Lucene search

K
oraclelinuxOracleLinuxELSA-2023-2417
HistoryMay 15, 2023 - 12:00 a.m.

8.1 security update

2023-05-1500:00:00
linux.oracle.com
18
php 8.1
security update
php extensions

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

82.3%

php-pecl-apcu
[5.1.21-1]

  • update to 5.1.21 for PHP 8.1 #2070040
    php-pecl-rrd
    [2.0.3-4]
  • build for PHP 8.1 #2070040
    php-pecl-xdebug3
    [3.1.4-1]
  • update to 3.1.4 for PHP 8.1 #2070040
    php-pecl-zip
    [1.20.1-1]
  • update to 1.20.1 for PHP 8.1 #2070040
    php
    [8.1.14-1]
  • rebase to 8.1.14
    [8.1.8-1]
  • update to 8.1.8 #2070040
    [8.1.7-2]
  • clean unneeded dependency on useradd command
    [8.1.7-1]
  • update to 8.1.7 #2070040
    [8.1.6-2]
  • add upstream patch to initialize pcre before mbstring
  • add upstream patch to use more sha256 in openssl tests
    [8.1.6-1]
  • update to 8.1.6 #2070040
    [8.0.13-1]
  • rebase to 8.0.13 #2032429
  • refresh configuration files from upstream
    [8.0.12-1]
  • rebase to 8.0.12 #2017111 #1981423
  • build using system libxcrypt #2015903
    [8.0.10-1]
  • rebase to 8.0.10 #1992513
  • compatibility with OpenSSL 3.0 #1992492
  • snmp: add sha256 / sha512 security protocol #1936635
  • phar: implement openssl_256 and openssl_512 for phar signatures
  • phar: use sha256 signature by default
    [8.0.6-9]
  • Rebuilt for libffi 3.4.2 SONAME transition.
    Related: rhbz#1891914
    [8.0.6-8]
  • Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
    Related: rhbz#1991688
    [8.0.6-7]
  • Rebuild to pick up new build flags from redhat-rpm-config (#1984652)
    [8.0.6-6]
  • Rebuilt for RHEL 9 BETA for openssl 3.0
    Related: rhbz#1971065
    [8.0.6-5]
  • fix build with net-snmp without DES #1953492
    [8.0.6-4]
  • fix build with openssl 3.0 #1953492
    [8.0.6-3]
  • get rid of inet_addr and gethostbyaddr calls
    [8.0.6-2]
  • get rid of inet_ntoa and inet_aton calls
    [8.0.6-1]
  • Update to 8.0.6 - http://www.php.net/releases/8_0_6.php
    [8.0.5-1]
  • Update to 8.0.5 - http://www.php.net/releases/8_0_5.php
    [8.0.5~RC1-1]
  • update to 8.0.5RC1
    [8.0.4~RC1-2]
  • make libdb usage conditional
    default: on for Fedora, off for RHEL
    [8.0.4~RC1-1]
  • update to 8.0.4RC1
    [8.0.3-2]
  • clean conditions
    [8.0.3-1]
  • Update to 8.0.3 - http://www.php.net/releases/8_0_3.php
  • see https://fedoraproject.org/wiki/Changes/php80
  • drop xmlrpc extension
  • drop json subpackage, extension always there
  • enchant: use libenchant-2 instead of libenchant
    [7.4.16-1]
  • Update to 7.4.16 - http://www.php.net/releases/7_4_16.php
    [7.4.15-3]
  • drop php-imap, fix #1929640
    [7.4.15-2]
  • rebuild for libpq ABI fix rhbz#1908268
    [7.4.15-1]
  • Update to 7.4.15 - http://www.php.net/releases/7_4_15.php
  • add upstream patch for https://bugs.php.net/80682
    fix opcache doesn’t honour pcre.jit option
    [7.4.15~RC2-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
    [7.4.15~RC2-1]
  • update to 7.4.15RC2

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

82.3%