Red Hat Security Advisory

RHSA-2022:5904

php security update

Released 2022-08-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) php-8.0.13-2.el9_0, php-bcmath-8.0.13-2.el9_0, php-cli-8.0.13-2.el9_0 +22

Fixes 1 record

TI-2022-13550 CVE-2022-31626 · GHSA-jfc6-9gw3-fhfg

mysqlnd/pdo password buffer overflow

HIGH 72

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection,…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.58123 Published 2022-06-16 Fixed in 7.4.30, 8.0.20 +1 CWE-120