[CLSA-2024:1735310755] php: Fix of 3 CVEs
Type:
security
Severity:
Moderate
Release date:
2024-12-27 14:46:01 UTC
Description:
- CVE-2022-31629: Add cookie integrity validation - CVE-2024-2756: Fix issue introduced by incomplete fix of CVE-2022-31629 to prevent network and same-site attackers from setting insecure cookies in victim's browser - CVE-2024-3096: Fix issue where password_verify() incorrectly returns true when testing a blank string with password starting with a null byte
Updated packages:
  • php-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:a1057088340f30090180b956ce5a78ee39588a1d8d865eb0289e6f744f814a9f
  • php-bcmath-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:43b32fff6bb2730a345d7ea499b0eca3b33245cfc4099a3f4920ad203f6a8389
  • php-cli-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:8bef124fbb82afcb3c781adb08e1c68c5f039021b866701046e0518ed4789ecf
  • php-common-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:888e72c4fec31cb74b46890e21207de8deffb05ef42e709f2942e2c2b82e2208
  • php-dba-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:cd5b5306fc022c7f1fc6862051616ee8293362f57406729a562a7a2b1fac3225
  • php-dbg-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:0168e1d04f1d94a5a3a91e9434e706302f77bf11436090859f7c5f8dc3d71a0d
  • php-devel-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:44252aa3576457c91b9584b7287aad3aa3b897495d534bdf4b152489deb2771a
  • php-embedded-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:8edc7e4cffddc09c248774483586655af7c0194bcc16a4d9be72ca1157b98947
  • php-enchant-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:e909ef3d8e432d3f8a0ec38fbb7948d868ef571ea8a564e2f2e7486fde1d140d
  • php-fpm-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:e8bacae4595d41d1501dccb2d948308d2da7fc81a42edcdf9835c4e3f024d7c0
  • php-gd-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:7815e7d98ad924b26937ad343d41ad990f6113eb6fa9b7334355bfa6a2439bbe
  • php-gmp-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:b9d646f25b664ca234e6b74ee7ae0345ab71b88384c54597915abe53934a8faa
  • php-intl-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:31ac2673bf88d05a33cc62ab3b8426599f50fa0596e7f3c83deff7d86cf6e05a
  • php-json-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:a0ff520a7dfb8d5768ffcf1ab2c1d3be8701efb8d888dffb06e4470ade01f66d
  • php-ldap-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:8eea8697a208a725ea86c81ec7e91f93b285bd90ffdef5042795335b30ae8f40
  • php-mbstring-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:4a0a0b4533fa369ce69b447ff070594ffd8359a88256e01bbc6212db0c0a1689
  • php-mysqlnd-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:7e6c86a9a0c4dbf0a285f89a96dbf6debb1f93059476f29a87594abb7f27ebc7
  • php-odbc-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:69e9bc464dcd1dd683e8445b5cc70579c4862886ecb434d5828aa5d86e025560
  • php-opcache-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:1e89ae71e0502b56603ef5cf5b092dbbd96991373b5202cad254c63d70d100a1
  • php-pdo-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:f2de94c071893d226603bafa31966661876b31e4d5cfdd7b5661eb56b81ae90f
  • php-pgsql-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:5cd9616f39e7a8713d314eaf6f930298d5f3e63684ee0205f8a6dbe250202188
  • php-process-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:1c686daef597dd1780d146141c077cce0e1799b72875566cb2ac9b18e72e6c56
  • php-recode-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:ee06a1e2b29082278251634a16a9f6675491b7373e25d23c55420edd6b193819
  • php-snmp-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:b3c44850395f866f9f4946b694972d639d2489649ab7476105945306c8429726
  • php-soap-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:2ba1aeae6c3a814a927634f8ed3ac5bc598824c12588044bb835169521af88dd
  • php-xml-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:5f0a013db61c9f47c6b6f06f5ee1146f938ca6c23450b8d16f573d187780d6f9
  • php-xmlrpc-7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8.x86_64.rpm
    sha:dcd438cdb3219040613afdeb5763609da80eae0436bee13ca76b119519733204
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.