php:8.1 security update

An update is available for php-pecl-zip, module.php-pecl-apcu, php-pecl-xdebug3, module.php-pecl-xdebug3, php-pecl-rrd, module.php-pecl-rrd, module.php-pecl-zip, php-pecl-apcu. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

RLSA-2024:0387 Moderate: php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: 1-byte array overrun in common path resolve code CVE-2023-0568 php: DoS vulnerability when parsing multipart request body CVE-2023-0662 php: Missing error check and insufficient random bytes...

io.micronaut:micronaut-function-web (2.1.0), io.micronaut:micronaut-http-server-netty (2.1.0) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.1.0)

io.micronaut:micronaut-http-server MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 2.1.0 - io.micronaut:micronaut-http-server-netty 2.1.0 ...

io.micronaut.gcp:micronaut-gcp-function-http (3.5.0), io.micronaut.gcp:micronaut-gcp-function-http-test (3.5.0) +2 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.5.0)

io.micronaut:micronaut-http-server MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.gcp:micronaut-gcp-function-http 3.5.0 -...

io.micronaut.aws:micronaut-function-aws-api-proxy (>=1.4.0.m2, <=1.4.1), io.micronaut.aws:micronaut-function-aws-custom-runtime (>=1.4.0.m2, <=1.4.1) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.2.10)

io.micronaut:micronaut-http-server MAVEN version 1.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.aws:micronaut-function-aws-api-proxy =1.4.0.m2, =1.4.0.m2, =1.4.1 -...

io.micronaut.aws:micronaut-function-aws-api-proxy (>=1.1.0.m2, <=1.1.2), io.micronaut.aws:micronaut-function-aws-custom-runtime (>=1.1.0.m2, <=1.1.1) +11 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.4)

io.micronaut:micronaut-http-server MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.aws:micronaut-function-aws-api-proxy =1.1.0.m2, =1.1.0.m2, =1.1.0.rc2,...

io.micronaut.aws:micronaut-aws-alexa-httpserver (>=2.0.0.m1, <=2.0.0.m3), io.micronaut.aws:micronaut-function-aws-api-proxy (>=2.0.0.m1, <=2.0.0.m3) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.0.0.m2)

io.micronaut:micronaut-http-server MAVEN version 2.0.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.aws:micronaut-aws-alexa-httpserver =2.0.0.m1, =2.0.0.m1, =2.0.0.m3 -...

io.micronaut.aws:micronaut-aws-alexa-httpserver (>=2.4.0, <=2.6.0), io.micronaut.aws:micronaut-function-aws-api-proxy (>=2.4.0, <=2.6.0) +4 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.3.4)

io.micronaut:micronaut-http-server MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.aws:micronaut-aws-alexa-httpserver =2.4.0, =2.4.0, =2.4.0, =2.6.0 -...

com.slack.api:bolt-micronaut (>=1.4.0-rc1, <=1.5.0-m1), fr.cnieg.demo:demo (>=1.3.13, <=4.0.0) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.2.0)

io.micronaut:micronaut-http-server MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.slack.api:bolt-micronaut =1.4.0-rc1, =1.3.13, =4.0.0 -...

io.micronaut:micronaut-benchmarks (2.0.1), io.micronaut:micronaut-function-web (2.0.1) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.0.1)

io.micronaut:micronaut-http-server MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-benchmarks 2.0.1 - io.micronaut:micronaut-function-web 2.0.1 -...

com.pulsarix.micronaut:micronaut-security-attributes (1.0.0), com.slack.api:bolt-micronaut (>=1.0.9, <=1.0.11) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.3.6)

io.micronaut:micronaut-http-server MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.pulsarix.micronaut:micronaut-security-attributes 1.0.0 - com.slack.api:bolt-micronaut...

com.slack.api:bolt-micronaut (1.5.0-m2), fr.cnieg.demo:demo (>=4.0.1, <=4.0.3) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.2.2)

io.micronaut:micronaut-http-server-netty MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 1.5.0-m2 - fr.cnieg.demo:demo =4.0.1, =4.0.3 Sourc...

com.exactpro.th2:th2-cr-converter (>=1.3.0, <=1.3.1), com.slack.api:bolt-micronaut (>=1.16.0, <=1.27.3) +16 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (>=3.0.0-m3, <=3.8.0)

io.micronaut:micronaut-http-server-netty MAVEN version =3.0.0-m3, =1.3.0, =1.16.0, =0.1.0, =3.1.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =1.0.0-m2, =3.8.0, =1.0.0-m1, =3.0.0-m3, =3.0.0-alpha5, =3.0.0-alpha5, =3.0.0-beta1 and more Source cves: CVE-2024-23639 Source advisory: GHSA-583G-G682-CRXF...

com.bertramlabs.plugins:asset-pipeline-micronaut (3.0.7), io.micronaut.configuration:micronaut-multitenancy-gorm (1.0.1) +8 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.1)

io.micronaut:micronaut-http-server MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.bertramlabs.plugins:asset-pipeline-micronaut 3.0.7 -...

io.micronaut.configuration:micronaut-security-ldap (1.1.0.rc2), io.micronaut:micronaut-function-web (1.1.0.rc2) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.0.rc2)

io.micronaut:micronaut-http-server MAVEN version 1.1.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.1.0.rc2 -...

com.hectorlopezfernandez.pebble:pebble-micronaut (>=1.0.0, <=1.1.0), io.micronaut:micronaut-function-web (1.1.3) +8 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.3)

io.micronaut:micronaut-http-server MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.hectorlopezfernandez.pebble:pebble-micronaut =1.0.0, =1.1.3, =1.2.0.rc1 -...

io.micronaut:micronaut-function-web (1.2.3), io.micronaut:micronaut-http-server-netty (1.2.3) +2 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.2.3)

io.micronaut:micronaut-http-server MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 1.2.3 - io.micronaut:micronaut-http-server-netty 1.2.3 ...

io.micronaut.configuration:micronaut-multitenancy-gorm (1.0.3), io.micronaut.configuration:micronaut-security-ldap (1.0.3) +7 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.3)

io.micronaut:micronaut-http-server MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-multitenancy-gorm 1.0.3 -...

io.micronaut.configuration:micronaut-multitenancy-gorm (>=1.1.1, <=1.1.3), io.micronaut:micronaut-function-web (1.1.2) +4 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.2)

io.micronaut:micronaut-http-server MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-multitenancy-gorm =1.1.1, =1.1.1, =1.3.1 Source cves:...

io.micronaut.configuration:micronaut-security-ldap (1.2.0.rc1), io.micronaut.configuration:micronaut-security-oauth2 (1.2.0.rc1) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.2.0.rc1)

io.micronaut:micronaut-http-server MAVEN version 1.2.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.2.0.rc1 -...