RedHat: RHSA-2021-2992:01 Moderate: rh-php73-php security, bug fix,
Summary
PHP is an HTML-embedded scripting language commonly used with the Apache
HTTP Server.
The following packages have been upgraded to a later upstream version:
rh-php73-php (7.3.29). (BZ#1977764)
Security Fix(es):
* php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV
(CVE-2020-7069)
* php: FILTER_VALIDATE_URL accepts URLs with invalid userinfo
(CVE-2020-7071)
* php: SSRF bypass in FILTER_VALIDATE_URL (CVE-2021-21705)
* php: Use of freed hash key in the phar_parse_zipfile function
(CVE-2020-7068)
* php: URL decoding of cookie names can lead to different interpretation of
cookies between browser and server (CVE-2020-7070)
* php: NULL pointer dereference in SoapClient (CVE-2021-21702)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
Summary
Solution
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the updated packages, the httpd daemon must be restarted
for the update to take effect.
References
https://access.redhat.com/security/cve/CVE-2020-7068 https://access.redhat.com/security/cve/CVE-2020-7069 https://access.redhat.com/security/cve/CVE-2020-7070 https://access.redhat.com/security/cve/CVE-2020-7071 https://access.redhat.com/security/cve/CVE-2021-21702 https://access.redhat.com/security/cve/CVE-2021-21705 https://access.redhat.com/security/updates/classification/#moderate
Package List
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7):
Source:
rh-php73-php-7.3.29-1.el7.src.rpm
ppc64le:
rh-php73-php-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-bcmath-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-cli-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-common-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-dba-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-dbg-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-debuginfo-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-devel-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-embedded-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-enchant-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-fpm-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-gd-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-gmp-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-intl-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-json-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-ldap-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-mbstring-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-mysqlnd-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-odbc-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-opcache-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-pdo-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-pgsql-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-process-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-pspell-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-recode-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-snmp-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-soap-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-xml-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-xmlrpc-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-zip-7.3.29-1.el7.ppc64le.rpm
s390x:
rh-php73-php-7.3.29-1.el7.s390x.rpm
rh-php73-php-bcmath-7.3.29-1.el7.s390x.rpm
rh-php73-php-cli-7.3.29-1.el7.s390x.rpm
rh-php73-php-common-7.3.29-1.el7.s390x.rpm
rh-php73-php-dba-7.3.29-1.el7.s390x.rpm
rh-php73-php-dbg-7.3.29-1.el7.s390x.rpm
rh-php73-php-debuginfo-7.3.29-1.el7.s390x.rpm
rh-php73-php-devel-7.3.29-1.el7.s390x.rpm
rh-php73-php-embedded-7.3.29-1.el7.s390x.rpm
rh-php73-php-enchant-7.3.29-1.el7.s390x.rpm
rh-php73-php-fpm-7.3.29-1.el7.s390x.rpm
rh-php73-php-gd-7.3.29-1.el7.s390x.rpm
rh-php73-php-gmp-7.3.29-1.el7.s390x.rpm
rh-php73-php-intl-7.3.29-1.el7.s390x.rpm
rh-php73-php-json-7.3.29-1.el7.s390x.rpm
rh-php73-php-ldap-7.3.29-1.el7.s390x.rpm
rh-php73-php-mbstring-7.3.29-1.el7.s390x.rpm
rh-php73-php-mysqlnd-7.3.29-1.el7.s390x.rpm
rh-php73-php-odbc-7.3.29-1.el7.s390x.rpm
rh-php73-php-opcache-7.3.29-1.el7.s390x.rpm
rh-php73-php-pdo-7.3.29-1.el7.s390x.rpm
rh-php73-php-pgsql-7.3.29-1.el7.s390x.rpm
rh-php73-php-process-7.3.29-1.el7.s390x.rpm
rh-php73-php-pspell-7.3.29-1.el7.s390x.rpm
rh-php73-php-recode-7.3.29-1.el7.s390x.rpm
rh-php73-php-snmp-7.3.29-1.el7.s390x.rpm
rh-php73-php-soap-7.3.29-1.el7.s390x.rpm
rh-php73-php-xml-7.3.29-1.el7.s390x.rpm
rh-php73-php-xmlrpc-7.3.29-1.el7.s390x.rpm
rh-php73-php-zip-7.3.29-1.el7.s390x.rpm
x86_64:
rh-php73-php-7.3.29-1.el7.x86_64.rpm
rh-php73-php-bcmath-7.3.29-1.el7.x86_64.rpm
rh-php73-php-cli-7.3.29-1.el7.x86_64.rpm
rh-php73-php-common-7.3.29-1.el7.x86_64.rpm
rh-php73-php-dba-7.3.29-1.el7.x86_64.rpm
rh-php73-php-dbg-7.3.29-1.el7.x86_64.rpm
rh-php73-php-debuginfo-7.3.29-1.el7.x86_64.rpm
rh-php73-php-devel-7.3.29-1.el7.x86_64.rpm
rh-php73-php-embedded-7.3.29-1.el7.x86_64.rpm
rh-php73-php-enchant-7.3.29-1.el7.x86_64.rpm
rh-php73-php-fpm-7.3.29-1.el7.x86_64.rpm
rh-php73-php-gd-7.3.29-1.el7.x86_64.rpm
rh-php73-php-gmp-7.3.29-1.el7.x86_64.rpm
rh-php73-php-intl-7.3.29-1.el7.x86_64.rpm
rh-php73-php-json-7.3.29-1.el7.x86_64.rpm
rh-php73-php-ldap-7.3.29-1.el7.x86_64.rpm
rh-php73-php-mbstring-7.3.29-1.el7.x86_64.rpm
rh-php73-php-mysqlnd-7.3.29-1.el7.x86_64.rpm
rh-php73-php-odbc-7.3.29-1.el7.x86_64.rpm
rh-php73-php-opcache-7.3.29-1.el7.x86_64.rpm
rh-php73-php-pdo-7.3.29-1.el7.x86_64.rpm
rh-php73-php-pgsql-7.3.29-1.el7.x86_64.rpm
rh-php73-php-process-7.3.29-1.el7.x86_64.rpm
rh-php73-php-pspell-7.3.29-1.el7.x86_64.rpm
rh-php73-php-recode-7.3.29-1.el7.x86_64.rpm
rh-php73-php-snmp-7.3.29-1.el7.x86_64.rpm
rh-php73-php-soap-7.3.29-1.el7.x86_64.rpm
rh-php73-php-xml-7.3.29-1.el7.x86_64.rpm
rh-php73-php-xmlrpc-7.3.29-1.el7.x86_64.rpm
rh-php73-php-zip-7.3.29-1.el7.x86_64.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7):
Source:
rh-php73-php-7.3.29-1.el7.src.rpm
ppc64le:
rh-php73-php-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-bcmath-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-cli-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-common-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-dba-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-dbg-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-debuginfo-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-devel-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-embedded-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-enchant-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-fpm-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-gd-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-gmp-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-intl-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-json-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-ldap-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-mbstring-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-mysqlnd-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-odbc-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-opcache-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-pdo-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-pgsql-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-process-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-pspell-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-recode-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-snmp-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-soap-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-xml-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-xmlrpc-7.3.29-1.el7.ppc64le.rpm
rh-php73-php-zip-7.3.29-1.el7.ppc64le.rpm
s390x:
rh-php73-php-7.3.29-1.el7.s390x.rpm
rh-php73-php-bcmath-7.3.29-1.el7.s390x.rpm
rh-php73-php-cli-7.3.29-1.el7.s390x.rpm
rh-php73-php-common-7.3.29-1.el7.s390x.rpm
rh-php73-php-dba-7.3.29-1.el7.s390x.rpm
rh-php73-php-dbg-7.3.29-1.el7.s390x.rpm
rh-php73-php-debuginfo-7.3.29-1.el7.s390x.rpm
rh-php73-php-devel-7.3.29-1.el7.s390x.rpm
rh-php73-php-embedded-7.3.29-1.el7.s390x.rpm
rh-php73-php-enchant-7.3.29-1.el7.s390x.rpm
rh-php73-php-fpm-7.3.29-1.el7.s390x.rpm
rh-php73-php-gd-7.3.29-1.el7.s390x.rpm
rh-php73-php-gmp-7.3.29-1.el7.s390x.rpm
rh-php73-php-intl-7.3.29-1.el7.s390x.rpm
rh-php73-php-json-7.3.29-1.el7.s390x.rpm
rh-php73-php-ldap-7.3.29-1.el7.s390x.rpm
rh-php73-php-mbstring-7.3.29-1.el7.s390x.rpm
rh-php73-php-mysqlnd-7.3.29-1.el7.s390x.rpm
rh-php73-php-odbc-7.3.29-1.el7.s390x.rpm
rh-php73-php-opcache-7.3.29-1.el7.s390x.rpm
rh-php73-php-pdo-7.3.29-1.el7.s390x.rpm
rh-php73-php-pgsql-7.3.29-1.el7.s390x.rpm
rh-php73-php-process-7.3.29-1.el7.s390x.rpm
rh-php73-php-pspell-7.3.29-1.el7.s390x.rpm
rh-php73-php-recode-7.3.29-1.el7.s390x.rpm
rh-php73-php-snmp-7.3.29-1.el7.s390x.rpm
rh-php73-php-soap-7.3.29-1.el7.s390x.rpm
rh-php73-php-xml-7.3.29-1.el7.s390x.rpm
rh-php73-php-xmlrpc-7.3.29-1.el7.s390x.rpm
rh-php73-php-zip-7.3.29-1.el7.s390x.rpm
x86_64:
rh-php73-php-7.3.29-1.el7.x86_64.rpm
rh-php73-php-bcmath-7.3.29-1.el7.x86_64.rpm
rh-php73-php-cli-7.3.29-1.el7.x86_64.rpm
rh-php73-php-common-7.3.29-1.el7.x86_64.rpm
rh-php73-php-dba-7.3.29-1.el7.x86_64.rpm
rh-php73-php-dbg-7.3.29-1.el7.x86_64.rpm
rh-php73-php-debuginfo-7.3.29-1.el7.x86_64.rpm
rh-php73-php-devel-7.3.29-1.el7.x86_64.rpm
rh-php73-php-embedded-7.3.29-1.el7.x86_64.rpm
rh-php73-php-enchant-7.3.29-1.el7.x86_64.rpm
rh-php73-php-fpm-7.3.29-1.el7.x86_64.rpm
rh-php73-php-gd-7.3.29-1.el7.x86_64.rpm
rh-php73-php-gmp-7.3.29-1.el7.x86_64.rpm
rh-php73-php-intl-7.3.29-1.el7.x86_64.rpm
rh-php73-php-json-7.3.29-1.el7.x86_64.rpm
rh-php73-php-ldap-7.3.29-1.el7.x86_64.rpm
rh-php73-php-mbstring-7.3.29-1.el7.x86_64.rpm
rh-php73-php-mysqlnd-7.3.29-1.el7.x86_64.rpm
rh-php73-php-odbc-7.3.29-1.el7.x86_64.rpm
rh-php73-php-opcache-7.3.29-1.el7.x86_64.rpm
rh-php73-php-pdo-7.3.29-1.el7.x86_64.rpm
rh-php73-php-pgsql-7.3.29-1.el7.x86_64.rpm
rh-php73-php-process-7.3.29-1.el7.x86_64.rpm
rh-php73-php-pspell-7.3.29-1.el7.x86_64.rpm
rh-php73-php-recode-7.3.29-1.el7.x86_64.rpm
rh-php73-php-snmp-7.3.29-1.el7.x86_64.rpm
rh-php73-php-soap-7.3.29-1.el7.x86_64.rpm
rh-php73-php-xml-7.3.29-1.el7.x86_64.rpm
rh-php73-php-xmlrpc-7.3.29-1.el7.x86_64.rpm
rh-php73-php-zip-7.3.29-1.el7.x86_64.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7):
Source:
rh-php73-php-7.3.29-1.el7.src.rpm
x86_64:
rh-php73-php-7.3.29-1.el7.x86_64.rpm
rh-php73-php-bcmath-7.3.29-1.el7.x86_64.rpm
rh-php73-php-cli-7.3.29-1.el7.x86_64.rpm
rh-php73-php-common-7.3.29-1.el7.x86_64.rpm
rh-php73-php-dba-7.3.29-1.el7.x86_64.rpm
rh-php73-php-dbg-7.3.29-1.el7.x86_64.rpm
rh-php73-php-debuginfo-7.3.29-1.el7.x86_64.rpm
rh-php73-php-devel-7.3.29-1.el7.x86_64.rpm
rh-php73-php-embedded-7.3.29-1.el7.x86_64.rpm
rh-php73-php-enchant-7.3.29-1.el7.x86_64.rpm
rh-php73-php-fpm-7.3.29-1.el7.x86_64.rpm
rh-php73-php-gd-7.3.29-1.el7.x86_64.rpm
rh-php73-php-gmp-7.3.29-1.el7.x86_64.rpm
rh-php73-php-intl-7.3.29-1.el7.x86_64.rpm
rh-php73-php-json-7.3.29-1.el7.x86_64.rpm
rh-php73-php-ldap-7.3.29-1.el7.x86_64.rpm
rh-php73-php-mbstring-7.3.29-1.el7.x86_64.rpm
rh-php73-php-mysqlnd-7.3.29-1.el7.x86_64.rpm
rh-php73-php-odbc-7.3.29-1.el7.x86_64.rpm
rh-php73-php-opcache-7.3.29-1.el7.x86_64.rpm
rh-php73-php-pdo-7.3.29-1.el7.x86_64.rpm
rh-php73-php-pgsql-7.3.29-1.el7.x86_64.rpm
rh-php73-php-process-7.3.29-1.el7.x86_64.rpm
rh-php73-php-pspell-7.3.29-1.el7.x86_64.rpm
rh-php73-php-recode-7.3.29-1.el7.x86_64.rpm
rh-php73-php-snmp-7.3.29-1.el7.x86_64.rpm
rh-php73-php-soap-7.3.29-1.el7.x86_64.rpm
rh-php73-php-xml-7.3.29-1.el7.x86_64.rpm
rh-php73-php-xmlrpc-7.3.29-1.el7.x86_64.rpm
rh-php73-php-zip-7.3.29-1.el7.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
Topic
An update for rh-php73-php is now available for Red Hat SoftwareCollections.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.
Topic
Relevant Releases Architectures
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - ppc64le, s390x, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) - ppc64le, s390x, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - x86_64
Bugs Fixed
1868109 - CVE-2020-7068 php: Use of freed hash key in the phar_parse_zipfile function
1885735 - CVE-2020-7069 php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV
1885738 - CVE-2020-7070 php: URL decoding of cookie names can lead to different interpretation of cookies between browser and server
1913846 - CVE-2020-7071 php: FILTER_VALIDATE_URL accepts URLs with invalid userinfo
1925272 - CVE-2021-21702 php: NULL pointer dereference in SoapClient
1977764 - PDO ODBC truncates BLOB records at every 256th byte [rhscl-3.7.z]
1978755 - CVE-2021-21705 php: SSRF bypass in FILTER_VALIDATE_URL