Fedora: Security Advisory for php (FEDORA-2021-06795380db)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security fix for the ALT Linux 10 package php8.0 version 8.0.13-alt1

8.0.13-alt1 built Dec. 1, 2021 Anton Farygin in task 290330 Nov. 20, 2021 Anton Farygin - 8.0.13 Fixes: CVE-2021-21707...

CVE-2021-21707

CVE-2021-21707 affects PHP 7.3.x < 7.3.33, 7.4.x < 7.4.26, and 8.0.x

Security fix for the ALT Linux 9 package php7 version 7.3.33-alt1

7.3.33-alt1 built Nov. 29, 2021 Anton Farygin in task 289998 Nov. 18, 2021 Anton Farygin - 7.3.33 Fixes: CVE-2021-21707...

Updated php packages fix security vulnerability

Header injection via defaultmimetype / defaultcharset mbstring may use pointer from some previous request Unexpected behavior with arrays and JIT Special character is breaking the path in xml function CVE-2021-21707 XMLReader::getParserProperty may throw with a valid property...

Security fix for the ALT Linux 10 package php8.1 version 8.0.13-alt1

Nov. 20, 2021 Anton Farygin 8.0.13-alt1 - 8.0.13 Fixes: CVE-2021-21707...

Security fix for the ALT Linux 10 package php8.2 version 8.0.13-alt1

Nov. 20, 2021 Anton Farygin 8.0.13-alt1 - 8.0.13 Fixes: CVE-2021-21707...

PHP 8.0.x < 8.0.13

The version of PHP installed on the remote host is prior to 8.0.13. It is, therefore, affected by a vulnerability as referenced in the Version 8.0.13 advisory. - In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexmlloadfile,...

PHP < 7.3.33, 7.4.x < 7.4.26, 8.0.x < 8.0.13 Security Update (Nov 2021) - Linux

PHP released new versions which include a security fix. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

PHP < 7.3.33, 7.4.x < 7.4.26, 8.0.x < 8.0.13 Security Update (Nov 2021) - Windows

PHP released new versions which include a security fix. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

CVE-2021-21707

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexmlloadfile, URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the...