An update for php is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP1,openEuler-24.03-LTS,openEuler-22.03-LTS-SP4,openEuler-22.03-LTS-SP3 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2024-2478 Final 1.0 1.0 2024-11-29 Initial 2024-11-29 2024-11-29 openEuler SA Tool V1.0 2024-11-29 php security update An update for php is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP1,openEuler-24.03-LTS,openEuler-22.03-LTS-SP4,openEuler-22.03-LTS-SP3 PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. %if 1 The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server when running in prefork mode. This module is deprecated. %endif Security Fix(es): (CVE-2024-11233) (CVE-2024-11234) (CVE-2024-11236) (CVE-2024-8929) (CVE-2024-8932) An update for php is now available for master/openEuler-20.03-LTS-SP4/openEuler-22.03-LTS-SP1/openEuler-22.03-LTS-SP3/openEuler-22.03-LTS-SP4/openEuler-24.03-LTS/openEuler-24.03-LTS-Next/openEuler-24.03-LTS-SP1. openEuler Security has rated this update as having a security impact of critical. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Critical php https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2478 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-11233 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-11234 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-11236 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-8929 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-8932 https://nvd.nist.gov/vuln/detail/CVE-2024-11233 https://nvd.nist.gov/vuln/detail/CVE-2024-11234 https://nvd.nist.gov/vuln/detail/CVE-2024-11236 https://nvd.nist.gov/vuln/detail/CVE-2024-8929 https://nvd.nist.gov/vuln/detail/CVE-2024-8932 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP1 openEuler-24.03-LTS openEuler-22.03-LTS-SP4 openEuler-22.03-LTS-SP3 php-8.0.30-7.oe2003sp4.aarch64.rpm php-bcmath-8.0.30-7.oe2003sp4.aarch64.rpm php-cli-8.0.30-7.oe2003sp4.aarch64.rpm php-common-8.0.30-7.oe2003sp4.aarch64.rpm php-dba-8.0.30-7.oe2003sp4.aarch64.rpm php-dbg-8.0.30-7.oe2003sp4.aarch64.rpm php-debuginfo-8.0.30-7.oe2003sp4.aarch64.rpm php-debugsource-8.0.30-7.oe2003sp4.aarch64.rpm php-devel-8.0.30-7.oe2003sp4.aarch64.rpm php-embedded-8.0.30-7.oe2003sp4.aarch64.rpm php-enchant-8.0.30-7.oe2003sp4.aarch64.rpm php-ffi-8.0.30-7.oe2003sp4.aarch64.rpm php-fpm-8.0.30-7.oe2003sp4.aarch64.rpm php-gd-8.0.30-7.oe2003sp4.aarch64.rpm php-gmp-8.0.30-7.oe2003sp4.aarch64.rpm php-help-8.0.30-7.oe2003sp4.aarch64.rpm php-intl-8.0.30-7.oe2003sp4.aarch64.rpm php-ldap-8.0.30-7.oe2003sp4.aarch64.rpm php-mbstring-8.0.30-7.oe2003sp4.aarch64.rpm php-mysqlnd-8.0.30-7.oe2003sp4.aarch64.rpm php-odbc-8.0.30-7.oe2003sp4.aarch64.rpm php-opcache-8.0.30-7.oe2003sp4.aarch64.rpm php-pdo-8.0.30-7.oe2003sp4.aarch64.rpm php-pgsql-8.0.30-7.oe2003sp4.aarch64.rpm php-process-8.0.30-7.oe2003sp4.aarch64.rpm php-snmp-8.0.30-7.oe2003sp4.aarch64.rpm php-soap-8.0.30-7.oe2003sp4.aarch64.rpm php-sodium-8.0.30-7.oe2003sp4.aarch64.rpm php-tidy-8.0.30-7.oe2003sp4.aarch64.rpm php-xml-8.0.30-7.oe2003sp4.aarch64.rpm php-8.0.30-7.oe2203sp1.aarch64.rpm php-bcmath-8.0.30-7.oe2203sp1.aarch64.rpm php-cli-8.0.30-7.oe2203sp1.aarch64.rpm php-common-8.0.30-7.oe2203sp1.aarch64.rpm php-dba-8.0.30-7.oe2203sp1.aarch64.rpm php-dbg-8.0.30-7.oe2203sp1.aarch64.rpm php-debuginfo-8.0.30-7.oe2203sp1.aarch64.rpm php-debugsource-8.0.30-7.oe2203sp1.aarch64.rpm php-devel-8.0.30-7.oe2203sp1.aarch64.rpm php-embedded-8.0.30-7.oe2203sp1.aarch64.rpm php-enchant-8.0.30-7.oe2203sp1.aarch64.rpm php-ffi-8.0.30-7.oe2203sp1.aarch64.rpm php-fpm-8.0.30-7.oe2203sp1.aarch64.rpm php-gd-8.0.30-7.oe2203sp1.aarch64.rpm php-gmp-8.0.30-7.oe2203sp1.aarch64.rpm php-help-8.0.30-7.oe2203sp1.aarch64.rpm php-intl-8.0.30-7.oe2203sp1.aarch64.rpm php-ldap-8.0.30-7.oe2203sp1.aarch64.rpm php-mbstring-8.0.30-7.oe2203sp1.aarch64.rpm php-mysqlnd-8.0.30-7.oe2203sp1.aarch64.rpm php-odbc-8.0.30-7.oe2203sp1.aarch64.rpm php-opcache-8.0.30-7.oe2203sp1.aarch64.rpm php-pdo-8.0.30-7.oe2203sp1.aarch64.rpm php-pgsql-8.0.30-7.oe2203sp1.aarch64.rpm php-process-8.0.30-7.oe2203sp1.aarch64.rpm php-snmp-8.0.30-7.oe2203sp1.aarch64.rpm php-soap-8.0.30-7.oe2203sp1.aarch64.rpm php-sodium-8.0.30-7.oe2203sp1.aarch64.rpm php-tidy-8.0.30-7.oe2203sp1.aarch64.rpm php-xml-8.0.30-7.oe2203sp1.aarch64.rpm php-8.3.14-1.oe2403.aarch64.rpm php-bcmath-8.3.14-1.oe2403.aarch64.rpm php-cli-8.3.14-1.oe2403.aarch64.rpm php-common-8.3.14-1.oe2403.aarch64.rpm php-dba-8.3.14-1.oe2403.aarch64.rpm php-dbg-8.3.14-1.oe2403.aarch64.rpm php-debuginfo-8.3.14-1.oe2403.aarch64.rpm php-debugsource-8.3.14-1.oe2403.aarch64.rpm php-devel-8.3.14-1.oe2403.aarch64.rpm php-embedded-8.3.14-1.oe2403.aarch64.rpm php-enchant-8.3.14-1.oe2403.aarch64.rpm php-ffi-8.3.14-1.oe2403.aarch64.rpm php-fpm-8.3.14-1.oe2403.aarch64.rpm php-gd-8.3.14-1.oe2403.aarch64.rpm php-gmp-8.3.14-1.oe2403.aarch64.rpm php-intl-8.3.14-1.oe2403.aarch64.rpm php-ldap-8.3.14-1.oe2403.aarch64.rpm php-mbstring-8.3.14-1.oe2403.aarch64.rpm php-mysqlnd-8.3.14-1.oe2403.aarch64.rpm php-odbc-8.3.14-1.oe2403.aarch64.rpm php-opcache-8.3.14-1.oe2403.aarch64.rpm php-pdo-8.3.14-1.oe2403.aarch64.rpm php-pgsql-8.3.14-1.oe2403.aarch64.rpm php-process-8.3.14-1.oe2403.aarch64.rpm php-snmp-8.3.14-1.oe2403.aarch64.rpm php-soap-8.3.14-1.oe2403.aarch64.rpm php-sodium-8.3.14-1.oe2403.aarch64.rpm php-tidy-8.3.14-1.oe2403.aarch64.rpm php-xml-8.3.14-1.oe2403.aarch64.rpm php-8.0.30-7.oe2203sp4.aarch64.rpm php-bcmath-8.0.30-7.oe2203sp4.aarch64.rpm php-cli-8.0.30-7.oe2203sp4.aarch64.rpm php-common-8.0.30-7.oe2203sp4.aarch64.rpm php-dba-8.0.30-7.oe2203sp4.aarch64.rpm php-dbg-8.0.30-7.oe2203sp4.aarch64.rpm php-debuginfo-8.0.30-7.oe2203sp4.aarch64.rpm php-debugsource-8.0.30-7.oe2203sp4.aarch64.rpm php-devel-8.0.30-7.oe2203sp4.aarch64.rpm php-embedded-8.0.30-7.oe2203sp4.aarch64.rpm php-enchant-8.0.30-7.oe2203sp4.aarch64.rpm php-ffi-8.0.30-7.oe2203sp4.aarch64.rpm php-fpm-8.0.30-7.oe2203sp4.aarch64.rpm php-gd-8.0.30-7.oe2203sp4.aarch64.rpm php-gmp-8.0.30-7.oe2203sp4.aarch64.rpm php-help-8.0.30-7.oe2203sp4.aarch64.rpm php-intl-8.0.30-7.oe2203sp4.aarch64.rpm php-ldap-8.0.30-7.oe2203sp4.aarch64.rpm php-mbstring-8.0.30-7.oe2203sp4.aarch64.rpm php-mysqlnd-8.0.30-7.oe2203sp4.aarch64.rpm php-odbc-8.0.30-7.oe2203sp4.aarch64.rpm php-opcache-8.0.30-7.oe2203sp4.aarch64.rpm php-pdo-8.0.30-7.oe2203sp4.aarch64.rpm php-pgsql-8.0.30-7.oe2203sp4.aarch64.rpm php-process-8.0.30-7.oe2203sp4.aarch64.rpm php-snmp-8.0.30-7.oe2203sp4.aarch64.rpm php-soap-8.0.30-7.oe2203sp4.aarch64.rpm php-sodium-8.0.30-7.oe2203sp4.aarch64.rpm php-tidy-8.0.30-7.oe2203sp4.aarch64.rpm php-xml-8.0.30-7.oe2203sp4.aarch64.rpm php-8.0.30-7.oe2203sp3.aarch64.rpm php-bcmath-8.0.30-7.oe2203sp3.aarch64.rpm php-cli-8.0.30-7.oe2203sp3.aarch64.rpm php-common-8.0.30-7.oe2203sp3.aarch64.rpm php-dba-8.0.30-7.oe2203sp3.aarch64.rpm php-dbg-8.0.30-7.oe2203sp3.aarch64.rpm php-debuginfo-8.0.30-7.oe2203sp3.aarch64.rpm php-debugsource-8.0.30-7.oe2203sp3.aarch64.rpm php-devel-8.0.30-7.oe2203sp3.aarch64.rpm php-embedded-8.0.30-7.oe2203sp3.aarch64.rpm php-enchant-8.0.30-7.oe2203sp3.aarch64.rpm php-ffi-8.0.30-7.oe2203sp3.aarch64.rpm php-fpm-8.0.30-7.oe2203sp3.aarch64.rpm php-gd-8.0.30-7.oe2203sp3.aarch64.rpm php-gmp-8.0.30-7.oe2203sp3.aarch64.rpm php-help-8.0.30-7.oe2203sp3.aarch64.rpm php-intl-8.0.30-7.oe2203sp3.aarch64.rpm php-ldap-8.0.30-7.oe2203sp3.aarch64.rpm php-mbstring-8.0.30-7.oe2203sp3.aarch64.rpm php-mysqlnd-8.0.30-7.oe2203sp3.aarch64.rpm php-odbc-8.0.30-7.oe2203sp3.aarch64.rpm php-opcache-8.0.30-7.oe2203sp3.aarch64.rpm php-pdo-8.0.30-7.oe2203sp3.aarch64.rpm php-pgsql-8.0.30-7.oe2203sp3.aarch64.rpm php-process-8.0.30-7.oe2203sp3.aarch64.rpm php-snmp-8.0.30-7.oe2203sp3.aarch64.rpm php-soap-8.0.30-7.oe2203sp3.aarch64.rpm php-sodium-8.0.30-7.oe2203sp3.aarch64.rpm php-tidy-8.0.30-7.oe2203sp3.aarch64.rpm php-xml-8.0.30-7.oe2203sp3.aarch64.rpm php-8.0.30-7.oe2003sp4.src.rpm php-8.0.30-7.oe2203sp1.src.rpm php-8.3.14-1.oe2403.src.rpm php-8.0.30-7.oe2203sp4.src.rpm php-8.0.30-7.oe2203sp3.src.rpm php-8.0.30-7.oe2003sp4.x86_64.rpm php-bcmath-8.0.30-7.oe2003sp4.x86_64.rpm php-cli-8.0.30-7.oe2003sp4.x86_64.rpm php-common-8.0.30-7.oe2003sp4.x86_64.rpm php-dba-8.0.30-7.oe2003sp4.x86_64.rpm php-dbg-8.0.30-7.oe2003sp4.x86_64.rpm php-debuginfo-8.0.30-7.oe2003sp4.x86_64.rpm php-debugsource-8.0.30-7.oe2003sp4.x86_64.rpm php-devel-8.0.30-7.oe2003sp4.x86_64.rpm php-embedded-8.0.30-7.oe2003sp4.x86_64.rpm php-enchant-8.0.30-7.oe2003sp4.x86_64.rpm php-ffi-8.0.30-7.oe2003sp4.x86_64.rpm php-fpm-8.0.30-7.oe2003sp4.x86_64.rpm php-gd-8.0.30-7.oe2003sp4.x86_64.rpm php-gmp-8.0.30-7.oe2003sp4.x86_64.rpm php-help-8.0.30-7.oe2003sp4.x86_64.rpm php-intl-8.0.30-7.oe2003sp4.x86_64.rpm php-ldap-8.0.30-7.oe2003sp4.x86_64.rpm php-mbstring-8.0.30-7.oe2003sp4.x86_64.rpm php-mysqlnd-8.0.30-7.oe2003sp4.x86_64.rpm php-odbc-8.0.30-7.oe2003sp4.x86_64.rpm php-opcache-8.0.30-7.oe2003sp4.x86_64.rpm php-pdo-8.0.30-7.oe2003sp4.x86_64.rpm php-pgsql-8.0.30-7.oe2003sp4.x86_64.rpm php-process-8.0.30-7.oe2003sp4.x86_64.rpm php-snmp-8.0.30-7.oe2003sp4.x86_64.rpm php-soap-8.0.30-7.oe2003sp4.x86_64.rpm php-sodium-8.0.30-7.oe2003sp4.x86_64.rpm php-tidy-8.0.30-7.oe2003sp4.x86_64.rpm php-xml-8.0.30-7.oe2003sp4.x86_64.rpm php-8.0.30-7.oe2203sp1.x86_64.rpm php-bcmath-8.0.30-7.oe2203sp1.x86_64.rpm php-cli-8.0.30-7.oe2203sp1.x86_64.rpm php-common-8.0.30-7.oe2203sp1.x86_64.rpm php-dba-8.0.30-7.oe2203sp1.x86_64.rpm php-dbg-8.0.30-7.oe2203sp1.x86_64.rpm php-debuginfo-8.0.30-7.oe2203sp1.x86_64.rpm php-debugsource-8.0.30-7.oe2203sp1.x86_64.rpm php-devel-8.0.30-7.oe2203sp1.x86_64.rpm php-embedded-8.0.30-7.oe2203sp1.x86_64.rpm php-enchant-8.0.30-7.oe2203sp1.x86_64.rpm php-ffi-8.0.30-7.oe2203sp1.x86_64.rpm php-fpm-8.0.30-7.oe2203sp1.x86_64.rpm php-gd-8.0.30-7.oe2203sp1.x86_64.rpm php-gmp-8.0.30-7.oe2203sp1.x86_64.rpm php-help-8.0.30-7.oe2203sp1.x86_64.rpm php-intl-8.0.30-7.oe2203sp1.x86_64.rpm php-ldap-8.0.30-7.oe2203sp1.x86_64.rpm php-mbstring-8.0.30-7.oe2203sp1.x86_64.rpm php-mysqlnd-8.0.30-7.oe2203sp1.x86_64.rpm php-odbc-8.0.30-7.oe2203sp1.x86_64.rpm php-opcache-8.0.30-7.oe2203sp1.x86_64.rpm php-pdo-8.0.30-7.oe2203sp1.x86_64.rpm php-pgsql-8.0.30-7.oe2203sp1.x86_64.rpm php-process-8.0.30-7.oe2203sp1.x86_64.rpm php-snmp-8.0.30-7.oe2203sp1.x86_64.rpm php-soap-8.0.30-7.oe2203sp1.x86_64.rpm php-sodium-8.0.30-7.oe2203sp1.x86_64.rpm php-tidy-8.0.30-7.oe2203sp1.x86_64.rpm php-xml-8.0.30-7.oe2203sp1.x86_64.rpm php-8.3.14-1.oe2403.x86_64.rpm php-bcmath-8.3.14-1.oe2403.x86_64.rpm php-cli-8.3.14-1.oe2403.x86_64.rpm php-common-8.3.14-1.oe2403.x86_64.rpm php-dba-8.3.14-1.oe2403.x86_64.rpm php-dbg-8.3.14-1.oe2403.x86_64.rpm php-debuginfo-8.3.14-1.oe2403.x86_64.rpm php-debugsource-8.3.14-1.oe2403.x86_64.rpm php-devel-8.3.14-1.oe2403.x86_64.rpm php-embedded-8.3.14-1.oe2403.x86_64.rpm php-enchant-8.3.14-1.oe2403.x86_64.rpm php-ffi-8.3.14-1.oe2403.x86_64.rpm php-fpm-8.3.14-1.oe2403.x86_64.rpm php-gd-8.3.14-1.oe2403.x86_64.rpm php-gmp-8.3.14-1.oe2403.x86_64.rpm php-intl-8.3.14-1.oe2403.x86_64.rpm php-ldap-8.3.14-1.oe2403.x86_64.rpm php-mbstring-8.3.14-1.oe2403.x86_64.rpm php-mysqlnd-8.3.14-1.oe2403.x86_64.rpm php-odbc-8.3.14-1.oe2403.x86_64.rpm php-opcache-8.3.14-1.oe2403.x86_64.rpm php-pdo-8.3.14-1.oe2403.x86_64.rpm php-pgsql-8.3.14-1.oe2403.x86_64.rpm php-process-8.3.14-1.oe2403.x86_64.rpm php-snmp-8.3.14-1.oe2403.x86_64.rpm php-soap-8.3.14-1.oe2403.x86_64.rpm php-sodium-8.3.14-1.oe2403.x86_64.rpm php-tidy-8.3.14-1.oe2403.x86_64.rpm php-xml-8.3.14-1.oe2403.x86_64.rpm php-8.0.30-7.oe2203sp4.x86_64.rpm php-bcmath-8.0.30-7.oe2203sp4.x86_64.rpm php-cli-8.0.30-7.oe2203sp4.x86_64.rpm php-common-8.0.30-7.oe2203sp4.x86_64.rpm php-dba-8.0.30-7.oe2203sp4.x86_64.rpm php-dbg-8.0.30-7.oe2203sp4.x86_64.rpm php-debuginfo-8.0.30-7.oe2203sp4.x86_64.rpm php-debugsource-8.0.30-7.oe2203sp4.x86_64.rpm php-devel-8.0.30-7.oe2203sp4.x86_64.rpm php-embedded-8.0.30-7.oe2203sp4.x86_64.rpm php-enchant-8.0.30-7.oe2203sp4.x86_64.rpm php-ffi-8.0.30-7.oe2203sp4.x86_64.rpm php-fpm-8.0.30-7.oe2203sp4.x86_64.rpm php-gd-8.0.30-7.oe2203sp4.x86_64.rpm php-gmp-8.0.30-7.oe2203sp4.x86_64.rpm php-help-8.0.30-7.oe2203sp4.x86_64.rpm php-intl-8.0.30-7.oe2203sp4.x86_64.rpm php-ldap-8.0.30-7.oe2203sp4.x86_64.rpm php-mbstring-8.0.30-7.oe2203sp4.x86_64.rpm php-mysqlnd-8.0.30-7.oe2203sp4.x86_64.rpm php-odbc-8.0.30-7.oe2203sp4.x86_64.rpm php-opcache-8.0.30-7.oe2203sp4.x86_64.rpm php-pdo-8.0.30-7.oe2203sp4.x86_64.rpm php-pgsql-8.0.30-7.oe2203sp4.x86_64.rpm php-process-8.0.30-7.oe2203sp4.x86_64.rpm php-snmp-8.0.30-7.oe2203sp4.x86_64.rpm php-soap-8.0.30-7.oe2203sp4.x86_64.rpm php-sodium-8.0.30-7.oe2203sp4.x86_64.rpm php-tidy-8.0.30-7.oe2203sp4.x86_64.rpm php-xml-8.0.30-7.oe2203sp4.x86_64.rpm php-8.0.30-7.oe2203sp3.x86_64.rpm php-bcmath-8.0.30-7.oe2203sp3.x86_64.rpm php-cli-8.0.30-7.oe2203sp3.x86_64.rpm php-common-8.0.30-7.oe2203sp3.x86_64.rpm php-dba-8.0.30-7.oe2203sp3.x86_64.rpm php-dbg-8.0.30-7.oe2203sp3.x86_64.rpm php-debuginfo-8.0.30-7.oe2203sp3.x86_64.rpm php-debugsource-8.0.30-7.oe2203sp3.x86_64.rpm php-devel-8.0.30-7.oe2203sp3.x86_64.rpm php-embedded-8.0.30-7.oe2203sp3.x86_64.rpm php-enchant-8.0.30-7.oe2203sp3.x86_64.rpm php-ffi-8.0.30-7.oe2203sp3.x86_64.rpm php-fpm-8.0.30-7.oe2203sp3.x86_64.rpm php-gd-8.0.30-7.oe2203sp3.x86_64.rpm php-gmp-8.0.30-7.oe2203sp3.x86_64.rpm php-help-8.0.30-7.oe2203sp3.x86_64.rpm php-intl-8.0.30-7.oe2203sp3.x86_64.rpm php-ldap-8.0.30-7.oe2203sp3.x86_64.rpm php-mbstring-8.0.30-7.oe2203sp3.x86_64.rpm php-mysqlnd-8.0.30-7.oe2203sp3.x86_64.rpm php-odbc-8.0.30-7.oe2203sp3.x86_64.rpm php-opcache-8.0.30-7.oe2203sp3.x86_64.rpm php-pdo-8.0.30-7.oe2203sp3.x86_64.rpm php-pgsql-8.0.30-7.oe2203sp3.x86_64.rpm php-process-8.0.30-7.oe2203sp3.x86_64.rpm php-snmp-8.0.30-7.oe2203sp3.x86_64.rpm php-soap-8.0.30-7.oe2203sp3.x86_64.rpm php-sodium-8.0.30-7.oe2203sp3.x86_64.rpm php-tidy-8.0.30-7.oe2203sp3.x86_64.rpm php-xml-8.0.30-7.oe2203sp3.x86_64.rpm php-help-8.3.14-1.oe2403.noarch.rpm In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas. 2024-11-29 CVE-2024-11233 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP1 openEuler-24.03-LTS openEuler-22.03-LTS-SP4 openEuler-22.03-LTS-SP3 High 8.2 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H php security update 2024-11-29 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2478 In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and "request_fulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user. 2024-11-29 CVE-2024-11234 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP1 openEuler-24.03-LTS openEuler-22.03-LTS-SP4 openEuler-22.03-LTS-SP3 High 7.2 AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N php security update 2024-11-29 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2478 In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write. 2024-11-29 CVE-2024-11236 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP1 openEuler-24.03-LTS openEuler-22.03-LTS-SP4 openEuler-22.03-LTS-SP3 Critical 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H php security update 2024-11-29 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2478 In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server. 2024-11-29 CVE-2024-8929 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP1 openEuler-24.03-LTS openEuler-22.03-LTS-SP4 openEuler-22.03-LTS-SP3 Medium 5.8 AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N php security update 2024-11-29 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2478 In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write. 2024-11-29 CVE-2024-8932 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP1 openEuler-24.03-LTS openEuler-22.03-LTS-SP4 openEuler-22.03-LTS-SP3 Critical 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H php security update 2024-11-29 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2478