php-8.0.13-2.el9

エラータID: AXSA:2022-4033:02

リリース日: 
2022/11/15 Tuesday - 05:33
題名: 
php-8.0.13-2.el9
影響のあるチャネル: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- php の mysqlnd ドライバーの pdo_mysql 拡張機能には、第三者に
ホストへの接続用パスワードの設定を許可している場合、長過ぎる
パスワードによってバッファオーバーフローが発生する問題がある
ため、リモートの攻撃者により長過ぎるパスワードを介して任意の
コード実行を可能とする脆弱性が存在します。(CVE-2022-31626)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2022-31626
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. php-8.0.13-2.el9.src.rpm
    MD5: 1b1ed0795197aa764529ee591c39cfa0
    SHA-256: d5b2b0426c68bff16bfb55db6f1ccdde0cc352103e60f6ee7a62e655c0a241bc
    Size: 10.51 MB

Asianux Server 9 for x86_64
  1. php-8.0.13-2.el9.x86_64.rpm
    MD5: 0f8408c3f97d71624aacbab58800435d
    SHA-256: b72ba7487f6ddd827a8807ebf22fe5e856bcd507b0f0e7dff43474e83b85a715
    Size: 11.86 kB
  2. php-bcmath-8.0.13-2.el9.x86_64.rpm
    MD5: 4c23090deb69cb9b8c8b0532113604f9
    SHA-256: b8a101618103801f61a5085e37b7a710ccebf206884af7ce193882df30812f35
    Size: 37.21 kB
  3. php-cli-8.0.13-2.el9.x86_64.rpm
    MD5: 1b3b65c0e2486ab4c578b3acc98bba8a
    SHA-256: b5bf613fcb9a94faf90a2bff7d98ac1439bc96e422d6c03cb65b5949bfe765fd
    Size: 3.08 MB
  4. php-common-8.0.13-2.el9.x86_64.rpm
    MD5: 495cc2af20a45128bafae7ca89cf2096
    SHA-256: 21e416ab62094089b7d7a8ff274feeee34e2424efe6145e6327986ddc27c8813
    Size: 664.96 kB
  5. php-dba-8.0.13-2.el9.x86_64.rpm
    MD5: b88935fb17a47d1e11ef6f3e6e0c9703
    SHA-256: b02bcad934c705ce64faf06db88ccf7573671c75fc541f2a213f02cebedec8ed
    Size: 36.19 kB
  6. php-dbg-8.0.13-2.el9.x86_64.rpm
    MD5: 8acae96eb1aa8aea90e1a347b3770095
    SHA-256: 9aa33b504252033c8a0fac08b4ba043c5500325fa201677a458472204f7cb21c
    Size: 1.62 MB
  7. php-devel-8.0.13-2.el9.x86_64.rpm
    MD5: c7bc74621758504a861157b70245afdb
    SHA-256: 9282e31a34479f1deceb7cf4718b2723d42da8cb67c92d75f31e9bcf869be4fe
    Size: 657.69 kB
  8. php-embedded-8.0.13-2.el9.x86_64.rpm
    MD5: 9578035b98218529e6226ae5cafa4431
    SHA-256: 8634931c588721b388517a738595f3e00b337a2621b4b8532fb82d7b8fde9ae4
    Size: 1.51 MB
  9. php-enchant-8.0.13-2.el9.x86_64.rpm
    MD5: 2c9827a0a5570f2582a79cc2e272564a
    SHA-256: d1ae8e641f5f7494bb179f45538b002f1885f09a0f4bdc7e67251aa103a11d2b
    Size: 21.82 kB
  10. php-ffi-8.0.13-2.el9.x86_64.rpm
    MD5: edb6277cf6cd61e9ca5ea89d8007704f
    SHA-256: d7a01847a3c909f4ef770fbdcd25b76307e03d7dc20a7c48609c32b2a652bc95
    Size: 76.61 kB
  11. php-fpm-8.0.13-2.el9.x86_64.rpm
    MD5: 1c2045174d7611fa7e80635062e95040
    SHA-256: 869b2503e6e59f1aab22816e505dc9bda8deec4270dd5be5b922984738e38609
    Size: 1.59 MB
  12. php-gd-8.0.13-2.el9.x86_64.rpm
    MD5: 418af1fffaf15c28cf5a3cd159967312
    SHA-256: b67adcdfc7c1f19c70065a07ad6925ccec9cc7ff333970eb9596d5b3be88b83e
    Size: 43.14 kB
  13. php-gmp-8.0.13-2.el9.x86_64.rpm
    MD5: a01a1a50018d204fca864b3c962e9fec
    SHA-256: 7f672d0fa445245d25f457ef3c1f813f72397d84c5d2ac29ff2e9aaa310dab89
    Size: 33.78 kB
  14. php-intl-8.0.13-2.el9.x86_64.rpm
    MD5: 1d040fd312a8411ebce5f0078df0f40d
    SHA-256: 2a57afdbae4766f950d972895fd72ba102a1767ad66a36b237a7ab0be4e7a842
    Size: 152.25 kB
  15. php-ldap-8.0.13-2.el9.x86_64.rpm
    MD5: ef053d026c1ffc552b997878392849cb
    SHA-256: a3de614cf742c393c10e2633cbf6b274ef65feb7e593ab4244ef4579099f871c
    Size: 42.79 kB
  16. php-mbstring-8.0.13-2.el9.x86_64.rpm
    MD5: 51bc8722511661fe03847dc1d15a704d
    SHA-256: ac3507e23f115c7bafc60dfc2cf3fb851dac9aed5444d2208cb673082b327a82
    Size: 472.01 kB
  17. php-mysqlnd-8.0.13-2.el9.x86_64.rpm
    MD5: 58ad40575770dc31a5458ca48efdf8e8
    SHA-256: 62fcd4cc595661bfd69e20fa91426ed1dff7faca4e0da95ed9b2958ef3624725
    Size: 152.65 kB
  18. php-odbc-8.0.13-2.el9.x86_64.rpm
    MD5: 9437e70f9318c499cc7c915e7069c755
    SHA-256: f3e0381fa5915e615cd3014283a920c9be64191f98f399e55ee6a33d14149c87
    Size: 47.24 kB
  19. php-opcache-8.0.13-2.el9.x86_64.rpm
    MD5: 642487fe9e081c21ce5fd7b83a94e1a6
    SHA-256: 9d7f2a8a0763dba474d149fabebd06713b644752e1312b2c1be9093d6c340f33
    Size: 509.39 kB
  20. php-pdo-8.0.13-2.el9.x86_64.rpm
    MD5: 9f5868048a46ccc85b4087076c139bbd
    SHA-256: e7a530d3e86e1079d16bed25310fe764c268f17293a3fa06e147eb5f48aadefa
    Size: 85.08 kB
  21. php-pgsql-8.0.13-2.el9.x86_64.rpm
    MD5: 86bfbaabf2f2b37ce6bcb7d9d9ce3274
    SHA-256: ae1afb328d32d5ed47f5b8bab7b7108acd4d8301f393d7ec7d2b94fa7a18f625
    Size: 75.02 kB
  22. php-process-8.0.13-2.el9.x86_64.rpm
    MD5: 8ebcddc3a6d3a4d20311bbae7dee2458
    SHA-256: b3d8148d9177738da28ea4871814c95b4cc09780799e6c3ff1909c1d6a327873
    Size: 44.22 kB
  23. php-snmp-8.0.13-2.el9.x86_64.rpm
    MD5: ec39a07cd8083f3b96cfc84d90f516ec
    SHA-256: e7f60f5389952d02107a6cfa5201b08fccf4dcc978ca82256edc78c92f3f056e
    Size: 33.82 kB
  24. php-soap-8.0.13-2.el9.x86_64.rpm
    MD5: 52033882ca5e02f26e79567a37b3a6eb
    SHA-256: 6264ffb9dc2bba96a5587f42cbe322f8ee9bf42b870308dfbd90575072586c9b
    Size: 136.78 kB
  25. php-xml-8.0.13-2.el9.x86_64.rpm
    MD5: c82735b510e34f1d8844ec6fdcaba6b3
    SHA-256: 10d5f31d6e05bb4c0a19216775c2380653a41cd0369c3e0d37e9f49ea158f510
    Size: 133.91 kB