Release Info

Advisory: CLSA-2023:1695503427

OS: EL 8 PHP

Public date: 2023-09-23 17:10:29

Project: php

Version: 7.2.34-32.el8

Errata link: https://errata.cloudlinux.com/php-els/el8/CLSA-2023-1695503427.html

Changelog

- Fix for hardened PHP - CVE-2023-3823: Fix external entity loading in XML without enabling by sanitizing libxml2 globals before parsing - CVE-2023-3824: Fix buffer mismanagement in phar_dir_read()

Update

Update command: yum update alt-php*

Packages list

alt-php72-7.2.34-32.el8.x86_64.rpm alt-php72-bcmath-7.2.34-32.el8.x86_64.rpm alt-php72-cli-7.2.34-32.el8.x86_64.rpm alt-php72-common-7.2.34-32.el8.x86_64.rpm alt-php72-dba-7.2.34-32.el8.x86_64.rpm alt-php72-devel-7.2.34-32.el8.x86_64.rpm alt-php72-enchant-7.2.34-32.el8.x86_64.rpm alt-php72-firebird-7.2.34-32.el8.x86_64.rpm alt-php72-gd-7.2.34-32.el8.x86_64.rpm alt-php72-imap-7.2.34-32.el8.x86_64.rpm alt-php72-intl-7.2.34-32.el8.x86_64.rpm alt-php72-ldap-7.2.34-32.el8.x86_64.rpm alt-php72-mbstring-7.2.34-32.el8.x86_64.rpm alt-php72-mysqlnd-7.2.34-32.el8.x86_64.rpm alt-php72-odbc-7.2.34-32.el8.x86_64.rpm alt-php72-opcache-7.2.34-32.el8.x86_64.rpm alt-php72-pdo-7.2.34-32.el8.x86_64.rpm alt-php72-pgsql-7.2.34-32.el8.x86_64.rpm alt-php72-process-7.2.34-32.el8.x86_64.rpm alt-php72-pspell-7.2.34-32.el8.x86_64.rpm alt-php72-recode-7.2.34-32.el8.x86_64.rpm alt-php72-snmp-7.2.34-32.el8.x86_64.rpm alt-php72-soap-7.2.34-32.el8.x86_64.rpm alt-php72-sodium-7.2.34-32.el8.x86_64.rpm alt-php72-tidy-7.2.34-32.el8.x86_64.rpm alt-php72-xml-7.2.34-32.el8.x86_64.rpm alt-php72-xmlrpc-7.2.34-32.el8.x86_64.rpm alt-php72-zts-7.2.34-32.el8.x86_64.rpm alt-php72-zts-devel-7.2.34-32.el8.x86_64.rpm

CVEs

CVE-2023-3823
CVE-2023-3824