Security update for php8 (important)

An update that solves three vulnerabilities, contains two
features and has one errata is now available.

Description:

This update for php8 fixes the following issues:

• php8 was updated to version 8.0.24
• php8 was updated to version 8.0.23 (jsc#SLE-23639).
• CVE-2021-21703: Fixed a local privilege escalation via PHP-FPM.
  (bsc#1192050)
• CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor
  while decompressing “quines” gzip files. (bsc#1203867)
• CVE-2022-31629: Fixed a bug which could lead an attacker to set an
  insecure cookie that will treated as secure in the victim’s browser.
  (bsc#1203870)
• Fixed missing devel package requires pear and pecl extensions
  (jsc#SLE-24723, bsc#1200772).

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.4:

  zypper in -t patch openSUSE-SLE-15.4-2022-3661=1

• SUSE Linux Enterprise Module for Web Scripting 15-SP4:

  zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP4-2022-3661=1