{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2024:10951","synopsis":"Moderate: php:8.2 security update","severity":"SEVERITY_MODERATE","topic":"An update is available for module.libzip, module.php-pecl-apcu, module.php-pecl-xdebug3, module.php-pecl-zip, php-pecl-rrd, module.php-pear, module.php-pecl-rrd, php-pecl-zip, php, libzip, module.php, php-pecl-apcu, php-pecl-xdebug3, php-pear.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nSecurity Fix(es):\n\n* php: host\/secure cookie bypass due to partial CVE-2022-31629 fix (CVE-2024-2756)\n\n* php: password_verify can erroneously return true, opening ATO risk (CVE-2024-3096)\n\n* php: Filter bypass in filter_var (FILTER_VALIDATE_URL) (CVE-2024-5458)\n\n* php: Erroneous parsing of multipart form data (CVE-2024-8925)\n\n* php: cgi.force_redirect configuration is bypassable due to the environment variable collision (CVE-2024-8927)\n\n* php: PHP-FPM Log Manipulation Vulnerability (CVE-2024-9026)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2275058","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2275058","description":""},{"ticket":"2275061","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2275061","description":""},{"ticket":"2291252","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2291252","description":""},{"ticket":"2317049","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2317049","description":""},{"ticket":"2317051","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2317051","description":""},{"ticket":"2317144","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2317144","description":""}],"cves":[{"name":"CVE-2024-2756","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-2756","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"},{"name":"CVE-2024-3096","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-3096","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"},{"name":"CVE-2024-5458","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-5458","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"},{"name":"CVE-2024-8925","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-8925","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"},{"name":"CVE-2024-8927","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-8927","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"},{"name":"CVE-2024-9026","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-9026","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"}],"references":[],"publishedAt":"2024-12-19T04:18:05.672002Z","rpms":{"Rocky Linux 8":{"nvras":["apcu-panel-0:5.1.23-1.module+el8.10.0+1596+477f03f8.noarch.rpm","libzip-0:1.7.3-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","libzip-0:1.7.3-1.module+el8.10.0+1596+477f03f8.src.rpm","libzip-0:1.7.3-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","libzip-debuginfo-0:1.7.3-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","libzip-debuginfo-0:1.7.3-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","libzip-debugsource-0:1.7.3-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","libzip-debugsource-0:1.7.3-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","libzip-devel-0:1.7.3-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","libzip-devel-0:1.7.3-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","libzip-tools-0:1.7.3-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","libzip-tools-0:1.7.3-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","libzip-tools-debuginfo-0:1.7.3-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","libzip-tools-debuginfo-0:1.7.3-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","php-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-0:8.2.25-1.module+el8.10.0+1911+f499711e.src.rpm","php-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-bcmath-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-bcmath-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-bcmath-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-bcmath-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-cli-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-cli-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-cli-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-cli-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-common-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-common-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-common-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-common-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-dba-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-dba-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-dba-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-dba-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-dbg-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-dbg-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-dbg-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-dbg-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-debugsource-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-debugsource-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-devel-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-devel-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-embedded-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-embedded-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-embedded-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-embedded-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-enchant-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-enchant-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-enchant-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-enchant-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-ffi-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-ffi-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-ffi-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-ffi-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-fpm-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-fpm-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-fpm-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-fpm-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-gd-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-gd-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-gd-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-gd-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-gmp-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-gmp-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-gmp-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-gmp-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-intl-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-intl-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-intl-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-intl-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-ldap-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-ldap-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-ldap-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-ldap-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-mbstring-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-mbstring-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-mbstring-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-mbstring-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-mysqlnd-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-mysqlnd-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-mysqlnd-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-mysqlnd-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-odbc-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-odbc-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-odbc-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-odbc-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-opcache-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-opcache-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-opcache-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-opcache-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-pdo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-pdo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-pdo-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-pdo-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-pear-1:1.10.14-1.module+el8.10.0+1596+477f03f8.noarch.rpm","php-pear-1:1.10.14-1.module+el8.10.0+1596+477f03f8.src.rpm","php-pecl-apcu-0:5.1.23-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","php-pecl-apcu-0:5.1.23-1.module+el8.10.0+1596+477f03f8.src.rpm","php-pecl-apcu-0:5.1.23-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","php-pecl-apcu-debuginfo-0:5.1.23-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","php-pecl-apcu-debuginfo-0:5.1.23-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","php-pecl-apcu-debugsource-0:5.1.23-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","php-pecl-apcu-debugsource-0:5.1.23-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","php-pecl-apcu-devel-0:5.1.23-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","php-pecl-apcu-devel-0:5.1.23-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","php-pecl-rrd-0:2.0.3-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","php-pecl-rrd-0:2.0.3-1.module+el8.10.0+1596+477f03f8.src.rpm","php-pecl-rrd-0:2.0.3-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","php-pecl-rrd-debuginfo-0:2.0.3-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","php-pecl-rrd-debuginfo-0:2.0.3-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","php-pecl-rrd-debugsource-0:2.0.3-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","php-pecl-rrd-debugsource-0:2.0.3-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","php-pecl-xdebug3-0:3.2.2-2.module+el8.10.0+1596+477f03f8.aarch64.rpm","php-pecl-xdebug3-0:3.2.2-2.module+el8.10.0+1596+477f03f8.src.rpm","php-pecl-xdebug3-0:3.2.2-2.module+el8.10.0+1596+477f03f8.x86_64.rpm","php-pecl-xdebug3-debuginfo-0:3.2.2-2.module+el8.10.0+1596+477f03f8.aarch64.rpm","php-pecl-xdebug3-debuginfo-0:3.2.2-2.module+el8.10.0+1596+477f03f8.x86_64.rpm","php-pecl-xdebug3-debugsource-0:3.2.2-2.module+el8.10.0+1596+477f03f8.aarch64.rpm","php-pecl-xdebug3-debugsource-0:3.2.2-2.module+el8.10.0+1596+477f03f8.x86_64.rpm","php-pecl-zip-0:1.22.3-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","php-pecl-zip-0:1.22.3-1.module+el8.10.0+1596+477f03f8.src.rpm","php-pecl-zip-0:1.22.3-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","php-pecl-zip-debuginfo-0:1.22.3-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","php-pecl-zip-debuginfo-0:1.22.3-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","php-pecl-zip-debugsource-0:1.22.3-1.module+el8.10.0+1596+477f03f8.aarch64.rpm","php-pecl-zip-debugsource-0:1.22.3-1.module+el8.10.0+1596+477f03f8.x86_64.rpm","php-pgsql-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-pgsql-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-pgsql-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-pgsql-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-process-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-process-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-process-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-process-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-snmp-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-snmp-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-snmp-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-snmp-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-soap-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-soap-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-soap-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-soap-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-xml-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-xml-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm","php-xml-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.aarch64.rpm","php-xml-debuginfo-0:8.2.25-1.module+el8.10.0+1911+f499711e.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[]}