php-5.4.16-48.0.3.el7.AXS7

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for
developers to write dynamically generated web pages. PHP also offers built-in
database integration for several commercial and non-commercial database
management systems, so writing a database-enabled webpage with PHP is fairly
simple. The most common use of PHP coding is probably as a replacement for CGI
scripts.

The php package contains the module (often referred to as mod_php) which adds
support for the PHP language to Apache HTTP Server.

Security Fix(es):

* CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data
boundaries larger than the read buffer

CVE(s):
CVE-2024-8925
In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed. This could lead to malicious attacker able to control part of the submitted data being able to exclude portion of other data, potentially leading to erroneous application behavior.