Moderate: php:7.3 security, bug fix, and enhancement update
Summary
RLSA-2020:3662: Moderate: php:7.3 security, bug fix, and enhancement update. Affects libzip versions < 0:1.5.2-1.module+el8.4.0+414+2e7afcdd. Fixed in 0:1.5.2-1.module+el8.4.0+414+2e7afcdd. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It allows developers to create dynamic web pages and applications. The php package is a popular implementation of PHP. It has been upgraded to version 7.3.20 in this update.
Vulnerability Detail
This update addresses multiple security vulnerabilities in PHP 7.3.20. These vulnerabilities include:
- Out-of-bounds read due to integer overflow in iconv_mime_decode_headers()
- Buffer over-read in exif_read_data()
- DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte
- Information disclosure in exif_read_data()
- Integer wraparounds when receiving multipart forms
- Use-after-free in onig_new_deluxe() in regext.c
- NULL pointer dereference in match_at() in regexec.c
- Stack exhaustion in regcomp.c because of recursion in regparse.c
- Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c
- Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c
- Out of bounds read in JIT mode when \X is used in non-UTF mode
- Out of bounds read in php_strip_tags_ex
- Global buffer-overflow in mbfl_filt_conv_big5_wchar function
- NULL pointer dereference in PHP session upload progress
- Files added to tar with Phar::buildFromIterator have all-access permissions
- Information disclosure in exif_read_data() function
- Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution
- Heap buffer over-read in exif_scan_thumbnail()
- Heap buffer over-read in exif_process_user_comment()
- Out of bounds read when parsing EXIF information
- Heap-based buffer overflow in str_lower_case_match in regexec.c
- Information disclosure in function get_headers
These vulnerabilities can lead to various consequences, including information disclosure, code execution, and denial of service.
How To Fix
Minimum fixed version
0:1.5.2-1.module+el8.4.0+414+2e7afcdd
This is the first release that contains the fix.
sudo dnf update libzipTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workarounds have been provided for these vulnerabilities.
Conclusion
This update addresses multiple security vulnerabilities in PHP 7.3.20. It is recommended to update the php package to ensure the security and stability of your system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libzip →
FAQ
PHP is an HTML-embedded scripting language commonly used for web development.
The php package is a popular implementation of PHP that allows developers to create dynamic web pages and applications.
These vulnerabilities can lead to information disclosure, code execution, and denial of service.
To fix these vulnerabilities, update the php package to version 7.3.20 or later.
No workarounds have been provided for these vulnerabilities.
References
Related vulnerabilities
Recent vulnerabilities recorded for libzip.
