{ "document": { "aggregate_severity": { "namespace": "https://nvd.nist.gov/vuln-metrics/cvss", "text": "High" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https:/www.first.org/tlp/" } }, "lang": "en", "notes": [ { "text": "php security update", "category": "general", "title": "Synopsis" }, { "text": "An update for php is now available for openEuler-20.03-LTS-SP3.", "category": "general", "title": "Summary" }, { "text": "PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server.\n\nSecurity Fix(es):\n\nIn PHP versions prior to 7.4.33, 8.0.25 and 8.2.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information.(CVE-2022-31630)\n\nA flaw was found in PHP. This issue occurs due to an uncaught integer overflow in PDO::quote() of PDO_SQLite returning an improperly quoted string. With the implementation of sqlite3_snprintf(), it is possible to force the function to return a single apostrophe if the function is called on user-supplied input without any length restrictions in place.(CVE-2022-31631)\n\nIn PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.(CVE-2023-0567)\n\nIn PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification. (CVE-2023-0568)\n\nIn PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space. (CVE-2023-0662)\n\nIn PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure of 31 bits of uninitialized memory from the client to the server, and it also made easier to a malicious server to guess the client's nonce. \n\n(CVE-2023-3247)\n\nIn PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly changes it by calling appropriate function. However, since the state is process-global, other modules - such as ImageMagick - may also use this library within the same process, and change that global state for their internal purposes, and leave it in a state where external entities loading is enabled. This can lead to the situation where external XML is parsed with external entities loaded, which can lead to disclosure of any local files accessible to PHP. This vulnerable state may persist in the same process across many requests, until the process is shut down. \n\n(CVE-2023-3823)\n\nIn PHP version 8.0.* before 8.0.30,  8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE. \n\n(CVE-2023-3824)", "category": "general", "title": "Description" }, { "text": "An update for php is now available for openEuler-20.03-LTS-SP3.\n\nopenEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category": "general", "title": "Topic" }, { "text": "High", "category": "general", "title": "Severity" }, { "text": "php", "category": "general", "title": "Affected Component" } ], "publisher": { "issuing_authority": "openEuler security committee", "name": "openEuler", "namespace": "https://www.openeuler.org", "contact_details": "openeuler-security@openeuler.org", "category": "vendor" }, "references": [ { "summary": "openEuler-SA-2023-1620", "category": "self", "url": "https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1620" }, { "summary": "CVE-2022-31630", "category": "self", "url": "https://www.openeuler.org/en/security/cve/detail?cveId=CVE-2022-31630&packageName=php" }, { "summary": "CVE-2022-31631", "category": "self", "url": "https://www.openeuler.org/en/security/cve/detail?cveId=CVE-2022-31631&packageName=php" }, { "summary": "CVE-2023-0567", "category": "self", "url": "https://www.openeuler.org/en/security/cve/detail?cveId=CVE-2023-0567&packageName=php" }, { "summary": "CVE-2023-0568", "category": "self", "url": "https://www.openeuler.org/en/security/cve/detail?cveId=CVE-2023-0568&packageName=php" }, { "summary": "CVE-2023-0662", "category": "self", "url": "https://www.openeuler.org/en/security/cve/detail?cveId=CVE-2023-0662&packageName=php" }, { "summary": "CVE-2023-3247", "category": "self", "url": "https://www.openeuler.org/en/security/cve/detail?cveId=CVE-2023-3247&packageName=php" }, { "summary": "CVE-2023-3823", "category": "self", "url": "https://www.openeuler.org/en/security/cve/detail?cveId=CVE-2023-3823&packageName=php" }, { "summary": "CVE-2023-3824", "category": "self", "url": "https://www.openeuler.org/en/security/cve/detail?cveId=CVE-2023-3824&packageName=php" }, { "summary": "nvd cve", "category": "external", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31630" }, { "summary": "nvd cve", "category": "external", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31631" }, { "summary": "nvd cve", "category": "external", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0567" }, { "summary": "nvd cve", "category": "external", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0568" }, { "summary": "nvd cve", "category": "external", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0662" }, { "summary": "nvd cve", "category": "external", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3247" }, { "summary": "nvd cve", "category": "external", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3823" }, { "summary": "nvd cve", "category": "external", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3824" }, { "summary": "openEuler-SA-2023-1620 vex file", "category": "self", "url": "https://repo.openeuler.org/security/data/csaf/advisories/2023/csaf-openEuler-SA-2023-1620.json" } ], "title": "An update for php is now available for openEuler-20.03-LTS-SP3", "tracking": { "initial_release_date": "2023-09-09T14:23:23+08:00", "revision_history": [ { "date": "2023-09-09T14:23:23+08:00", "summary": "Initial", "number": "1.0.0" }, { "date": "2024-10-31T14:23:23+08:00", "summary": "final", "number": "2.0.0" } ], "generator": { "date": "2024-10-31T14:23:23+08:00", "engine": { "name": "openEuler CSAF Tool V1.0" } }, "current_release_date": "2024-10-31T14:23:23+08:00", "id": "openEuler-SA-2023-1620", "version": "2.0.0", "status": "final" } }, "product_tree": { "branches": [ { "name": "openEuler", "category": "vendor", "branches": [ { "name": "openEuler", "branches": [ { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "openEuler-20.03-LTS-SP3", "name": "openEuler-20.03-LTS-SP3" }, "name": "openEuler-20.03-LTS-SP3", "category": "product_version" } ], "category": "product_name" }, { "name": "aarch64", "branches": [ { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-odbc-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-odbc-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-odbc-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-debugsource-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-debugsource-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-debugsource-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-fpm-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-fpm-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-fpm-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-dbg-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-dbg-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-dbg-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-devel-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-devel-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-devel-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-enchant-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-enchant-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-enchant-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-opcache-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-opcache-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-opcache-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-intl-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-intl-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-intl-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-mysqlnd-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-mysqlnd-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-mysqlnd-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-pgsql-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-pgsql-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-pgsql-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-ldap-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-ldap-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-ldap-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-process-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-process-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-process-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-xml-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-xml-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-xml-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-help-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-help-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-help-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-cli-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-cli-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-cli-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-sodium-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-sodium-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-sodium-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-mbstring-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-mbstring-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-mbstring-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-gd-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-gd-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-gd-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-snmp-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-snmp-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-snmp-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-dba-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-dba-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-dba-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-ffi-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-ffi-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-ffi-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-debuginfo-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-debuginfo-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-debuginfo-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-bcmath-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-bcmath-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-bcmath-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-embedded-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-embedded-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-embedded-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-soap-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-soap-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-soap-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-pdo-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-pdo-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-pdo-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-common-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-common-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-common-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-tidy-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-tidy-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-tidy-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-gmp-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "name": "php-gmp-8.0.30-1.oe1.aarch64.rpm" }, "name": "php-gmp-8.0.30-1.oe1.aarch64.rpm", "category": "product_version" } ], "category": "architecture" }, { "name": "src", "branches": [ { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-8.0.30-1.oe1.src.rpm(20.03-LTS-SP3)", "name": "php-8.0.30-1.oe1.src.rpm" }, "name": "php-8.0.30-1.oe1.src.rpm", "category": "product_version" } ], "category": "architecture" }, { "name": "x86_64", "branches": [ { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-sodium-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-sodium-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-sodium-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-common-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-common-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-common-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-pgsql-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-pgsql-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-pgsql-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-cli-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-cli-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-cli-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-tidy-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-tidy-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-tidy-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-embedded-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-embedded-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-embedded-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-dba-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-dba-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-dba-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-gmp-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-gmp-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-gmp-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-soap-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-soap-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-soap-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-gd-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-gd-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-gd-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-mbstring-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-mbstring-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-mbstring-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-process-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-process-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-process-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-opcache-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-opcache-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-opcache-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-bcmath-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-bcmath-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-bcmath-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-snmp-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-snmp-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-snmp-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-fpm-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-fpm-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-fpm-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-pdo-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-pdo-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-pdo-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-ffi-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-ffi-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-ffi-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-mysqlnd-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-mysqlnd-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-mysqlnd-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-enchant-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-enchant-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-enchant-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-intl-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-intl-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-intl-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-help-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-help-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-help-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-debuginfo-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-debuginfo-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-debuginfo-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-odbc-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-odbc-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-odbc-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-debugsource-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-debugsource-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-debugsource-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-devel-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-devel-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-devel-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-xml-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-xml-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-xml-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-dbg-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-dbg-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-dbg-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" }, { "product": { "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:20.03-LTS-SP3" }, "product_id": "php-ldap-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "name": "php-ldap-8.0.30-1.oe1.x86_64.rpm" }, "name": "php-ldap-8.0.30-1.oe1.x86_64.rpm", "category": "product_version" } ], "category": "architecture" } ] } ], "relationships": [ { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-odbc-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "name": "php-odbc-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-debugsource-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "name": "php-debugsource-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-fpm-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "name": "php-fpm-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-dbg-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "name": "php-dbg-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-devel-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "name": "php-devel-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-enchant-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "name": "php-enchant-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-opcache-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "name": "php-opcache-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-intl-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "name": "php-intl-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-mysqlnd-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "name": "php-mysqlnd-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-pgsql-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "name": "php-pgsql-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-ldap-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "name": "php-ldap-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-process-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "name": "php-process-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-xml-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "name": "php-xml-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-help-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "name": "php-help-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-cli-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "name": "php-cli-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-sodium-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "name": "php-sodium-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-mbstring-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "name": "php-mbstring-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-gd-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "name": "php-gd-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-snmp-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "name": "php-snmp-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-dba-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "name": "php-dba-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-ffi-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "name": "php-ffi-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-debuginfo-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "name": "php-debuginfo-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-bcmath-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "name": "php-bcmath-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-embedded-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "name": "php-embedded-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-soap-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "name": "php-soap-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-pdo-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "name": "php-pdo-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "name": "php-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-common-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "name": "php-common-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-tidy-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "name": "php-tidy-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-gmp-8.0.30-1.oe1.aarch64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "name": "php-gmp-8.0.30-1.oe1.aarch64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-8.0.30-1.oe1.src.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "name": "php-8.0.30-1.oe1.src as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-sodium-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "name": "php-sodium-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-common-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "name": "php-common-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-pgsql-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "name": "php-pgsql-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-cli-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "name": "php-cli-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-tidy-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "name": "php-tidy-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-embedded-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "name": "php-embedded-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-dba-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "name": "php-dba-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-gmp-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "name": "php-gmp-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-soap-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "name": "php-soap-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-gd-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "name": "php-gd-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-mbstring-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "name": "php-mbstring-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-process-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "name": "php-process-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-opcache-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "name": "php-opcache-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-bcmath-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "name": "php-bcmath-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-snmp-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "name": "php-snmp-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-fpm-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "name": "php-fpm-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-pdo-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "name": "php-pdo-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-ffi-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "name": "php-ffi-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-mysqlnd-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "name": "php-mysqlnd-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "name": "php-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-enchant-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "name": "php-enchant-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-intl-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "name": "php-intl-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-help-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "name": "php-help-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-debuginfo-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "name": "php-debuginfo-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-odbc-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "name": "php-odbc-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-debugsource-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "name": "php-debugsource-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-devel-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "name": "php-devel-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-xml-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "name": "php-xml-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-dbg-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "name": "php-dbg-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" }, { "relates_to_product_reference": "openEuler-20.03-LTS-SP3", "product_reference": "php-ldap-8.0.30-1.oe1.x86_64.rpm(20.03-LTS-SP3)", "full_product_name": { "product_id": "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64", "name": "php-ldap-8.0.30-1.oe1.x86_64 as a component of openEuler-20.03-LTS-SP3" }, "category": "default_component_of" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-31630", "notes": [ { "text": "In PHP versions prior to 7.4.33, 8.0.25 and 8.2.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information.", "category": "description", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] }, "remediations": [ { "product_ids": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ], "details": "php security update", "category": "vendor_fix", "url": "https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1620" } ], "scores": [ { "cvss_v3": { "baseSeverity": "HIGH", "baseScore": 7.1, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] } ], "threats": [ { "details": "High", "category": "impact" } ], "title": "CVE-2022-31630" }, { "cve": "CVE-2022-31631", "notes": [ { "text": "A flaw was found in PHP. This issue occurs due to an uncaught integer overflow in PDO::quote() of PDO_SQLite returning an improperly quoted string. With the implementation of sqlite3_snprintf(), it is possible to force the function to return a single apostrophe if the function is called on user-supplied input without any length restrictions in place.", "category": "description", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] }, "remediations": [ { "product_ids": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ], "details": "php security update", "category": "vendor_fix", "url": "https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1620" } ], "scores": [ { "cvss_v3": { "baseSeverity": "MEDIUM", "baseScore": 5.9, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] } ], "threats": [ { "details": "Medium", "category": "impact" } ], "title": "CVE-2022-31631" }, { "cve": "CVE-2023-0567", "notes": [ { "text": "In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.", "category": "description", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] }, "remediations": [ { "product_ids": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ], "details": "php security update", "category": "vendor_fix", "url": "https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1620" } ], "scores": [ { "cvss_v3": { "baseSeverity": "MEDIUM", "baseScore": 6.2, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] } ], "threats": [ { "details": "Medium", "category": "impact" } ], "title": "CVE-2023-0567" }, { "cve": "CVE-2023-0568", "notes": [ { "text": "In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification.", "category": "description", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] }, "remediations": [ { "product_ids": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ], "details": "php security update", "category": "vendor_fix", "url": "https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1620" } ], "scores": [ { "cvss_v3": { "baseSeverity": "HIGH", "baseScore": 8.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] } ], "threats": [ { "details": "High", "category": "impact" } ], "title": "CVE-2023-0568" }, { "cve": "CVE-2023-0662", "notes": [ { "text": "In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.", "category": "description", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] }, "remediations": [ { "product_ids": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ], "details": "php security update", "category": "vendor_fix", "url": "https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1620" } ], "scores": [ { "cvss_v3": { "baseSeverity": "HIGH", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] } ], "threats": [ { "details": "High", "category": "impact" } ], "title": "CVE-2023-0662" }, { "cve": "CVE-2023-3247", "notes": [ { "text": "In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure of 31 bits of uninitialized memory from the client to the server, and it also made easier to a malicious server to guess the client's nonce. \n\n", "category": "description", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] }, "remediations": [ { "product_ids": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ], "details": "php security update", "category": "vendor_fix", "url": "https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1620" } ], "scores": [ { "cvss_v3": { "baseSeverity": "MEDIUM", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] } ], "threats": [ { "details": "Medium", "category": "impact" } ], "title": "CVE-2023-3247" }, { "cve": "CVE-2023-3823", "notes": [ { "text": "In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly changes it by calling appropriate function. However, since the state is process-global, other modules - such as ImageMagick - may also use this library within the same process, and change that global state for their internal purposes, and leave it in a state where external entities loading is enabled. This can lead to the situation where external XML is parsed with external entities loaded, which can lead to disclosure of any local files accessible to PHP. This vulnerable state may persist in the same process across many requests, until the process is shut down.", "category": "description", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] }, "remediations": [ { "product_ids": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ], "details": "php security update", "category": "vendor_fix", "url": "https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1620" } ], "scores": [ { "cvss_v3": { "baseSeverity": "MEDIUM", "baseScore": 5.5, "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] } ], "threats": [ { "details": "Medium", "category": "impact" } ], "title": "CVE-2023-3823" }, { "cve": "CVE-2023-3824", "notes": [ { "text": "In PHP version 8.0.* before 8.0.30,  8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.", "category": "description", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] }, "remediations": [ { "product_ids": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ], "details": "php security update", "category": "vendor_fix", "url": "https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1620" } ], "scores": [ { "cvss_v3": { "baseSeverity": "MEDIUM", "baseScore": 5.5, "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.aarch64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.src", "openEuler-20.03-LTS-SP3:php-sodium-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-common-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pgsql-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-cli-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-tidy-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-embedded-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dba-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-soap-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-gd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mbstring-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-process-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-opcache-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-bcmath-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-snmp-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-fpm-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-pdo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ffi-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-mysqlnd-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-enchant-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-intl-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-help-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debuginfo-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-odbc-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-debugsource-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-devel-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-xml-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-dbg-8.0.30-1.oe1.x86_64", "openEuler-20.03-LTS-SP3:php-ldap-8.0.30-1.oe1.x86_64" ] } ], "threats": [ { "details": "Medium", "category": "impact" } ], "title": "CVE-2023-3824" } ] }