8-cli-debuginfo
php8-ftp
php8-tokenizer
php8-test
php8-bz2
php8-fileinfo
php8-curl
php8-gettext-debuginfo
php8-calendar
php8-fpm-debugsource
php8-xmlreader-debuginfo
php8-gd
php8-xmlwriter
php8-sqlite-debuginfo
php8-shmop-debuginfo
php8-debuginfo
php8-odbc-debuginfo
php8-pdo
php8-zip-debuginfo
php8-sysvmsg
php8
php8-bz2-debuginfo
php8-openssl
php8-embed-debuginfo
php8-sodium
php8-pcntl
php8-ctype
php8-dba
php8-ldap
php8-bcmath
php8-posix-debuginfo
php8-mbstring
apache2-mod_php8-debugsource
php8-phar-debuginfo
php8-opcache-debuginfo
php8-gmp
php8-sysvshm
php8-fastcgi
php8-gettext
php8-xmlwriter-debuginfo
php8-enchant-debuginfo
php8-shmop
php8-fpm-debuginfo
php8-snmp-debuginfo
php8-sockets-debuginfo
php8-pgsql
php8-fpm
php8-xmlreader
php8-tokenizer-debuginfo
php8-ldap-debuginfo
php8-openssl-debuginfo
php8-snmp
php8-embed
php8-sysvsem-debuginfo
php8-readline-debuginfo
php8-posix
php8-phar
php8-dom-debuginfo
php8-sodium-debuginfo
php8-soap-debuginfo
php8-intl
php8-iconv
php8-gmp-debuginfo
php8-dba-debuginfo
php8-calendar-debuginfo
php8-fastcgi-debugsource
php8-zlib-debuginfo
php8-xsl
apache2-mod_php8
php8-exif-debuginfo
php8-sysvshm-debuginfo
php8-enchant
php8-zip
php8-xsl-debuginfo
php8-exif
php8-tidy-debuginfo
php8-sockets
php8-fastcgi-debuginfo
php8-curl-debuginfo
php8-opcache
php8-mysql-debuginfo
php81
php-zip
php8.2 (Debian package)
php8-ffi-debuginfo
php8-ffi
php8-fpm-apache
php8.3-fpm (Ubuntu package)
php8.3-cli (Ubuntu package)
php8.3-cgi (Ubuntu package)
libapache2-mod-php8.3 (Ubuntu package)
libapache2-mod-php8.1 (Ubuntu package)
php8.1-cgi (Ubuntu package)
php8.1-cli (Ubuntu package)
php8.1-fpm (Ubuntu package)

Install updates from vendor's website.

PHP - addressed in versions 8.1.30, 8.2.24, 8.3.12
EasyApache - update to 4 2024-10-2
libapache2-mod-php7.2 (Ubuntu package) - update to Ubuntu Pro
php7.0-fpm (Ubuntu package) - update to Ubuntu Pro
php7.0-cli (Ubuntu package) - update to Ubuntu Pro
php7.2-cgi (Ubuntu package) - update to Ubuntu Pro
php7.2-cli (Ubuntu package) - update to Ubuntu Pro
php7.2-fpm (Ubuntu package) - update to Ubuntu Pro
libapache2-mod-php7.0 (Ubuntu package) - update to Ubuntu Pro
php7.0-cgi (Ubuntu package) - update to Ubuntu Pro
libapache2-mod-php5 (Ubuntu package) - update to php5
php5-cgi (Ubuntu package) - update to php5-cli
libzip - update to 1.6.1-1
libzip-devel - update to 1.6.1-1
libzip-tools - update to 1.6.1-1
php-pear - update to 1.10.13-1.0.1
php-pecl-zip - update to 1.18.2-1
php-pecl-rrd - update to 2.0.1-1
php-pecl-xdebug - update to 2.9.5-1
php-pecl-apcu - update to 5.1.18-1
apcu-panel - update to 5.1.18-1
php-pecl-apcu-devel - update to 5.1.18-1
php7.4-cgi (Ubuntu package) - update to 7.4.3-4ubuntu2.24
libapache2-mod-php7.4 (Ubuntu package) - update to 7.4.3-4ubuntu2.24
php7.4-fpm (Ubuntu package) - update to 7.4.3-4ubuntu2.24
php7.4-cli (Ubuntu package) - update to 7.4.3-4ubuntu2.24
php74-json - update to 7.4.33-1.71.1
php74-bcmath - update to 7.4.33-1.71.1
php74-openssl - update to 7.4.33-1.71.1
php74-gettext-debuginfo - update to 7.4.33-1.71.1
php74-json-debuginfo - update to 7.4.33-1.71.1
php74-debugsource - update to 7.4.33-1.71.1
php74-ftp - update to 7.4.33-1.71.1
php74-gd - update to 7.4.33-1.71.1
php74-pgsql-debuginfo - update to 7.4.33-1.71.1
php74-sockets-debuginfo - update to 7.4.33-1.71.1
php74-readline-debuginfo - update to 7.4.33-1.71.1
php74-soap - update to 7.4.33-1.71.1
php74-calendar - update to 7.4.33-1.71.1
php74-tidy - update to 7.4.33-1.71.1
php74-iconv - update to 7.4.33-1.71.1
php74-debuginfo - update to 7.4.33-1.71.1
php74-snmp - update to 7.4.33-1.71.1
php74-exif-debuginfo - update to 7.4.33-1.71.1
php74-posix - update to 7.4.33-1.71.1
php74-sysvshm - update to 7.4.33-1.71.1
php74-tokenizer-debuginfo - update to 7.4.33-1.71.1
php74-zip - update to 7.4.33-1.71.1
php74-fpm-debuginfo - update to 7.4.33-1.71.1
php74-mbstring-debuginfo - update to 7.4.33-1.71.1
php74-iconv-debuginfo - update to 7.4.33-1.71.1
php74-bz2 - update to 7.4.33-1.71.1
php74-sysvsem-debuginfo - update to 7.4.33-1.71.1
php74-dom-debuginfo - update to 7.4.33-1.71.1
php74-sqlite - update to 7.4.33-1.71.1
php74-xmlreader - update to 7.4.33-1.71.1
php74-ftp-debuginfo - update to 7.4.33-1.71.1
php74-odbc - update to 7.4.33-1.71.1
php74-soap-debuginfo - update to 7.4.33-1.71.1
php74-shmop - update to 7.4.33-1.71.1
php74-opcache - update to 7.4.33-1.71.1
php74-sockets - update to 7.4.33-1.71.1
php74-openssl-debuginfo - update to 7.4.33-1.71.1
php74-gd-debuginfo - update to 7.4.33-1.71.1
php74-fileinfo - update to 7.4.33-1.71.1
php74-readline - update to 7.4.33-1.71.1
php74-curl-debuginfo - update to 7.4.33-1.71.1
php74-fastcgi - update to 7.4.33-1.71.1
php74-dom - update to 7.4.33-1.71.1
php74-xmlrpc - update to 7.4.33-1.71.1
php74 - update to 7.4.33-1.71.1
php74-odbc-debuginfo - update to 7.4.33-1.71.1
php74-calendar-debuginfo - update to 7.4.33-1.71.1
php74-sysvsem - update to 7.4.33-1.71.1
php74-shmop-debuginfo - update to 7.4.33-1.71.1
php74-sqlite-debuginfo - update to 7.4.33-1.71.1
php74-sysvmsg - update to 7.4.33-1.71.1
php74-zlib - update to 7.4.33-1.71.1
php74-intl - update to 7.4.33-1.71.1
php74-tidy-debuginfo - update to 7.4.33-1.71.1
php74-xsl - update to 7.4.33-1.71.1
php74-tokenizer - update to 7.4.33-1.71.1
php74-dba - update to 7.4.33-1.71.1
php74-sysvmsg-debuginfo - update to 7.4.33-1.71.1
php74-xmlwriter - update to 7.4.33-1.71.1
php74-gmp - update to 7.4.33-1.71.1
php74-xmlreader-debuginfo - update to 7.4.33-1.71.1
php74-xmlrpc-debuginfo - update to 7.4.33-1.71.1
php74-ldap - update to 7.4.33-1.71.1
php74-ldap-debuginfo - update to 7.4.33-1.71.1
php74-posix-debuginfo - update to 7.4.33-1.71.1
php74-bz2-debuginfo - update to 7.4.33-1.71.1
php74-zip-debuginfo - update to 7.4.33-1.71.1
php74-intl-debuginfo - update to 7.4.33-1.71.1
php74-enchant - update to 7.4.33-1.71.1
php74-opcache-debuginfo - update to 7.4.33-1.71.1
php74-sodium-debuginfo - update to 7.4.33-1.71.1
php74-gmp-debuginfo - update to 7.4.33-1.71.1
php74-phar - update to 7.4.33-1.71.1
apache2-mod_php74 - update to 7.4.33-1.71.1
php74-gettext - update to 7.4.33-1.71.1
php74-ctype-debuginfo - update to 7.4.33-1.71.1
php74-pcntl - update to 7.4.33-1.71.1
php74-pdo-debuginfo - update to 7.4.33-1.71.1
php74-enchant-debuginfo - update to 7.4.33-1.71.1
php74-pdo - update to 7.4.33-1.71.1
php74-devel - update to 7.4.33-1.71.1
php74-sysvshm-debuginfo - update to 7.4.33-1.71.1
php74-fileinfo-debuginfo - update to 7.4.33-1.71.1
php74-xmlwriter-debuginfo - update to 7.4.33-1.71.1
php74-exif - update to 7.4.33-1.71.1
apache2-mod_php74-debuginfo - update to 7.4.33-1.71.1
php74-pgsql - update to 7.4.33-1.71.1
php74-pcntl-debuginfo - update to 7.4.33-1.71.1
php74-ctype - update to 7.4.33-1.71.1
php74-mbstring - update to 7.4.33-1.71.1
php74-sodium - update to 7.4.33-1.71.1
php74-fastcgi-debuginfo - update to 7.4.33-1.71.1
php74-zlib-debuginfo - update to 7.4.33-1.71.1
php74-mysql-debuginfo - update to 7.4.33-1.71.1
php74-dba-debuginfo - update to 7.4.33-1.71.1
php74-phar-debuginfo - update to 7.4.33-1.71.1
php74-xsl-debuginfo - update to 7.4.33-1.71.1
php74-snmp-debuginfo - update to 7.4.33-1.71.1
php74-fpm - update to 7.4.33-1.71.1
php74-mysql - update to 7.4.33-1.71.1
php74-curl - update to 7.4.33-1.71.1
php74-bcmath-debuginfo - update to 7.4.33-1.71.1
php-fpm - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-ffi - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-intl - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-enchant - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-embedded - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-devel - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-dbg - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-dba - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-common - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-cli - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-bcmath - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-gmp - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-gd - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-xmlrpc - update to 7.4.33-2.0.1
php-xml - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-soap - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-snmp - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-process - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-pgsql - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-pdo - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-opcache - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-odbc - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-mysqlnd - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-mbstring - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-ldap - addressed in versions 7.4.33-2.0.1, 8.2.24-1
php-json - update to 7.4.33-2.0.1
php7-intl-debuginfo - update to 7.4.33-150400.4.40.1
php7-ldap-debuginfo - update to 7.4.33-150400.4.40.1
php7-tokenizer - update to 7.4.33-150400.4.40.1
php7-cli-debuginfo - update to 7.4.33-150400.4.40.1
php7-xmlrpc - update to 7.4.33-150400.4.40.1
php7-ldap - update to 7.4.33-150400.4.40.1
php7-sysvsem-debuginfo - update to 7.4.33-150400.4.40.1
php7-intl - update to 7.4.33-150400.4.40.1
php7-pcntl-debuginfo - update to 7.4.33-150400.4.40.1
php7-curl - update to 7.4.33-150400.4.40.1
php7-odbc-debuginfo - update to 7.4.33-150400.4.40.1
php7-pdo-debuginfo - update to 7.4.33-150400.4.40.1
php7-phar - update to 7.4.33-150400.4.40.1
php7-bz2 - update to 7.4.33-150400.4.40.1
php7-test - update to 7.4.33-150400.4.40.1
php7-fastcgi-debugsource - update to 7.4.33-150400.4.40.1
php7-ftp-debuginfo - update to 7.4.33-150400.4.40.1
php7-embed-debuginfo - update to 7.4.33-150400.4.40.1
php7-zip-debuginfo - update to 7.4.33-150400.4.40.1
php7-calendar-debuginfo - update to 7.4.33-150400.4.40.1
php7 - update to 7.4.33-150400.4.40.1
php7-bz2-debuginfo - update to 7.4.33-150400.4.40.1
php7-mysql-debuginfo - update to 7.4.33-150400.4.40.1
php7-enchant - update to 7.4.33-150400.4.40.1
php7-curl-debuginfo - update to 7.4.33-150400.4.40.1
php7-fpm - update to 7.4.33-150400.4.40.1
php7-xmlrpc-debuginfo - update to 7.4.33-150400.4.40.1
php7-dba-debuginfo - update to 7.4.33-150400.4.40.1
php7-gmp - update to 7.4.33-150400.4.40.1
php7-embed-debugsource - update to 7.4.33-150400.4.40.1
php7-gettext-debuginfo - update to 7.4.33-150400.4.40.1
php7-tokenizer-debuginfo - update to 7.4.33-150400.4.40.1
php7-opcache-debuginfo - update to 7.4.33-150400.4.40.1
php7-sysvmsg-debuginfo - update to 7.4.33-150400.4.40.1
php7-iconv - update to 7.4.33-150400.4.40.1
php7-xmlreader-debuginfo - update to 7.4.33-150400.4.40.1
php7-soap-debuginfo - update to 7.4.33-150400.4.40.1
php7-sockets-debuginfo - update to 7.4.33-150400.4.40.1
php7-gmp-debuginfo - update to 7.4.33-150400.4.40.1
php7-bcmath-debuginfo - update to 7.4.33-150400.4.40.1
php7-xsl - update to 7.4.33-150400.4.40.1
php7-sodium - update to 7.4.33-150400.4.40.1
php7-readline - update to 7.4.33-150400.4.40.1
php7-zlib-debuginfo - update to 7.4.33-150400.4.40.1
php7-shmop - update to 7.4.33-150400.4.40.1
php7-iconv-debuginfo - update to 7.4.33-150400.4.40.1
php7-enchant-debuginfo - update to 7.4.33-150400.4.40.1
php7-calendar - update to 7.4.33-150400.4.40.1
php7-exif - update to 7.4.33-150400.4.40.1
php7-snmp-debuginfo - update to 7.4.33-150400.4.40.1
php7-readline-debuginfo - update to 7.4.33-150400.4.40.1
php7-zip - update to 7.4.33-150400.4.40.1
php7-ftp - update to 7.4.33-150400.4.40.1
php7-posix - update to 7.4.33-150400.4.40.1
php7-pdo - update to 7.4.33-150400.4.40.1
php7-dba - update to 7.4.33-150400.4.40.1
php7-fileinfo-debuginfo - update to 7.4.33-150400.4.40.1
apache2-mod_php7-debugsource - update to 7.4.33-150400.4.40.1
php7-exif-debuginfo - update to 7.4.33-150400.4.40.1
php7-sqlite - update to 7.4.33-150400.4.40.1
php7-sysvshm - update to 7.4.33-150400.4.40.1
php7-openssl-debuginfo - update to 7.4.33-150400.4.40.1
php7-json-debuginfo - update to 7.4.33-150400.4.40.1
php7-opcache - update to 7.4.33-150400.4.40.1
php7-pcntl - update to 7.4.33-150400.4.40.1
php7-gd - update to 7.4.33-150400.4.40.1
php7-xmlreader - update to 7.4.33-150400.4.40.1
php7-pgsql-debuginfo - update to 7.4.33-150400.4.40.1
php7-sysvshm-debuginfo - update to 7.4.33-150400.4.40.1
php7-odbc - update to 7.4.33-150400.4.40.1
php7-dom-debuginfo - update to 7.4.33-150400.4.40.1
php7-debuginfo - update to 7.4.33-150400.4.40.1
php7-sqlite-debuginfo - update to 7.4.33-150400.4.40.1
php7-shmop-debuginfo - update to 7.4.33-150400.4.40.1
php7-tidy-debuginfo - update to 7.4.33-150400.4.40.1
php7-gettext - update to 7.4.33-150400.4.40.1
php7-posix-debuginfo - update to 7.4.33-150400.4.40.1
php7-fileinfo - update to 7.4.33-150400.4.40.1
php7-sodium-debuginfo - update to 7.4.33-150400.4.40.1
php7-soap - update to 7.4.33-150400.4.40.1
php7-embed - update to 7.4.33-150400.4.40.1
apache2-mod_php7-debuginfo - update to 7.4.33-150400.4.40.1
php7-snmp - update to 7.4.33-150400.4.40.1
php7-fpm-debuginfo - update to 7.4.33-150400.4.40.1
php7-fastcgi-debuginfo - update to 7.4.33-150400.4.40.1
php7-xmlwriter-debuginfo - update to 7.4.33-150400.4.40.1
php7-xmlwriter - update to 7.4.33-150400.4.40.1
php7-ctype-debuginfo - update to 7.4.33-150400.4.40.1
php7-cli - update to 7.4.33-150400.4.40.1
php7-bcmath - update to 7.4.33-150400.4.40.1
php7-debugsource - update to 7.4.33-150400.4.40.1
php7-sysvmsg - update to 7.4.33-150400.4.40.1
php7-sockets - update to 7.4.33-150400.4.40.1
php7-phar-debuginfo - update to 7.4.33-150400.4.40.1
php7-ctype - update to 7.4.33-150400.4.40.1
php7-mbstring - update to 7.4.33-150400.4.40.1
php7-fastcgi - update to 7.4.33-150400.4.40.1
apache2-mod_php7 - update to 7.4.33-150400.4.40.1
php7-dom - update to 7.4.33-150400.4.40.1
php7-gd-debuginfo - update to 7.4.33-150400.4.40.1
php7-fpm-debugsource - update to 7.4.33-150400.4.40.1
php7-sysvsem - update to 7.4.33-150400.4.40.1
php7-devel - update to 7.4.33-150400.4.40.1
php7-json - update to 7.4.33-150400.4.40.1
php7-openssl - update to 7.4.33-150400.4.40.1
php7-tidy - update to 7.4.33-150400.4.40.1
php7-mysql - update to 7.4.33-150400.4.40.1
php7-xsl-debuginfo - update to 7.4.33-150400.4.40.1
php7-pgsql - update to 7.4.33-150400.4.40.1
php7-mbstring-debuginfo - update to 7.4.33-150400.4.40.1
php7-zlib - update to 7.4.33-150400.4.40.1
php-help - update to 8.0.30-6
php-intl - update to 8.0.30-6
php-ldap - update to 8.0.30-6
php-mbstring - update to 8.0.30-6
php-mysqlnd - update to 8.0.30-6
php-odbc - update to 8.0.30-6
php-opcache - update to 8.0.30-6
php-pdo - update to 8.0.30-6
php-pgsql - update to 8.0.30-6
php-process - update to 8.0.30-6
php-snmp - update to 8.0.30-6
php-soap - update to 8.0.30-6
php-sodium - update to 8.0.30-6
php-tidy - update to 8.0.30-6
php-xml - update to 8.0.30-6
php-gd - update to 8.0.30-6
php - update to 8.0.30-6
php-gmp - update to 8.0.30-6
php-bcmath - update to 8.0.30-6
php-cli - update to 8.0.30-6
php-common - update to 8.0.30-6
php-dba - update to 8.0.30-6
php-dbg - update to 8.0.30-6
php-debugsource - update to 8.0.30-6
php-devel - update to 8.0.30-6
php-embedded - update to 8.0.30-6
php-enchant - update to 8.0.30-6
php-ffi - update to 8.0.30-6
php-fpm - update to 8.0.30-6
php-debuginfo - update to 8.0.30-6
php8-mbstring-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-dom - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-zlib - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-sysvmsg-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-embed-debugsource - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-gd-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-tidy - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-ctype-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-odbc - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-sysvsem - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-pcntl-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
apache2-mod_php8-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-readline - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-fileinfo-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-sqlite - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-soap - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-pdo-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-iconv-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-mysql - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-cli - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-ftp-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-devel - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-debugsource - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-intl-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-bcmath-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-pgsql-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-cli-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-ftp - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-tokenizer - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-test - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-bz2 - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-fileinfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-curl - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-gettext-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-calendar - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-fpm-debugsource - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-xmlreader-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-gd - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-xmlwriter - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-sqlite-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-shmop-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-odbc-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-pdo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-zip-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-sysvmsg - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8 - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-bz2-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-openssl - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-embed-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-sodium - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-pcntl - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-ctype - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-dba - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-ldap - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-bcmath - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-posix-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-mbstring - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
apache2-mod_php8-debugsource - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-phar-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-opcache-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-gmp - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-sysvshm - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-fastcgi - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-gettext - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-xmlwriter-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-enchant-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-shmop - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-fpm-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-snmp-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-sockets-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-pgsql - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-fpm - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-xmlreader - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-tokenizer-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-ldap-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-openssl-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-snmp - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-embed - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-sysvsem-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-readline-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-posix - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-phar - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-dom-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-sodium-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-soap-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-intl - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-iconv - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-gmp-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-dba-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-calendar-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-fastcgi-debugsource - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-zlib-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-xsl - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
apache2-mod_php8 - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-exif-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-sysvshm-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-enchant - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-zip - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-xsl-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-exif - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-tidy-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-sockets - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-fastcgi-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-curl-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-opcache - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
php8-mysql-debuginfo - addressed in versions 8.0.30-150400.4.46.1, 8.2.24-150600.3.6.1
libapache2-mod-php8.1 (Ubuntu package) - update to 8.1.2-1ubuntu2.19
php8.1-cgi (Ubuntu package) - update to 8.1.2-1ubuntu2.19
php8.1-cli (Ubuntu package) - update to 8.1.2-1ubuntu2.19
php8.1-fpm (Ubuntu package) - update to 8.1.2-1ubuntu2.19
php81 - update to 8.1.30
php-sodium - update to 8.2.24-1
php-zip - update to 8.2.24-1
php8.2 (Debian package) - update to 8.2.24-1~deb12u1
php8-ffi-debuginfo - update to 8.2.24-150600.3.6.1
php8-ffi - update to 8.2.24-150600.3.6.1
php8-fpm-apache - update to 8.2.24-150600.3.6.1
php8.3-fpm (Ubuntu package) - update to 8.3.6-0ubuntu0.24.04.2
php8.3-cli (Ubuntu package) - update to 8.3.6-0ubuntu0.24.04.2
php8.3-cgi (Ubuntu package) - update to 8.3.6-0ubuntu0.24.04.2
libapache2-mod-php8.3 (Ubuntu package) - update to 8.3.6-0ubuntu0.24.04.2
Oracle Solaris - update to 11.4 SRU 77

• https://www.php.net/ChangeLog-8.php#8.1.30
• https://www.php.net/ChangeLog-8.php#8.2.24
• https://www.php.net/ChangeLog-8.php#8.3.12

• Multiple vulnerabilities in PHP
• Ubuntu update for php7.4
• Debian update for php8.2
• openEuler update for php
• SUSE update for php8
• Multiple vulnerabilities in cPanel EasyApache
• SUSE update for php8
• SUSE update for php74
• SUSE update for php7
• Slackware Linux update for php81
• Ubuntu update for php7.0
• Red Hat Enterprise Linux 9 update for the php:8.2 module
• Red Hat Enterprise Linux 9 update for the php:8.1 module
• Red Hat Enterprise Linux 8 update for the php:8.2 module
• Red Hat Enterprise Linux 8 update for the php:7.4 module
• Oracle Solaris update for third-party components
• Security features bypass in Oracle Secure Backup
• Gentoo update for PHP
• Ubuntu update for php5
• Anolis OS update for php:7.4 module
• Anolis OS update for php